Privacy policy

Last updated: September 30, 2026

Canvoil is operated by PaintHue Limited. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit canvoil.com, purchase artwork, subscribe to marketing communications, submit reviews, or contact us.

Some marketing, review, and analytics features described in this policy may be introduced in stages. The associated processing takes place only when the relevant features are enabled, you interact with them, or other applicable conditions are met, subject to applicable law and your privacy choices.

Information We Collect

Depending on how you interact with us, we may process:

• Contact and delivery information: Your name, email address, telephone number, billing and shipping addresses, and recipient details.
• Order and transaction information: Artwork purchased, size and framing selections, payment status, transaction records, and cancellation, return, and refund records.
• Account information: Authentication information, account settings, and preferences you provide when creating or using an account, depending on the account features available.
• Customization and support information: Your color, size, or other customization requests, reference images, artwork approval records, and communications with us.
• Review information: Ratings, review text, display names, and photographs or videos you voluntarily upload.
• Device and usage information: IP address, browser and device information, cookie identifiers, browsing and cart activity, referral sources, and interactions with our website, emails, or advertisements.
• Privacy and marketing preferences: Subscription status, unsubscribe records, consent records, and privacy choices.

Payment information is processed by the payment providers offered at checkout under their privacy and security practices. We receive information needed to complete transactions, verify payments, issue refunds, and prevent fraud.

Please do not send full payment card details, account passwords, or sensitive personal information unrelated to our services through ordinary email or reviews.

Where Information Comes From

We may obtain information from:

• You, when you place an order, complete a form, subscribe, submit a review, or contact customer support.
• Cookies, pixels, and similar technologies used when you interact with the website.
• Shopify, payment providers, carriers, and other service providers supporting our store.
• Marketing, review, and advertising analytics services, when the relevant features are enabled and permitted by law.

If you provide another person's delivery details or images containing other people, please ensure you are entitled to provide them for that purpose.

How We Use Information

We use personal information to:

• Receive and process orders, verify payments, and arrange production, framing, and delivery.
• Confirm artwork photographs, customization requirements, and revisions with you.
• Provide order notifications, tracking, customer support, returns, exchanges, and refunds.
• Manage accounts, retain relevant preferences, and improve the shopping experience.
• Collect and display reviews submitted voluntarily by customers.
• Send marketing communications, analyze service usage, and measure advertising performance where permitted by law and applicable consent requirements are met.
• Identify fraud and protect the website and transactions.
• Maintain necessary business records, comply with legal obligations, and resolve disputes.

For processing subject to European Economic Area or UK data protection law, our legal basis depends on the purpose and may include performing a contract, complying with legal obligations, your consent, or legitimate interests that are not overridden by your rights and interests.

Where consent is legally required, we will not rely solely on legitimate interests instead of obtaining that consent.

Shopify and Store Services

Our store is powered by Shopify. Shopify and relevant service providers may process personal information to host the website, support checkout and payments, protect transactions, and operate the store.

If we enable Shopify Network Intelligence or related enhanced services, Shopify may combine information about your interactions with our store and other merchants to provide those services, in accordance with its applicable terms, privacy policies, and your privacy choices.

For more information, visit the Shopify Consumer Privacy Policy and Shopify Privacy Controls.

Omnisend Email Marketing

We plan to use Omnisend to manage email subscriptions and marketing communications.

When these features are enabled, we may provide Omnisend with your name, email address, subscription and consent status, and order or interaction information used to send relevant communications and measure their performance.

Where permitted by law and consistent with your privacy choices, this information may be used for product announcements, offers, shopping reminders, and other marketing emails. Emails may contain technologies that measure opens, clicks, or purchases.

You can unsubscribe using the link in our marketing emails or by contacting support@canvoil.com.

Unsubscribing from marketing does not stop necessary order, delivery, refund, or account security communications. You do not have to agree to marketing to make a purchase.

Loox Product Reviews

We use Loox Product Reviews App to collect, manage, and display customer reviews.

When enabled, we may provide Loox with information needed to send review invitations and associate reviews with orders, such as your name, email address, purchased products, and order information.

Ratings, reviews, display names, photographs, and videos you voluntarily submit may be displayed publicly on product pages or other identified review placements. Do not include contact details or sensitive information you do not want made public.

To ask about, correct, or request deletion of a review and associated personal information, contact support@canvoil.com. We will handle requests in accordance with applicable law and the relevant service functionality.

Cookies, Analytics, and Advertising

We use necessary cookies and similar technologies to support the cart, checkout, security, and basic website functions.

We may also enable Google Analytics, Google Ads, Meta advertising tools, or similar services to analyze website usage, measure advertising performance, and show relevant advertisements on our website or other platforms.

These services may process device identifiers, IP addresses, browsing activity, and shopping or transaction events. Some advertising features may also use processed contact information for matching, subject to applicable law and consent requirements.

Where required by law, we will obtain your consent before enabling relevant non-essential tracking technologies. You can manage choices using the cookie or privacy controls provided on the website and use your browser settings to restrict cookies.

Restricting certain cookies may affect some features, but declining advertising tracking should not prevent access to necessary shopping functions.

For information about Shopify cookies, see the Shopify Cookie Policy.

Who We Share Information With

We share information only as needed to provide services, carry out the purposes described in this policy, or meet legal requirements. Recipients may include:

• Shopify and providers of hosting, payments, system maintenance, and security services.
• Production, framing, warehousing, and delivery partners needed to fulfill orders, including carriers such as DHL, FedEx, or UPS.
• Omnisend, Loox, analytics providers, and advertising providers when the relevant features are enabled.
• Advisors assisting with legal, financial, or professional obligations.
• Authorities or other relevant parties where required by law or lawfully necessary to protect rights, investigate fraud, or resolve disputes.
• Parties to a merger, acquisition, or business transfer, where lawful and subject to appropriate confidentiality measures.

We may also share information with others at your request or with your authorization.

Personalized Advertising and Opt-Out Choices

Depending on the law where you live, using information for cross-site advertising or providing it to advertising partners may constitute a “sale,” “sharing,” or “targeted advertising,” even when no money changes hands.

When these features are enabled and such laws apply, you may opt out through the privacy choices provided on our website or by contacting support@canvoil.com.

To the extent required by applicable law, we will treat valid Global Privacy Control (GPC) or other recognized opt-out signals as the corresponding privacy request. Browser or device choices may need to be set separately on other devices.

How Long We Keep Information

We retain personal information only as long as needed for the purposes described in this policy and to meet applicable legal obligations.

Retention periods depend on the type and purpose of the information, including order fulfillment, tax and accounting records, after-sales support, dispute resolution, and security needs.

When information is no longer needed, we will delete or anonymize it in accordance with applicable requirements. We may retain necessary unsubscribe or privacy request records to respect your choices and demonstrate compliance.

International Processing

Canvoil is operated by a Hong Kong company. Your information may be processed by service providers and partners in Hong Kong or other locations outside your country of residence.

Data protection laws vary between countries. For transfers requiring safeguards, we will use applicable legal mechanisms, such as adequacy decisions, standard contractual clauses, or other recognized safeguards.

Contact us for information about international processing of your information and applicable safeguards.

Your Privacy Rights

Depending on where you live and applicable law, you may have the right to:

• Know about and access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion.
• Obtain a copy of your information or request data portability.
• Object to or restrict certain processing.
• Withdraw consent to consent-based processing.
• Opt out of sale, sharing, or targeted advertising as defined by applicable law.
• Appeal a decision concerning a privacy request.

Withdrawing consent does not affect the lawfulness of earlier processing. Some requests may be subject to legal exceptions or retention obligations.

Email support@canvoil.com to make a request. To protect your information, we may reasonably verify your identity or an authorized agent's authority.

We will respond within the timeframes required by applicable law and will not discriminate against you for exercising your privacy rights.

Information Security

We take reasonable technical and organizational measures to protect personal information, but no transmission or storage method can guarantee absolute security.

Keep account access credentials secure and avoid sending sensitive information through insecure channels. Contact us promptly if you suspect unauthorized use of your account or order information.

Children’s Privacy

Our services are intended for a general adult audience and are not directed at children.

If you believe a child has provided personal information to us, contact support@canvoil.com. We will investigate and take appropriate action, including deletion where applicable.

Third-Party Websites

Our website may link to third-party websites or services. Third parties are responsible for information they independently collect and process. Please review their privacy notices.

This does not limit our responsibility for our own processing or our legally required oversight of service providers.

Updates and Complaints

We may update this policy when our services, data practices, or legal requirements change, and will revise the “Last updated” date. Where required by law, we will provide additional notice or obtain renewed consent.

If you have questions or complaints about our handling of information, please contact us first. You may also complain to the relevant data protection or privacy authority under the laws where you live.

Contact Us

Brand: Canvoil
Operator and data controller: PaintHue Limited
Website: canvoil.com
Privacy contact: support@canvoil.com

Contact address:
Room C03, 9/F, Kato Factory Building
2 Cheung Yue Street
Kowloon, Hong Kong SAR

This address is for company and privacy correspondence. Please do not return goods to it without first obtaining return instructions.