Privacy Policy

1. Owner, Data Controller & Data Types

This Website collects personal data from its Users to provide e-commerce services, enhance customer support, and optimize site performance.

Owner and Data Controller

2131 W 4th Ave, Vancouver, BC V6K 1N7, Canada
Owner contact email: [email protected]

Types of Data Collected

Data collected directly or through third parties includes: Trackers, Usage Data, Device Information, Advertising IDs (Google Advertiser ID, IDFA), Clicks, Page Views, First & Last Name, Billing & Shipping Address, Phone Number, Email, Purchase History, Order ID, IP Address, Device Logs, Session Duration, Mouse Movements, Keypress Events, and Communications Data.

2. Mode, Place & Retention Period

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data using IT-enabled tools and strict organizational procedures.

Place of Processing

Data is processed at the Owner’s operating offices in Canada and in any other places where international third-party processors (such as Shopify, Google, Klaviyo, and Meta) maintain servers, including the US, Ireland, and Singapore.

Retention Time

Personal Data shall be stored for as long as required by the purpose for which it was collected. Data collected for contractual performance is retained until full execution, while marketing and analytics data is retained until consent is withdrawn or purpose obligations expire.

3. Purposes of Processing Data

User data is collected to fulfill e-commerce services, comply with legal obligations, detect malicious activity, and execute the following operations:

• Platform Services & Hosting (Shopify Inc.)
• Handling Payments (PayPal Inc., Credit Card processing)
• Analytics & Traffic Monitoring (Google Analytics 4, Meta Events Manager)
• Customer Contact & Messaging (Klaviyo Inc., Attentive Mobile Inc.)
• Advertising & Behavioral Targeting (TikTok, Pinterest, Meta, Microsoft Advertising)
• Bot Protection & Traffic Optimization (Cloudflare Inc.)
• Session Recording & Heat Mapping (Microsoft Clarity)

4. Third-Party Integrations & Services

5. European & UK User Rights (GDPR)

Users in the European Union and the United Kingdom are granted specific privacy rights under applicable data protection regulations:

• Withdraw Consent: Revoke authorization previously granted for marketing or processing.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right of Access & Rectification: Inspect stored data and request updates or corrections.
• Right to Erasure (Right to be Forgotten): Request complete deletion of personal records.
• Data Portability: Receive a machine-readable copy of personal data to transfer to another controller.
• Lodge a Complaint: File a dispute with a competent data protection authority.

6. US State Privacy Rights Notice

This section applies to residents of US states including California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Delaware, Iowa, Maryland, Minnesota, and others.

Notice at Collection (Past 12 Months)

7. Exercising Privacy & Opt-Out Rights

To exercise any rights to know, delete, correct, or opt-out of data sales/sharing for cross-context behavioral advertising, submit a request via:

Requests are verified using existing order or email information and processed without fee within the required statutory timeframe (45 days max).