1. Who We Are
Woodworking Place is a digital property operated by Sigmari, a sole proprietorship based in British Columbia, Canada.
Contact: Use the contact form on our website.
2. Information We Collect
2.1 Information You Provide Voluntarily
- Email address — when you subscribe to our newsletter via our contact forms
- Purchase data — processed by Gumroad (name, email, transaction details); we receive only what Gumroad shares via webhook
2.2 Automatic Collection
- Analytics — Cloudflare Web Analytics (privacy-first, no cookies, no personal identifiers)
- Server logs — standard access logs (IP, user agent, timestamp) retained ≤30 days for security
3. Legal Basis (PIPEDA / Canadian Law)
We process your data under the following grounds:
- Consent — email subscriptions (explicit opt-in via checkbox)
- Contract performance — order fulfillment via Gumroad
- Legitimate interest — analytics, security, fraud prevention
4. Third-Party Processors
| Processor | Purpose | Location |
|---|---|---|
| Gumroad | Payment processing, order fulfillment, receipts | USA (Standard Contractual Clauses) |
| Netlify | Form submissions (email capture) | USA (Standard Contractual Clauses) |
| Cloudflare | Hosting, CDN, analytics, DNS | Global (EU/CA nodes available) |
5. Your Rights
Under PIPEDA and applicable Canadian privacy laws, you have the right to:
- Access your personal information
- Request correction of inaccurate data
- Withdraw consent (unsubscribe) at any time
- Request deletion (subject to legal retention requirements)
- Lodge a complaint with the Office of the Privacy Commissioner of Canada
To exercise these rights: Use our contact form and select "Privacy" as the subject.
6. Data Retention
- Email subscribers: Until you unsubscribe or 2 years of inactivity
- Purchase records: 7 years (tax/legal compliance)
- Analytics: Aggregated, no personal identifiers
- Server logs: 30 days
7. Security
We implement appropriate technical measures: HTTPS/TLS everywhere, Cloudflare WAF, limited access to admin interfaces, no storage of payment data (handled by Gumroad).
8. International Transfers
Your data may be processed in the USA by our processors. We rely on Standard Contractual Clauses and processor commitments to ensure adequate protection.
9. Changes to This Policy
We'll notify subscribers of material changes via email. Continued use constitutes acceptance.
10. Contact
Use our contact form and select "Privacy" as the subject.