Privacy policy

Information we collect and use

We collect the name, email address, phone number, billing and delivery details, and order information you provide at checkout. We use these details to process payment, prepare your order, send confirmations and fulfillment updates, and respond to order questions.

You can check out as a guest. If you choose to create an account, we also store your profile, saved addresses, and order history. If you contact us, we use the information in your message to respond.

Sharing for order fulfillment

We do not sell or rent your personal information, use it for marketing, or share it with other businesses for their marketing. We provide the information needed to the service providers that help us process, fulfill, and support your order. For delivery, this includes sharing your name, delivery address, and relevant contact details with the shipping company.

We may also retain or disclose information where required by law. Payment providers have their own data-processing obligations and practices, as explained below.

Service providers

• Stripe: payment processing and fraud prevention.
• Resend: transactional emails.
• Supabase: storage of order and account information.
• Sentry: technical monitoring and error reporting.
• Shipping carriers: information needed to deliver orders.

Stripe also uses transaction and device information for its own purposes, including securing payments, preventing fraud, meeting legal obligations, and improving its payment services, as described in its privacy policy.

Cookies, analytics, and tracking

We do not currently use visitor analytics or advertising trackers. Essential cookies and browser storage support features such as your shopping cart, account sign-in, and checkout. Technical monitoring helps us keep these services working.

Stripe may use cookies and similar technologies for payment security, fraud prevention, and analytics relating to its own services, as described in its privacy policy.

Data security

Data is encrypted in transit and at rest. These safeguards help protect your information; no storage or transmission system can guarantee absolute security.

Where information is stored

Our service providers may store and process information outside Canada, where it may be subject to local laws and access by courts or authorities.

Artificial intelligence

We do not use your order information to train generative AI models. Stripe uses transaction data to train and improve machine-learning models, including systems for fraud prevention. Stripe's own data uses and model-training practices are described in its Privacy Center.

Retention and your information

Order and account records are kept as needed to fulfill and support orders, provide your account history, and meet applicable legal and accounting requirements.

Resend retains email content and delivery logs for 30 days under its retention policy. This period does not apply to order records we hold or to payment records held by Stripe.

To ask about your information, request access or a correction, or request deletion, please use our contact page. Some records may need to be retained to complete an order or meet legal obligations.

Policy updates and questions

We will post updates to this policy here and revise the date above. For privacy questions or more information about our service providers, contact us through the contact page. You can also read our terms of service.