Last updated: Sep 1, 2026

Rodrigo A. Eng Castillo operates this website and online store under the name Rodrigo Eng Photos. In this Privacy Policy, “we,” “us,” and “our” refer to Rodrigo A. Eng Castillo as the individual owner and operator of the store. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, purchase a print, subscribe to our newsletter, contact us, or otherwise interact with our services.

Our online store is hosted by Shopify. Shopify processes certain personal information to provide the website, checkout, payment, security, analytics, and related ecommerce services.

Personal information we collect

Depending on how you interact with the website, we may collect the following information:

Contact and delivery information

This may include:

• Your name

• Email address

• Telephone number, if provided

• Billing address

• Shipping address

Order and transaction information

This may include:

• The artwork and size ordered

• Order number

• Purchase amount and currency

• Payment and refund status

• Shipping and tracking information

• Communications regarding an order

• Cancellation, replacement, damage, loss, or refund information

• Information associated with the Certificate of Authenticity and limited-edition record

Payment information

Payments are accepted online and processed by Shopify and the payment provider selected at checkout.

We do not directly store complete payment-card numbers or card security codes. Payment providers may collect and process payment details in accordance with their own privacy policies and security requirements.

Additional online payment providers may be offered in the future. The payment provider selected by the customer will process the information necessary to complete the transaction.

Newsletter and marketing information

If you subscribe to our newsletter or choose to receive marketing communications, we may collect:

• Your email address

• Your marketing-consent status

• Information about when marketing emails are opened

• Information about links clicked within marketing emails

Our newsletter uses a single opt-in process. Marketing checkboxes are not preselected. SMS marketing is not currently offered.

You may unsubscribe at any time by using the unsubscribe link included in our marketing emails.

Website, device, and usage information

When you use the website, Shopify, Google Analytics, and other service providers may automatically collect information such as:

• IP address

• Browser and device type

• Operating system

• Cookie or similar technology identifiers

• Pages viewed

• Website interactions

• Referring website or source

• Approximate location derived from an IP address

• Date and time of visits

Communications and privacy requests

If you contact us, we may collect your contact information, the content of your message, supporting documents or photographs, and any additional information needed to respond to your request.

Customer accounts

Customer-account sign-in links are not displayed on the storefront, and customers are not required to create or sign in to an account before placing an order.

Shopify will still create and maintain the customer and order records required to process purchases, issue notifications, prevent fraud, provide customer service, and meet legal and accounting obligations.

Self-service returns and cancellations and store credit are not currently enabled.

How we collect personal information

We may collect personal information:

• Directly from you when you place an order, subscribe to the newsletter, contact us, or submit a privacy request

• Automatically through the website, cookies, analytics technologies, and Shopify services

• From payment processors, shipping carriers, and other providers involved in completing an order

• From service providers that help us operate, secure, analyze, and improve the website

How we use personal information

We may use personal information to:

• Operate and maintain the website and online store

• Process payments and complete orders

• Produce and fulfill limited-edition prints

• Prepare the corresponding Certificate of Authenticity

• Arrange packaging, shipping, delivery, and tracking

• Send order, payment, shipping, and service notifications

• Respond to questions and customer-service requests

• Process approved cancellations, replacements, and refunds

• Investigate damaged, defective, incorrect, delayed, or lost shipments

• Maintain limited-edition, provenance, and order records

• Send marketing communications when consent has been provided

• Measure newsletter engagement

• Understand website traffic and improve the website

• Maintain security and prevent fraud, misuse, and unauthorized transactions

• Comply with tax, accounting, legal, regulatory, and audit requirements

• Establish, exercise, or defend legal claims

Transactional order and shipping notifications are sent to the email address entered at checkout. Marketing consent is separate from transactional communications.

How we disclose personal information

We disclose personal information only as reasonably necessary to operate the store, provide the requested services, meet legal obligations, or protect our legitimate interests.

Shopify

Shopify hosts the online store and provides checkout, payment, security, analytics, customer-record, and ecommerce infrastructure.

Shopify may collect and process information about your use of the store in accordance with its own privacy practices. Information processed by Shopify may be stored or handled in countries other than the country where you live.

Payment providers

Payment information is disclosed to Shopify and the payment provider selected at checkout to authorize, process, and administer the transaction, refund, or payment dispute.

Print and fulfillment provider

We may provide our print and fulfillment provider with the information required to produce and deliver an order, including:

• Customer name

• Shipping address

• Telephone number, if provided

• Order number

• Artwork and size ordered

• Production, packaging, and shipping instructions

The print and fulfillment provider may change without affecting the purposes described in this policy.

Shipping and delivery providers

We may disclose the information necessary to ship, track, and deliver an order to postal services, couriers, customs authorities, and other delivery providers.

Mailchimp

We use Mailchimp to manage newsletter subscriptions and send marketing emails.

Mailchimp may process email addresses, consent records, email-delivery information, email opens, and link clicks. Google Analytics tracking within Mailchimp is not enabled.

Google Analytics

We use Google Analytics to understand how visitors find and use the website. Google Analytics may collect device, browser, usage, referral, approximate-location, and cookie-related information.

Analytics cookies are controlled through the website’s cookie-consent tools where consent is required.

Shopify Network Intelligence

Shopify Network Intelligence is enabled. This service allows Shopify to use information from interactions with Shopify services to help provide functions such as security, fraud prevention, analytics, personalization, and advertising.

Certain uses of Shopify services and technologies may be considered “sharing,” “targeted advertising,” or similar activities under some United States privacy laws.

Professional and legal disclosures

We may disclose information to accountants, legal advisers, insurers, auditors, regulators, government authorities, or other professional advisers when reasonably necessary.

We may also disclose information when required by law or when necessary to protect our rights, customers, business, or the security and integrity of the website.

If the business or its assets are reorganized, sold, transferred, or combined with another organization, information may be disclosed as part of that transaction, subject to applicable law.

Cookies and similar technologies

We and our service providers use cookies and similar technologies to operate and secure the website, remember preferences, understand how visitors use the website, improve the customer experience, and support analytics and marketing activities.

Some cookies are necessary for the website, shopping cart, and checkout to function. Where required, optional cookies are used according to the choices you make through the website’s cookie-consent tools.

You may review or change your choices through the Cookie Preferences link on the website. You may also control cookies through your browser settings, although disabling certain cookies may affect how some website features operate.

For information about choices relating to data sharing and targeted advertising, see the section below.

Data sharing and targeted advertising choices

We do not sell personal information in exchange for money.

However, certain uses of cookies, Shopify Network Intelligence, or related services may be treated as sharing personal information or targeted advertising under applicable United States privacy laws.

Visitors in eligible United States jurisdictions may use the Data Sharing Opt-Out page linked in the website footer. Where required by applicable law and supported by our systems, we will also process recognized browser-based opt-out preference signals.

Cookie preferences and marketing-email preferences are managed separately. Unsubscribing from marketing email does not automatically change cookie preferences, and declining marketing cookies does not unsubscribe an email address from the newsletter.

Marketing communications

We send marketing emails only when a person has chosen to subscribe or has otherwise provided valid consent.

Our marketing opt-in checkbox is not preselected. We do not currently use SMS marketing.

Marketing emails may contain technologies that tell us whether an email was delivered or opened and whether a link was clicked. We use this information to understand engagement and improve future communications.

You may withdraw marketing consent at any time by selecting the unsubscribe link in an email. Unsubscribing from marketing does not prevent us from sending transactional messages concerning an order or customer-service request.

Retention of personal information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including order fulfillment, customer service, accounting, tax, fraud prevention, dispute resolution, audit, and legal requirements.

Order records and limited-edition provenance and Certificate of Authenticity records may be retained for an extended period when reasonably necessary to protect the integrity of an edition, authenticate a print, maintain an accurate ownership or production record, or respond to a future audit or authenticity inquiry.

When personal information is no longer required, we will delete, anonymize, or securely dispose of it, subject to applicable legal and operational requirements.

Security

The website and online store are hosted on Shopify. Shopify maintains technical and organizational security safeguards for its platform, including platform updates, monitoring, maintenance, and security improvements.

Rodrigo A. Eng Castillo does not directly operate or maintain Shopify’s hosting, checkout, or payment-processing infrastructure. We take reasonable precautions within the areas under our control when accessing and using Shopify and the other services identified in this policy.

No website, electronic transmission, or storage system can be guaranteed to be completely secure. Please contact us if you believe your personal information or an order may have been compromised.

International processing

Some service providers, including Shopify, Mailchimp, Google, payment processors, and other technology providers, may process or store personal information outside Canada.

Information processed in another country may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies, or government authorities in accordance with local law.

Your privacy rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Request access to personal information we hold about you

• Request correction of inaccurate or incomplete information

• Request deletion of personal information

• Withdraw consent where processing is based on consent

• Object to or restrict certain processing

• Request information about how personal information has been used or disclosed

• Opt out of certain data sharing or targeted advertising

• Submit a complaint or appeal a privacy decision where applicable

We may need to verify your identity before completing a request. We will use information provided for verification only to evaluate and respond to the request.

Withdrawing consent or requesting deletion may not require us to remove information that must be retained for legal, accounting, fraud-prevention, contractual, limited-edition provenance, or other permitted purposes.

Children’s privacy

The website and online store are intended for a general audience and are not directed to individuals under 16. We do not knowingly collect personal information from individuals under 16.

If we learn that personal information from an individual under 16 has been collected, we will take reasonable steps to delete it, except where its retention is required or permitted by law. A parent or legal guardian may contact the Privacy Officer if they believe a person under 16 has provided personal information to us.

Third-party websites and social platforms

The website may contain links to third-party websites or social-media platforms.

Following one of these links may allow the third party to collect information independently. Your interaction with an external website or social platform is governed by that organization’s privacy policy and terms. We are not responsible for the privacy, security, or content practices of third-party services.

Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our services, providers, business practices, technology, or legal requirements.

The revised policy will be posted on the website with an updated effective date. Where required by law, we will provide additional notice or obtain consent for material changes.

Contact the Privacy Officer

Questions, requests, or complaints concerning privacy may be directed to:

Privacy Officer for the Rodrigo Eng Photos online store,
Rodrigo A. Eng Castillo
183 Maitland St.
Kitchener, Ontario N2R 0C3
Canada
Email: contact@rodrigoeng.art

Order, delivery, cancellation, replacement, and refund questions should be sent to orders@rodrigoeng.art.