Privacy policy

What we collect

When you order: your name, email, shipping address, optional phone number and the items you bought. The shipping address is kept with that order so we can deliver it and help with any delivery problem.
Saved addresses: only if you choose to. Your account never stores an address unless you tick “Save this address” at checkout or add one on your account page, and you can delete saved addresses at any time.
If you pay with crypto: the coin, amount, network and blockchain transaction ID of your payment, which our payment provider ATLOS sends us to confirm it. Blockchain payments are public by nature. We never see or hold your wallet's keys.
When you create an account: your email and a securely hashed password. We never see your password.
When you sign up for the welcome offer, or tick the email box at checkout: your email, and whether and when you agreed to receive marketing emails.
When you contact us or leave a review: your name, email, order number and what you wrote. Published reviews show only the name you choose.
When you use address suggestions at checkout: the address text you type, sent to our address lookup provider to find matches.
How you use the shop: pages and products you view, searches, and what you add to or leave in your cart. If you're signed in, once you type your email at checkout, or once you place an order, this is linked to your email. We also record which checkout steps you reach, so we can see where checkout is hard to finish. We use it to improve the shop, recommend products and send cart reminders if you agreed to emails. Alongside it we keep your device type (phone, tablet or computer), browser, operating system and approximate country and province, worked out from your connection; we don't store your IP address with it.
Referral codes: if you arrive through a partner's link or use their code, we record that the order came from them so we can credit them.
Basic technical information, such as your IP address, which we use briefly to prevent abuse and spam.

How we use it

We use your details to process, ship and support your order, to match your e-Transfer to your order, to run your account, to answer your messages and to send your welcome code. We only send marketing emails if you ticked the box to receive them, and you can unsubscribe at any time. We don't sell your information.

Who we share it with

We share only what each service needs to do its job: our shipping carriers receive your name and address, our hosting and database providers store the site and its data, and our email provider sends order and account emails. They may only use your information to provide their service to us.

Cookies and browser storage

We use a cookie to remember that you confirmed you're 19 or older, and a login cookie if you sign in. Your cart and any discount code are kept in your own browser.

Your choices

You can check out as a guest, skip the welcome offer, choose not to save addresses, and unsubscribe from marketing emails at any time. You can also ask us to delete your account and the activity linked to it.

Keeping it safe and how long we keep it

Your information is stored with access limited to our staff, protected by two-step login. No system is perfectly secure, but we take reasonable care to protect what you share. We keep order records for as long as we need them for accounting and legal obligations, then delete them.

Where it's stored

Our database is hosted in Canada. Some of our service providers, such as our website host and email provider, may process information outside Canada.

Children

This site is for adults 19 and older. We don't knowingly collect information from anyone younger.

Changes to this policy

If we change this policy, we'll post the new version here.

Your rights and contact

You can ask to see, correct or delete the personal information we hold about you. Use our contact form or email support@shroomshack.net.