MISKWAADESI M’NAUHAN DECORATIVE ARTS INC.

Privacy Policy

artwork.blairandco.ca

Effective Date: March 30, 2026  |  Last Updated: March 30, 2026

Miskwaadesi M’Nauhan Decorative Arts Inc. (“MMDA”, “we”, “our”, or “us”) is committed to protecting the privacy and personal information of every person who visits or interacts with our website at artwork.blairandco.ca (the “Site”). This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights in relation to that information.

By using our Site, making a purchase, or submitting your information to us, you agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree, please do not use the Site.

We are committed to complying with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Personal Information Protection Act (PIPA) of Alberta.

1. Who We Are

Miskwaadesi M’Nauhan Decorative Arts Inc. is an Indigenous-owned and operated business registered in Alberta, Canada. We operate an online platform that promotes, digitizes, and distributes authentic Indigenous artwork nationally and internationally. Our registered business address is in Alberta, Canada.

For privacy-related inquiries, you may contact us at:

• Website: artwork.blairandco.ca
• Location: Alberta, Canada
• Contact: Available through our website contact form

2. Information We Collect

We collect personal information from you in the following ways:

2.1 Information You Provide Directly

• Full name
• Email address
• Mailing address and shipping address
• Phone number (if provided)
• Payment information (processed securely through Stripe — we do not store full card details)
• Artist application information including nation, community affiliation, artistic practice, and biography
• Messages and communications you send us through contact forms
• Newsletter subscription information

2.2 Information Collected Automatically

When you visit our Site, we may automatically collect certain technical information including:

• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited and time spent on the Site
• Referring website or source
• Cookies and similar tracking technologies (see Section 7)

2.3 Transaction Information

When you make a purchase, we collect information necessary to process and fulfill your order, including:

• Order details and product information
• Billing and shipping address
• Payment confirmation and transaction reference numbers
• Purchase history

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Order Fulfillment and Customer Service

• To process and fulfill your purchases of artwork
• To arrange shipping and delivery of physical artwork
• To communicate with you about your order, including confirmations, updates, and shipping notifications
• To respond to your questions, requests, and customer service inquiries
• To handle returns, exchanges, and refunds

3.2 Marketing and Communications

• To send you our newsletter and promotional emails, if you have subscribed or consented
• To inform you about new artwork, featured artists, exhibitions, and platform updates
• To send transactional emails related to your account or purchases

You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link in any email or contacting us directly.

3.3 Artist Platform

• To review and process artist applications
• To build and maintain public artist profiles with your consent
• To manage consignment agreements and sales reporting
• To remit payments to artists for sold artwork

3.4 Website Operation and Improvement

• To analyze how visitors use the Site using Google Analytics
• To improve the performance, design, and functionality of the Site
• To detect and prevent fraud, security issues, and technical errors
• To comply with legal obligations

4. Legal Basis for Processing

We process your personal information on the following legal bases:

• Contract: To fulfill our obligations under purchase agreements and consignment agreements
• Consent: For newsletter subscriptions, marketing communications, and artist profile publication
• Legitimate Interests: To operate and improve our platform, prevent fraud, and communicate with customers about their orders
• Legal Obligation: To comply with applicable laws including tax, consumer protection, and anti-money laundering requirements

5. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We share your information only as necessary to operate our business, as follows:

5.1 Payment Processing — Stripe

We use Stripe to process all payments securely. When you make a purchase, your payment information is transmitted directly to Stripe and is governed by Stripe’s Privacy Policy. We do not store your full credit card details on our servers. Stripe is PCI-DSS compliant and operates under its own privacy framework. For more information, visit: stripe.com/privacy

5.2 Email Marketing — Brevo

We use Brevo (formerly Sendinblue) to manage our email newsletter, marketing communications, and transactional emails. Your name and email address are stored in Brevo’s platform. Brevo is GDPR-compliant and operates under its own privacy policy. For more information, visit: brevo.com/legal/privacypolicy

5.3 Website Analytics — Google Analytics

We use Google Analytics to understand how visitors interact with our Site. Google Analytics collects anonymized data including pages visited, time on site, and general geographic location. This data is used in aggregate and does not personally identify individual visitors. You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout. For more information, visit: policies.google.com/privacy

5.4 Web Hosting — Rebel Hosting

Our website is hosted by Rebel Hosting. Your data may be stored on servers managed by Rebel as part of the hosting infrastructure. Rebel operates under its own privacy and data security policies. For more information, visit: rebel.com

5.5 Shipping and Fulfillment

When you purchase physical artwork, we share your name and shipping address with our chosen shipping carrier(s) solely for the purpose of delivering your order. Shipping carriers are not permitted to use your information for any other purpose.

5.6 Legal Disclosure

We may disclose your personal information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of our users or the public.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law.

• Customer order records are retained for a minimum of 7 years for tax and accounting purposes, as required by the Canada Revenue Agency
• Newsletter subscriber information is retained until you unsubscribe
• Artist application and consignment records are retained for the duration of the artist relationship and for 7 years thereafter
• Website analytics data is retained in accordance with Google Analytics retention settings (default 26 months)

When personal information is no longer required, we securely delete or anonymize it.

7. Cookies and Tracking Technologies

Our Site uses cookies and similar technologies to enhance your experience and gather analytics data. Cookies are small text files stored on your device.

7.1 Types of Cookies We Use

• Essential Cookies: Required for the Site to function, including shopping cart and session management
• Analytics Cookies: Used by Google Analytics to understand Site usage (can be opted out)
• Marketing Cookies: May be used to deliver relevant content and track the effectiveness of campaigns

7.2 Managing Cookies

You can control or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Site, including your ability to complete purchases. For more information about managing cookies, visit allaboutcookies.org.

8. Your Rights

Under Canadian privacy law (PIPEDA and Alberta PIPA), and where applicable under international frameworks, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you
• Right to Correction: You may request that we correct inaccurate or incomplete information
• Right to Withdrawal of Consent: You may withdraw consent for marketing communications at any time
• Right to Deletion: You may request that we delete your personal information, subject to our legal retention obligations
• Right to Complaint: You have the right to file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca)

To exercise any of these rights, please contact us through our website. We will respond to your request within 30 days.

9. Data Security

We take the security of your personal information seriously and implement reasonable administrative, technical, and physical safeguards to protect it from unauthorized access, use, disclosure, alteration, or destruction.

Our security measures include:

• SSL/TLS encryption for all data transmitted through our Site (HTTPS)
• Secure payment processing through Stripe, which is PCI-DSS Level 1 certified
• Access controls limiting who within our organization can access personal information
• Regular review of our security practices

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

10. Children’s Privacy

Our Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will take steps to delete that information promptly.

11. International Transfers

Some of our third-party service providers (including Stripe, Google Analytics, and Brevo) may process or store your data outside of Canada, including in the United States or the European Union. By using our Site and services, you consent to the transfer of your information to these jurisdictions. We ensure that such transfers are conducted in compliance with applicable privacy laws and that our service providers maintain appropriate safeguards.

12. Indigenous Cultural Commitment

As an Indigenous-owned platform committed to ethical representation of Indigenous art and artists, we handle all personal information — particularly information related to artists’ cultural identity, community affiliation, and cultural protocols — with the highest level of respect and confidentiality.

Information related to an artist’s Indigenous identity, nation, community, or cultural background is collected only with Free, Prior, and Informed Consent (FPIC) and is used solely for the purposes described and consented to by the artist. This information is never sold, shared with advertisers, or used for any purpose beyond the artist’s platform profile and MMDA’s artist verification process.

13. Third-Party Links

Our Site may contain links to third-party websites, social media platforms, or resources. This Privacy Policy applies only to our Site. We are not responsible for the privacy practices of third-party websites and encourage you to review their privacy policies before providing any personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the “Last Updated” date at the top of this page. For significant changes, we may also provide notice through our Site or by email.

Your continued use of the Site after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:

Miskwaadesi M’Nauhan Decorative Arts Inc.

• Website: artwork.blairandco.ca
• Contact Form: Available on our website
• Location: Alberta, Canada

We are committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response, you have the right to contact the applicable privacy commissioner:

• Office of the Privacy Commissioner of Canada: priv.gc.ca | 1-800-282-1376
• Office of the Information and Privacy Commissioner of Alberta: oipc.ab.ca | 1-888-241-4703

Legal Disclaimer

This Privacy Policy was prepared as a working document for Miskwaadesi M’Nauhan Decorative Arts Inc. It is not legal advice. MMDA recommends that this document be reviewed by a qualified privacy lawyer before publication, particularly given the nature of personal and cultural information handled through the platform.