Privacy policy
Privacy Policy
Last updated: 30 August 2026
Le Canvas is operated by LE'CANVAS PTY LTD (ABN 59 123 338 714).
This Privacy Policy explains how Le Canvas collects, holds, uses and discloses personal information when you visit or use lecanvas.com.au, purchase products from us, make an enquiry, communicate with us, or otherwise interact with our business.
We are committed to handling personal information responsibly and transparently.
1. Personal information we collect
The kinds of personal information we may collect depend on how you interact with us.
Information you provide directly
We may collect information including:
- your name;
- email address;
- telephone number;
- billing and shipping address;
- order and purchase information;
- product enquiries and communications with us;
- customer service correspondence;
- marketing preferences;
- information you submit through contact, enquiry or newsletter forms; and
- other information you choose to provide to us.
When you make or attempt to make a purchase, payment details are processed by our payment and ecommerce service providers. We may receive information about the transaction, payment status and order, but we do not intentionally collect or store complete payment-card details ourselves.
Information collected automatically
When you visit our website, we may automatically collect information about your device and use of the site, including:
- IP address;
- browser type;
- device type;
- operating system;
- time zone;
- cookie and similar identifiers;
- pages and products viewed;
- referring websites or sources;
- approximate location;
- session and interaction information;
- search and filtering activity;
- website performance information; and
- information about how you navigate and interact with our website.
We refer to this generally as Device and Usage Information.
2. How we collect personal information
We may collect personal information:
- directly from you when you purchase from us, contact us, subscribe to communications, make an enquiry or complete a form;
- automatically when you browse or interact with our website;
- through Shopify and other service providers that support our online store;
- through analytics and website-performance tools where permitted;
- from payment, fulfilment, delivery and other service providers in connection with your order; and
- where otherwise permitted or required by law.
3. How we use personal information
We may use personal information to:
- process, fulfil and manage orders;
- process payments and refunds;
- arrange delivery;
- provide invoices, receipts and order confirmations;
- communicate with customers;
- respond to enquiries and requests;
- provide product information and assistance;
- operate, maintain and improve our website;
- understand how visitors use our website;
- analyse website performance and customer journeys;
- improve navigation, search, product presentation and usability;
- detect, prevent and investigate fraud, misuse or technical issues;
- maintain business and accounting records;
- comply with legal and regulatory obligations;
- protect our rights, customers and business; and
- send marketing communications where you have consented or where otherwise permitted.
We do not use price, supplier cost, gross margin or other internal commercial information as customer analytics data.
4. Cookies and similar technologies
We use cookies and similar technologies to operate our website and, where permitted, to understand how customers interact with it.
Some cookies are necessary for the website and ecommerce functions to operate. Other technologies may be used for analytics, performance measurement or other non-essential purposes.
Where required, non-essential analytics technologies are controlled through Shopify's customer privacy and consent settings.
You may be able to manage your cookie and privacy preferences through the privacy controls provided on our website and through your browser settings.
Restricting certain cookies may affect some website functionality or our ability to understand how the site is being used.
5. Website analytics
We use or may use analytics services to understand how visitors use Le Canvas and to improve the website, product discovery and customer experience.
Google Analytics
We use or may use Google Analytics 4, provided by Google, to measure website usage and performance.
Depending on your privacy settings and applicable requirements, Google Analytics may process information including:
- browser and device information;
- pages and products viewed;
- session activity;
- referral information;
- approximate geographic information;
- cookie or similar identifiers; and
- information about website interactions.
We use this information to understand aggregate website behaviour, identify areas for improvement and measure the effectiveness of our website.
Our implementation is designed so that Google Analytics ecommerce tracking provided through Shopify remains the primary ecommerce event source and our own analytics events supplement rather than unnecessarily duplicate those events.
Google describes GA4 as collecting information including device/browser data, session statistics and approximate geolocation as part of its standard collection.
Microsoft Clarity
We use or may use Microsoft Clarity to better understand how visitors interact with our website.
Clarity provides behavioural analytics tools such as:
- heatmaps;
- interaction analysis;
- navigation patterns; and
- session recordings.
We use this information to identify usability problems, understand customer journeys and improve our website.
We configure Clarity to protect customer-entered information. Input fields and designated sensitive areas are masked so their contents are not intentionally captured in session recordings.
Microsoft states that input-box content is masked in all masking modes and that specifically masked content is not uploaded to Clarity.
We do not intentionally provide Microsoft Clarity with enquiry message content, payment details or other unnecessary sensitive customer information.
6. Search and website interaction analytics
Le Canvas may collect analytics about how customers use our search, filtering and product-discovery tools.
For example, we may record information such as:
- selected size;
- colour;
- style;
- material;
- shape;
- product category;
- price range;
- number of search results;
- whether a search returned no results; and
- general information about the length or presence of a search.
Our analytics implementation is designed not to send the raw text of free-form customer search queries to our analytics services.
We also do not intentionally send enquiry messages, customer conversations or other free-form customer communications to analytics providers.
7. Handmade product enquiries
If you enquire about a Handmade rug or another product, we may collect information you provide so that we can respond to your request.
We may record limited analytics relating to the product or enquiry journey, such as the product identifier or whether an enquiry was initiated.
The content of your enquiry is not intended to be sent to our website analytics services.
8. Sharing personal information
We may disclose personal information to third parties where reasonably necessary to operate our business and provide our services.
These may include:
- Shopify and ecommerce infrastructure providers;
- payment processors;
- banks and financial service providers;
- delivery and logistics providers;
- technology and hosting providers;
- email and communications providers;
- Google, including Google Analytics and related services;
- Microsoft, including Microsoft Clarity;
- professional advisers such as accountants, lawyers and consultants;
- fraud-prevention or risk-management providers;
- government agencies, regulators, courts or law-enforcement authorities where required or authorised by law; and
- other service providers that assist us to operate Le Canvas.
We do not sell customer lists or personal information as part of our ordinary business operations.
9. Overseas processing and disclosure
Some of the third-party technology and service providers we use operate internationally.
As a result, personal information may be processed, stored or accessed outside Australia by or through providers such as Shopify, Google, Microsoft and other service providers.
The countries in which information may be processed or accessed can vary depending on the provider, service and infrastructure used.
Where required by applicable law, we take reasonable steps in relation to overseas handling of personal information and select service providers that maintain appropriate privacy and data-protection practices.
Before publication, Le Canvas should confirm with its privacy adviser whether specific countries or regions should be listed here based on its current service-provider arrangements.
Australian privacy guidance specifically says a privacy policy should state whether personal information is likely to be disclosed overseas and, where practicable, identify the relevant countries.
10. Marketing communications
If you choose to receive marketing communications from us, we may use your contact information to send you information about Le Canvas products, offers, services or news.
You can unsubscribe from marketing emails using the unsubscribe option provided in the communication or by contacting us.
Unsubscribing from marketing does not prevent us from sending transactional or service-related communications relating to an order or enquiry.
11. Data minimisation
We aim to collect and use only the information reasonably necessary for the relevant purpose.
Our analytics systems are designed not to intentionally send information such as:
- complete payment information;
- enquiry message content;
- unnecessary customer names or email addresses;
- supplier costs;
- gross margins;
- private commercial information;
- exact supplier stock quantities; or
- private administrative information
to our website analytics providers.
12. How we hold and protect personal information
Personal information may be stored electronically by Le Canvas and by service providers that operate systems on our behalf.
We take reasonable administrative, technical and organisational measures to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
If you believe your information has been compromised, please contact us using the details below.
13. Data retention
We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:
- fulfil orders;
- provide customer service;
- maintain business and accounting records;
- resolve disputes;
- enforce agreements; and
- comply with legal, tax and regulatory obligations.
Different types of information may be retained for different periods.
When information is no longer reasonably required, we may delete, destroy or de-identify it, subject to applicable legal requirements.
14. Accessing and correcting your personal information
You may contact us to request access to personal information we hold about you or to request that inaccurate, incomplete or outdated personal information be corrected.
We may need to verify your identity before responding to a request.
In some circumstances, applicable law may permit or require us to refuse access or correction. If that occurs, we will provide an explanation where required.
OAIC guidance identifies access, correction and complaint procedures as matters that should be addressed in an APP privacy policy.
15. Deletion and other privacy requests
You may contact us if you wish to request deletion of personal information or make another privacy-related request.
Whether information can be deleted may depend on our legal, accounting, contractual and operational obligations.
Where applicable, you may also manage certain privacy and cookie choices through the controls available on our website.
16. Privacy complaints
If you believe that we have not handled your personal information appropriately, please contact us using the details below.
Please provide enough information for us to understand the issue and investigate it.
We will review privacy complaints and respond within a reasonable period.
If you are not satisfied with our response and applicable privacy legislation provides you with further rights, you may be entitled to contact the Office of the Australian Information Commissioner (OAIC).
Australian privacy guidance specifically expects a privacy policy to explain how an individual can make a complaint and how the organisation will deal with it.
17. Third-party websites and services
Our website may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices of third-party websites that we do not control.
We recommend reviewing the privacy policies of relevant third parties before providing personal information to them.
18. Children
Our products and website are intended for a general audience and are not specifically directed at children.
We do not knowingly seek to collect personal information from children for analytics or marketing purposes.
If you believe a child has provided personal information to us inappropriately, please contact us.
19. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- changes to our business;
- changes to our website or technology;
- new service providers;
- changes to our information-handling practices; or
- legal or regulatory requirements.
The updated version will be published on our website with a revised Last updated date.
OAIC guidance says privacy policies should remain clearly expressed and up to date as information-handling practices change.
20. Contact us
For questions about this Privacy Policy, requests relating to your personal information or privacy complaints, please contact:
LE'CANVAS PTY LTD
ABN 59 123 338 714
Shop 1, 38 Briens Rd
Northmead NSW 2152
Australia
Email: support@lecanvas.com.au