Privacy policy

Privacy Policy

Last Updated: August 31, 2026

1. Preamble and Scope This Privacy Policy describes how Elmly Shop (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from elmly.shop (the "Services"). Elmly Shop is a trade name of 17928033 Canada Inc., a federally incorporated Canadian company. By using the Services, you agree to the collection, use, and disclosure of your information as described herein. This policy was last updated on August 31, 2026 and replaces all prior versions.

2. Personal Information We Collect We collect information that identifies, relates to, or could reasonably be linked with you ("Personal Information"). We collect Contact Details (name, shipping and billing address, email address, telephone number), Financial Information (payment details, processed by our payment provider), and Usage Data (IP address, browser type, pages viewed, and interaction metrics).

We also collect and generate online identifiers. These include cookie identifiers, device and browser identifiers, and approximate location derived from your IP address. When you interact with our Site, we and our advertising partners create and share hashed identifiers — for example, a cryptographically transformed version of your email address — so that advertising platforms can match you to their own registered users and measure whether an advertisement led to a purchase. Hashing obscures the underlying value but does not render the information anonymous, and we treat hashed identifiers as Personal Information.

We collect this data directly from you when you complete forms, automatically through tracking technologies, and from third parties such as our payment processors and marketing partners.

3. How We Use Your Information We use your Personal Information to provide the Services, including fulfilling orders, processing payments, and arranging shipping. We also use your data for marketing and advertising, to improve our website, and to detect and prevent fraudulent activity. Where you have opted in, we use your email address and, if provided, your mobile number for automated behavioural messages such as abandoned cart recovery and post-purchase follow-up. We also use the identifiers described in Section 2 to measure advertising performance and to build audiences on the advertising platforms named in Section 4.

4. Service Providers, Advertising Partners, and Cross-Border Transfers We disclose your Personal Information to the following categories of third parties.

Platform and hosting. Our store is hosted by Shopify Inc. You can read how Shopify uses your Personal Information at shopify.com/legal/privacy.

Platform intelligence. Our store uses Shopify's Network Intelligence feature. This allows Shopify to use your Personal Information, together with data from other merchants on the Shopify platform, to improve products, personalize your shopping experience, and optimize advertising and checkout — including which payment methods are presented to you. No other merchant can see your data directly. You may ask us to disable this feature at any time by contacting our Privacy Officer under Section 8, though doing so will also disable certain checkout, storefront, and email-marketing features on our store.

Order fulfilment. We share the information required to ship your order — including your name, shipping address, telephone number, and order contents — with our distribution partner Randmar and with shipping carriers.

Payments. Payment details are processed by our payment provider. We do not store complete payment card numbers.

Email and referral services. We use Klaviyo as our email marketing platform and ReferrLy as our referral programme provider. These are not advertising networks; they send messages and manage referrals on our behalf.

Advertising and measurement platforms. We share Personal Information, including the hashed and online identifiers described in Section 2, with the following advertising platforms so that we can deliver advertisements, build and target audiences, and measure whether an advertisement resulted in a visit or a purchase:

• Google LLC (Google Ads and associated measurement services)
• Meta Platforms, Inc. (Facebook and Instagram advertising)
• TikTok Technology Limited and its affiliates
• Microsoft Corporation (Microsoft Advertising and its Universal Event Tracking tag)
• Pinterest, Inc. (Pinterest advertising and its Conversions API)

Some of these disclosures occur in your browser, through advertising tags and pixels that you can limit using the controls described in Section 5. Others occur server to server — for example through a conversions application programming interface — meaning the information is sent directly from our systems or our e-commerce platform to the advertising platform. Server-side transfers do not rely on cookies and cannot be prevented by browser settings or ad-blocking software. Where consent is required for such disclosures, we rely on the consent you provide through the mechanisms described in Section 5, and you may withdraw it at any time under Section 6.

Cross-border transfers. Most of the advertising platforms named above, and several of our service providers, are established in the United States or process data on servers located outside Canada. Your Personal Information will therefore be transferred to, stored in, and processed in jurisdictions outside Canada, including the United States. Those jurisdictions may not provide the same legal protections for personal information as Canada, and personal information stored there may be accessible to foreign courts, law enforcement, and national security authorities under the laws of those jurisdictions. We disclose personal information outside Canada only to organizations that are contractually bound to protect it, and we have assessed these transfers as required under Quebec's Act respecting the protection of personal information in the private sector.

5. Cookies and Tracking We use cookies and similar tracking technologies to operate our Site. These include strictly necessary cookies required for platform functionality, such as session management and maintaining the contents of your cart, as well as analytics and advertising cookies used for the purposes described in Sections 3 and 4. You can control the use of non-essential cookies through our on-site cookie management tool or through your browser settings. Please note that disabling cookies does not prevent the server-side transfers described in Section 4; to limit those, withdraw your consent as described in Section 6.

6. Your Rights (PIPEDA and Quebec Law 25) Canadian federal and provincial privacy laws grant you rights regarding your Personal Information. You have the right to request access to the Personal Information we hold about you, to request correction of inaccurate or incomplete information, to request deletion or de-indexing of your information, and to withdraw your consent to tracking or marketing at any time.

You also have the right to data portability: on request, we will provide the computerized Personal Information you have supplied to us in a structured, commonly used technological format, and where technically feasible we will transmit it to any person or body authorized by law to collect it. This right applies to information you provided to us, and not to information we created or inferred.

To exercise any of these rights, contact our Privacy Officer using the details in Section 8. We will respond to verified requests within 30 days. To verify your identity we may ask you to confirm details associated with your order or account, such as your name, email address, and order number. Withdrawing consent to advertising does not affect the lawfulness of processing carried out before the withdrawal, and does not prevent us from contacting you about an order you have already placed.

7. Security and Retention We implement reasonable security measures to protect your Personal Information. We retain your data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law, including tax and consumer protection record-keeping obligations. Once the data is no longer necessary, it is securely destroyed or anonymized.

8. Contact Information and Privacy Officer Founder & Store Owner, Privacy Officer
17928033 Canada Inc. (Elmly Shop)
1132 Galesway Blvd, Mississauga, ON L5V 2T7, Canada
admin@elmly.shop

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada, or, if you reside in Quebec, with the Commission d'accès à l'information du Québec.