Last updated: 18 August 2026. This policy replaces the version published in January 2024.
Wehpa, Inc. (“Wehpa,” “we,” “us”) publishes an online magazine at wehpa.com and a free streaming channel, Wehpa TV. This policy explains what personal information we collect, why we collect it, who we share it with, and what you can do about it. It is written to be read, not to be survived.
Who is responsible for your information
Wehpa, Inc. is the organization accountable for the personal information described here.
- Mailing address: 50 Husband Drive, Toronto, Ontario M9L 1J7, Canada
- Privacy contact: info@wehpa.com
- Person accountable for privacy: Victor Ramirez, Co-Founder
We are based in Toronto, Ontario, Canada, and are subject to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). Where we serve readers in the United Kingdom or the European Economic Area, we also honour the rights described in the UK GDPR and EU GDPR.
What this policy covers
This policy applies to wehpa.com, the Wehpa TV channel, our newsletters, and any store or ticketing pages we operate. It does not cover third-party websites we link to, which have their own policies.
What we collect
Information you give us
- Account registration. If you create an account, we collect your username, email address and password. Passwords are stored hashed; we never see them in readable form.
- Comments. Your name, email address, comment text, IP address and browser user-agent. Your name and comment are public. Your email address and IP are not.
- Newsletter. Your email address, plus the date, wording and method of the consent you gave.
- Orders. If you buy from us, your name, email address, billing and shipping address, and order contents. We do not receive or store your full payment card number — card details go directly to our payment processor.
- Messages. Anything you send us by email, including corrections and press enquiries.
Information collected automatically
- Server logs. IP address, date and time, pages requested, referring page, browser and device type. These are kept for security, abuse prevention and troubleshooting.
- Analytics. We use Google Analytics 4 to understand which articles are read and how people arrive. This is subject to your cookie choices.
- Social and advertising tags. Where you have consented, TikTok and Pinterest tags may load to measure the performance of posts and campaigns.
Cookies
Cookies are small files stored by your browser. We group ours into four categories:
- Strictly necessary — login sessions, shopping cart, security and load balancing. These cannot be switched off and do not require your consent.
- Preferences — remembering settings such as your consent choices.
- Statistics — Google Analytics.
- Marketing — TikTok, Pinterest and any advertising partners.
Statistics and marketing cookies load only if you allow them. You can change or withdraw your choice at any time through the cookie settings link in our footer, or by clearing cookies in your browser. Blocking cookies may break parts of the site, such as staying logged in.
Why we use it, and on what basis
| What we do | Why | Legal basis (UK/EU) |
|---|---|---|
| Publish and run the site | To deliver pages, keep you logged in, keep the site up | Legitimate interests |
| Process orders | To take payment, deliver, and handle refunds | Performance of a contract |
| Send newsletters | To send you what you asked for | Consent |
| Analytics | To understand what people read | Consent |
| Security and anti-abuse | To stop spam, fraud and attacks | Legitimate interests |
| Legal and accounting | To meet tax, records and legal duties | Legal obligation |
Under PIPEDA we rely on your consent, express or implied, together with the reasonable-purposes standard the Act sets.
Who we share it with
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
We use service providers who process information on our behalf, under contract, for the purposes we set:
- Hosting and infrastructure — our web host and CDN
- Security — our web application firewall provider
- Analytics — Google (Google Analytics 4, Site Kit)
- Social measurement — TikTok, Pinterest, where you have consented
- Email delivery — our newsletter and transactional email providers
- Payments — our payment processor, which handles card data directly
- Media optimization — our image compression provider
We may also disclose information where the law requires it, to respond to a valid legal request, to enforce our Terms of Use, or to protect the rights and safety of Wehpa, our readers or the public. If Wehpa is ever sold or merged, information may transfer as part of that transaction, and this policy will continue to apply until you are told otherwise.
Where your information goes
We are in Canada, and several of our providers are in the United States. When your information is handled outside your country, it is subject to the laws there and may be accessible to courts and authorities under those laws. Where we transfer information out of the UK or EEA, we rely on the safeguards our providers have in place, including Standard Contractual Clauses and the EU–US Data Privacy Framework where applicable.
How long we keep it
- Newsletter subscribers — until you unsubscribe, and consent records for three years after that, as CASL requires.
- Accounts — while your account is open, and up to 12 months after you ask us to close it.
- Comments — indefinitely, unless you ask us to remove them.
- Orders — seven years, to meet Canadian tax and records requirements.
- Server logs — typically up to 12 months.
- Analytics — per our Google Analytics retention setting, currently 14 months.
Your rights
Wherever you live, you can ask us to:
- Tell you what personal information we hold about you and how it has been used
- Correct anything inaccurate or incomplete
- Delete information we no longer need
- Stop sending you marketing, at any time
- Withdraw a consent you previously gave
If you are in the UK or EEA, you also have the rights to restrict or object to processing, to receive your information in a portable format, and not to be subject to decisions made solely by automated means. We do not make automated decisions about you.
To exercise any of this, email info@wehpa.com. We will respond within 30 days, which is the PIPEDA deadline, and usually much sooner. We may need to verify who you are before we act, and we will not charge you for a reasonable request.
How to complain
Please come to us first at info@wehpa.com — most things are a misunderstanding we can fix quickly. If you are not satisfied, you can complain to:
- Canada — Office of the Privacy Commissioner of Canada, priv.gc.ca
- United Kingdom — Information Commissioner’s Office, ico.org.uk
- EEA — your national data protection authority
Children
Wehpa is written for a general adult audience. It is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us information, email info@wehpa.com and we will delete it.
Security
We protect the site with HTTPS, a web application firewall, access controls and hashed passwords. No system is perfectly secure, and we cannot guarantee that a determined attacker will never succeed. If a breach ever creates a real risk of significant harm to you, we will notify you and the Privacy Commissioner as PIPEDA requires.
Artificial intelligence
We use AI to generate some of the illustrations on this site, and we label them. We do not use your personal information to train AI models. Our full approach is set out in our AI Policy.
Changes
We will update this page when our practices change, and we will change the “last updated” date at the top. If a change is significant, we will say so on the site and, where the law requires it, ask for your consent again.
Contact
Questions about this policy: info@wehpa.com, or write to us at the address above.