PRIVACY POLICY

Effective Date: 1 June 2026  |  Applies To: Canada Only  |  Last Updated: 10 June 2026

PIPEDA Compliance Notice: This Privacy Policy is written in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Alberta, British Columbia, and Quebec. Whisker's Kingdom collects, uses, and discloses personal information only in accordance with these laws.

1. Who We Are

Whisker's Kingdom ("we", "us", "our") is a Canadian-owned online pet store operating through Shopify Collective, serving customers across all Canadian provinces and territories. Our website is located at whiskerskingdom.ca and our privacy officer can be reached at contact@whiskerskingdom.ca.

2. What Personal Information We Collect

We collect the following categories of personal information from you:

Information you provide directly

  • Contact information: full name, email address, phone number, mailing address

  • Account information: username, password (encrypted), account preferences

  • Order information: billing address, shipping address, order history, payment method type (not full card numbers — processed by Shopify Payments)

  • Communications: messages you send us via email or contact forms

Information collected automatically

  • Device & usage data: IP address, browser type, operating system, pages visited, time spent on site

  • Cookies & tracking: Shopify analytics cookies, preference cookies, and marketing cookies (with your consent)

  • Location data: general geographic location inferred from IP address (province/city level only)

Information from third parties

  • Shopify Collective suppliers: fulfillment and shipping status updates

  • Payment processors: transaction confirmation data (we never store full payment card numbers)

3. How We Use Your Personal Information

We use your personal information for the following purposes:

  • To process and fulfill your orders and communicate with you about them

  • To send transactional emails (order confirmations, shipping notifications, return updates)

  • To send marketing emails only with your express consent under CASL

  • To improve our website and product offerings using aggregated analytics data

  • To comply with legal obligations including tax, consumer protection, and anti-spam law

  • To prevent fraud and protect the security of our platform

  • To respond to your enquiries and provide customer support

4. Legal Basis for Processing

Under PIPEDA, we only collect and use your personal information when we have a valid reason. Our legal bases are:

  • Your consent — for marketing emails, analytics cookies, and non-essential data collection

  • Contractual necessity — to process your order and deliver your purchase

  • Legal obligation — to comply with Canadian tax law, anti-spam law (CASL), and consumer protection legislation

  • Legitimate interest — for fraud prevention and platform security, where your privacy interests are not overridden

5. How We Share Your Information

We do not sell your personal information. We share it only in the following limited circumstances:

  • Shopify Collective suppliers: your shipping address and order details are shared with the supplier fulfilling your order

  • Shopify Inc.: our ecommerce platform processes orders and payments — see Shopify's Privacy Policy at https://www.shopify.com/legal/privacy

  • Shipping carriers: your name and delivery address are shared with the courier delivering your order

  • Legal authorities: where required by Canadian law, court order, or to protect our legal rights

  • Business transfers: in the event of a merger or acquisition, your data may transfer to a successor entity with equivalent privacy protections

Cross-border transfers: Shopify Inc. is headquartered in Ottawa, Canada but operates global servers. Your data may be processed in the United States or other countries. We ensure Shopify maintains contractual safeguards consistent with PIPEDA requirements.

6. Cookies & Tracking Technologies

Our website uses cookies and similar technologies. Under PIPEDA and provincial privacy laws, we require your meaningful consent for non-essential cookies.

  • Essential cookies: required for the website to function (shopping cart, login session) — no consent required

  • Analytics cookies: help us understand how visitors use our site — require your consent

  • Marketing cookies: used for targeted advertising and remarketing — require your express consent

You can manage your cookie preferences at any time through our cookie consent banner or by adjusting your browser settings.

7. Your Rights Under PIPEDA

As a Canadian resident, you have the following rights regarding your personal information:

  • Right of access: request a copy of the personal information we hold about you

  • Right to correction: request that inaccurate or incomplete information be corrected

  • Right to withdraw consent: withdraw consent for non-essential data uses at any time

  • Right to know about disclosures: request information about third parties to whom your data has been disclosed

  • Right to challenge compliance: file a complaint with our Privacy Officer or the Office of the Privacy Commissioner of Canada

Quebec residents have additional rights under Law 25 (Bill 64), including the right to data portability and the right to erasure in certain circumstances.

To exercise any of these rights, contact our Privacy Officer at support@whiskerskingdom.ca 

8. Data Retention

We retain your personal information only as long as necessary for the purposes for which it was collected:

  • Order data: 7 years (required for Canadian tax compliance)

  • Account data: for the duration of your account, plus 2 years after account closure

  • Marketing consent records: 3 years after consent is given or withdrawn (required by CASL)

  • Customer service records: 3 years from last interaction

  • Analytics data: aggregated and anonymized — retained indefinitely

9. Data Security

We implement appropriate technical and organisational safeguards to protect your personal information, including:

  • SSL/TLS encryption for all data transmitted through our website

  • Shopify's PCI-DSS compliant payment processing — we never store full card numbers

  • Access controls limiting employee access to personal data on a need-to-know basis

  • Regular security assessments of our platform and third-party integrations

Breach notification: In the event of a data breach posing a "real risk of significant harm" to Canadians, we will notify both the affected individuals and the Office of the Privacy Commissioner of Canada (OPC) as soon as feasible, in compliance with PIPEDA's mandatory breach reporting requirements.

10. Children's Privacy

Whisker's Kingdom does not knowingly collect personal information from children under the age of 13. If you believe a child has provided us with personal information, please contact us immediately at contact@whiskerskingdom.ca and we will delete the information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have an account) and update the "Last Updated" date at the top of this page. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Contact Our Privacy Officer

All privacy enquiries, access requests, and complaints should be directed to:

  • Email: contact@whiskerskingdom.ca