STORE POLICY

What personal data we collect and why we collect it

 

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

 

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

 

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

 

Contact forms

If you fill out contact forms the data will be submitted to the outgoing mail server via secure method and can be transmitted to other mail servers through SMTP or other protocols.

 

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

 

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

 

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

 

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

 

Embedded content from other websites

 

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the same way as if the visitor has visited the other website.

 

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

 

Analytics

This site uses analytics.  Analytics are used to determine the source of traffic, how long a page is being viewed, most popular products, find broken links on our website as well as for other optimizations and features.

 

Who we share your data with

Data collected is may be used anonymously and may be shared as trend type data.  All personal information is removed before any data is shared with marketing and strategic analysis for improving our services.

 

How long we retain your data

If you leave a comment, the comment and its metadata may be retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

 

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

 

What rights you have over your data

If you have an account on this site, placed orders or have left comments, you may view this information from inside your account or on our webpages. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

 

Where we send your data

If not logged-in, visitor comments may be checked through an automated spam detection service.

 

Your contact information

Contact information is required to place orders. Billing data is captured completely or in part by the payment processor (for example PayPal or Stripe) to successfully process your order besides encrypted snippets or other data that may be used to streamline the checkout process on future orders. Shipping data is captured completely or in part and is shared with couriers when applicable. Both billing and shipping data may be printed or used on manifests or other related purposes as required to successfully deliver your order.

 

Additional information

Information you provide may be visible by staff and used when required to allow for our website and delivery process to function.

 

How we protect your data

We value your privacy and make our best effort to protect your data. It is far too common that websites including large financial corporations have data breaches. We consider unintentional loss or breach of any customer data is unacceptable. To secure your data we have made our best effort to deploy the highest security possible for our store. Our website uses SSL/TLS (Secure Socket Layer / Transport Layer Security) to protect data transmitted over the internet. Our website is hosted in a secure data center in Quebec, Canada. Not only do we have a dedicated IP that is not shared for any purpose outside our organization. Further our webserver only has ports 80 & 443 open to the public to limit the possibility of any unauthorized access. We keep up to date secure versions of PHP and Apache and have an in house Information Technology Professional proactively monitor and maintain our infrastructure. Our security level is beyond the online store requirements stipulated by vendors. Furthermore, our server has DDOS protection at the terabit level and uses automatic mitigation methods. Our hosting in our datacenter features a pre-firewall is based on an Arista 7508R, which can reach a communication capacity of 28.8 Tbit/s. Isolation by VRF then routes the traffic through our system’s successive stages of the firewall network, shielding and armour levels to vacuum up malicious activity.

 

What data breach procedures we have in place

In the event of a data breach, we will notify any users affected and make a public announcement as to the particulars of the breach.

 

What third parties we receive data from

We may use data or snippets of data from sources such as Google, Amazon, Paypal, Stripe, FedEx, Canada Post, UPS or other data providers to enable the required functionality of this website.

 

What automated decision making and/or profiling we do with user data

Our backend can generate profiled reports without user-specific data to help us maintain the reliable working of our systems.

 

Industry regulatory disclosure requirements

Our website follows all industry and regulatory requirements for the province of British Columbia and Canada as well as requirements for other countries as required by-law or to facilitate the delivery of goods to you.