Privacy Policy
This Privacy Policy describes how the entity operating our site, focused on Northern Saunas, collects, uses, and protects your personal information when you visit or use our online platform. We are committed to protecting your privacy and handling your data in a transparent manner, in accordance with applicable Canadian privacy laws, such as the Personal Information Protection and Electronic Documents Act (PIPEDA), and, where applicable, the European Union's General Data Protection Regulation (GDPR).
Information We Collect
We collect information to provide and improve our service.
Information you provide directly: When you interact with our site, for instance, by making a purchase, contacting us, or creating an account, you may provide us with personal information. This information may include your name, billing address, shipping address, payment information, and details about your inquiry or order.
Information collected automatically: When you visit our site, we may automatically collect certain information about your device and your usage of our service. This may include your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits. We collect this data through cookies and similar tracking technologies.
Information from other sources: We may receive information about you from third parties necessary for operating our service, such as payment processors or shipping providers.
How We Use Your Information
We use your personal information for various purposes, based on legal grounds:
To provide and maintain our service: Processing your orders, managing your account, and providing customer support. This is necessary for the performance of a contract with you or for taking steps at your request before entering a contract.
To improve and optimize our service: Understanding how you use our site to enhance user experience, troubleshoot issues, and perform data analysis. This is based on our legitimate interests in improving our business.
To communicate with you: Responding to your inquiries, sending you updates about your order, and, if you have provided consent, sending you promotional or marketing communications.
To comply with legal obligations: Using your information as required by law, such as for tax or regulatory purposes.
To protect our rights and interests: Preventing fraudulent transactions, enforcing our terms of service, and protecting the security of our site. This is based on our legitimate interests.
Legal Bases for Processing (for users in the EEA/UK)
If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal data based on the following legal grounds:
- The processing is necessary for the performance of a contract with you or to take steps at your request prior to entering a contract.
- The processing is necessary for compliance with a legal obligation.
- The processing is necessary for the purposes of our legitimate interests (unless overridden by your data protection interests or fundamental rights and freedoms).
- You have given consent to the processing for specific purposes.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Sharing Your Information
We may share your personal information with third parties to help us provide our service or as required by law:
Service Providers: We may share your information with trusted third parties who perform services on our behalf, such as payment processing, shipping, data analysis, marketing assistance, and customer service. These third parties are obligated to protect your information and use it only for the purposes for which it was shared.
Legal Compliance: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity.
International Data Transfers
Your personal information may be stored and processed in Canada or other countries where our service providers are located. While Canada has been recognized by the European Commission as providing an adequate level of data protection for transfers from the EEA, data protection laws in other countries may differ from those in your jurisdiction. When transferring data outside of Canada or the EEA/UK, we take appropriate steps to ensure your information is treated securely and in accordance with this privacy policy and applicable laws, such as by using Standard Contractual Clauses or relying on the service provider's Binding Corporate Rules or other appropriate safeguards.
Your Rights
Depending on your location and applicable laws, you may have certain rights regarding your personal information:
Access: You have the right to request access to the personal information we hold about you.
Rectification: You have the right to request correction of inaccurate or incomplete personal information.
Erasure: You have the right to request the deletion of your personal information under certain circumstances.
Restriction of Processing: You have the right to request that we restrict the processing of your personal information under certain conditions.
Objection to Processing: You have the right to object to the processing of your personal information under certain circumstances, particularly when based on legitimate interests or for direct marketing.
Data Portability: You have the right to request a copy of your personal information in a structured, commonly used, machine-readable format and to transmit it to another controller (where applicable).
Withdraw Consent: If we are relying on your consent to process your personal information, you have the right to withdraw that consent at any time.
Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information infringes applicable law.
To exercise these rights, please contact us in writing as described below. We may need to verify your identity before responding to your request.
Security
We take reasonable measures to protect your personal information from unauthorized access, use, or disclosure. However, please be aware that no method of transmission over the internet or electronic storage is entirely secure.
Cookies
We use cookies and similar tracking technologies to collect information about your browsing behavior and to provide and improve our service. You can manage your cookie preferences through your browser settings.
Children's Privacy
Our site is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page. Your continued use of our site after the changes have been posted constitutes your acceptance of the revised policy.
Contact Us
For any questions about this privacy policy or our data practices, please contact us in writing. The entity operating our site is located in Ontario, Canada. A physical address for correspondence regarding privacy matters can be obtained upon written request sent to that location.