Privacy policy

This policy explains what personal information Pink Nova collects through this website, its forms and its shop, why, who else handles it, and the choices you have. It is written to meet Alberta's Personal Information Protection Act (PIPA), and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies. Effective 2026-11-14.

Who is responsible

Pink Nova is a small business run by Alex, who is responsible for the personal information described here and answers questions about it. You can reach her at alex@pinknova.ca.

When you buy from the shop

When you check out, this site sends Square only the items in your bag and their quantities. You then pay on a page hosted by Square, where you enter your name, contact details, shipping address and card details. Square processes the payment and emails your receipt. Your full card number never reaches this site or us.

Square passes us your order, name, contact details and shipping address so we can make and post your order and answer questions about it, and shows us the card type and last four digits. Square also keeps a customer record of your purchases in our Square account. Your address goes on the envelope we hand to Canada Post. Square handles the information you give it under its own privacy notice.

When you send the stockist enquiry form

The form for shops that want to carry Pink Nova collects exactly these fields:

• Your name
• Email address
• Phone number
• Tell Alex about your shop
• Shop or business name
• Town or city
• What are you asking about?

When you request a custom pair

The custom request form collects exactly these fields:

• Your name
• Email
• Occasion
• Needed by
• Approximate budget
• Tell me your idea

Each form's submission reaches our inbox as an email; this site itself keeps no database of submissions. No confirmation email is sent to you, and we reply to the address you gave.

When you email us

If you email us — with a question, about an order, or to order by email when the shop is unavailable — we use what you send, including any name and address, to answer you and to fill your order.

How we use it

We use personal information only to:

• answer enquiries and custom requests, and prepare quotes;
• make, post and support orders, and keep the records the law requires;
• keep the site and its forms secure and free of abuse.

We do not sell personal information or share it for anyone else's marketing. If we want to use it for a new purpose, we will ask you first.

Who else handles it

We use these service providers, each only for the job described and only with the information that job needs:

• Square (Block, Inc.), in Canada and the United States — payments and orders.
• Apple (iCloud Mail), in the United States — hosts our email inbox.
• Resend, in the United States — delivers each form submission to our inbox.
• Vercel, in the United States — hosts this site and, only if you allow it, provides analytics.
• Upstash, in the United States — holds the short-lived counters, keyed by IP address, that limit how often the forms and the site's payment-notification address can be used.

The developer who builds and maintains this site can also access its hosting logs and, through an app we have authorised in Square, our orders, and does so only to keep the site and shop working.

Information held outside Canada may be accessible to courts and authorities under the laws of those countries. To ask about how these providers handle your information, email alex@pinknova.ca. We may also disclose information where the law requires it.

Technical information

Like any website, this one receives your IP address and basic request details such as your browser type when you visit, and our host keeps short-term server logs. When you send a form, your IP address is used as the key of a counter that limits repeat submissions; the counter holds no form content and expires within an hour.

Analytics, cookies and browser storage

This site sets no cookies of its own. It keeps two small entries in your browser's local storage because the site cannot work without them: your answer to the analytics question, and the contents of your shopping bag (item and quantity only, emptied when Square returns you to this site after checkout). They stay on your device until you or the site clear them.

Nothing that measures your visit runs until you choose to allow it. Decline, and the analytics script is never loaded and nothing is sent. You can change your mind at any time from the cookie settings link in the footer.

If you do allow it, this site uses Vercel Web Analytics, which records which pages are viewed and general information such as country, browser and device type. Vercel states that it does not use cookies and does not track you across other websites; see its privacy policy.

Marketing email

We don't keep a mailing list or send marketing email. Sending an enquiry, a custom request or an order doesn't sign you up for anything: we email you only to answer you, and Square emails you only about your order.

How long we keep it

We keep personal information only as long as we need it for the purpose it was collected for, and for as long as tax and accounting law requires us to keep business records. Order records are kept for that legal period. Enquiries that do not lead to an order are deleted from our inbox once they are no longer needed. Form rate-limit counters expire within an hour.

How we protect it

The site is served only over an encrypted connection. Card details are handled by Square and never reach this site, form submissions are not stored on the site, and access to our email and Square accounts is limited to the people named in this policy. If a breach of personal information creates a real risk of significant harm, we will notify the Information and Privacy Commissioner of Alberta and the people affected as the law requires.

Children

This site is not directed at children. We do not knowingly collect personal information from a child under 13 except from a parent or guardian acting for them, and an order for a child under 13 must be placed by their parent or guardian.

Your rights

You can ask to see the personal information we hold about you, ask us to correct it, ask us to delete it, or withdraw a consent you have given. Email alex@pinknova.ca. We may need to confirm your identity, and we will respond within 30 days. Withdrawing consent can mean we cannot do something — we cannot post an order without an address — and we will tell you if so. We may need to keep some records the law requires us to keep.

If you are not satisfied with our answer, you can complain to the Office of the Information and Privacy Commissioner of Alberta, or, for information that crossed a provincial or national border, the Office of the Privacy Commissioner of Canada.

Links to other sites

This site links to others, such as our Instagram. Those sites are governed by their own privacy policies, not this one.

Changes to this policy

We may update this policy as the site changes. The effective date above changes when we do, and the version published here is the one in force.

Contact

Questions, requests or concerns about your personal information: alex@pinknova.ca.