1. Information we collect

When you place an order, we collect your name, email address, and shipping address. Payment itself happens outside our site. Card payments are processed by Square, e-Transfers by your bank through Interac, so we never receive or store your card numbers. If you contact us, we retain the contents of that inquiry.

We collect standard web analytics (page views, referrers, browser type, approximate location from your IP address) through our hosting provider and through Google Analytics. This tells us which pages are read and where visitors arrive from. We do not use advertising or remarketing trackers, we do not run ads, and we do not sell this information.

2. How we use it

Order information is used to fulfill your order, send you a confirmation, and communicate about that order. We do not sell, rent, or share your personal information with third parties for marketing purposes.

If you subscribe to our newsletter, your email is used only to send research-related updates and product announcements. You can unsubscribe at any time.

3. Age verification

Our products are for adults 19 years of age or older. By placing an order you confirm you meet this requirement. We reserve the right to require additional age verification before fulfilling an order.

4. Cookies

We use session cookies to maintain your cart and authentication state. Google Analytics sets its own cookies so a returning visit is not counted as a new one; these measure how the site is used and are not used for advertising, remarketing or profiling. You can disable cookies in your browser, or install Google's own opt-out add-on, but disabling them may affect cart functionality.

5. Data storage and security

Your data is stored in secured cloud infrastructure within Canada. We use industry-standard encryption for data in transit. Access to personal data is restricted to staff who need it to fulfill orders or provide support.

6. Third-party services

We use Square for card payment processing (their privacy policy governs your card data), Interac e-Transfer via your own bank, Supabase for database storage, Resend for transactional email, Vercel for hosting, and Google Analytics and Google Search Console for website measurement. Each operates under their own privacy policies.

7. Your rights

Under PIPEDA and applicable Canadian privacy law, you have the right to access the personal information we hold about you, request corrections, and request deletion of your data (subject to legal retention requirements). To make a request, contact us at the email on our contact page.

8. Changes to this policy

We may update this policy from time to time. Material changes will be noted on this page with a revised date. Continued use of the site after changes constitutes acceptance.

9. Contact

Questions about this policy? Email us through the contact page or write to: 7OHYEA, British Columbia, Canada.