Privacy policy

This policy explains what personal information we collect when you visit or buy from our website, why we collect it, who we share it with, and the choices you have.

Who we are

Collective Canvas is a trading name of Overland Group UK Limited, a company registered in England and Wales (company number 14761514). Our registered office is 124 City Road, London EC1V 2NX.

We're the controller of the personal information described here. That means we decide how it's used, and we're responsible for looking after it.

For any privacy question or request, email us at info@collectivecanvas.com, or write to Collective Canvas, 22a Hanbury Street, London E1 6QR.

What we collect

When you place an order. Your name, email address, phone number, billing and delivery addresses, and what you bought. Payments are handled by our payment providers, so we never see or store your full card number.

When you browse. Information about your device and visit, such as your browser, IP address, approximate location, the pages and products you look at, and how you found us. This is collected with cookies and similar technologies (see Cookies below).

When you get in touch. Whatever you send us, such as your email address and the details of your question, return or exchange.

When you sign up to our emails. Your email address and, if you give them, your name and preferences.

When you leave a review. Your name, rating, review and any photos you add.

How we use it

The law asks us to have a lawful basis for each use. Here's what we use your information for, and the basis for each.

  • Processing and delivering your order, handling returns and exchanges, and sending order and delivery updates. Basis: to perform our contract with you.
  • Answering your questions and looking after you as a customer. Basis: to perform our contract with you, or our legitimate interest in helping our customers.
  • Sending marketing emails, including our newsletter. Basis: your consent. Every email has an unsubscribe link.
  • Asking for and publishing reviews. Basis: our legitimate interest in sharing honest customer feedback. We only publish reviews you choose to send us.
  • Running, securing and improving our website, including preventing fraud. Basis: our legitimate interests.
  • Measuring and showing our advertising, on platforms such as Meta (Facebook and Instagram) and Google. Basis: your consent, given through our cookie banner.
  • Meeting our legal obligations, such as keeping tax and accounting records. Basis: legal obligation.

Who we share it with

We don't sell your personal information. We share it only with the companies that help us run the business, and only what they need.

  • Shopify, which runs our online store and checkout. See Shopify's privacy policy.
  • Payment providers, to take your payment securely.
  • Royal Mail, to deliver your order.
  • Klaviyo, which sends our emails.
  • Judge.me, which collects and shows our reviews.
  • Meta and Google, for advertising and analytics, if you've agreed to those cookies.
  • Our professional advisers, such as our accountants, when needed.

We may also share information if the law requires it, or to protect our rights.

Where it's stored

Some of the companies we use store information outside the UK, including in Canada and the United States. When that happens, the transfer is protected by the safeguards UK data protection law requires, such as a UK adequacy decision or the UK's approved contract terms.

How long we keep it

We keep order records for six years after the end of the financial year they relate to, because UK tax law requires it. We keep your email sign-up until you unsubscribe, and customer service emails for as long as we need them to help you. Reviews stay published until you ask us to remove them.

Your rights

Under UK data protection law, you have the right to:

  • ask for a copy of the personal information we hold about you
  • ask us to correct anything that's wrong or incomplete
  • ask us to delete your information
  • ask us to limit how we use it
  • object to us using it, including for marketing
  • ask for your information in a format you can take elsewhere
  • withdraw your consent at any time, where we rely on it

Some of these rights only apply in certain situations. To use any of them, email us at info@collectivecanvas.com. We'll reply within one month, and there's normally no charge.

Automated decisions

We don't make decisions about you based only on automated processing that have a legal or similarly significant effect. Shopify runs some automated checks to help prevent fraud at checkout, such as briefly blocking card or IP details linked to repeated failed payments.

Cookies

Cookies are small files saved on your device when you visit a website. We use three kinds.

  • Essential cookies make the site work, such as remembering what's in your cart and keeping checkout secure. These are always on.
  • Analytics cookies help us understand how the site is used, so we can improve it.
  • Marketing cookies help us measure our ads and show them to people who might like what we make, including through the Meta Pixel and Google.

We only use analytics and marketing cookies if you agree to them in our cookie banner. You can change your mind at any time by clearing cookies in your browser, which brings the banner back. Shopify lists the cookies its stores use here.

Changes to this policy

We may update this policy from time to time. The date below shows when it last changed.

Complaints

If you're unhappy with how we've handled your information, please tell us first at info@collectivecanvas.com and we'll do our best to put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

Last updated October 2026.