Privacy Policy
NOOD Life Drawing respects the trust that people place in us, in the studio and on this website. This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have.
Who we are
NOOD Life Drawing (“NOOD”, “we”, “us”) runs life-drawing sessions, premium events and a life-model coaching programme at two Greater Vancouver studios:
- NOOD at PoMoArts — 2425 St Johns Street, Port Moody, British Columbia
- NOOD at The Vessel — Suite 110, 49 Dunlevy Avenue, Vancouver, British Columbia
We are responsible for the personal information described in this policy. If you have a question about privacy, or want to exercise any of the rights set out below, send us a message through our contact form.
What this policy covers
This policy covers personal information we collect through this website and in the course of running sessions, events and coaching. We handle personal information in accordance with British Columbia’s Personal Information Protection Act (PIPA) and, where it applies, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). Commercial email is governed by Canada’s Anti-Spam Legislation (CASL).
Information we collect
When you book or pay for a session
Booking a session or event asks for your name, email address and phone number, together with the session, date and time you have chosen and any note you add to the booking. We use this to hold your place, to let you know if something changes, and to run the session.
Payments are processed by Square. Your card details are entered into a payment field hosted by Square and are sent directly to Square — NOOD never receives or stores your full card number. We receive a confirmation of the payment, the amount, and the last digits and card type needed to identify the transaction. Square’s handling of your information is described in the Square privacy notice.
When you contact us
Our contact form collects your name, email address and your message. If you write to us about modelling, the coaching programme, studio rental or an accessibility need, we keep what you send us so that we can answer properly and follow up. Please send only what is necessary — there is no need to include sensitive personal information in a first enquiry.
When you subscribe to the newsletter
Subscribing collects your email address. We also record the wording of the consent you agreed to, the date and time, and the IP address the request came from. We keep that record because CASL requires us to be able to show that you asked to hear from us.
Information collected automatically
Like most websites, our web server records the IP address you connect from, your browser and device type, the pages you request, and the date and time. This is used to keep the site running, to diagnose faults and to detect abuse such as automated form spam.
Cookies
Cookies are small files a website stores in your browser. We use them for the following purposes:
- Necessary. Keeping a booking or basket intact as you move between pages, remembering display preferences, and letting site administrators stay signed in.
- Security and anti-spam. Detecting automated submissions to our forms.
- Store attribution. Our store software sets cookies beginning
sbjs_that record how you arrived at the site (for example, from a search engine or a link) so that orders can be attributed to a source.
We do not currently use advertising cookies, and we do not run third-party analytics or social media tracking pixels on this site. You can block or delete cookies in your browser settings; if you block necessary cookies, booking and payment may not work.
Third-party content embedded in our pages
Some pages load content from other companies. When that happens, your browser contacts them directly and they receive your IP address and basic browser information, whether or not you interact with the content.
- Google Maps — the studio maps on our Locations page.
- Google Fonts — the typefaces used across the site.
- Square — the payment field on our booking pages.
- jsDelivr — a content delivery network that serves some of the site’s code.
Their practices are described in the Google privacy policy, the Square privacy notice and the jsDelivr privacy policy.
How we use your information
- To take and confirm bookings, and to process payments and refunds.
- To contact you about a session you have booked — a change of time, a cancellation, or studio access details.
- To answer enquiries about sessions, modelling, coaching, rentals and accessibility.
- To send our newsletter, where you have asked us to.
- To run the studio safely and to uphold our model-care and conduct standards.
- To keep the website secure and working, and to prevent fraud and spam.
- To meet our legal, accounting and tax obligations.
We do not use your information to make automated decisions about you, and we do not profile you for advertising.
Email and your consent
We send two kinds of email. Transactional email — booking confirmations, receipts, and notices about a session you have booked — is part of providing the service you asked for. Newsletter email is only sent to people who have expressly asked for it.
Every newsletter includes an unsubscribe link, and you can also unsubscribe at any time by sending us a message through our contact form. We act on unsubscribe requests promptly and in any case within 10 business days, as CASL requires.
Who we share your information with
We do not sell your personal information, and we do not rent or trade our mailing list. We share information only with service providers who need it to do work on our behalf, and only for that purpose:
- Our web hosting provider, which stores the site and its database.
- Square, which processes payments.
- Our email delivery provider, which sends confirmations and newsletters.
- Google and jsDelivr, in the limited way described above, when your browser loads embedded content.
We may also disclose information if we are required to by law, or where it is necessary to protect the safety of people in our studios.
Where your information is stored
Booking records, form submissions and newsletter subscriptions are stored in our website’s own database. Some of our service providers, including Square and Google, are based in the United States or operate infrastructure there, so your information may be stored or processed outside Canada. While it is in another country it may be accessible to the courts and law-enforcement or national-security authorities of that country. We choose providers that commit to appropriate protection for the information they handle.
How long we keep your information
- Booking and payment records — for as long as needed to provide the service and then to meet accounting and tax obligations, generally six years.
- Newsletter subscriptions — until you unsubscribe. We keep a record of the unsubscribe itself so that we do not email you again.
- Contact form messages — for as long as needed to deal with your enquiry and keep a reasonable record of it.
- Server logs — for a short period, for security and troubleshooting.
When information is no longer needed we delete it or render it anonymous.
Your rights and choices
Under BC PIPA and PIPEDA you may:
- Ask what personal information we hold about you and how it has been used.
- Ask us to correct information that is wrong or incomplete.
- Withdraw your consent to a use of your information, subject to legal or contractual limits — for example, we still need to keep a record of a payment we have processed.
- Ask us to delete information we no longer have a reason to keep.
Send us a message through our contact form. We may need to confirm who you are before we act, so that we do not disclose someone else’s information. We will respond within 30 days, or tell you if we need longer and why.
If you are not satisfied with our response, you can complain to the Office of the Information and Privacy Commissioner for British Columbia or to the Office of the Privacy Commissioner of Canada.
Security
The site is served over an encrypted connection (HTTPS), payment details go directly to Square rather than through our systems, and access to the website’s administration and booking records is limited to people who need it. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the information we hold, and we will tell you and the relevant regulator if a breach creates a real risk of significant harm.
Age
Our sessions and this website are intended for adults. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
Comments on journal posts
If commenting is open on a journal post and you leave a comment, we collect what you enter in the comment form along with your IP address and browser user agent, which helps us detect spam. Approved comments and the name you give are visible publicly.
Changes to this policy
If we change how we handle personal information we will update this page and change the date at the top. If a change is significant we will say so clearly, and where the law requires it we will ask for your consent again.
How to contact us
Privacy questions, access requests and complaints: use our contact form. You can also speak to us in person at either studio.