CAD

Privacy Policy

Template notice, not legal advice: this page is placeholder wording for a self-hosted storefront. Before opening this store to real customers, have it reviewed against the law that actually applies to you — PIPEDA if you operate in or sell into Canada, GDPR/UK GDPR for the EU/UK, CCPA/CPRA for California, plus any other jurisdiction your customers ship to.

Information we collect

When you create an account, place an order, or contact us, we collect the information you provide directly: name, email, shipping and billing address, phone number (if given), and order history. We don't collect or store full payment card numbers — those go straight to our payment processor. If you sign in with Google or GitHub, we receive your name, email, and profile photo from that provider instead of a password.

How we use it

To fulfill and ship orders, send order confirmations and shipping/delivery updates, respond to support requests, maintain your account if you have one, and (only if you ask us to) send you a password reset link. We don't sell your personal information.

Third parties

Each of these only receives what it needs to do its specific job:

  • Stripe — processes payments. Your card details go directly to Stripe and never touch our servers.
  • Resend — delivers transactional email (order confirmations, shipping updates, password resets, contact form messages).
  • Google / GitHub — only if you choose to sign in with one of these instead of a password.
  • Cloudflare Turnstile — a captcha-free bot check on account creation, login, and checkout, to keep automated abuse out.
  • Meilisearch — powers on-site product search; it only ever indexes our own product catalog, not customer data.
  • Sentry — error monitoring, so we notice and fix bugs. Error reports can incidentally include technical details of the page you were on (URL, browser) at the time of an error, not your order or payment details.

Data retention

We keep order records as long as needed for accounting, tax, and warranty/returns purposes (and as long as the law requires us to). If you delete your account, we remove your profile and saved addresses; order history tied to a completed purchase is retained for our own legal/accounting obligations even after that.

Cookies

We use a small number of essential cookies to keep your cart and, if you sign in, your session working across page visits. These aren't used for advertising or tracking across other sites.

Your choices

You can review or update your account details and saved addresses from your account page at any time. You can also ask us to access, correct, export, or delete the personal information we hold about you — see the Contact page. We'll respond within the timeframe your local law requires (for example, 30 days under PIPEDA).

Children's privacy

This site isn't directed at children, and we don't knowingly collect personal information from anyone under 13 (or the minimum age in your jurisdiction).

Changes to this policy

We may update this policy from time to time; the current version is always the one posted here.