Privacy Policy

1. Introduction

SleighHouse Apparel ("SleighHouse," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect when you visit sleighhouseapparel.com (the "Site"), place an order, subscribe to our emails, or contact us, and how we use, share, protect, and retain that information.

We are based in Ontario, Canada, and we handle personal information in accordance with applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).

By using the Site or placing an order, you agree to the practices described in this policy. If you do not agree, please do not use the Site.

Business name

SleighHouse Apparel

Location

Ajax, Ontario, Canada

Privacy contact

contact@sleighhouseapparel.com

2. Information We Collect

2.1 Information you give us

• Order information: your name, email address, phone number (if provided), shipping address, billing address, and the items you ordered.
• Account information: if you create an account, your name, email address, and password (stored in encrypted form by our store platform).
• Communications: the contents of messages you send us by email or through a contact form, including any details you share about an order or a support issue.
• Marketing sign-ups: your email address (and name, if provided) when you subscribe to our newsletter or promotions.
• Custom or made-to-order details: any sizing, design, or personalization details you submit so we can produce your item.

2.2 Payment information

Payments are handled entirely by our payment processors through the Shopify checkout. We do not see, collect, or store your full credit or debit card number. We may receive limited information about your transaction, such as the payment status, the last four digits of your card, and the card type.

2.3 Information collected automatically

When you visit the Site, we and our service providers automatically collect certain technical information, including:

• Your IP address and approximate location (city or region level)
• Device type, operating system, and browser type
• Pages you view, links you click, time spent on pages, and the website that referred you
• Items you view or add to your cart

This information is collected using cookies and similar technologies (see Section 7).

2.4 Information we do not intentionally collect

We do not knowingly collect sensitive personal information such as government ID numbers, health information, or biometric data. Please do not send us this type of information.

3. How We Use Your Information

We use your personal information to:

• Process, produce, ship, and deliver your orders
• Send order confirmations, shipping updates, and other transactional messages
• Respond to your questions, requests, returns, and support inquiries
• Send marketing emails about new drops, promotions, and news, only if you have opted in
• Operate, maintain, secure, and improve the Site and our products
• Understand how visitors use the Site so we can improve our content and shopping experience
• Detect, prevent, and investigate fraud, abuse, and security incidents
• Comply with legal, tax, accounting, and regulatory obligations
• Enforce our terms and protect our rights

We will not use your personal information for a purpose that is materially different from those above without first obtaining your consent, unless the law allows or requires it.

4. Consent

We collect, use, and share your personal information with your consent, which may be express (for example, ticking a box or submitting a form) or implied (for example, providing your address to have an order shipped to you). You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us using the details in Section 13. Withdrawing consent may mean we can no longer fulfil an order or provide certain services.

5. Who We Share Information With

We do not sell your personal information. We share it only with the following types of service providers and parties, and only as needed for them to perform their services for us:

We may also disclose your information:

• To comply with the law, such as responding to a lawful request, court order, or legal process
• To protect rights and safety, including detecting and preventing fraud or security threats
• In a business transaction, such as a merger, acquisition, financing, or sale of some or all of our business. If this happens, we will require the new owner to continue to protect your information in line with this policy.

Our service providers are permitted to use your information only to provide services to us and not for their own unrelated purposes, except where they act as independent controllers under their own privacy policies (for example, Shopify, Google, and Meta).

6. Where Your Information Is Stored and Transferred Outside Canada

Some of our service providers, including Shopify, Google, Meta, and our production partner, may store or process information in countries other than Canada, including the United States. When your information is processed in another country, it may be accessible to courts, law enforcement, and national security authorities of that country under its laws. We take reasonable steps, including using reputable providers and contractual protections, to ensure your information receives an appropriate level of protection.

7. Cookies and Similar Technologies

7.1 What cookies are

Cookies are small text files stored on your device when you visit a website. We also use similar technologies such as pixels and local storage, which we refer to together as "cookies."

7.2 How we use them

• Essential cookies: needed for the Site to function, such as keeping items in your cart, remembering your session, and completing checkout securely.
• Analytics cookies: we use Google Analytics to understand how visitors use the Site (for example, which pages are popular). Google Analytics collects information such as pages visited, approximate location, and device type. We use this information in aggregate form to improve the Site.
• Marketing cookies: we use the Meta Pixel, a tool from Meta Platforms (Facebook and Instagram), on the Site. It records actions such as pages you view, products you view, items you add to your cart, and when you begin checkout, along with device and browser information and your IP address. We use this information to measure how our ads perform, to show our ads to people who may be interested, and to build advertising audiences. Meta receives this information and may use it as described in its own privacy policy. Purchases completed through the Shopify checkout may also be reported to Meta through Shopify's Facebook and Instagram integration. If we begin using pixels from other advertising platforms, we will update this section to name them.

7.3 Your choices

You can control or delete cookies through your browser settings. Blocking essential cookies may prevent parts of the Site, such as the cart and checkout, from working properly. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout. You can control how Meta uses your information for advertising through the ad preferences in your Facebook or Instagram account settings, or at https://www.facebook.com/adpreferences. Some browsers also offer "Do Not Track" or Global Privacy Control signals; because there is no common industry standard for these, our Site may not respond to all of them.

8. Marketing Emails and CASL

We send marketing emails only to people who have given us consent, or where the law otherwise allows. Every marketing email includes our contact information and a working unsubscribe link. You can unsubscribe at any time by clicking the link in any email or by contacting us at the address in Section 13, and we will process your request within 10 business days. Even if you unsubscribe from marketing, we will still send transactional messages about your orders, such as order confirmations, shipping updates, and responses to your support requests.

9. How Long We Keep Your Information

We keep personal information only as long as needed for the purposes described in this policy, or as required by law. As a general guide:

• Order and transaction records: kept for at least six years to meet Canadian tax and accounting requirements.
• Customer support messages: kept for as long as needed to resolve your inquiry and handle any follow-up, then deleted or archived in line with our business needs.
• Marketing subscriber data: kept until you unsubscribe or ask us to delete it. We may keep a minimal record of your unsubscribe so we do not email you again.
• Analytics data: kept for the period configured in our analytics account, which is 14 months.

When information is no longer needed, we delete it or anonymize it so it can no longer identify you.

10. How We Protect Your Information

We use reasonable physical, organizational, and technical safeguards appropriate to the sensitivity of the information, including encrypted connections (HTTPS), access controls, and the use of reputable, security-conscious service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required by law.

11. Your Privacy Rights

Under Canadian privacy law, you have the right to:

• Access: request access to the personal information we hold about you.
• Correction: ask us to correct information that is inaccurate or incomplete.
• Withdraw consent: withdraw your consent to our collection, use, or sharing of your information, subject to legal or contractual limits.
• Deletion: ask us to delete your personal information, where we are not required or permitted to keep it (for example, for tax records).
• Unsubscribe: opt out of marketing emails at any time.
• Complain: raise a concern about how we handle your information.

To make a request, contact us using the details in Section 13. We may need to verify your identity before acting on a request to protect your privacy. We aim to respond within 30 days. There is generally no charge for a request, but we may charge a reasonable fee for unusually large or repetitive requests and will tell you in advance.

If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca or 1-800-282-1376.

12. Children's Privacy

Our Site and products are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has given us personal information, please contact us and we will delete it.

13. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or wish to make a complaint, please contact our privacy contact:

SleighHouse Apparel

Attn: Privacy Officer

Email

contact@sleighhouseapparel.com

Mailing address

Available on request

14. Third-Party Links and Services

The Site may contain links to third-party websites, such as social media platforms or shipping tracking pages. We do not control these sites and are not responsible for their privacy practices. We encourage you to read their privacy policies before providing any personal information.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page. If the changes are significant, we will take additional steps to notify you, such as posting a notice on the Site or emailing subscribers. Your continued use of the Site after changes are posted means you accept the updated policy.