Legal

Privacy Policy

Last updated: October 2026

1. Information we collect

When you place an order, we collect your name, email address, shipping address, and the IP address the order was submitted from. Payment itself happens outside our site. Card payments are processed by Square, e-Transfers by your bank through Interac, so we never receive or store your card numbers. If you contact us, we retain the contents of that inquiry.

We collect standard web analytics (page views, referrers, browser type, approximate location from your IP address) through our hosting provider and through Google Analytics. This tells us which pages are read and where visitors arrive from. When an order is paid we also report it to Google Analytics — the order number, its value, the products in it, and the delivery province and city — so we can see which pages and channels lead to sales; never your name, email address, phone number or street address. We do not use advertising or remarketing trackers, we do not run ads, and we do not sell this information.

2. How we use it

Order information is used to fulfill your order, send you a confirmation, and communicate about that order. The IP address recorded with an order is used only to investigate fraudulent or abusive orders and to protect the store against automated misuse; it is not used to profile you, build an advertising audience, or track you across other sites. We do not sell, rent, or share your personal information with third parties for marketing purposes.

If you subscribe to our newsletter, your email is used only to send product announcements, restock news and subscriber offers, including a one-time first-order code if you sign up through our offer window. You can unsubscribe at any time.

If you ask to be notified when a sold-out product is back in stock, we keep your email address for that one purpose and send you a single email when it returns. That request does not add you to our newsletter.

3. Age verification

Our products are for adults 19 years of age or older. By placing an order you confirm you meet this requirement. We reserve the right to require additional age verification before fulfilling an order.

4. Cookies

We use session cookies and your browser's local storage to maintain your cart and authentication state, and to remember small preferences on this device, such as whether you have already joined our list or closed our offer window, so we do not ask you again. Google Analytics sets its own cookies so a returning visit is not counted as a new one; these measure how the site is used and are not used for advertising, remarketing or profiling. You can disable cookies in your browser, or install Google's own opt-out add-on, but disabling them may affect cart functionality.

5. Data storage and security

Your data is stored in secured cloud infrastructure within Canada. We use industry-standard encryption for data in transit. Access to personal data is restricted to staff who need it to fulfill orders or provide support.

6. Third-party services

We use Square for card payment processing (their privacy policy governs your card data), Interac e-Transfer via your own bank, Supabase for database storage, Resend for transactional email, Vercel for hosting, and Google Analytics and Google Search Console for website measurement. Each operates under their own privacy policies.

7. Your rights

Under PIPEDA and applicable Canadian privacy law, you have the right to access the personal information we hold about you, request corrections, and request deletion of your data (subject to legal retention requirements). To make a request, contact us at the email on our contact page.

8. Changes to this policy

We may update this policy from time to time. Material changes will be noted on this page with a revised date. Continued use of the site after changes constitutes acceptance.

9. Contact

Questions about this policy? Email us through the contact page or write to: 7OHYEA, British Columbia, Canada.