Last updated: October 27, 2026
Who we are
WUB Hobbies Ltd. is a family-run art studio at 434 7 St S – Unit 203, Lethbridge, AB T1J 2G7. This policy covers our website, the studio itself, and anything you tell us by email, phone or text.
Questions about your information go to our privacy contact, the studio owner: [email protected] or 1-604-807-3342.
What we collect, and why
When you buy something
- Your name, email, phone and billing address – to take payment, send your receipt and reach you about the order.
- Your shipping address, if we’re mailing it to you.
- What you bought and how you paid.
Your card number goes straight to Stripe, our payment processor. It never touches our website and we never see it.
When you book a class or a party
- Everything above, plus the names of everyone coming – and their ages, for kids’ classes – so we know who’s in the room.
- Anything you put under “Anything we should know?” (allergies, access needs) – only so we can plan the class around it.
- For kids’ classes, whether you’re staying or dropping off, and an emergency contact – a name and phone number we can call while they’re with us.
- Your signed waiver, including whether you opted out of photos.
When you ask about a private event
- Your name, email and phone, the date, the occasion and how many people – to put together your quote.
When you buy a gift certificate
- Your name and email, and the name and email of the person it’s for – to send the certificate and keep track of the balance.
When you join a waitlist
- Your name and email – to tell you when a seat opens up.
When you make an account
- Your login, saved addresses, orders and bookings. If you save a card, Stripe stores it – we only see the card type, the last four digits and the expiry date.
When you sign up for the newsletter
- Your email address – to send the newsletter, about once a month.
- Whether each email was opened and which links were clicked – so we know what you want more of.
We only send it if you signed up, and every email has an unsubscribe link.
When you visit the website
- Which pages you look at, how long you stay, the site that sent you, your device and browser type, and a rough location (country and city). We use Google Analytics and Independent Analytics for this – they show us how the site is used, not who you are.
- When you place an order, how you found us (Instagram, a Google search, a link in an email) is saved with the order.
- Our security software logs IP addresses to block attacks on the site.
More about cookies in our cookie policy.
When you contact us
- What you send us and our replies – so we can answer you and look back at the conversation later.
When you review us
- Reviews you leave on Google or social media are public on those sites, under their privacy policies. We may reply to them, and with your OK, share them on our website.
Photos and video in the studio
- We sometimes take photos and video in class to share on our website and social media.
- The waiver you sign includes your OK for this. Tick the opt-out box on the waiver and we won’t post you – it shows on our class list so the person holding the camera knows.
- For kids, the parent or guardian who books decides.
- Changed your mind later? Email us and we’ll take the photo down from our website and our own social media accounts. We can’t pull back anything already printed, or posts other people have shared.
Kids
Kids come to our classes, but bookings, accounts and the newsletter are for adults. The only information we have about a child is what their parent or guardian gives us when they book: name, age, an emergency contact, and anything they tell us we should know.
Your consent
- When you give us your information for one of the reasons above, you’re agreeing that we can use it for that reason. If we ever want to use it for something new, we’ll ask first.
- You can take your consent back at any time. Some things can’t happen without the information, though – we can’t book a seat without a name.
Who we share it with
We don’t sell or rent your information to anyone. We share only what’s needed with the services that run parts of the business:
- Stripe – takes card, Apple Pay, Google Pay and Link payments. Canada and the United States.
- Amazon Web Services (Amazon SES) – delivers our emails: receipts, booking confirmations and the newsletter. United States.
- Vultr – hosts the website and its database, managed through xCloud. Toronto, Canada.
- Cloudflare – protects the website from attacks and bots. Canada, the United States and elsewhere.
- Google – Google Analytics measures how the site is used, and the card form at checkout loads its font from Google Fonts. United States.
- Canada Post or another carrier – your name, address and phone, if we’re shipping to you. Canada.
- Our accountant – order and payment records, for our books and taxes. Canada.
Some of these services store or process information in the United States, where courts and government agencies can ask for it under United States law. To find out more about how they handle it, ask our privacy contact (above).
We may also share information when we believe in good faith that we need to:
- meet a legal requirement, or answer a valid request from a court or government agency
- protect the rights or property of WUB Hobbies
- prevent or look into wrongdoing involving the site or the studio
- keep our customers, our team or the public safe
If the studio is ever sold, your information would go to the new owner. We’d tell you before it became covered by a different privacy policy.
Links to other websites
Our site links to other sites – Amazon in our gear list, and our Instagram, YouTube and Twitch pages. Once you click through, their privacy policies apply, not ours. We don’t get any of your details from them, and we’re not responsible for what they do with yours.
How long we keep it
- Orders and payments – six years after the end of the tax year they’re in, because the Canada Revenue Agency requires it.
- Bookings and signed waivers – as long as a legal claim about that class could still be made.
- Your account – until you ask us to close it. Your past orders are still kept for the six years above.
- The newsletter – until you unsubscribe. After that we keep a note that you unsubscribed, so you’re never added back by mistake.
- Everything else – only as long as we need it for the reason we collected it.
Seeing, fixing or deleting your information
- Email [email protected] to ask what we have about you, fix something that’s wrong, or close your account. We may ask you to confirm it’s you first.
- We’ll reply within 45 days, as Alberta’s privacy law (PIPA) requires.
- You can change your addresses and details yourself under My account, and unsubscribe from any newsletter email.
- If you’re not happy with how we’ve handled your information, you can contact the Office of the Information and Privacy Commissioner of Alberta.
Keeping it safe
- The site runs over a secure connection (HTTPS) and has security software watching for attacks.
- Only the people who run the studio can see customer information.
- No website or email is 100% secure, so we can’t promise nothing will ever go wrong. If a breach ever puts you at real risk of significant harm, we’ll tell you and the Privacy Commissioner, as Alberta law requires.
Changes to this policy
When we change this policy, we update the date at the top. If a change affects how we use information you’ve already given us, we’ll email you about it.
