Privacy policy

• When you order: your name, email, shipping address, optional phone number and the items you bought. The address is kept with that order so we can deliver it and help with any delivery problem.
• Saved addresses: only if you choose to. Your account stores an address only when you tick “Save this address” at checkout or add one on your account page, and you can delete it at any time.
• If you pay with crypto: the coin, amount, network and transaction ID of your payment, which our payment provider sends us to confirm it. Blockchain payments are public by nature. We never see or hold your wallet's keys.
• When you report a damaged, wrong or missing item: the items, the reason, your note and any photo you add, kept with the order so we can replace the item or issue store credit.
• Gift cards and store credit: the balance, kept against a code or your email address, with a record of when it was added or spent.
• When you create an account: your email and a securely hashed password. We never see your password.
• Any email address you give us (at checkout, for an offer, for a back-in-stock alert, when you create an account or when you contact us) goes on our email list, with where and when we got it.
• When you contact us or leave a review: your name, email, order number and what you wrote. Published reviews show only the name you choose.
• When you use address suggestions at checkout: the address text you type, sent to our address lookup provider to find matches.
• How you use the shop: pages and products you view, searches, what you add to or leave in your cart, and which checkout steps you reach. Once you sign in, type your email at checkout or place an order, this is linked to your email. We keep it with your device type, browser, operating system and approximate province, worked out from your connection; we don't store your IP address with it.
• Referral codes: if you arrive through a partner's link or use their code, we record that the order came from them so we can credit them.
• Basic technical information, such as your IP address, used briefly to prevent abuse and spam.

To process, ship and support your order, match your payment to it, run your account, answer your messages and send the emails you asked for. We may also email you about new products, restocks, offers and items left in your cart. Every one of these emails has an unsubscribe link, or you can ask us to stop through our contact form; once you ask, we stop for good. We don't sell or rent your information.

Only what each service needs to do its job: Canada Post receives your name and address, our hosting and database providers store the site and its data, our email provider sends order and account emails, and our crypto payment provider processes the payments it handles. They may use your information only to provide their service to us.

We use a cookie to remember that you confirmed you're 19 or older, and a sign-in cookie if you sign in. Your cart and any discount code are kept in your own browser. We also use Google Analytics, which sets its own cookies, to count visits and see which pages and products people use. It doesn't receive your name, email or address. You can block it with your browser's privacy settings or Google's opt-out add-on.

You can check out as a guest, choose not to save addresses, and stop our marketing emails at any time. You can also ask us to delete your account and the activity linked to it.

Your information is stored with access limited to our staff, protected by two-step sign-in. No system is perfectly secure, but we take reasonable care to protect what you share. We keep order records as long as accounting and legal obligations require, then delete them. Detailed browsing activity is deleted after about 180 days.

Our database is hosted in Canada. Some service providers, such as our website host and email provider, may process information outside Canada.

This site is for adults 19 and older. We don't knowingly collect information from anyone younger.

If we change this policy, we'll post the new version here with its date.

You can ask to see, correct or delete the personal information we hold about you, as Canadian privacy law (PIPEDA) provides. Use our contact form or email support@peptune.net.