Privacy Policy

What we collect

We collect the following personal information:

• Your name, email address, and shipping address
• Your order history
• The sender name you give us for matching an Interac e-Transfer to your order
• Your IP address, used for rate limiting and to keep a record of consent
• Interac e-Transfer notification emails received by our payment mailbox

Why we collect it

We use this information to fulfil and ship your order, match your payment, respond to you, keep records required by law, and protect the site against abuse.

Consent

Placing an order gives us your implied consent to use your information to complete that order. Marketing email is sent only with your express, opt-in consent, given separately (for example, through a sign-up form), and you can unsubscribe at any time using the link in any marketing email we send.

Sharing your information

We do not sell personal information. We share it only with the service providers needed to run the business, and only to the extent necessary:

• Our hosting provider (Railway) — servers may be located outside Canada
• Our email delivery provider (Resend), to send transactional and, where you've opted in, marketing email
• Google Workspace, which hosts our order and payment mailbox
• Shipping carriers, to deliver your order

Retention

We keep order records for as long as required under Canadian tax law, generally seven years. We keep a record of marketing consent for as long as the consent is in effect, and for a period afterward as our compliance record.

Security

Information you send us is encrypted in transit. Access to order and customer data in our admin tools is restricted to authorized personnel.

Cookies and local storage

Our checkout uses your browser's local storage to remember the contents of your shopping cart between visits. If you sign in to a customer account, or if a staff member signs in to our admin tools, a session cookie is set to keep you signed in. We do not use advertising or tracking cookies.

Your rights

You may ask to access, correct, or withdraw consent for your personal information by contacting our privacy contact below. If you believe we have not respected your privacy rights, you may complain to the Office of the Privacy Commissioner of Canada.

Age

Our site is not directed at, and we do not knowingly collect personal information from, anyone under 18.

Changes to this policy

We may update this policy from time to time; the version posted here is the current one.

Contact

Questions about this policy, or a request about your personal information, can be sent to our privacy contact at contact@dexalabs.ca.