Privacy Policy

Nisir Designs is the organisation accountable for personal information collected through this site, under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). Privacy questions and requests go to hello@nisirdesigns.com, which reaches the person who handles them.

We do not collect card numbers. Card payment is not live on this site; details entered into the checkout form are checked in your browser and are not transmitted to us or stored anywhere. When card payment does go live it will be handled by a payment processor, and this policy will be updated to name them before that happens.

We ask for no information about your health, beliefs, ethnicity or anything else in a special category, and you should not send us any.

• To take, print, deliver and support your order — the reason most of it exists at all.
• To operate your account, and to let you sign in and see your own order history.
• To email you about an order: confirmation, dispatch, a change in print status, a reply to a question.
• To keep records we are required to keep, including for tax.
• To protect the site and its customers against fraud and abuse.

We do not send marketing email. If that ever changes we will ask you to opt in first, and every message will carry a way out.

Only the suppliers it takes to run the service, each given the minimum needed to do its job, and none of them permitted to use it for their own purposes:

We may also disclose information where the law requires it, to enforce our Terms of Service, or to a buyer of the business — who would remain bound by this policy. We do not sell your personal information, and we never have.

We operate from Canada and Ethiopia, and our suppliers may process data in other countries. Information held or handled in another country is subject to that country’s laws, including lawful access by its courts and authorities. We use suppliers bound by contract to protect it to a comparable standard.

• Order records: seven years, which is what tax and accounting rules require of us.
• Account details: while the account is open, and for a short period after you close it in case of a dispute.
• Uploaded model files: while the order is live and for a reasonable period after delivery, then deleted.
• Correspondence: up to two years, so we can pick up a thread you started.
• Server logs: a short rolling window, for security and diagnostics.

You can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything inaccurate or out of date;
• delete what we hold, where we are not required to keep it — order records we must retain for tax are the usual exception;
• stop a particular use, or withdraw a consent you gave. Withdrawing consent needed to fulfil an order may mean we cannot complete it.

Write to hello@nisirdesigns.com. We answer within 30 days, and we may need to confirm who you are first so we are not handing your information to somebody else.

If our answer does not satisfy you, you can complain to the Office of the Privacy Commissioner of Canada.

Traffic to this site is encrypted in transit. Passwords are hashed, never stored in readable form. Your session is held in a cookie your browser cannot read from JavaScript, and signing out revokes it on the server rather than merely forgetting it here.

No service is perfectly secure, and we will not pretend otherwise. If a breach affects you and creates a real risk of significant harm, we will notify you and the Privacy Commissioner as PIPEDA requires.

This site is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, write to us and we will delete it.

When this policy changes, the date at the top of the page changes with it. Where a change materially affects how we use information we already hold, we will say so on this page before it takes effect.