Privacy Policy — Chromin.shop

Last Updated: August 14, 2026

Chromin.shop (“we,” “us,” “our,” or the “Company”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have regarding your information. It applies to all visitors, customers, and users of chromin.shop (the “Site”) and any related services.

This Policy is designed to comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), the EU/UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), as applicable to visitors from those regions.

By using the Site, you agree to the collection and use of information in accordance with this Policy.

1. Who We Are

Chromin.shop is operated out of Ontario, Canada. For the purposes of this Policy, our designated Privacy Officer is responsible for ensuring compliance with applicable privacy laws and for responding to privacy-related inquiries or complaints.

Contact for privacy matters:
Email: support@chromin.shop

2. Information We Collect

We collect information in the following ways:

2.1 Information You Provide Directly

Account & Order Information: Name, email address, shipping address, billing address, phone number.
Payment Information: Payment details are collected and processed by our third-party payment processor(s) (e.g., Shopify Payments, Stripe, PayPal, or similar). We do not store full credit card numbers on our own servers.
Communications: Information you provide when you contact us via email, contact form, or customer support (e.g., order inquiries, complaints, review submissions).
Marketing Preferences: Email or SMS opt-in information if you subscribe to newsletters or promotions.

2.2 Information Collected Automatically

Device & Usage Data: IP address, browser type, device type, operating system, referring URLs, pages visited, time spent on pages, and click behavior.
Cookies & Tracking Technologies: See Section 6 below.
Location Data: General geographic location inferred from IP address (used for currency display, shipping estimates, and fraud prevention — not precise GPS tracking).

2.3 Information from Third Parties

Advertising Platforms: If you arrive at our Site via an ad (e.g., Meta/Facebook, Instagram, TikTok, Google Ads), those platforms may share aggregated or pseudonymized performance data with us (e.g., ad click data, conversion events).
Fulfillment & Logistics Partners: Order and shipping status data shared with/from our fulfillment partners (see Section 4).

3. How We Use Your Information

We use collected information for the following purposes:

Purpose	Examples
Order fulfillment	Processing, packing, shipping, and tracking your order
Customer service	Responding to inquiries, resolving disputes, processing returns/refunds
Account management	Creating and maintaining your customer account
Marketing (with consent)	Sending promotional emails, product updates, discount codes
Site improvement	Analyzing traffic and behavior to improve site design and product offerings
Fraud prevention & security	Detecting and preventing fraudulent transactions or unauthorized access
Legal compliance	Meeting tax, accounting, and legal recordkeeping obligations

We only use your personal information for the purpose(s) for which it was collected, unless we obtain your consent for a new purpose or are required/permitted by law to do otherwise.

4. Who We Share Your Information With

We do not sell your personal information. We share information only as necessary with the following categories of third parties:

Payment Processors — to securely process transactions.
Fulfillment & Supply Chain Partners — including logistics/inventory-sync providers (e.g., BuckyDrop) and our supplier network, solely to fulfill and ship your order.
Shipping Carriers — to deliver your order and provide tracking.
Website & Hosting Providers — including our WooCommerce/WordPress hosting provider, which stores Site data on our behalf.
Email/SMS Marketing Platforms — if you have opted in to receive marketing communications.
Analytics Providers — such as Google Analytics, Meta Pixel, or TikTok Pixel, to understand Site traffic and ad performance.
Legal & Regulatory Authorities — where required to comply with a legal obligation, court order, or to protect our rights, property, or safety, or that of our customers.

All third-party service providers are contractually obligated (or bound by their own privacy policies) to protect your information and use it only for the purposes we specify.

International Data Transfers

Some of our service providers (e.g., cloud hosting, analytics, payment processing) may store or process data outside of Canada, including in the United States or other countries. Where personal information crosses borders, we take reasonable steps to ensure it receives a comparable level of protection, consistent with PIPEDA’s accountability principle. Data may therefore become subject to the laws of the jurisdiction in which it is held, including lawful access requests by that jurisdiction’s authorities.

5. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this Policy, including:

Order records: Retained for the duration required by Canadian tax and accounting law (generally a minimum of 6 years).
Account information: Retained while your account remains active, or until you request deletion.
Marketing data: Retained until you unsubscribe or withdraw consent.

Once information is no longer needed, we securely delete, destroy, or anonymize it.

6. Cookies & Tracking Technologies

We use cookies and similar tracking technologies (pixels, local storage, tags) to:

Keep your cart and session active
Remember your preferences (currency, language)
Analyze Site traffic and user behavior (Google Analytics or similar)
Deliver and measure targeted advertising (Meta Pixel, TikTok Pixel, Google Ads tracking)

Types of Cookies Used

Essential Cookies — required for the Site (e.g., WooCommerce cart) to function; cannot be disabled.
Performance/Analytics Cookies — help us understand how visitors use the Site.
Advertising Cookies — used to deliver relevant ads and measure campaign performance across platforms.

You can control or disable cookies through your browser settings. Disabling essential cookies may affect Site functionality (e.g., cart or checkout may not work properly). Where required by law (e.g., for EU/UK visitors), we will present a cookie consent banner allowing you to accept or reject non-essential cookies before they are set.

7. Your Privacy Rights

7.1 All Users (PIPEDA — Canada)

Under PIPEDA, you have the right to:

Know what personal information we hold about you and why
Access your personal information
Correct inaccurate or incomplete information
Withdraw consent for the use of your information (subject to legal or contractual restrictions)
File a complaint with our Privacy Officer, or with the Office of the Privacy Commissioner of Canada, if you believe your rights have been violated

7.2 EU/UK/EEA Residents (GDPR)

If you are located in the EU, UK, or EEA, you additionally have the right to:

Request erasure of your personal data (“right to be forgotten”)
Restrict or object to certain processing
Data portability (receive your data in a structured, machine-readable format)
Lodge a complaint with your local data protection authority

Our legal bases for processing include: your consent, performance of a contract (order fulfillment), legitimate business interests, and compliance with legal obligations.

7.3 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

Know what personal information is collected, used, disclosed, or sold
Request deletion of personal information
Correct inaccurate personal information
Opt out of the sale or sharing of personal information (we do not sell personal information)
Non-discrimination for exercising your privacy rights

How to Exercise Your Rights

Submit requests to support@chromin.shop. We will verify your identity before processing requests and will respond within the timeframe required by applicable law (generally 30 days under PIPEDA/GDPR, 45 days under CCPA).

8. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction, including:

SSL/TLS encryption on all Site pages
Secure, PCI-compliant payment processing (we do not store full payment card data)
Restricted internal access to customer data on a need-to-know basis
Regular software and security updates to our hosting and e-commerce platform

No method of transmission or storage is 100% secure. In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law, without unreasonable delay.

9. Children’s Privacy

Our Site is not directed at children under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

10. Marketing Communications

If you subscribe to our email or SMS marketing:

You may unsubscribe at any time via the “unsubscribe” link in emails or by replying “STOP” to SMS messages.
We will not share your contact information with unrelated third parties for their own independent marketing purposes without your consent.

11. Third-Party Links

Our Site may contain links to third-party websites (e.g., social media, supplier verification pages). We are not responsible for the privacy practices of those third-party sites. We encourage you to review their privacy policies independently.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The “Last Updated” date at the top of this Policy reflects the most recent revision. Material changes will be communicated via Site notice or email where appropriate. Continued use of the Site after changes are posted constitutes acceptance of the revised Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact:

Privacy Officer
Chromin.shop
Email: support@chromin.shop

If you are not satisfied with our response, Canadian residents may contact the Office of the Privacy Commissioner of Canada:
Website: www.priv.gc.ca
Phone: 1-800-282-1376