1. Information We Collect

We only collect personal information necessary to deliver fulfillment services, administer member benefits, and maintain platform security:

• Account & Contact Credentials: Name, organization or research affiliation, email address, contact phone number, account password hash, and default delivery destinations.
• Order & Billing Data: Transaction histories, ordered SKUs, order notes, and payment identifiers. Payment details (credit card tokens, Interac reference IDs, or crypto transaction hashes) are processed directly by certified third-party payment gateways; we never store raw credit card numbers on our servers.
• Communications: Records of support tickets, email inquiries, and order modification requests.
• Technical & Session Data: IP address, device specifications, browser type, referral URLs, and interactions with our product catalog captured via session cookies.

2. How We Use Your Information

• Fulfillment & Logistics: Processing payments, creating courier manifests with Canada Post/courier partners, generating invoices, and distributing tracking credentials.
• Account Administration & Promotions: Managing your customer account portal, enforcing promotional integrity (such as one-time welcome offers), and delivering optional newsletter discounts.
• Cart Recovery & Automated Service Notices: Transmitting order confirmation receipts and sending automated incomplete checkout reminders to authenticated account holders.
• Regulatory & Security Compliance: Mitigating unauthorized fraud, verifying age of majority (18+), ensuring compliance with research-use restrictions, and securing our API architecture.

3. Disclosure & Third-Party Service Providers

We do not sell, rent, monetize, or trade your personal data. Information is disclosed strictly to trusted third-party service providers essential to our business operations:

• Domestic Courier Networks: Canada Post, Purolator, UPS, or equivalent courier services strictly for parcel transit and proof of delivery.
• Payment Processors: Secure gateways executing encrypted transaction settlements.
• Infrastructure & Security: Cloud servers, database backups, and transactional email infrastructure (e.g., automated dispatch and abandoned cart notifications).
• Legal Requirements: If compelled by lawful court order, subpoena, or to prevent fraudulent activity threatening platform integrity.

4. Cookies & Tracking Technologies

We deploy cookies and local storage tokens to preserve session states (such as active shopping cart contents and login authorization). You can configure your browser to reject cookies, though doing so may disable cart management and member dashboard access.

5. Data Security & Retention

We employ industry-standard 256-bit SSL encryption, isolated network configurations, and role-based access restrictions to protect personal information. While no digital platform is invulnerable, we take all reasonable commercial safeguards against unauthorized disclosure or loss.

Order and transactional records are retained as required under Canadian corporate tax, accounting, and legal audit frameworks, after which records are anonymized or permanently destroyed.

6. Your Rights & Access Requests

Under Canadian privacy statutes, you maintain the right to:

• Review the personal data held about your account.
• Request updates or corrections to outdated or inaccurate personal details.
• Request the deletion of your account and associated marketing preferences (subject to statutory record retention rules).
• Unsubscribe from promotional dispatches at any time via the one-click link included in every newsletter footer.