1. Introduction

Linenvessel (“we”, “us” or “our”) respects the privacy of individuals who visit www.linenvessel.com or purchase our linen and cotton storage baskets and laundry hampers.

This Privacy Policy explains how we collect, use, store, disclose and otherwise process personal information when you visit our website, place an order, contact us or interact with our services.

We handle personal information in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable, and relevant data protection legislation in the European Economic Area and the United Kingdom, including the General Data Protection Regulation (GDPR) and UK GDPR, as applicable.

By using our website, you acknowledge that you have had the opportunity to read this Privacy Policy. Where consent is legally required, we will request it separately and will not treat a visit to our website as consent to every form of data processing.

2. Data Controller

For the purposes of this Privacy Policy, Linenvessel is the designated data controller responsible for determining the purposes and means of processing personal information collected through our website and retail activities, where applicable under relevant law.

Brand: Linenvessel

Website: https://www.linenvessel.com

Email: cotton@linenvessel.com

For privacy enquiries, requests concerning personal information or complaints about our handling of personal information, please contact us at cotton@linenvessel.com.

Where applicable law requires the controller’s legal identity or additional contact details, those details will be provided in the relevant website disclosures.

3. Personal Information We Collect

We collect personal information that is reasonably necessary for the operation of our online retail business and the purposes described in this Policy.

3.1 Information You Provide

Depending on your interactions with us, this may include:

• Name and contact details, including email address and telephone number.
• Billing and delivery addresses.
• Order details, including products purchased, quantities, prices and order references.
• Information you provide when contacting customer service.
• Information submitted through website forms or account registration, where available.
• Preferences relating to communications and marketing, where applicable.

Please provide only information relevant to your enquiry or purchase.

3.2 Payment Information

Payments made through our website are processed by Stripe.

Depending on the payment method, Stripe and the relevant financial institutions may process payment card details, payment account information, billing details, transaction references and other information needed to process a payment.

We generally receive transaction-related information such as payment status, transaction references, payment amount and related order information. We do not intend to store complete payment card details on our own website systems.

The information handled by Stripe is also subject to Stripe’s applicable privacy documentation and contractual terms.

3.3 Technical and Usage Information

When you visit our website, certain information may be collected automatically, depending on your browser settings, our website configuration and your cookie preferences. This may include:

• Internet Protocol (IP) address.
• Browser type and operating system.
• Device and session information.
• Pages viewed and interactions with website functions.
• Date, time and duration of visits.
• Referring website information.
• Cookie identifiers and similar online identifiers, where permitted.

We use this information for website operation, performance assessment, troubleshooting and the purposes explained in this Policy.

4. How We Use Personal Information

We process personal information only where an appropriate legal basis exists and for identified purposes, including:

1. Order administration: To receive, confirm and manage purchases, communicate order updates and maintain relevant transaction records.
2. Customer service: To answer enquiries, investigate order-related questions and respond to requests.
3. Payment processing: To facilitate payments through Stripe and receive the transaction information needed to administer orders.
4. Accounting and legal compliance: To maintain appropriate records, meet applicable tax and accounting requirements, and respond to lawful requests.
5. Website operation: To maintain website functions, identify operational problems and understand general usage patterns.
6. Fraud prevention and legitimate business interests: To identify suspicious transactions, address misuse and protect our legitimate business interests, subject to applicable law.
7. Marketing communications: To send promotional communications where permitted by law and, where required, with your prior consent.
8. Legal claims: To establish, exercise or defend legal claims where necessary.

Where processing relies on consent, you may withdraw that consent at any time, subject to applicable legal requirements. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Where processing relies on legitimate interests, we will consider the relevant interests, your rights and the circumstances of the processing.

5. Legal Bases for Processing in Europe

Where the GDPR or UK GDPR applies, we rely on one or more of the following legal bases, depending on the circumstances:

• Contract: Processing necessary to take steps at your request before entering into a contract or to fulfil a purchase contract.
• Legal obligation: Processing required to meet applicable legal, tax, accounting or regulatory duties.
• Legitimate interests: Processing necessary for legitimate interests such as administering our business, responding to customer enquiries, maintaining our website and addressing fraudulent activity, provided those interests are not overridden by your rights and interests.
• Consent: Processing for which you have given valid consent, including certain optional cookies and marketing communications where consent is required.
• Legal claims: Processing necessary for the establishment, exercise or defence of legal claims, where applicable.

Where we rely on consent, you may withdraw it without affecting the lawfulness of earlier processing.

6. Stripe and Payment Processing

Linenvessel uses Stripe to process payments submitted through our website.

When you make a purchase, relevant personal and transaction information is shared with Stripe to facilitate the payment and associated transaction activities.

Depending on the payment method and transaction, the information may include:

• Name and billing details.
• Email address.
• Payment amount, currency and transaction reference.
• Payment card or other payment method information.
• Relevant order information.
• Information used to assess or address suspected fraudulent activity.

Stripe processes personal information in accordance with its applicable contractual terms and privacy documentation.

Stripe may act as a data processor on our behalf for certain payment activities and as an independent data controller for other activities it determines, such as certain regulatory, fraud prevention and service administration functions. The precise role depends on the processing activity.

For more information about Stripe’s handling of personal information, please consult the Stripe Privacy Centre.

We do not request your full payment card number or card security code by ordinary email. Please do not send such information in customer service correspondence.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate website functions, remember preferences, understand website usage and support other disclosed purposes.

Depending on their function, these may include:

• Essential cookies: Needed for functions such as shopping basket operation, checkout, session management and other requested website services.
• Preference cookies: Used to remember choices such as language or other website preferences.
• Analytics cookies: Used to understand website visits and interactions, where enabled.
• Marketing cookies: Used for advertising or marketing measurement, where enabled and legally permitted.
• Payment-related cookies: Certain cookies or similar technologies may be used in connection with Stripe’s payment functions.

Where consent is required, non-essential cookies will be activated only after you provide the appropriate consent. You may change or withdraw your cookie preferences through the website’s cookie settings, where available.

Disabling certain cookies may affect some website functions.

For further details, please refer to our Cookie Policy.

8. Disclosure of Personal Information

We may disclose relevant personal information to the following categories of recipients where necessary and lawful:

8.1 Payment and Financial Service Providers

Stripe and relevant financial institutions receive information needed to process payments and administer related transactions.

8.2 Website and Business Service Providers

We may use providers that support website hosting, website administration, customer communications, order management and other ordinary business functions. Such providers may process personal information on our behalf under applicable contractual arrangements.

8.3 Professional Advisers

Accountants, legal advisers, auditors and other professional advisers may receive relevant information when required for their professional services.

8.4 Public Authorities and Legal Recipients

We may disclose information where required by law, a valid legal process or a lawful request from a competent authority, or where reasonably necessary to establish, exercise or defend legal claims.

8.5 Business Transfers

If our business undergoes a merger, restructuring, acquisition or transfer of relevant assets, personal information may be disclosed to the parties involved where legally permitted and subject to applicable privacy requirements.

We do not disclose personal information for purposes incompatible with the purposes for which it was collected unless a lawful basis permits the disclosure.

9. International Data Transfers

Our business is based in Canada, and we serve customers in European markets. Personal information may therefore be processed in Canada or other countries where our service providers operate.

Those countries may have privacy laws that differ from those applicable in your place of residence.

Where the GDPR or UK GDPR applies, we will use an appropriate transfer mechanism where required by law. Depending on the circumstances, this may include an applicable adequacy decision, approved standard contractual clauses or another legally recognised safeguard.

Information processed by Stripe may also be subject to the transfer arrangements described in Stripe’s applicable privacy documentation and contractual terms.

You may contact us at cotton@linenvessel.com for further information about relevant international transfer safeguards, subject to applicable legal restrictions.

10. Personal Information Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including the fulfilment of orders, customer service, accounting, compliance with legal obligations and the establishment or defence of legal claims.

Our retention periods are determined by the nature of the information, the reason for its collection and applicable legal requirements.

The following schedule describes our intended retention periods, subject to any longer period required by law or necessary for a specific lawful purpose.

Information category	Intended retention period
Order, invoice and transaction records	Generally up to 7 years after the relevant transaction or financial year, where required or justified by applicable accounting, tax and legal requirements
Customer service correspondence	Generally up to 24 months after the enquiry is resolved, unless a longer period is needed for an ongoing matter or legal claim
Customer account information, where accounts are available	While the account remains active and generally up to 24 months after closure, subject to outstanding orders and legal obligations
Marketing preferences and consent records	While the relevant marketing activity continues and for an appropriate period afterwards to document consent, withdrawal or compliance
Website logs and diagnostic records	Generally up to 12 months, unless a longer period is necessary to investigate an incident or meet a legal obligation
Cookie and analytics information	According to the relevant cookie’s stated duration, the applicable consent choices and the provider’s retention settings
Payment information held by Stripe	In accordance with Stripe’s applicable retention practices, contractual terms and legal obligations

These periods are not intended to authorise indefinite retention. We periodically assess whether personal information remains necessary and delete, erase or anonymise it when it is no longer required, subject to applicable legal and recordkeeping obligations.

Certain records may need to be retained longer to meet tax requirements, respond to a lawful request, resolve a dispute or establish, exercise or defend a legal claim.

Canadian privacy law generally requires retention to be limited to the time needed for identified purposes, while European data protection law requires identifiable personal data to be retained no longer than necessary, subject to applicable legal obligations.

11. Data Protection Measures

We use administrative, organisational and technical measures appropriate to the nature of the personal information we handle.

These measures may include restricting access to relevant personnel, maintaining appropriate access controls, reviewing service-provider arrangements and managing the retention and disposal of records.

Payment processing is handled through Stripe in accordance with the applicable service arrangements.

No method of transmitting or storing information can be described as entirely free from risk. We review our information-handling practices in light of relevant business needs and applicable legal requirements.

12. Your Privacy Rights

Depending on your location and the legislation that applies, you may have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request erasure of personal information where the legal conditions are met.
• Request restriction of certain processing activities.
• Object to processing based on legitimate interests in circumstances provided by law.
• Request a portable copy of certain personal information.
• Withdraw consent where processing relies on consent.
• Object to direct marketing and related profiling where applicable.
• Lodge a complaint with the relevant data protection authority or privacy regulator.

These rights are subject to applicable legal conditions and exceptions. For example, we may need to retain certain transaction records to meet legal obligations even where an erasure request is made.

To exercise a relevant right, please contact cotton@linenvessel.com. We may request information reasonably necessary to verify your identity before responding.

We will respond within the time limits required by applicable law.

13. Marketing Communications

We may send promotional emails where permitted by applicable law and where any required consent has been obtained.

You may unsubscribe using the link provided in a marketing email or contact cotton@linenvessel.com to request that promotional emails stop.

We may continue to send non-promotional messages necessary to administer an order, respond to a request or meet a legal obligation.

Withdrawing marketing consent does not affect processing already lawfully carried out.

14. Children’s Privacy

Our website and products are intended for ordinary household purchases and are not directed specifically at children.

We do not knowingly seek to collect personal information from children where doing so would be contrary to applicable law. If we become aware that personal information has been collected unlawfully from a child, we will take appropriate steps in accordance with applicable legal requirements.

15. Third-Party Websites and Services

Our website may contain links to websites or services operated by other organisations, including Stripe’s payment-related pages or resources.

Those organisations may have their own privacy policies and data-handling practices. We encourage you to review their relevant privacy information before providing personal information directly to them.

This Privacy Policy applies to Linenvessel’s own personal information processing activities and does not replace the privacy policies of independent organisations.

16. Privacy Complaints and Enquiries

If you have a question, concern or complaint about our handling of personal information, please contact:

Linenvessel Privacy Contact

Email: cotton@linenvessel.com

Please describe the issue and provide relevant details so that we can review your request.

Where applicable, you may also submit a complaint to the competent privacy regulator in your Canadian province or territory, the Office of the Privacy Commissioner of Canada, the relevant European supervisory authority or the UK Information Commissioner’s Office.

17. Changes to This Privacy Policy

We may update this Privacy Policy when our business practices, website functions or applicable legal requirements change.

The revised version will be published on this page with an updated revision date. Where required by law, we will provide additional notice or seek consent before implementing changes that require it.

We encourage visitors to review this page periodically.