Privacy Policy

1. What information we collect

Information you give us

When you place an order or contact us, we collect:

• Contact details: name, email address, and phone number.
• Shipping address: where the parcel needs to go.
• Billing information: billing address and payment details (handled by Stripe — we don't see or store full card numbers).
• Anything you send us: messages you send through our contact form or by email.

Information we collect automatically

When you browse the site, we collect:

• Your IP address (masked for analytics).
• Device type, operating system, and browser.
• Which pages you visit and how long you stay.

We use Google Analytics 4 for this. You can opt out of analytics through the cookie banner on the site.

2. How we use your information

We only use your information to run the business and serve you. Specifically, to:

• Process your order and arrange shipping.
• Send order confirmations, shipping updates, and support replies.
• Check transactions for fraud.
• Understand how the site is used so we can fix problems and improve it.
• Meet our legal obligations (for example, keeping tax records).

We don't sell your personal information. We don't share it with anyone for their own marketing.

3. Who we share it with

We share only what's needed, only with service providers who help us run the store:

• Stripe — processes your payment. Stripe handles card data on its own secure infrastructure and may use transaction information independently for fraud screening and to meet financial regulations.
• Shipping carriers — receive your name, shipping address, and phone number so they can deliver your order.
• Google Analytics — receives anonymized browsing data if you've consented to analytics cookies.
• BigCommerce — hosts the online store platform.

We may also disclose information if we're legally required to (for example, in response to a court order).

4. Cookies and tracking

Cookies are small data files stored on your device when you visit the site. We use two kinds:

• Essential cookies keep the site working — they remember what's in your cart and keep checkout secure. These run automatically because the site can't work without them. Turning them off will break parts of the site.
• Analytics cookies help us understand site usage. These only run if you've given consent through the cookie banner.

You can change your cookie choices any time using the banner, or block cookies in your browser settings.

5. Where your information is processed

Some of our service providers are based outside Canada, mostly in the United States. That means your information may be transferred to, stored in, or processed in the US or other countries, and may be accessible to authorities in those countries under their laws.

When we use providers outside Canada, we use ones that offer protections comparable to Canadian privacy law, and we share only the information they need to do their job.

6. How long we keep your information

We keep your information only as long as we need it:

• Order and tax records — at least six years from the end of the tax year they relate to, because the Canada Revenue Agency requires it.
• Customer support messages — typically up to three years after the conversation ends, in case there's a related warranty or return question.
• Analytics data — kept by Google Analytics for the retention period we set in GA4, then automatically deleted.

When we no longer need your information, we securely delete it or anonymize it so it can't be linked back to you.

7. How we protect your information

We take reasonable steps to protect your information from loss, theft, and unauthorized access:

• The site uses SSL/TLS encryption — that's the padlock in your browser.
• Payments are handled by Stripe under the PCI-DSS standard. We never see your full card number.
• Access to customer information is limited to people who need it to do their jobs.

No system is perfectly secure, but we do what's reasonable for a business our size.

8. Your privacy rights

Under PIPA and PIPEDA, you have the right to:

• Access: ask for a copy of the personal information we hold about you, and a list of who we've shared it with. We'll respond within 30 business days.
• Correction: ask us to fix a factual error. If we don't agree the change is appropriate, we'll note your request on the file.
• Withdraw consent: tell us to stop using your information. Some uses we can't stop — for example, we still have to keep tax records — and we'll explain if that applies.
• Complain: if you're unhappy with how we've handled