Privacy policy

We handle personal information in line with Canada’s federal private-sector privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), and collect only what we need to run the shop.

What we collect

When you order: your name, email address, phone number, shipping address and what you bought. Payment details are entered on Stripe’s secure page; we never see or store your full card number.
If you sign in with Google: your name, email address and a Google account identifier, provided by Google through Firebase Authentication. We do not receive your Google password.
When you contact us: your name, email address and your message.
Technical information: our servers keep short-lived technical logs (such as IP address and browser type) to keep the site secure and working.

How we use it

To process, ship and support your orders, including order and shipping emails.
To show your order history when you are signed in.
To answer your questions and handle returns and refunds.
To prevent fraud, keep the site secure, and meet our legal, tax and accounting obligations.

We do not sell your personal information, and we do not send marketing emails unless you have asked to receive them.

We share information only with service providers that help us run the shop, and only what they need:

Stripe: payment processing.
Google (Firebase Authentication): sign-in, if you choose to sign in.
Our database and hosting providers: to store orders and run the website.
Our email provider: to send order and shipping emails.
Shipping carriers: your name, address and phone number, to deliver your parcel.

Some of these providers may store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law. We may also disclose information when required by law.

Cookies & browser storage

We use only what the shop needs to work; there are no advertising or tracking cookies:

Your cart is saved in your browser so it is still there when you come back.
If you sign in, a secure cookie keeps you signed in (for up to 30 days, or until you sign out).

How long we keep it

Order records are kept for at least six years, as Canadian tax rules require. Contact messages are kept as long as needed to help you. You can ask us to delete your account information; we will remove what we are not legally required to keep.

Your choices & rights

You can ask to see the personal information we hold about you, and ask us to correct it.
You can withdraw your consent (for example, delete your account), subject to legal and contractual limits.
If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

We protect your information with reasonable safeguards, including encrypted connections (HTTPS) and restricted access.

Contact

Questions or requests about your privacy: email contact@lovaretea.ca or use our contact form. LOVARÉ Tea, Toronto, Ontario, Canada.

We may update this policy; the date at the top shows the latest version.