Privacy policy

Last updated: August 17, 2026

LEEGONA ("we," "us," "our") operates Kept (the "Store"), accessible at https://shop.leegona.com. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices and rights you have. It applies to visitors and customers of the Store and is written to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario consumer protection law.

If you have questions about this policy or how we handle your information, contact us at contact@leegona.com.

Who we are

LEEGONA is a sole proprietorship registered in Ontario, Canada, operated by Gwanwoo Lee, doing business as Kept

Business address: 352 Terry Dr, Newmarket, Ontario, Canada
Phone: +1 (647) 854-6609
Email: contact@leegona.com

The ten principles that guide how we handle your data

Following PIPEDA's fair information principles, we commit to:

Accountability — we are responsible for the personal information under our control and have named a contact point (contact@leegona.com) for privacy questions.
Identifying purposes — we tell you why we collect information, before or at the time we collect it (see "What we collect and why" below).
Consent — we collect, use, and disclose your personal information only with your knowledge and consent, except where the law permits otherwise.
Limiting collection — we collect only what is necessary for the purposes we've identified.
Limiting use, disclosure, and retention — we don't use or disclose information for new purposes without consent, and we don't keep it longer than necessary.
Accuracy — we keep personal information as accurate, complete, and up to date as necessary for its purposes.
Safeguards — we protect personal information with security measures appropriate to its sensitivity.
Openness — we make our privacy practices readily available, which is what this document is for.
Individual access — you can ask what information we hold about you and request corrections.
Challenging compliance — you can direct a complaint about our compliance to the contact identified above.

What we collect and why

We collect the minimum information needed to process your order, run the Store, and communicate with you.

What we collect	Why	Source
Name	To address you, personalize your order, and print on shipping labels	You, at checkout
Email address	To send order confirmations, shipping updates, and (if you opt in) marketing	You, at checkout or newsletter signup
Shipping address	To route your order to our print partner and courier	You, at checkout
Billing address	To process payment and prevent fraud	You, at checkout
Order details (products, sizes, quantities)	To fulfill your order	Generated by your purchase
Device and browsing information (IP address, browser type, pages viewed)	To operate and improve the Store, detect fraud	Automatically, via Shopify and cookies

We do not collect or store your credit card number. Payment is processed by Shopify Payments (or another Shopify-supported payment processor), which handles and stores card data under its own PCI-DSS-compliant systems. We only receive confirmation that payment succeeded and a limited billing reference.

Who we share it with

We share personal information only with the parties needed to run the Store and fulfill your order:

Shopify Inc. — our e-commerce platform. Shopify hosts the Store, processes payments, and stores order and customer data on our behalf. See Shopify's Privacy Policy.
Printful Inc. (our print-on-demand producer) — we send your name, shipping address, and order details to Printful so your order can be printed and shipped directly to you. Printful prints in its own facilities, including Toronto, Canada. We do not control Printful's internal data practices; see Printful's Privacy Policy.
Shipping carriers — the courier assigned to your order receives your name and address to deliver your package and provide tracking.
Email and analytics tools — if we use email delivery or website analytics services, they process the minimum data needed (e.g., email address, anonymized usage data) to provide their service to us.
Our own automation systems — we run order tracking and customer-support tooling on servers we rent from Hetzner Online GmbH (Germany).
Order records stored there contain the order number, items, amounts, and the country/province an order shipped to. They do not contain your name, street address, email address, or phone number.
Support records are different. When you email us, we store a summary and a draft reply. We run automated filters over your message first to remove email addresses, phone numbers, postal codes, and text that looks like a street address or a card number — but these filters match patterns, not meaning. A name you write in the body of your message, or an address written in an unusual way, can survive them. We also store a one-way scrambled form of your email address so we can group your messages together; this is not anonymous, because anyone who already knows your email address could match it.
Anthropic PBC (United States) — we use an AI assistant to categorize your support message and prepare a draft reply for a human to review. Your message goes through the filters described above before it is sent. Because those filters match patterns rather than meaning, some personal details you write in free text may still reach this service. A human reads and approves every reply before it is sent to you; the AI never replies to you directly. See Anthropic's Privacy Policy.
Telegram — internal notifications are delivered to the store owner over Telegram. Order notifications carry order numbers, item names, and amounts. Support notifications carry the summary and draft reply described above, so they can contain personal details that survived the filters.

Where your information goes

Kept operates from Ontario, Canada. Some of the services above are located outside Canada — notably the United States (Shopify, Anthropic, and Printful) and Germany (our automation servers). When your information is in another country, it may be accessible to that country's courts, law enforcement, and national security authorities under that country's laws.

If you would rather we not process your support email through an automated categorization step, write to us and say so; we will handle your message manually.

We do not sell your personal information. We do not share it with third parties for their own independent marketing purposes.

We may disclose personal information if required by law, court order, or to protect our rights, property, or safety, or that of our customers.

How long we keep it

We retain order and customer records for as long as needed to fulfill orders, handle returns or disputes, meet our tax and accounting obligations under Canadian and Ontario law (generally a minimum of six years), and resolve any legal claims. Marketing email addresses are kept until you unsubscribe or we no longer have a business reason to retain them.

Cookies and tracking

The Store uses cookies and similar technologies (via Shopify) to keep your cart working, remember your preferences, and understand how visitors use the Store. You can control cookies through your browser settings; disabling them may affect Store functionality such as checkout.

Marketing emails and CASL

If you subscribe to our newsletter or opt in at checkout, we may send you marketing emails about new designs, promotions, or Store news. In compliance with Canada's Anti-Spam Legislation (CASL):

We only send marketing emails to people who have given express opt-in consent (e.g., checking a signup box — consent is never pre-checked or bundled into a purchase).
Every marketing email includes an unsubscribe link and our contact information.
If you unsubscribe, we will stop sending marketing emails within 10 business days, as required by CASL.
Unsubscribing from marketing emails does not stop transactional emails (order confirmations, shipping notifications) related to a purchase you've made.

You can also unsubscribe at any time by emailing contact@leegona.com.

Your rights

Under PIPEDA, you have the right to:

Know what personal information we hold about you and why.
Access that information and request a copy.
Request correction of inaccurate or incomplete information.
Withdraw consent for a particular use (subject to legal or contractual restrictions), including marketing.
File a complaint about our handling of your information.

To exercise any of these rights, email contact@leegona.com. We will respond within a reasonable time, generally within 30 days.

If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Security

We rely on Shopify's infrastructure, which uses industry-standard security measures (encryption in transit, access controls) to protect the data it stores on our behalf. No system is 100% secure, but we take reasonable steps to protect the personal information we control.

Children's privacy

The Store is not directed at children under 13, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be posted on this page.