Privacy Policy

We collect the following categories of personal information:

• Account and order information. Your name, business name, email address, phone number, billing and shipping addresses, and the contents of your orders when you register an account or make a purchase.
• Payment information. Card and payment details you enter at checkout. As described below, full card numbers are transmitted directly to our PCI DSS compliant payment processor and are not stored on our servers.
• Communications. The content of messages you send to our support, sales, or service teams, including email.
• Technical and usage information. Information collected automatically when you use our site, such as IP address, browser type, device information, pages viewed, and the dates and times of access, gathered through cookies and similar technologies.

We use personal information to:

• Process, fulfil, and ship your orders.
• Create and manage your account.
• Process payments and detect, prevent, and investigate fraud or unauthorized transactions.
• Provide customer support, warranty service, and respond to your requests.
• Send transactional messages such as order confirmations, shipping updates, and account notices.
• Comply with legal, tax, accounting, and regulatory obligations.
• Improve and secure our website, products, and services.

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances, and we rely on your consent or another lawful basis as required by applicable law.

Payment card transactions are processed by our third party payment gateway, which is certified under the Payment Card Industry Data Security Standard (PCI DSS). When you submit payment details, your card information is transmitted directly to the payment processor over an encrypted connection and is tokenized. We do not store complete card numbers, card verification values (CVV), or full magnetic stripe data on our systems.

We may retain limited, non sensitive transaction records (such as the last four digits of a card, card brand, authorization result, and amount) for order management, accounting, fraud prevention, and dispute resolution. Your use of payment features is also subject to the terms and privacy practices of the payment processor.

We do not sell your personal information. We share it only as needed with:

• Service providers who act on our behalf, such as our payment processor, shipping and logistics carriers, hosting and infrastructure providers, and email delivery providers, who are permitted to use the information only to provide services to us.
• Legal and regulatory authorities when required by law, regulation, legal process, or a lawful government request, or to protect our rights, safety, and property or that of others.
• A successor entity in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

We use cookies and similar technologies to keep you signed in, maintain your cart, remember preferences, secure the site, and understand how the site is used. You can control cookies through your browser settings, although disabling some cookies may affect site functionality such as checkout and account access.

We retain personal information only as long as necessary to fulfil the purposes described in this policy, including to provide our services, maintain records for tax and accounting purposes, resolve disputes, and comply with legal obligations. When information is no longer required, we securely delete or anonymize it.

We maintain administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, or use. These include encryption of data in transit, access controls, and use of PCI DSS compliant payment infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Subject to applicable law, you have the right to:

• Access the personal information we hold about you and request a copy.
• Request correction of inaccurate or incomplete information.
• Withdraw your consent to our use of your personal information, subject to legal and contractual restrictions and reasonable notice.
• Request deletion of your personal information where we are not required to retain it.
• Ask questions or make a complaint about how we handle your personal information.

To exercise any of these rights, contact our privacy team using the details below. We will respond within the timeframes required by applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

Your information may be stored and processed in Canada and in other countries where we or our service providers operate. Where personal information is transferred outside your province or country, it may be subject to the laws of those jurisdictions, and we take steps to ensure it receives a comparable level of protection through contractual and other safeguards.

Our website and products are intended for businesses and individuals who are at least the age of majority in their jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we do, we will revise the date at the top of this page. Material changes will be communicated through the website or by other appropriate means.

If you have questions, requests, or complaints about this policy or our handling of your personal information, please contact our privacy team:

• Email: privacy@caviarpos.ca
• Armour Payments, Privacy Officer (CAVIAR POS)