Start a project

Menu

Start a project

Privacy policy

Last updated: November 10, 2026

This policy explains what personal information Spicy Design collects through www.spicydesign.ca, why, how long we keep it, who we share it with, and the choices you have. Spicy Design is operated by DevCreate Studio LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA. We work with clients in Canada, including Québec, and we follow Québec's Act respecting the protection of personal information in the private sector (Law 25) and Canada's PIPEDA.

Who is responsible

Our person in charge of the protection of personal information is Alex ElChehimi. Write to alex@spicydesign.ca or call +1 307 393 5522 with any question or request about your information.

What we collect

  • When you send a request or contact form: your name, email address, business name, the platform you sell on today, an approximate annual sales range, your province, your store's language(s), what you sell, your message, and the page you sent it from.
  • When you email us: what you choose to send.
  • When you browse the site: technical data such as pages viewed, referring site, approximate location from your IP address, device and browser type, collected through cookies and similar technologies (see below).

We don't sell products on this site, and we don't collect payment information here.

Why we use it

  • To answer your request, plan and build your store, and keep in touch about that work.
  • To understand how the site is used and improve it.
  • To keep the site secure and meet our legal obligations.

We don't sell or rent personal information, and we don't use it for automated decisions about you.

Cookies and analytics

The site runs on Shopify, which sets cookies needed for the site to work. With your consent, we also use Google Analytics to measure visits. You can accept or refuse non-essential cookies in the cookie banner, change your choice at any time through your browser settings, and opt out of Google Analytics with Google's opt-out add-on.

Who we share it with

Only service providers that help us run the site and our business, under contract and only for these purposes:

These providers may store information outside Québec and Canada, including in the United States. Before transferring information, we assess that it will receive adequate protection. We may also disclose information when the law requires it.

How long we keep it

We keep requests and related emails for up to 3 years after our last exchange, and longer only when a project or the law requires it (for example, accounting records). Analytics data is kept for 14 months. We then delete or anonymize it.

How we protect it

Access is limited to the people who need it, accounts are protected with strong passwords and two-step verification, and the site is served over HTTPS. If an incident creates a risk of serious injury, we will notify you and the Commission d'accès à l'information as the law requires.

Your rights

You can ask to access your personal information, correct it, have it deleted, withdraw your consent, or stop its dissemination, and ask how it was collected. Write to alex@spicydesign.ca; we answer within 30 days. If you're not satisfied, you can contact the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

Children

This site is for businesses and isn't directed at children under 14. We don't knowingly collect their information.

Changes

We'll update this page when our practices change and change the date at the top.