Privacy Policy

The Steel Canvas

Privacy Policy

Effective and last updated: July 29, 2026

The Steel Canvas (“we,” “us,” or “our”) operates thesteelcanvas.com. This policy explains what personal information we collect, why we use it, when we share it, and the choices available to you when you browse our site, contact us, create an account, or place an order.

1. Information we collect

Information you provide

  • Orders and checkout: name, email address, phone number, billing and shipping addresses, order contents, order notes, and transaction details.
  • Accounts: username, password in encrypted form, saved addresses, and order history.
  • Contact requests: your name, email address, subject, message, and any information you choose to include.
  • Custom work: project details, reference materials, correspondence, estimates, approvals, and fulfillment information.

Information collected automatically

Our website and service providers may collect IP address, browser and device type, operating system, referring page, pages viewed, approximate location derived from IP address, timestamps, cookie identifiers, cart activity, and security or diagnostic logs.

2. How we use information

We use personal information to:

  • process payments, fulfill and ship orders, provide tracking, and handle returns or refunds;
  • respond to questions and discuss custom projects;
  • create and maintain customer accounts and saved carts;
  • operate, troubleshoot, secure, and improve the website;
  • measure store performance, traffic, and product interest using WooCommerce and hosting reports;
  • detect fraud, abuse, spam, and security threats;
  • send service messages such as order confirmations and shipping updates; and
  • meet accounting, tax, legal, and dispute-resolution obligations.

We do not use your payment-card number for our own marketing, and we do not store full card numbers or card security codes on our website.

3. Orders and WooCommerce

Our store uses WooCommerce. When you shop, WooCommerce may use cookies and session identifiers to remember cart contents, maintain checkout, and connect an order to a customer session. Order records stored on our website may include the products purchased, date, amount, contact details, addresses, payment method, and fulfillment status.

We use this information to perform our contract with you, provide customer service, prevent fraud, and keep business and tax records.

4. Payments

Payments are processed by third parties. Depending on the option you select:

  • WooPayments: Automattic and its payment partner Stripe process payment, identity, fraud-prevention, and transaction information. Apple Pay, Google Pay, and other supported wallet payments may also be processed through this service.
  • PayPal: PayPal processes information needed to complete or support PayPal transactions.

These providers receive information necessary to process the payment, such as your name, billing information, email, order amount, payment identifier, IP address, and fraud-prevention signals. Their handling of data is governed by their own policies: Automattic, Stripe, and PayPal.

5. Shipping and fulfillment

We share the recipient’s name, shipping address, contact details when required, package information, and order identifiers with shipping and fulfillment providers to calculate rates, purchase labels, deliver orders, provide tracking, and investigate delivery problems. We currently use WooCommerce Shipping and the United States Postal Service. See the USPS Privacy Policy.

6. Contact forms and communications

Our contact form is provided through Forminator. Submissions may be stored in our WordPress database and delivered to our business email. We use them to respond to you, maintain customer-service records, prevent spam, and follow up on requested work. Please do not send payment-card numbers, government identification numbers, or other highly sensitive information through the contact form.

If we later offer an optional marketing list, promotional email will be sent only as permitted by law and will include an unsubscribe method. Order and service messages are not marketing messages.

7. Analytics, cookies, and similar technologies

We use essential cookies for the shopping cart, checkout, account login, security, and site preferences. We also use WooCommerce reports and hosting/server logs to understand store activity and maintain performance. Our security and caching tools may process technical information to block malicious traffic and deliver pages efficiently.

We do not currently use Google Analytics and do not sell personal information or share it for cross-context behavioral advertising. If our analytics or advertising practices materially change, we will update this policy and provide any consent or opt-out controls required by law.

You can restrict cookies through your browser, but disabling essential cookies may prevent the cart, checkout, or account features from working correctly.

8. Service providers and disclosures

We disclose information only as reasonably necessary to vendors that help us operate the business, including:

  • Hostinger for website hosting and infrastructure;
  • WooCommerce, Automattic, and Stripe for store and payment services;
  • PayPal for PayPal transactions;
  • WooCommerce Shipping and USPS for rates, labels, tracking, and delivery;
  • Forminator/WPMU DEV for contact-form functions;
  • Wordfence for security, fraud, and threat detection; and
  • backup, email, technical support, accounting, and professional advisers as needed.

We may also disclose information when required by law, to respond to valid legal process, protect customers or our rights, investigate fraud or security incidents, or complete a business transfer. Service providers may process information in the United States or other countries under their own privacy terms and contractual obligations.

9. Data retention

We keep information only as long as reasonably necessary for the purposes described here. Order, payment, shipping, refund, and tax records may be kept for up to seven years or longer when required by law or an active dispute. Account information is kept while the account remains active and for a reasonable period afterward. Contact and custom-project correspondence is kept as needed to respond, document the work, and resolve disputes. Security logs, backups, and cached copies are deleted or overwritten on their normal operational schedules.

When information is no longer required, we delete, anonymize, or securely dispose of it where reasonably practicable.

10. Your privacy choices and rights

Depending on where you live, you may have the right to request access, correction, deletion, or a portable copy of personal information; object to or restrict certain processing; or appeal a privacy decision. You may also manage account information from your account page and control cookies through your browser.

We do not discriminate against anyone for exercising a privacy right. Some information cannot be deleted when we must keep it for legal, tax, fraud-prevention, security, warranty, or dispute purposes. We may need to verify your identity before completing a request.

California residents may request information about the categories of personal information collected, used, and disclosed. We do not sell personal information and do not share it for cross-context behavioral advertising as those terms are defined by California law.

11. Security

We use reasonable administrative, technical, and organizational safeguards, including encrypted connections, limited administrative access, payment tokenization, security monitoring, backups, and software updates. No online service is completely secure, so we cannot guarantee absolute security.

12. Children’s privacy

Our website and products are intended for a general adult audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13. A parent or guardian who believes a child provided information may contact us to request its deletion.

13. Changes to this policy

We may update this policy when our services, vendors, or legal obligations change. The revised policy will be posted here with a new “last updated” date. Material changes may also be communicated by an additional notice where appropriate.

14. Contact us

The Steel Canvas
Arizona, United States
Email: contact@thesteelcanvas.com
Website: Contact form

This policy describes The Steel Canvas’s current website practices. Third-party services maintain their own privacy policies and security practices.