Privacy Policy
Last updated: July 14, 2026
1. Who we are
RÉGIS SOUTO ARTS is the studio practice of artist Régis Souto, based in Toronto, Ontario, Canada. This policy describes how we collect, use, disclose, and protect your personal information when you use regissoutoarts.com. Questions: contact us.
2. Information we collect
Information you provide: name, email address, shipping and billing address, and phone number when you place an order, subscribe to our newsletter, or contact us.
Payment information: payments are processed directly by our payment processors. We never receive or store your full card number or banking credentials.
Information collected automatically: IP address, browser and device type, pages visited, and cookie identifiers, used for site functionality and analytics.
3. How we use your information
To process and fulfill orders; arrange production and shipping; send order confirmations and tracking; respond to inquiries; send our newsletter (only with your consent — you can unsubscribe at any time); improve the website; prevent fraud; and comply with legal obligations.
4. Who we share it with, and how
We share personal information only as needed to operate the store, transmitted electronically over encrypted (HTTPS/TLS) connections to: Stripe (payment processing, including Affirm and Klarna when you choose them at checkout); Gelato (print production and delivery — name and shipping address only); Odoo (secure hosting of this website and order data); and our email service provider (newsletter delivery). Each provider processes your data under its own privacy policy and safeguards. We do not sell, rent, or trade your personal information to anyone. We may disclose information if required by law.
5. Cookies
We use essential cookies (shopping cart, session) and may use analytics and advertising cookies (such as the Meta pixel) to understand site usage and reach interested audiences. You can manage or block cookies in your browser settings; essential cookies are required for checkout to work.
6. Security
All traffic on this site is encrypted with HTTPS/TLS. Order data is stored on Odoo’s cloud infrastructure with industry-standard safeguards and restricted access. Payment data is handled exclusively by PCI-DSS-compliant processors. No method of transmission is 100% secure, but we take commercially reasonable measures to protect your information.
7. Data retention
We keep order information for as long as needed to fulfill your order and meet legal and tax record-keeping obligations. Newsletter data is kept until you unsubscribe.
8. Your rights
You may request access to, correction of, or deletion of your personal information, and withdraw consent to marketing at any time, by contacting us. Canadian residents have rights under PIPEDA and may contact the Office of the Privacy Commissioner of Canada. Visitors from the EU/EEA have equivalent rights under the GDPR.
9. Children
This website is not directed at children, and certain collections are intended for adults only. We do not knowingly collect personal information from anyone under 16.
10. Changes
We may update this policy from time to time; the latest version will always be available on this page with its revision date.