top of page

Privacy Policy

Privacy Policy — Downriver and Uphill Images

Last updated: July 6, 2026

Downriver and Uphill Images (“Downriver and Uphill,” “we,” “us,” “our”) operates https://www.downriveranduphill.ca/ (the “Site”). This Privacy Policy explains how we collect, use, disclose, and protect personal information, and describes rights available under applicable privacy laws, including Canadian privacy laws (PIPEDA and applicable provincial laws), GDPR, CCPA/CPRA, and CalOPPA.

This policy applies to information collected through the Site and related communications (e.g., email).

1) Contact

Downriver and Uphill Images
Email: downriveranduphill@gmail.com

2) Information we collect

We collect information in the following ways:

A. Information you provide

  • Identifiers & contact details: name, email address, and any information you include in messages or form submissions.

  • Order and transaction details (if you purchase): items purchased, billing/shipping details, and transaction records.
    Payment card details are processed by our payment providers; we do not store full card numbers.

B. Information collected automatically

  • Online identifiers & device data: IP address, device type, browser type, operating system, approximate location (derived from IP), and language.

  • Usage data: pages viewed, links clicked, time spent, referring/exit pages, and error logs.

  • Cookies and similar technologies: used for essential site functions, security, analytics, and (if enabled) marketing.

C. Information from Wix and integrated services Our Site is hosted on Wix, and Wix and connected apps may process information to provide hosting, forms, payments, analytics, and other site features.

3) How we use your information

We use personal information to:

  • Provide, operate, and maintain the Site.

  • Respond to inquiries and provide customer support.

  • Process purchases, deliver products/services, and send transactional communications (e.g., confirmations).

  • Improve the Site, understand performance, and develop new features.

  • Protect against fraud, abuse, and security incidents.

  • Comply with legal obligations and enforce our rights.

4) Legal bases for processing (GDPR)

Where the GDPR applies, we process personal data under one or more of these legal bases:

  • Consent (e.g., optional cookies/marketing where required).

  • Contract (e.g., fulfilling an order or responding to a service request).

  • Legitimate interests (e.g., securing and improving the Site, preventing fraud), balanced against your rights.

  • Legal obligation (e.g., recordkeeping and compliance).

5) Cookies, analytics, and “Do Not Track” (CalOPPA)

We use cookies and similar technologies for functionality, security, and (if enabled) analytics/marketing.

Do Not Track (DNT): Some browsers offer a “Do Not Track” signal. Because there is no consistent industry standard for responding to DNT signals, we do not currently respond to them in a uniform way.

You can control cookies through:

  • Any cookie banner/preferences tool available on the Site (if enabled), and/or

  • Your browser settings (which may affect Site functionality).

6) Sharing and disclosure

We may disclose personal information:

  • To Wix (our website platform provider) and its infrastructure providers.

  • To service providers that help us operate (e.g., payment processing, email delivery, analytics, security), under appropriate safeguards.

  • For legal and safety reasons (e.g., to comply with law, respond to lawful requests, protect rights, prevent fraud, or address security issues).

  • In a business transfer (e.g., merger, acquisition, or asset sale), where permitted by law.

We do not sell personal information.

7) International transfers

Your information may be processed and stored outside of Canada (including in the United States and other jurisdictions) by Wix and service providers. Laws in those jurisdictions may differ from those in your province/territory.

8) Data retention

We retain personal information only as long as necessary for the purposes described in this policy, including to meet legal, accounting, tax, and reporting requirements.

9) Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure.

10) Your privacy rights (Canada, GDPR, and U.S. state laws)

A) Canada (PIPEDA and applicable provincial laws)

You may have the right to:

  • Request access to your personal information.

  • Request correction of inaccurate information.

  • Withdraw consent (subject to legal/contractual restrictions). To make a request, contact downriveranduphill@gmail.com.

B) GDPR (EEA/UK visitors)

Subject to applicable conditions and exceptions, you may have the right to:

  • Access your personal data.

  • Rectify inaccurate data.

  • Erase data (“right to be forgotten”).

  • Restrict processing.

  • Object to processing (including certain direct marketing).

  • Data portability.

  • Withdraw consent at any time (where processing is based on consent).

  • Lodge a complaint with your local supervisory authority.

C) CCPA/CPRA (California residents)

If you are a California resident, you may have rights to:

  • Know what personal information we collect, use, disclose, and share.

  • Request deletion of personal information (subject to exceptions).

  • Request correction of inaccurate personal information.

  • Opt out of the “sale” or “sharing” of personal information (as those terms are defined by California law).

  • Limit the use and disclosure of sensitive personal information (if applicable).

  • Non-discrimination for exercising your rights.

Sale/Sharing: We do not sell personal information. We also do not knowingly share personal information for cross-context behavioral advertising in exchange for value. If we enable advertising/analytics tools that may be considered “sharing” under CPRA, we will provide an appropriate opt-out mechanism.

How to submit a request: Email downriveranduphill@gmail.com with the subject line “Privacy Rights Request”. We may need to verify your identity before fulfilling your request.

11) Categories of personal information (CCPA/CPRA notice)

Depending on how you use the Site, we may collect the following categories:

  • Identifiers (e.g., name, email, IP address).

  • Customer records (e.g., billing/shipping details for purchases).

  • Commercial information (e.g., products purchased).

  • Internet/electronic activity (e.g., browsing interactions on the Site).

  • Approximate geolocation (derived from IP). We use these categories for the purposes described in Section 3.

12) Children’s privacy

The Site is not intended for children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us to request deletion.

13) Third-party links

The Site may link to third-party websites or services (e.g., social platforms). Their privacy practices are governed by their own policies.

14) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date reflects the most recent revision.

15) How to contact us

For questions or requests, contact: downriveranduphill@gmail.com

bottom of page