Privacy
Short version. We collect only what we need to sell and ship your print, plus anonymous information about how the site is used. Payments are handled by Square; we never see or store your card number. We don't sell your information.
What we collect, and why
- Your order. When you check out, Square collects your name, email, phone number, shipping address and payment details, and shares the order with us so we can print, pack and ship it and contact you about it. Card details stay with Square.
- Where it's going. The province you choose sets the shipping price. If you also type a postal code, we keep its first three characters with your order to understand where prints are shipped.
- How you found us. If you arrived from one of our links or campaigns, the campaign name is saved with your order.
- How the site is used. Pages viewed, prints looked at, buttons pressed, the device and browser type, roughly where you are (city or region), and how you arrived. We use this to make ordering easier.
- What you send us. If you email us, for example with a Special Request for a custom size or frame, we use what you send only to reply and fill your request.
Tools we use
| Tool | What it does | Where data goes |
|---|---|---|
| Square | Checkout, payment, order and receipt emails | Square (Canada and the United States) |
| Canada Post and our shipping-label service | Prints the label and delivers your parcel. Receives your name, delivery address, phone number and email | Canada Post; label service in Canada or the United States |
| PostHog | Shows how pages are used: anonymous session recordings, click heatmaps and error reports. Typed form fields are hidden and not recorded | PostHog, United States |
| Google Analytics (Google LLC) | Counts page views and basic events, such as which pages are visited and how visitors arrive, so we can see how the shop is used. Sets the cookies _ga and _ga_2LZHPZ6Y3Q. Data is kept for 14 months. Turned off by Privacy choices or Global Privacy Control | Google, United States |
| Google (Google Ads tag) | Measures whether a visit that came from a Google ad led to a purchase, so we can judge whether the ads are worth running | Google, United States |
| Cloudflare | Hosts the website and keeps it secure | Cloudflare |
PostHog receives your IP address, which it uses to estimate your city or region, and it stores a visitor ID in a cookie and in your browser's local storage so it can recognise a returning visitor without knowing who you are. PostHog processes this data on servers in the United States.
Square's checkout page is run by Square, not by us, and is covered by Square's own privacy policy.
Cookies and browser storage
PostHog stores a small identifier in your browser so a returning visitor can be recognised without knowing who you are. Google Analytics sets two cookies, _ga and _ga_2LZHPZ6Y3Q, to tell visits apart. The Google Ads tag may set its own advertising cookies. Square sets its own cookies on its checkout page. The site also remembers simple things on your own device, such as the photo shown last on the home page and the prints you recently looked at. These stay in your browser and are not sent to us. If you turn analytics off, we store a setting (lander_analytics) in your browser to remember that choice. If PostHog had already started during that visit, it also saves its own opt-out flag.
Your choices
Checking your analytics setting…
Analytics is on by default. Turning it off here stops PostHog, Google Analytics and the Google Ads tag on this browser, and it stays off on later visits until you allow it again. If your browser sends a Global Privacy Control signal, we treat that as an analytics-off request automatically.
You can also block or clear cookies and site storage for landerphotos.com in your browser settings; the shop still works. You don't have to enter a postal code: without one, shipping is charged from our standard table by province.
Where data is stored and for how long
Some of these services store data outside Canada, mainly in the United States, where it may be accessible under local law. Order records are kept as long as required for tax and accounting, generally six years in Canada. PostHog session recordings are kept for 30 days and other PostHog analytics data for up to one year. Google Analytics data is kept for 14 months.
Asking about your information
To ask what we hold about you, or to have it corrected or deleted where we're not required to keep it, email mlander@s12.ca. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Changes
We'll update this page if the tools we use change. Last updated: October 16, 2026.