Privacy

What we collect

When you place an order, we store:

• Your email address, so we can send the order confirmation.
• Your shipping address and name, so the parcel can be delivered.
• What you bought, the prices charged, and the shipping selected.
• Identifiers from Stripe for the payment, so an order can be matched to its charge and refunded.

You do not need an account to buy from us, and we do not create one for you.

Card details

We never receive your card number. Payment is completed in a form hosted by Stripe and embedded in our checkout page; the card details go from your browser to Stripe directly. Our systems only ever see the result — whether the payment succeeded, and an identifier for it.

This means we cannot charge your card again on our own, and we cannot restore a card number if you ask us to, because we never had it.

Order confirmation codes

Each order gets a confirmation code, sent to you in the confirmation email. We store only a cryptographic hash of that code, never the code itself, so a future breach of our database would not hand over the ability to look up orders.

The practical consequence is that we cannot recover a lost code. An administrator can issue a new one, which invalidates the old one, and will tell you that has happened.

Protecting order lookups

The order status page is protected against someone guessing codes. We record each attempt, and to count attempts from the same source we store a one-way hash of the network address, salted with a secret. We do not keep the address itself, and the hash cannot be reversed back into one.

Cookies and local storage

We do not use advertising or analytics cookies. There is no tracking pixel.

• A cookie remembers whether you are shopping in Canadian or United States dollars.
• A short-lived cookie links your browser to a checkout in progress, so the right order is resumed if you come back to it.
• Your basket is kept in your own browser’s local storage, not on our servers, until you begin checkout.
• Administrators of the store have a session cookie when signed in.

Our network provider tells us which country a visitor is connecting from so we can preselect a sensible currency. That is a country, not a location.

Who else sees your information

We do not sell personal information, and we do not share it for anyone else’s marketing. We use these services to run the store, and each sees only what it needs:

• Stripe — processes payments and refunds, and receives the billing and shipping details you enter at checkout.
• Our email provider — delivers order confirmations and shipping notifications, and therefore handles your email address and the contents of those messages.
• Our hosting and network providers — operate the servers and the connection to them, and keep short-lived technical logs of requests.
• Delivery carriers — receive the name and address needed to deliver your parcel.

We may also disclose information where the law requires it. Some of these providers operate outside Canada, which means your information may be processed in another country and be subject to its laws.

How long we keep it

Order records are kept while we may need them for tax, accounting, and warranty purposes, which in Canada generally means several years. Records of failed order lookups are short-lived and exist only to limit guessing.

Your choices

You can ask what we hold about you, ask for a correction, or ask us to delete it. Write to [email protected] from the address you ordered with, or tell us the order number, so we can be confident we are talking to the right person.

Deletion has a limit worth being straight about: where we are legally required to keep a record of a sale, we will keep that record and remove what we can around it.

Changes

If this policy changes, the date at the top changes with it. Material changes will be described rather than quietly folded in.