Privacy policy

This policy covers puxxlife.ca, run by PUXX Canada in Ontario. We handle personal information under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and send marketing email under Canada’s Anti-Spam Legislation (CASL). Questions about this policy go through our contact page.

We only collect what we need to run the store:

• When you order: your name, email address, shipping address, phone number, billing address, what you bought and how it’s delivered.
• When you create an account: your name, email address, password (stored only in a scrambled, one-way form we can’t read), preferred email language and any addresses you save.
• When you contact us: your name, email address, topic, order number if you give one, and your message.
• When you sign up for our emails: your email address, where on the site you signed up and when you confirmed.
• When you pay: card details go straight to our payment processor. We never see or store your full card number.

To keep the store safe, we count sign-in attempts and form submissions to block abuse. These counters use a one-way code made from your IP address or email address, never the address itself, and expire within minutes to an hour.

When you create an account, reset a password or have several failed sign-ins, our hosting provider’s bot check confirms you’re a person rather than a bot. It receives your IP address and some browser details to do that.

Like most websites, our hosting provider keeps short-term technical logs of requests to the site so we can fix errors and stop attacks.

Our hosting provider also gives us visit statistics: which pages are viewed, how fast they load, the kind of browser and device, and roughly which country visitors come from. These statistics don’t use cookies, don’t identify you and don’t follow you to other websites.

• To take payment, pack and ship your order, and email you about it (order confirmation, shipping and delivery updates, returns and refunds).
• To run your account: signing in, resetting your password, confirming email changes.
• To answer your messages.
• To send our newsletter, only if you asked for it.
• To see which pages are visited and how fast they load, so we can improve the store.
• To protect the store and our customers from fraud and abuse.
• To keep the records that tax and accounting law requires.

We don’t sell or rent your personal information, and we don’t use it for advertising.

Our newsletter tells you about new products, restocks and seasonal kits. We only send it after you sign up and confirm with the link we email you. Every newsletter has an unsubscribe link, and you can also turn it off in My account. When you unsubscribe, we keep your email address marked as unsubscribed so we don’t email you again by mistake.

Emails about your orders and your account aren’t marketing, so they keep coming while you have an order or an account with us.

We share personal information only with the companies that help us run the store, and only what each one needs:

• Our hosting provider runs the website, stores our data and images, sends our emails, runs the bot check and provides our visit statistics.
• Shipping carriers (such as Canada Post) receive your name, shipping address and phone number to deliver your order.
• Our payment processor receives your payment details to take payment.

These providers may process information outside Canada, including in the United States, where it may be accessible to authorities under local law. We may also share information when the law requires it, or to protect our rights or our customers’ safety.

We use a small number of cookies and similar browser storage, all needed for the store to work:

• payload-token keeps you signed in, for up to 14 days if you choose “Keep me signed in”, or until you close your browser if you don’t.
• puxx_consent remembers your cookie choices for 1 year.
• Your cart is kept in your browser’s storage so it’s still there when you come back. The details you type at checkout are kept only until you close the tab.

We don’t use analytics or advertising cookies: our visit statistics work without them. If we ever add such cookies, we’ll ask for your permission first through the cookie banner, and you can change your choice at any time from “Cookie preferences” in the footer.

• Orders are kept for as long as tax and accounting law requires, which in Canada is generally six years.
• Your account and saved addresses are kept until you ask us to delete them.
• Messages you send us are kept while we need them to help you and follow up.
• Security counters expire on their own within an hour.

You can update your name, email address, password and saved addresses in My account at any time.

You can also ask us to show you the personal information we hold about you, correct it, or delete your account and personal details. Send your request through our contact page, and we’ll confirm by email and reply within 30 days. We may need to confirm your identity first, and we keep order records that the law requires us to keep.

You can withdraw your consent to our newsletter at any time. If you’re not happy with how we’ve handled your information, please tell us first. You can also complain to the Office of the Privacy Commissioner of Canada.

The whole site runs over an encrypted connection. Passwords are stored only in a one-way form, accounts lock for 15 minutes after repeated wrong passwords, and only our staff can open order and customer records. No system is perfectly secure, but if a breach puts you at real risk of significant harm, we’ll tell you and the Privacy Commissioner as the law requires.

Our store is for adults. We don’t knowingly collect personal information from children. If you think a child has given us their information, contact us and we’ll delete it.

We’ll update this policy when the way we handle personal information changes, and change the date at the top.