Store Privacy Policy

Effective October 1, 2026. XY Spark is responsible for personal information collected through this website and merchandise store. Our mailing address is 260 Gravelstone Road, Fort McMurray, Alberta, T9K 0X1, Canada. Privacy questions and complaints can be directed to hyman@xyspark.org or +1 780-695-1758.

Information used by the store

When you place an order or contact XY Spark, we use the information needed to respond, process your purchase, fulfill delivery, provide support, and maintain required business records. This may include your name, email address, phone number, billing and delivery addresses, purchased items, and order history.

Payments and fulfillment

Payment information is handled by the payment provider offered at checkout, including WooPayments. Order and shipping details needed to make and deliver your merchandise are shared with Printful and relevant delivery providers. We also use WooCommerce, Jetpack, and hosting services to operate and maintain the website. Providers may process information outside Canada.

Website activity and cookies

The website uses cookies and similar technologies for functions such as keeping items in your cart, remembering preferences, and operating checkout. Google Analytics through MonsterInsights and Google for WooCommerce may also process activity information for measurement and advertising-related reporting. Activity information may include pages viewed, device and browser information, approximate location, and interactions with the store. You can use browser privacy settings and the privacy controls offered by relevant providers to manage tracking. Contact us to ask about optional processing or to withdraw consent where applicable; withdrawal does not affect processing already lawfully completed. Browser settings can restrict cookies, although doing so may affect store functions.

Contact and privacy requests

Contact hyman@xyspark.org for questions about your personal information or to request access or a correction. We may verify your identity before responding. Some information may need to be retained to meet legal, accounting, or fraud-prevention requirements.

Policy scope

This policy covers website activity, merchandise orders, account information, and general inquiries submitted through the website. We use inquiry information to respond to your request. External booking, social-media, and payment services have their own privacy notices. Please avoid sending sensitive health information through general website inquiry forms; this policy does not replace separate confidentiality and consent arrangements for professional services.