Privacy Policy

Effective date: September 28, 2026

The Short Version

You trusted me with your information, and I don’t take that lightly. I will never sell, rent or trade your personal information. I share only what’s needed to process your payment, ship your order, and run this website. I also share it if the law requires me to.

I collect only what I need to fill your order, answer your questions, and (only if you say yes) send you emails about new products, blog posts and sales. You can unsubscribe at any time with one click.

The rest of this page explains the details in plain language. If anything is unclear, please ask me.

Who I Am

Pebble and Pask is a small business on northern Vancouver Island, British Columbia, Canada. It’s a registered sole proprietorship, run by me, Christie. I photograph sea glass on the beaches where I find it and turn those photographs into calendars, notepads, stickers and other products.

This policy covers my website, www.pebbleandpask.com, orders placed through it, and in-person sales.

I’m the person responsible for protecting your personal information. You can reach me about privacy at privacy@pebbleandpask.com or by mail at Pebble and Pask, PO Box 913, Port Hardy, BC V0N 2P0.

I follow Canada’s federal privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), and Canada’s Anti-Spam Legislation (CASL) for email.

What Information I Collect

When you place an order, I collect your name, email address, billing address and shipping address. If you choose local pickup, I only need enough to match you with your order. A phone number is optional. It helps if a courier needs to reach you or we need to arrange a pickup time.

When you pay, your card details go directly to Square, my payment processor. I never see or store your full card number.

If you create an account, I also keep your login details and your order history, so you can track orders and check out faster next time. Creating an account is optional; you can always check out as a guest.

If you contact me by the website form, email, phone or Facebook Messenger, I keep what you send me so I can reply and help you. I don’t add you to my email list just because you contacted me.

If you leave a product review or blog comment, I collect the name and email you enter, your comment, your IP address, and your browser type. The technical details help filter out spam. Your name and comment are shown publicly. Your email is not.

WordPress may also check whether you have a profile picture with Gravatar, a free service. To do this, it sends Gravatar a scrambled code made from your email address, not the address itself. If you have a Gravatar picture, it appears next to your comment. Gravatar’s privacy policy is at https://automattic.com/privacy/

If you join my email list, I collect your email address, any name you give, and which kinds of emails you’ve chosen to receive.

When you browse the site, some information is collected automatically. My web host keeps standard server records of visits, including your IP address, browser type, and the pages you requested. These help keep the site secure and working properly. Cookies also collect some information; see “Cookies and Tracking” below.

What I don’t collect: I never ask for sensitive information like your Social Insurance Number, health information, or banking details. Please don’t send them to me.

How I Use Your Information

I use your information to process and ship your orders, arrange local pickups, and send order confirmations and shipping updates. I also use it to answer your questions, handle returns, and publish the reviews and comments you choose to share.

I use it to keep business records that Canadian tax law requires, and to keep the website secure and working properly.

With your permission only, I also use it to send you emails about new products, blog posts and sales.

I won’t use your information for any other purpose without asking you first.

Emails From Pebble and Pask

Some emails are part of doing business with you: your receipt, shipping notice or a pickup reminder, and my replies when you ask me a question about a product. You’ll receive these whether or not you’ve joined my email list.

Everything else is optional. I only send these emails if you’ve agreed to them by ticking a box or signing up. When you sign up, you can choose what you’d like to hear about:

  • New product announcements
  • New blog posts
  • Sale notices

If you’ve agreed to hear from me, I may also send a welcome email when you first join. I may also send a friendly reminder if you leave something in your shopping cart. To make cart reminders work, Omnisend notes which products you viewed or added to your cart while visiting the site.

Every email includes a working unsubscribe link. You can also email me at privacy@pebbleandpask.com and I’ll take you off the list. Unsubscribing won’t affect emails about an order you’ve already placed.

My emails are sent through Omnisend, an email service. Like most email tools, it records whether an email was opened and which links were clicked. That tells me which emails are useful to people and which ones aren’t.

Who I Share Your Information With

I will never sell, rent or trade your personal information. I worked hard to earn your trust, and giving your details to someone else would break it.

I do rely on a few trusted services to run the shop. Each one only gets what it needs to do its job, and each has its own privacy policy:

I’ll also share information if the law requires it, for example if the Canada Revenue Agency or a court order asks for it.

Information I Receive From Others

Sometimes I receive information about you from the services I use. Square tells me that a payment went through, but it doesn’t send me your card number. Canada Post, Purolator and FedEx tell me when your order has been delivered. Meta and Pinterest give me reports about how people found my website, such as how many visitors came from a Facebook post. Those reports are grouped totals and don’t tell me who you are.

Where Your Information Is Stored

This website is hosted in Canada. Some of the services listed above, such as Square, Omnisend, Dropbox, Meta, Pinterest and Google, may store or process information outside Canada, including in the United States and the European Union. When that happens, your information may be subject to the laws of those countries, and government authorities there may be able to access it. I choose services with strong security and privacy practices, but I want you to know this is how they work.

Cookies and Tracking

Cookies are small files your browser saves when you visit a website. This site uses a few kinds:

Essential cookies make the shop work. They remember what’s in your shopping cart for about two days. They also keep you logged in to your account for two days, or two weeks if you tick “Remember Me.” Square uses its own cookies during checkout to help prevent fraud. The shop can’t work without these cookies.

Convenience cookies are optional. If you leave a comment, you can choose to have your name and email remembered for next time. Those cookies last one year.

Email cookies from Omnisend note which products you look at and add to your cart. This is how cart reminders work for people who have signed up for emails.

Spam protection from Google reCAPTCHA checks your browser and how you use the contact form page to tell real people from spam robots. Google handles this information under its own privacy policy.

Marketing cookies come from the Meta Pixel (Facebook and Instagram) and the Pinterest Tag. They tell me whether people arrive from my social media posts or ads, and they help show Pebble and Pask posts to people who might enjoy them. Meta and Pinterest receive information about your visit, such as which pages you viewed, and handle it under their own privacy policies.

Embedded content, such as my Instagram or Facebook feeds shown on this site, works like a small window into those websites. Meta may set its own cookies and collect information when that content loads, even if you don’t click it. If you’re logged in to Facebook or Instagram, Meta can connect that visit to your account.

Analytics cookies from Google Analytics tell me how many people visit, which pages they read, and how they found the site. This information is grouped together and doesn’t identify you personally.

You can block or delete cookies in your browser settings. If you block essential cookies, the shopping cart and checkout may not work.

In-Person Sales

When you buy from me in person, for example at a market or a local pickup, I don’t collect any personal information unless you choose to give it. If you pay by card, Square processes the payment. If you ask for a receipt by email or text, I use your email or phone number only for that receipt, unless you also ask to join my email list.

Social Media and Messenger

If you message me on Facebook Messenger or interact with Pebble and Pask on Facebook, Instagram or Pinterest, those companies’ own privacy policies also apply to what you share there. I’ll only use your messages to reply to you and help with your order or question.

Email Groups and Ads

I don’t use any automated system to make decisions about you. Nothing on this site approves or refuses anything based on a computer’s judgment.

I do sort my email list into simple groups based on the choices you make, such as “wants sale notices” or “wants blog posts.” That way you only receive the emails you asked for.

If I run ads on Facebook, Instagram or Pinterest, those companies decide who sees them. They base this on their own information about their users and on visits to my site recorded by their cookies. I don’t upload my customer list or email list to any social media or advertising company.

How Long I Keep Your Information

Order and payment records are business records, and Canadian tax law says how long I must keep them. I keep them for six years after the end of the tax year they relate to, the period set by the Canada Revenue Agency. After that, I securely delete them. This applies to both online and in-person sales.

Email list information is kept until you unsubscribe or ask me to remove it.

Account information is kept until you ask me to close your account. Order records from that account are still kept for the six-year period above.

Reviews and comments are kept indefinitely, so they stay with the product or blog post. This also lets your next comment appear right away instead of waiting for approval. You can ask me to remove a review or comment at any time.

Contact form messages are kept for up to two years, so I can look back if you have a follow-up question, and then deleted. Emails and Messenger conversations are kept only as long as they’re useful for helping you.

Server records kept by my web host are stored for a limited time for security purposes, under Web Hosting Canada’s own policies.

How I Protect Your Information

The website uses a secure encrypted connection; look for the padlock in your browser’s address bar. Payment details are handled by Square and never stored on my site. Access to customer information is limited to me, and I use strong passwords on every account connected to the business. My website and business accounts also use two-step login, so a password alone isn’t enough to get in.

No system is perfect. If a security problem ever puts your information at real risk of harm, I’ll tell you as soon as I can. I’ll also report it to the Privacy Commissioner of Canada, as the law requires. I keep a record of any security incidents, even small ones.

Your Choices and Rights

You have the right to:

  • Ask what personal information I have about you, and get a copy of it in a file
  • Correct anything that’s wrong (if you have an account, you can update most details yourself any time, except your username)
  • Change your mind about emails at any time
  • Ask me to delete your information, except records I’m legally required to keep for tax purposes

To make a request, email privacy@pebbleandpask.com or write to PO Box 913, Port Hardy, BC V0N 2P0, Canada. I’ll reply within 30 days. There’s no charge.

If you’re not satisfied with my answer, you can contact the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca, or the Office of the Information and Privacy Commissioner for British Columbia at https://www.oipc.bc.ca.

Children’s Privacy

This website is meant for adults. I don’t knowingly collect personal information from children under 13. If you think a child has given me their information, please contact me and I’ll delete it.

Changes to This Policy

If I change how I handle your information, I’ll update this page and change the effective date at the top. If the change is significant, I’ll also let email subscribers know.

Questions

If you have any questions about your privacy or this policy, please get in touch. You can email privacy@pebbleandpask.com or write to Pebble and Pask, PO Box 913, Port Hardy, BC V0N 2P0.