Privacy Policy

Personal information collected through the ÜGLY Sculptures website is processed by Robert Bibeau, operating under the ÜGLY Sculptures imprint, Plateau Mont-Royal, Montréal, Québec, Canada.

The person responsible for the protection of personal information within the meaning of Québec's Act respecting the protection of personal information in the private sector (Loi 25, RLRQ, c. P-39.1) is Nassim Saighi (studio director). Requests can be sent to studio@uglysculptures.com.

ÜGLY Sculptures collects only the personal information necessary to process an acquisition: full name, email address, delivery address, and billing address. This information is entered by the buyer directly into the Stripe Checkout interface and transmitted to the studio via Stripe's API.

No payment card data (card number, CVV, expiry) is ever stored on ÜGLY Sculptures' own systems or databases. Stripe handles all payment data under its own privacy policy and PCI-DSS compliance framework.

Information collected is used exclusively for the following purposes: processing and confirming the acquisition; coordinating delivery or studio pickup; post-purchase communications related to the specific transaction (shipment notification, tracking, invoice). ÜGLY Sculptures does not send promotional emails, newsletters, or marketing messages without explicit consent.

Personal information is shared with: Stripe, Inc. (payment processing, governed by Stripe's privacy policy); Supabase, Inc. (order database, hosted on infrastructure located in Canada); shipping carriers (name and delivery address only, for the purpose of executing delivery).

No personal information is sold, rented, or disclosed to any other third party. ÜGLY Sculptures does not use advertising networks, analytics trackers, or social media pixels on its website.

Transaction records, including the personal information associated with an order, are retained for a minimum of 7 years from the date of the transaction to comply with Canadian federal accounting and tax obligations (Income Tax Act, R.S.C. 1985, c. 1). After expiry of the retention period, data is deleted securely.

The site uses two functional cookies only: a locale preference cookie (NEXT_LOCALE) set by next-intl to remember the visitor's language selection, and an authentication session cookie used exclusively by the site's administrative interface (not accessible to visitors). No tracking, advertising, or analytics cookies are used.

All data in transit between the visitor's browser and the ÜGLY Sculptures servers is encrypted via TLS (HTTPS). The order database is hosted on Supabase with row-level security (RLS) enabled, restricting data access to authenticated administrative queries only.