Last updated: September 14, 2026
 

Controlled Mischief Co. respects your privacy and is committed to handling personal information responsibly.
 

This Privacy Policy explains how Controlled Mischief Co. (“Controlled Mischief Co.,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information when you:

• Visit our website;

• Purchase a product;

• Request a quote;

• Submit a custom or personalized order;

• Provide artwork, photographs, logos, or other content;

• Contact us by email, website form, social media, or another method;

• Subscribe to marketing communications; or

• Otherwise interact with our business.
   

Controlled Mischief Co. is based in Alberta, Canada, and handles personal information in accordance with applicable privacy legislation, including Alberta’s Personal Information Protection Act (PIPA) where applicable.
 

Nothing in this Privacy Policy is intended to limit any privacy rights provided under applicable law.
 

1. Privacy Accountability

Controlled Mischief Co. is responsible for personal information under its control.

Questions, access requests, correction requests, privacy concerns, or complaints may be directed to:

Privacy Officer
Controlled Mischief Co.
Email: controlledmischiefco@gmail.com
Website: controlledmischief.com
Business mailing address: [INSERT BUSINESS MAILING ADDRESS]

The Privacy Officer is responsible for overseeing our privacy practices and responding to questions concerning the collection, use, disclosure, protection, and retention of personal information.
 

2. What Is Personal Information?

Personal information generally means information about an identifiable individual.

Depending on how you interact with Controlled Mischief Co., personal information may include:

• Name

• Email address

• Telephone number

• Billing address

• Shipping address

• Order information

• Transaction information

• Customer communications

• Customization instructions

• Photographs

• Names or other information contained in personalized products

• Artwork or files containing identifiable information

• Website usage information

• IP address

• Device and browser information

• Marketing preferences

Information that has been sufficiently anonymized so that an individual can no longer reasonably be identified is generally not treated as personal information.
 

3. How We Collect Personal Information

We may collect personal information directly from you when you:

• Place an order;

• Complete an online checkout;

• Request a custom product;

• Request a quote;

• Approve a proof;

• Contact customer service;

• Submit a return, refund, or replacement request;

• Arrange local pickup;

• Provide shipping information;

• Submit artwork or photographs;

• Subscribe to marketing communications;

• Participate in a promotion or survey; or

• Communicate with us through social media or another channel.

We may also receive information automatically through our website platform and related technologies.
 

4. Customization & Personalization Information

Because Controlled Mischief Co. creates customized and personalized products, customers may provide information that would not ordinarily be required for a standard retail purchase.

This may include:

• Names

• Dates

• Personal messages

• Photographs

• Family information

• Pet information

• Business information

• Logos

• Artwork

• Signatures

• Memorial information

• Personal designs

• Other information requested for personalization

Customers should provide only the information reasonably necessary to complete the requested product.

Where a customer provides personal information relating to another individual, the customer is responsible for ensuring they have appropriate authority or permission to provide that information for the requested purpose.
 

5. Photographs, Artwork & Personalized Designs

Photographs, artwork, logos, files, proofs, and other materials submitted by customers may contain personal information.

We may use this information to:

• Prepare proofs;

• Design personalized products;

• Complete requested customization;

• Produce an order;

• Communicate regarding the order;

• Address production questions;

• Resolve customer-service issues; and

• Maintain reasonable business records.

Customer Work & Marketing

Placing an order with Controlled Mischief Co. does not automatically give us permission to use your personal photographs, personalized designs, private information, or custom products in advertising or promotional materials.

Where we wish to feature customer-specific content containing personal information on our website, social media accounts, advertising, portfolio, or other promotional materials, we may request separate permission where appropriate.
 

6. Our Website Platform — Wix

The Controlled Mischief Co. website is hosted and operated using the Wix.com platform.

Wix provides the technology that allows us to operate our website, online store, forms, customer communications, ecommerce functionality, and related website services.

When you interact with our website, certain information may be collected, stored, or processed through Wix systems.

Depending on the features being used, this may include:

• Name

• Email address

• Telephone number

• Billing information

• Shipping information

• Order history

• Website interactions

• Shopping-cart information

• Contact-form submissions

• IP address

• Browser and device information

• Cookie identifiers

• Other information submitted through the website

Controlled Mischief Co. determines the purposes for which customer information is collected through our website, while Wix provides technology and processing services that support operation of the site.

Wix maintains its own privacy, security, data-processing, and cookie practices.
 

7. Payment Processing — Square

Controlled Mischief Co. uses Square as a payment-processing platform.

When you make a payment through Square, Square may collect and process information required to complete and secure the transaction.

Depending on the transaction, this may include:

• Customer name

• Email address

• Telephone number

• Billing address

• Shipping address

• Payment card information

• Transaction amount

• Products or services purchased

• Transaction date and time

• Payment method

• Device information

• IP address

• Information used for fraud prevention and payment security

Square may also provide Controlled Mischief Co. with transaction information necessary to confirm payment, administer the order, process refunds, reconcile financial records, and provide customer service.

Payment Card Information

Controlled Mischief Co. does not intentionally store complete payment-card numbers or security codes in our own ordinary business records.

Payment-card information is processed through Square and applicable financial and payment networks.

Square maintains its own privacy and security practices governing information processed through its services.
 

8. Transaction & Financial Records

Controlled Mischief Co. may retain records relating to customer transactions where reasonably necessary for:

• Order administration

• Accounting

• Taxation

• Refunds

• Chargebacks

• Fraud prevention

• Dispute resolution

• Customer service

• Legal or regulatory requirements

These records may include order numbers, transaction amounts, dates, products purchased, payment status, and limited payment information made available by the payment processor.

9. Information Collected Automatically

When you visit our website, Wix and other technologies enabled on our site may automatically collect certain technical information.

This may include:

• IP address

• Browser type

• Device type

• Operating system

• Approximate geographic region derived from IP address

• Pages viewed

• Referring website

• Date and time of visits

• Website interactions

• Shopping-cart activity

• Traffic information

• Cookie or similar identifiers

• Website performance information

We may use this information to operate our website, understand website performance, identify technical problems, improve the customer experience, prevent fraud, and understand how visitors find and interact with Controlled Mischief Co.
 

10. Cookies & Similar Technologies

Our Wix website may use cookies and similar technologies.

Cookies are small data files associated with a browser or device.

Depending on the services and features enabled on our website, cookies may be used for:

Essential Website Functions

These may support:

• Shopping-cart functionality

• Checkout

• Website security

• Session management

• Fraud prevention

• Customer preferences

• Website operation

Analytics

Analytics technologies may help us understand:

• How visitors arrive at our website;

• Which pages and products receive interest;

• How visitors navigate the website;

• Website performance; and

• General usage patterns.

Advertising & Marketing

If marketing or advertising tools are enabled, cookies or similar technologies may also be used to:

• Measure advertising performance;

• Understand conversions;

• Measure campaign effectiveness; or

• Provide more relevant advertising.

Third-party applications or services integrated with Wix may use their own cookies or tracking technologies and may be subject to their own privacy practices.

Where appropriate, our website may provide cookie or privacy controls that allow visitors to manage certain non-essential technologies.

Browser settings may also allow users to restrict or delete cookies.

Disabling certain technologies may affect website functionality.
 

11. How We Use Personal Information

Controlled Mischief Co. may use personal information for reasonable business purposes including:

• Processing orders;

• Producing customized products;

• Preparing and sending proofs;

• Processing payments;

• Providing quotes;

• Communicating regarding orders;

• Arranging shipping;

• Arranging Calgary-area pickup;

• Providing customer service;

• Responding to questions;

• Processing returns, refunds, or replacement claims;

• Maintaining business records;

• Preventing fraud;

• Protecting our website and business;

• Improving our products and services;

• Understanding website performance;

• Understanding customer demand;

• Managing customer relationships;

• Meeting accounting and taxation obligations;

• Complying with applicable law; and

• Sending marketing communications where permitted.

We limit our collection, use, and disclosure of personal information to purposes that are reasonable and appropriate in the circumstances.
 

12. Consent

Controlled Mischief Co. obtains consent for the collection, use, or disclosure of personal information where consent is required by law.

Consent may be express or, where legally appropriate, implied based on the circumstances and reasonable expectations associated with the transaction.

For example, when a customer provides a shipping address to purchase a product, it is reasonably understood that we will use and disclose the information necessary to arrange shipment.

Customers may withdraw consent to certain uses of personal information, subject to reasonable notice and any legal or contractual restrictions.

Withdrawal of consent may affect our ability to provide a service where the information is necessary to complete that service.
 

13. Order Communications

Controlled Mischief Co. may use customer contact information to communicate regarding an existing or requested transaction.

This may include communications relating to:

• Order confirmation

• Proof approval

• Production questions

• Payment

• Shipping

• Tracking

• Local pickup

• Returns

• Refunds

• Defects

• Customer service

• Important product or service information

These communications may be necessary to complete or administer the transaction and are different from optional promotional marketing.
 

14. Marketing Communications

Controlled Mischief Co. may send marketing communications where permitted by applicable law and where any required consent has been obtained.

Marketing communications may include:

• Promotions

• Discount offers

• New products

• Product launches

• Company announcements

• Special events

• Other promotional information

Commercial electronic marketing messages will contain appropriate sender identification and an unsubscribe mechanism where required.

Customers may unsubscribe from marketing communications at any time.

Unsubscribing from marketing does not prevent Controlled Mischief Co. from sending communications reasonably necessary to complete or service an existing transaction.
 

15. When We Share Personal Information

Controlled Mischief Co. does not sell or rent customer personal information as a business activity.

We may provide personal information to third parties where reasonably necessary to operate our business or provide services to customers.

These parties may include:

• Wix, for website hosting, ecommerce, databases, forms, customer communications, and related website functionality;

• Square, for payment processing, transaction administration, payment security, fraud prevention, and related financial services;

• Shipping and courier companies;

• Financial institutions and payment networks;

• Email or communications providers;

• Cloud-storage providers;

• Accounting or bookkeeping providers;

• Analytics providers;

• Marketing platforms;

• Fraud-prevention services;

• Information-technology providers; and

• Professional advisors.

We provide or permit access only to information reasonably necessary for the applicable purpose.
 

16. Shipping Providers

When an order is shipped, information necessary to deliver the package may be provided to the applicable shipping or courier company.

This may include:

• Customer name

• Shipping address

• Telephone number

• Email address

• Package information

• Delivery instructions

• Tracking information

Shipping providers may use this information to provide delivery, tracking, notification, and related services.
 

17. Service Providers & Information Outside Canada

Controlled Mischief Co. uses technology and payment providers that operate internationally.

As a result, customer personal information may be transferred to, processed in, or stored outside Canada.

When personal information is processed outside Canada, it may be subject to the laws of the country where it is processed or stored and may be accessible to courts, law-enforcement authorities, regulators, or other government bodies in accordance with those laws.

Wix

Controlled Mischief Co. uses Wix to host and operate its website.

Wix.com Ltd. is based in Israel and Wix uses affiliated entities, cloud infrastructure providers, content-delivery providers, and other subprocessors in multiple jurisdictions.

Based on Wix's current infrastructure disclosures, customer information processed through our Wix website may be processed or stored in locations including:

• Israel

• United States

• Ireland

• South Korea

• Taiwan

and other jurisdictions used by Wix and its authorized service providers as its infrastructure changes.

Information is processed by Wix for purposes including:

• Website hosting;

• Database and storage services;

• Ecommerce functionality;

• Website security;

• Content delivery;

• Customer communications;

• Analytics and performance;

• Technical support; and

• Other functionality required to operate the Controlled Mischief Co. website.

Square

Controlled Mischief Co. uses Square to process customer payments.

For Canadian customers and merchants, Square services may involve Square Canada, Inc., Square Technologies, Inc., Block, Inc., their affiliates, payment networks, financial institutions, and authorized service providers.

Square states that personal information may be processed or stored in locations including:

• United States

• Japan

• European Union

• Other jurisdictions in which Square or its authorized service providers operate

Square may process information outside Canada for purposes including:

• Payment processing;

• Transaction administration;

• Fraud detection and prevention;

• Payment security;

• Customer support;

• Financial and regulatory compliance; and

• Operation and improvement of Square services.

Questions About Foreign Processing

Because international providers may periodically change their infrastructure and subprocessors, the exact locations used may change.

Customers may contact Controlled Mischief Co. for information about our current use of foreign service providers:

Privacy Officer
controlledmischiefco@gmail.com
 

18. Legal Disclosures

Controlled Mischief Co. may collect, use, preserve, or disclose personal information where permitted or required by applicable law.

This may include circumstances involving:

• Court orders;

• Legal proceedings;

• Regulatory requirements;

• Taxation obligations;

• Fraud investigations;

• Protection of legal rights;

• Safety or security issues;

• Enforcement of agreements; or

• Lawful requests from government or law-enforcement authorities.

Information may also be disclosed as permitted by law in connection with a sale, merger, financing, restructuring, or transfer of some or all of the business.
 

19. How We Protect Personal Information

Controlled Mischief Co. takes reasonable administrative, technical, and physical measures appropriate to the nature and sensitivity of the personal information under our control.

These measures may include:

• Password protection;

• Restricted access;

• Secure ecommerce systems;

• Use of established payment-processing platforms;

• Device security;

• Account authentication;

• Software updates;

• Secure storage;

• Appropriate handling of photographs and customer files;

• Secure disposal practices; and

• Limiting access to those who reasonably require the information.

Wix and Square maintain additional security controls for information processed through their respective platforms.

No electronic transmission, website, payment platform, or storage system can be guaranteed to be completely secure.

Accordingly, while reasonable precautions are taken, absolute security cannot be guaranteed.
 

20. Privacy Breaches

If Controlled Mischief Co. becomes aware of unauthorized access, disclosure, loss, or another privacy incident involving personal information under our control, we will assess the circumstances and take reasonable steps to contain, investigate, and address the incident.

Where required by applicable privacy law, we will report qualifying privacy breaches to the appropriate privacy authority and notify affected individuals as required.
 

21. Retention of Personal Information

Controlled Mischief Co. retains personal information only for as long as reasonably required for the purposes for which it was collected or for legitimate legal or business requirements.

Retention periods may vary based on the type of information.

Information may need to be retained for purposes including:

• Order records

• Accounting

• Taxation

• Customer service

• Warranty or product issues

• Returns or refunds

• Dispute resolution

• Fraud prevention

• Legal compliance

Personalization files, artwork, photographs, and proofs may be retained where reasonably necessary for:

• Order records;

• Customer service;

• Repeat-order requests;

• Production history; or

• Dispute resolution.

Customers may contact us if they have questions about the retention of a particular photograph, artwork file, proof, or other personalization material.

When personal information is no longer reasonably required, we will take reasonable steps to securely delete, destroy, or anonymize it.

22. Accuracy of Personal Information

Controlled Mischief Co. takes reasonable steps to maintain information that is sufficiently accurate and complete for the purposes for which it is used.

Customers are responsible for ensuring that information provided when placing an order is accurate.

Customers should contact us if their personal information changes or if they believe information we hold about them is incorrect.

23. Access to Personal Information

Subject to exceptions permitted by law, individuals may request access to personal information Controlled Mischief Co. holds about them.

Requests may also seek information regarding how personal information has been used or disclosed.

Requests should be directed to:

Privacy Officer
controlledmischiefco@gmail.com

Controlled Mischief Co. may need to verify the identity of the individual making the request before providing access.

Some information may be withheld where permitted or required by law, including where disclosure would improperly reveal another individual's personal information or other legally protected information.

24. Correcting Personal Information

If you believe personal information held by Controlled Mischief Co. is inaccurate or incomplete, you may request that it be corrected.

Requests should be sent to:

controlledmischiefco@gmail.com

We will review correction requests and make appropriate changes where required.

25. Deletion Requests

Customers may contact Controlled Mischief Co. to request deletion of personal information.

Deletion may not always be possible immediately.

Certain information may need to be retained for purposes including:

• Taxation

• Accounting

• Transaction records

• Legal obligations

• Fraud prevention

• Contract enforcement

• Existing disputes

Where continued retention is no longer reasonably required, personal information may be securely deleted, destroyed, or anonymized.
 

26. Information About Other Individuals

Customers may provide information about another individual when ordering personalized products.

Examples include:

• Photographs of another person

• A child's name

• Family member information

• Wedding information

• Memorial information

• Employee information

• Other personal details

By providing this information, the customer confirms that they have appropriate authority to provide it for the requested personalization.

Customers should avoid providing sensitive or unnecessary personal information where it is not reasonably required to complete the requested product.
 

27. Children & Minors

Controlled Mischief Co. products may be purchased for children, but our ecommerce services are intended to be used by individuals legally capable of completing the transaction or by an authorized parent or guardian.

Where personal information concerning a child is submitted for personalization, the person submitting the information is responsible for ensuring they have appropriate authority to provide it.

We encourage customers to provide only the minimum amount of personal information necessary for the requested design.
 

28. Social Media

Controlled Mischief Co. may operate accounts on third-party social media platforms.

When customers interact with us through social media, both Controlled Mischief Co. and the applicable social media platform may receive information associated with the interaction.

Information collected directly by a social media platform is governed by that platform's own privacy practices.

Customers should avoid posting sensitive personal information or order details publicly.

Private order matters should be directed to Controlled Mischief Co. through an appropriate private communication channel.
 

29. Third-Party Websites & Services

Our website may contain links or integrations involving third-party websites, social media platforms, shipping services, payment services, applications, or other resources.

Controlled Mischief Co. does not control the privacy practices of unrelated third parties.

Customers are encouraged to review the applicable privacy policies of third-party services before providing information directly to them.
 

30. Analytics & Advertising Services

Our Wix website may use analytics tools and, as the business develops, may use advertising platforms to understand:

• Website traffic;

• Product interest;

• Customer journeys;

• Advertising effectiveness;

• Website performance; and

• Sales conversions.

Depending on the tools enabled, providers may receive technical information such as:

• IP address

• Device information

• Browser information

• Website interactions

• Cookie identifiers

• Referral information

• Purchase or conversion information

If Controlled Mischief Co. enables additional analytics, advertising, or tracking platforms in the future, this Privacy Policy may be updated accordingly.

Where consent or additional disclosure is legally required for these technologies, we will take reasonable steps to provide appropriate controls.

31. Privacy Complaints & Questions

Questions or concerns regarding our handling of personal information should first be directed to:

Privacy Officer
Controlled Mischief Co.
Email: controlledmischiefco@gmail.com

We will review privacy concerns and make reasonable efforts to respond appropriately.

Individuals who remain dissatisfied may have the right to contact the applicable privacy regulator, including the Office of the Information and Privacy Commissioner of Alberta, where appropriate.

32. Changes to This Privacy Policy

Controlled Mischief Co. may update this Privacy Policy periodically to reflect:

• Changes to our business;

• Changes to the Wix website;

• New applications or integrations;

• Changes to payment or service providers;

• New analytics or advertising services;

• Changes to our privacy practices; or

• Changes to applicable legal requirements.

The current version will be posted on our website with an updated effective date.

Where appropriate, material changes may be communicated in another reasonable manner.
 

33. Contact Information

Questions regarding this Privacy Policy or our handling of personal information may be directed to:

Controlled Mischief Co.
Privacy Officer
Email: controlledmischiefco@gmail.com
Website: controlledmischief.com
We take the trust involved in both your orders and your information seriously. The details you give us are there to help us create, process, and deliver your order — not to create more mischief than you asked for.