Privacy Policy for The Mossy Shed
Effective Date: February 22, 2026 Jurisdiction: Canada URL: www.themossyshed.ca
1. Regulatory Compliance
This Privacy Policy governs the collection, use, and disclosure of personal information by The Mossy Shed ("the Entity"). Operations are conducted in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). For users residing in Quebec, the Entity adheres to Law 25 (An Act to modernize legislative provisions as regards the protection of personal information).
2. Information Collection
The Entity collects Personal Information only as necessary for the identified purposes. This data includes:
-
Identifiers: Name, shipping address, billing address, email address, and telephone number.
-
Transaction Data: Details regarding products purchased and payment status (processed via third-party encrypted gateways).
-
Technical Data: IP address, browser type, and usage patterns collected via cookies or similar tracking technologies for analytical optimization.
3. Purpose of Processing
Personal Information is processed for the following objectives:
-
Contractual Necessity: Fulfillment of orders and delivery of goods.
-
Communication: Provision of transactional updates and response to inquiries.
-
Legal Obligation: Compliance with Canadian tax regulations and financial reporting.
-
Marketing: Only upon receipt of express consent, in compliance with Canada’s Anti-Spam Legislation (CASL).
4. Disclosure to Third Parties
The Entity does not sell or trade personal data. Information is disclosed to third-party service providers solely to facilitate operations:
-
Logistics: Courier services for physical delivery.
-
Payment Processing: Secure financial intermediaries (e.g., Shopify Payments, PayPal).
-
Analytics: Providers utilized for monitoring website performance.
5. Data Retention and Security
Personal Information is retained only for the duration required to fulfill the purposes outlined in Section 3 or as mandated by statutory retention periods. The Entity employs administrative, technical, and physical safeguards to protect data against unauthorized access, loss, or theft.
6. Rights of the Data Subject
Under Canadian law, individuals possess the following rights regarding their Personal Information:
-
Access: The right to request a copy of the personal data held by the Entity.
-
Rectification: The right to request the correction of inaccurate or incomplete data.
-
Withdrawal of Consent: The right to withdraw consent for data processing at any time, subject to legal or contractual restrictions.
7. Transborder Data Flows
Personal Information may be stored or processed on servers located outside of Canada (e.g., the United States). In such instances, the data is subject to the laws of the jurisdiction in which it is stored and may be accessible to the governments, courts, or law enforcement of that jurisdiction.
8. Contact Information and Privacy Officer
Inquiries regarding this policy or the management of personal data should be directed to the designated Privacy Officer:
Privacy Officer Website: www.themossyshed.ca