Privacy Policy

1. Who We Are

We operate globally and comply with Canadian (PIPEDA), European (GDPR), and California (CCPA) privacy regulations.

2. Information We Collect

We collect the following categories of personal data:

3. How We Use Your Information

We use your data to:

• Process and deliver orders
• Communicate about purchases, shipping, and support
• Send marketing emails (only if you opt-in)
• Improve our website, products, and customer experience
• Detect and prevent fraud
• Comply with legal or tax obligations

We do not sell your personal data.

4. Legal Basis for Processing (GDPR)

For users in the EU/UK, we process data under the following lawful bases:

• Contractual necessity: to fulfill your order or provide requested services
• Legitimate interest: to improve services and prevent fraud
• Consent: for marketing and analytics (you can withdraw anytime)
• Legal obligation: to comply with tax or recordkeeping requirements

5. How We Share Your Information

We only share information with trusted third parties as necessary to run our business:

Each of these providers has its own privacy policy and complies with relevant privacy and data protection standards.

We do not sell or rent customer information to any other business.

6. Data Retention

We retain your information only as long as necessary for the purposes outlined above:

• Order and transaction records: minimum 7 years (tax compliance)
• Marketing data: until you unsubscribe
• Analytics data: anonymized and aggregated after 24 months

7. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Enable site functionality
• Remember preferences
• Analyze usage (Posthog, Google Analytics)
• Personalize ads (Meta Pixel)

You can manage cookies via your browser or by adjusting your preferences in our Cookie Policy.

8. International Data Transfers

Your information may be transferred outside Canada (including to the U.S. or EU). We ensure that all transfers comply with applicable data protection laws and that appropriate safeguards (such as Standard Contractual Clauses) are in place.

9. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your data
• Withdraw consent to marketing or analytics
• Request data portability
• File a complaint with your local data protection authority

To exercise these rights, contact support@urbansnouts.com. We may require verification of your identity before fulfilling your request.

10. Data Security

We use SSL encryption, secure hosting (Vercel, Cloudflare), and strict access controls to protect your personal information. While we follow industry standards, no method of transmission is 100% secure — you share information at your own risk.

11. Children's Privacy

Our Services are not directed toward children under 16. If we become aware that we've collected data from a child without consent, we'll delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. Revisions will be posted here with an updated "Last Updated" date. We encourage you to review it regularly.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy, contact: