Privacy Policy

Last updated: October 19, 2026

1. Information We Collect

When you visit our website, contact us, subscribe to our newsletter, or place an order, we collect certain information to provide and improve our services. This includes:

  • Contact messages: When you use our contact form, we collect your name, email address, subject, and the full text of your message. These are stored in our own database so we can respond to you.
  • Newsletter subscriptions: When you subscribe (including via our pop-up and footer forms), we collect your email address and which form you used.
  • Orders and checkout: When you buy from us, your name, address, and payment details are collected and processed by Shopify on its hosted checkout. Payment card details never pass through or are stored on our own servers.
  • Usage Data: Information about how you interact with our website, including pages visited, time spent, and referring URLs.
  • Device Information: Browser type, operating system, IP address, and device identifiers.

2. How We Use Your Information

We use the information we collect to:

  • Process and fulfill your orders, including shipping and payment processing.
  • Communicate with you about your orders, account, or customer service inquiries.
  • Send marketing communications if you have opted in, including product updates and promotions.
  • Improve our website, products, and customer experience.
  • Comply with legal obligations and protect against fraud.

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We use the following named service providers (processors), each only for the purpose described:

  • Shopify — operates our online store, hosted checkout, payment processing, customer accounts, and order records. Order and buyer details are recorded in Shopify.
  • Klaviyo — our email platform. Newsletter subscriptions are stored in Klaviyo. When you send a contact message, Klaviyo also receives your email address and the message subject (not the message text, which stays in our own database) so we can track and respond to enquiries. Abandoned-checkout recovery emails are managed through Klaviyo using checkout details from Shopify.
  • Anthropic (Claude) — our back-office tools use Anthropic's AI service to help draft things like cart-recovery email copy and internal summaries. Inputs to that service are anonymised or aggregated (for example, product names, quantities, and totals) and do not include your name or email address.
  • Cloudflare Turnstile — bot protection on our contact and newsletter forms. Turnstile receives a verification token and your IP address to confirm you are a human visitor.
  • Google Analytics — website usage measurement (pages visited, time spent, referring URLs, device information).
  • Shipping carriers for order delivery, using the delivery details you provide at checkout in Shopify.

Some of these providers are located outside Canada (including in the United States), so your information may be processed in those countries and subject to their laws.

4. How Long We Keep Your Information

  • Contact messages: kept in our database for 12 months from when you send them, then automatically deleted.
  • Newsletter subscriptions: kept in Klaviyo until you unsubscribe or ask us to delete them.
  • Orders and accounts: kept in Shopify for as long as needed to fulfil orders, provide support, and meet legal, tax, and accounting obligations.
  • Usage data: retained by Google Analytics and Klaviyo under their standard retention settings.

You can ask us to delete your personal information sooner at any time — see "Your Rights" below.

5. Data Security

We implement industry-standard security measures to protect your personal information. All payment transactions are processed through encrypted, PCI-compliant payment processors. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors come from. These include cookies set by Google Analytics and Klaviyo, and your shopping cart is stored in your browser's local storage on your own device. You can choose to disable cookies through your browser settings, though some features of our website may not function properly as a result.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete your personal information.
  • Opt out of marketing communications at any time.
  • Request a copy of the data we hold about you.
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at [email protected].

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us: