Privacy Policy

1. Information We Collect

We collect the following types of personal data:

• Contact Information: name, email address, phone number, mailing address
• Transaction Data: purchase history, payment information, shipping preferences
• Usage Data: IP address, browser type, pages visited, time spent on site
• Communication Data: messages sent through contact forms, consultation notes
• Cookie Data: preferences and session information (see Cookie Policy)

2. How We Use Your Information

We process your data for the following purposes:

• Processing orders and shipping arrangements
• Providing customer support and consultation services
• Managing corporate gifting program accounts
• Sending order confirmations and shipping updates
• Improving website functionality and user experience
• Complying with legal and regulatory requirements

3. Legal Basis for Processing

We process your data based on:

• Contract: to fulfill purchase and service agreements
• Consent: for marketing communications and optional cookies
• Legitimate Interest: for business operations and improvements
• Legal Obligation: for tax records and regulatory compliance

4. Data Sharing

We share data with third parties only when necessary:

• Shipping Carriers: Canada Post, courier services for delivery
• Payment Processors: secure payment gateway providers
• Email Services: for communication management
• Website Hosting: for infrastructure and security

We do not sell personal information to third parties.

5. Data Retention

We retain personal data for:

• Transaction records: 7 years (Canadian tax requirements)
• Customer accounts: duration of relationship plus 3 years
• Marketing data: until consent withdrawn
• Website analytics: 26 months maximum

6. Your Rights

Under Canadian privacy law, you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Object to data processing
• Withdraw consent for marketing
• Request data portability
• File complaints with privacy authorities

7. Security Measures

We protect your data through:

• SSL encryption for data transmission
• Secure server infrastructure
• Access controls and authentication
• Regular security audits
• Staff training on data protection