Privacy Policy

BombayFashionWPG, doing business as BombayFashionWPG, is a tailoring and clothing business in Winnipeg, Manitoba, Canada. This policy explains what personal information we collect, why, how we protect it, and the choices you have. It follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), which applies to private-sector businesses in Manitoba.

Privacy contact: BombayFashionWPG. Send questions, access or correction requests, consent withdrawals and complaints to the privacy contact above.

When you become a customer (in person, by phone, or by message) we record:

• Contact details: your name, phone number, WhatsApp number if you use it, and your address if you give it to us (email is optional).
• Body measurements and fit notes for garments we make or alter, including earlier measurements so we can serve you again over the years.
• Order records: the garment, fabric and style details, dates, price, any discount, and payments you make.
• Any notes or reference photos you ask us to keep with your order.

If you only browse our online catalog, we don't ask for personal information. Our website host automatically handles technical data such as your IP address and browser type in server logs, to deliver and secure the site. We use one cookie, a strictly necessary sign-in cookie for staff only; we don't use advertising or analytics cookies.

We collect only what we need to make, alter, price and deliver your garments and to run the business.

• To take, make, alter and deliver your orders and keep an accurate fit history.
• To contact you about your order, for example that it is ready, usually by phone, text or WhatsApp. Staff send these messages themselves; the system does not send them automatically.
• To keep financial and tax records.
• To protect the security of our systems.

By giving us your information for an order you consent to these uses. We ask for your clear permission before using your information for anything new. We send promotional messages only with your express consent, each will say who we are and how to unsubscribe, and you can withdraw consent at any time (subject to legal and contractual limits, such as keeping payment records). Withdrawing may mean we can no longer keep a fit history for you.

We don't sell your information. We share it only with:

• Service providers that host our systems under contract: Netlify (website hosting) and Supabase (database and photo storage). Their servers may be outside Canada, including in the United States, so your information may be subject to the laws of those countries.
• Our accountant or tax authorities, when needed for bookkeeping or required by law.
• Authorities, when we are legally required to disclose information.

Measurements and customer profiles are kept while you remain a customer, so we can reproduce your fit, unless you ask us to delete them sooner. Order and payment records are kept for the period tax law requires for business records (generally six years). When information is no longer needed we delete or anonymize it.

• The site uses HTTPS only and data is encrypted in transit.
• The management area is for authorized staff only. Passwords are stored in hashed form, repeated failed sign-ins temporarily lock the account, and sign-in activity is logged.
• Our database is not accessible from the public internet and is backed up.
• We keep staff access to what each person needs.

No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as soon as feasible, and we keep a record of every breach.

You can ask us to show you the personal information we hold about you, correct anything that is wrong, delete it where we are not legally required to keep it, or withdraw consent for optional uses. Contact the privacy contact in section 1. We may need to confirm your identity first, and we aim to respond within 30 days.

If you are not satisfied with our response you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Our services are for adults. If a parent or guardian orders for a child, we take the child's measurements from the parent or guardian and protect them like any other personal information.

We may update this policy. The current version is always on this page with its “last updated” date.