A short list of what we keep, and what we don't.

When you buy a tote we keep your name, shipping address, email, and order history through Shopify. Payment details (card number, billing address) go to Shopify and our payment processor — they never touch our servers.

If you email us, we keep the email so we can reply. If you sign up for the (eventually existing) newsletter, we keep your email until you unsubscribe.

We use basic analytics to understand which pages people read. No personal profile is built. No data is sold.

The cart and checkout require a session cookie set by Shopify. Without it, the cart cannot remember what you added. You can clear it anytime in your browser.

If we add full analytics, it will be a privacy-respecting tool that does not require a cookie banner. We will note any change here when it happens.

Shopify processes payments and stores order data. Canada Post or a comparable carrier sees the shipping address so the tote can arrive. We do not share or sell your information to advertisers, data brokers, or third parties.

If a Canadian or international authority compels disclosure (a warrant, a subpoena), we comply with the minimum required by law.

Under PIPEDA (Canada) and similar laws elsewhere, you can ask for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. We will respond within 30 days.

To make a request, email hi@dumbdumb.studio with the subject line "privacy request" and the email you used to order.

If we ever have a data breach affecting your information, we will notify you and the Office of the Privacy Commissioner of Canada per regulation.

Questions about this page or our practices: hi@dumbdumb.studio. Replies usually within a few days.