Privacy

This notice is written to follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). It has two parts: what this information site does today, and what the store will do when it opens.

This information site, today

• No accounts, forms or orders. You cannot give us personal information through this site.
• Visitor statistics. We use Cloudflare Web Analytics to count page views. It does not use cookies and does not track you across other sites.
• Notice preference. When you close the age notice, your browser stores a small note (in local storage, on your device only) so the notice is not shown on every page. We cannot read it. Clearing your browser data removes it.
• Hosting. The site is served by Cloudflare, which processes standard technical data such as IP addresses to deliver and protect the site.

The store, when it opens

• Identity and age verification. To verify your age and identity, a verification provider will collect your government-issued photo ID and, usually, a live photo. Provider: [TBC]. What we receive back: [TBC: for example, a pass or fail result, your name and date of birth]. How long it is kept, and where: [TBC].
• Orders. Name, shipping address, email, phone and order history, used to fulfil orders, meet legal record-keeping duties and answer questions. Retention: [TBC].
• Payment. Card details are handled by our payment processor, not stored by us. Processor: [TBC].
• Delivery. Your name, address and the minimum age for delivery are shared with the carrier so it can check ID.
• Email. We will send marketing email only to verified adults who have opted in. You can unsubscribe at any time.

Your rights

You can ask to see the personal information we hold about you, ask us to correct it, or withdraw consent (which may mean we cannot serve you). You can also complain to the Office of the Privacy Commissioner of Canada.

Privacy contact: [TBC: name and email]