Privacy Policy

Last updated 29 August 2026

Son Gordon Photography is a one-person studio in Vancouver. This policy describes what personal information I collect when you buy my products or subscribe to my newsletter, why I collect it, who else sees it, and how to get a copy of it or have it corrected.

Who I Am

I am the person accountable for personal information at Son Gordon Photography, and the only person who handles it. There is no team, no support desk and no third party answering on my behalf.

Son Gordon Photography is the trading name of Jason Gordon LaRiviere.

Son Gordon Photography
PO Box 93578 RPO Nelson Park
Vancouver, BC V6E 4L7
Canada

desk@songordon.ca

What I Collect

When you place an order, I collect:

your name and email address
your shipping address
your phone number, only if you choose to give it—the field is optional, and it is used to help resolve delivery problems
what you ordered and what you paid
a tracking number and carrier, once the parcel ships

If you subscribe to Bloop, my newsletter, I collect the email address you give the sign-up form.

Like any website, this one keeps standard server logs—IP address, browser, pages requested and when. They exist so I can fix things that break and notice abuse, and they are not used to build a profile of you.

What I Never See

Your card details. Payment happens on Stripe’s own checkout page, not on mine. I am told that a payment succeeded and given a reference number for it; the card number, expiry date and security code never reach this site and are never stored here.

Why I Collect It

Only to run the shop:

to take payment for your order and to pack and ship it
to send you an order confirmation and a note when it ships—these are part of the purchase, not marketing, and they are sent whether or not you subscribe to anything
to answer you if you write to me
to keep the business and tax records I am required by law to keep
to record which numbered print went to whom, so a limited edition can be shown to be genuine years later—see The Edition Ledger below
to ask you for feedback and review of my products and service—see Testimonials below
to send you Bloop, if you asked for it

I do not use it for anything else.

Who Else Sees It

I do not sell, rent or trade your personal information. There are no advertising networks on this site, and no analytics—nothing here is watching what you look at.

It is shared only with the services I need to actually run the shop, and each of them receives only the part it needs:

Stripe processes payments, and sends payment-related email
The shipping carrier receives your name and address, because someone has to bring you the parcel
Scaleway sends your order-related email
MailerLite stores newsletter subscriptions and sends Bloop; it never receives order information
OVHcloud hosts this site and its database
Apple is my email provider via iCloud Mail, and stores a mirrored copy of the edition ledger described below via iCloud Drive.

Testimonial content is opt-in, and only published with consent. It is visible to anyone reading the website. See Testimonials below.

I may also disclose information where the law requires it—a court order, for example. If that ever happens I will tell you, unless I am legally prohibited from doing so.

Where It Is Stored

This site and its database are hosted in Québec.

Most of the other services above are not in Canada. Stripe processes payments in the United States, MailerLite stores newsletter subscriptions in the European Union, Scaleway delivers order email from the European Union, and my email and the edition ledger are present on Apple’s servers outside Canada. Information held in another country is subject to that country’s laws and may be accessible to its courts and government authorities. You should know that before you buy.

Cookies

This site sets two cookies, and neither one tracks you:

a session cookie, set when you arrive. It holds an identifier for your shopping cart, the postal code you type in for a shipping estimate, and any discount code you apply—so that all three survive as you move between pages. It is encrypted, and it holds no name, email address or street address.
a sign-in cookie for the shop’s admin area, which only I can use

There are no advertising or analytics cookies, and nothing follows you to other sites. The newsletter sign-up form in the footer is loaded from MailerLite and may set cookies of its own, which are governed by MailerLite’s privacy policy.

Subscribing to Bloop is a separate decision from buying something. Ordering a print does not subscribe you, and I will not add you to the list because you bought something. Every issue has an unsubscribe link, and it works immediately. You can also just email me and I will remove your subscription.

Testimonials

About two weeks after you order, I may email you to ask for feeback on my products and the overall service—a few short questions, and room to say whatever you like. Answering that email is entirely optional. Ignoring it costs you nothing, and changes nothing about your order. I will not resend ignored requests.

One of the questions in the email will allow you to opt-in to sharing all or part of your feedback. Replying to the email is not by itself permission to share your feedback as testimonial content publicly.

If you opt-in to sharing all or part of your feeback as testimonial content, that content only ever appears on this website, and nowhere else. The content is attributed to only your first name and last initial—Jane D.—together with your words, either in full or shortened for length. No other details about your order are ever part of any testimonial content.

You can change your mind at any time. Email me and I will unpublish your testimony; there is no time-limit on that and you do not need to give a reason.

The Edition Ledger

Every limited edition print I sell gets an entry in a ledger I keep for provenance. It records the bare minimum: your name, which number of the edition you received, what you paid, the date of the sale, and an order reference. Provenance is what lets a numbered print be shown to be genuine years later—including by someone who buys it from you rather than from me.

This ledger is not part of this website. It is a file on my own computer, separate from the shop’s database entirely; nothing on this site reads it or writes to it.

It exists in many places at once: across redundant backup drives in my studio, and mirrored in iCloud Drive. The file itself is encrypted, and the encryption keys are stored securely in a 1Password vault.

I keep it for the life of the work rather than for six years. A print sold today may need its chain verified decades from now, which is the whole reason for keeping one.

If someone asks me to confirm a print is genuine—a later buyer, a gallery, an appraiser—I will confirm the edition number and when it was sold, and I will not tell them who bought it. That stays between us unless you tell me otherwise.

How Long I Keep It

Order records are kept for six years, because Canadian tax law requires business records to be retained that long. After that they can be deleted. The edition ledger is the exception and is kept indefinitely, for the reason given above.

Newsletter subscriptions are kept until you unsubscribe. Shopping carts hold no personal information at all—only a random identifier and the items in them—and the cart is deleted when an order is completed.

Your Rights

You can ask me for a copy of the personal information I hold about you, ask me to correct it if it is wrong, or withdraw your consent to my using it. Email desk@songordon.ca and I will respond within 30 days, which is the period Canadian privacy law allows.

Withdrawing consent has limits: I cannot delete the record of a completed sale before the six years are up, because keeping it is a legal obligation rather than a choice.

Complaints

If you have concerns about my care and handling of your personal information, please get in touch. You also have the right to complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or, in British Columbia, to the Office of the Information and Privacy Commissioner at oipc.bc.ca

Changes to This Policy

If I change how I handle personal information—a new service provider, a new kind of information—I will update this page and change the date at the top. There is no mailing list for policy changes; the date is authoritative.