Privacy Policy

Effective Date: June 9, 2025
Compliance Framework: PIPEDA (Personal Information Protection and Electronic Documents Act), CASL (Canadian Anti-Spam Legislation), and applicable provincial privacy laws (British Columbia PIPA)

1. INTRODUCTION AND SCOPE

ZenCartCanada.com (“we,” “our,” “us,” “the Company”) operates the e-commerce website located at www.zencartcanada.com (the “Site”). We are committed to safeguarding the privacy and confidentiality of the personal information entrusted to us by our customers, visitors, and business partners. This Privacy Policy (the “Policy”) sets forth our practices regarding the collection, use, disclosure, and protection of personal information in accordance with Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (S.C. 2000, c. 5) and its provincial counterparts.

This Policy applies to all individuals who access or use our Site, make purchases, subscribe to our communications, or otherwise interact with our services. By accessing the Site and providing your personal information, you consent to the collection, use, and disclosure practices described herein. Should you disagree with any provision of this Policy, you are advised to discontinue use of our Site and services immediately.

We recognize that privacy is an evolving area of law and technology, and we reserve the right to amend this Policy from time to time. Any material changes will be communicated through our Site and, where appropriate, via direct notification to our customers. The “Effective Date” at the top of this Policy indicates the most recent version. Your continued use of our services following any amendment constitutes your acceptance of the revised terms.

2. DEFINITIONS

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed below:

  • “Personal Information” means any information about an identifiable individual, including but not limited to name, address, telephone number, email address, financial information, purchase history, and IP address. Personal Information does not include business contact information when used for business-to-business communications.
  • “Sensitive Personal Information” refers to financial account numbers, government-issued identification numbers, and any information that, if disclosed, could result in identity theft or financial harm.
  • “Processing” means any operation performed on Personal Information, whether automated or manual, including collection, use, storage, disclosure, transfer, and deletion.
  • “Service Providers” means third-party entities that process Personal Information on our behalf to facilitate our business operations, including payment processors, shipping carriers, IT service providers, and marketing partners.
  • “Cookies” are small text files stored on your device that enable us to recognize your browser and capture certain information about your browsing behavior.

3. TYPES OF PERSONAL INFORMATION COLLECTED

3.1 Information You Voluntarily Provide

We collect the following categories of Personal Information when you interact with our Site, create an account, place an order, subscribe to our newsletter, or contact our customer support team:

(a) Account Registration Information: When you create a customer account, we collect your full name, email address, and password (hashed and encrypted). You may also voluntarily provide additional profile information such as your phone number and preferred shipping address.

(b) Transactional Information: When you place an order, we collect your billing address, shipping address, telephone number, product selections, order history, and payment information. Payment information (credit card numbers, expiration dates, and CVV codes) is transmitted directly to our PCI DSS-compliant payment processor. We do not store full credit card details on our servers; we retain only the last four digits and the card type for transaction verification and customer service purposes.

(c) Communication Information: We collect the content of any correspondence you send to us via email, telephone, or our contact forms. This includes your name, email address, and any other information you choose to provide in your communications.

(d) Marketing Preferences: We collect information about your marketing preferences, including your consent status for receiving promotional communications and your engagement with our marketing emails (e.g., open rates, click-through rates).

3.2 Information Automatically Collected

When you visit our Site, we automatically collect certain information through cookies, web beacons, and other tracking technologies:

(a) Technical Information: We collect your IP address, browser type and version, operating system, device type, screen resolution, and language preferences. This information helps us optimize our Site for different devices and diagnose technical issues.

(b) Usage Information: We collect data regarding your interactions with our Site, including pages visited, time spent on pages, products viewed, search queries, navigation paths, and referral URLs (the website that directed you to our Site). This information enables us to analyze user behavior and improve our Site design and product offerings.

(c) Location Information: We collect approximate geolocation data derived from your IP address to determine your general geographic region (e.g., city, province). This enables us to display region-specific pricing, shipping options, and tax calculations.

(d) Session Information: We collect session identifiers to maintain your login status, preserve your shopping cart contents, and provide a seamless checkout experience.

4. LEGAL BASIS FOR COLLECTION AND PROCESSING

We collect and process your Personal Information only where we have a lawful basis to do so under applicable Canadian privacy laws:

(a) Contractual Necessity: We process your Personal Information to fulfill our contractual obligations to you, including processing and delivering your orders, providing customer service, and managing returns and exchanges. Without this information, we would be unable to complete your transactions.

(b) Legitimate Interests: We process your Personal Information for our legitimate business interests, including fraud prevention, Site security, analytics, and direct marketing (subject to your consent where required by CASL). We ensure that our legitimate interests do not override your privacy rights.

(c) Consent: We rely on your express or implied consent for certain processing activities, particularly for sending promotional communications and collecting non-essential cookies. You may withdraw your consent at any time by contacting us or adjusting your browser settings.

(d) Legal Obligations: We process your Personal Information to comply with applicable laws, regulations, and court orders, including tax reporting obligations and responses to lawful requests from law enforcement or regulatory authorities.

5. PURPOSES OF COLLECTION AND USE

We collect and use your Personal Information for the following purposes:

5.1 Order Fulfillment and Customer Service

  • Processing, verifying, and completing your orders
  • Coordinating shipment and delivery of products
  • Providing order confirmations, shipping notifications, and delivery updates
  • Processing returns, refunds, and exchanges in accordance with our Return Policy
  • Responding to your inquiries, resolving disputes, and addressing customer concerns
  • Maintaining a record of your purchase history to facilitate repeat orders and warranty claims

5.2 Account Management

  • Creating and managing your customer account
  • Updating your account information and preferences
  • Authenticating your identity when you log in or request account changes
  • Securing your account against unauthorized access

5.3 Marketing and Communications

  • Sending newsletters, promotional offers, and product recommendations (where you have provided consent)
  • Personalizing your shopping experience by displaying products and offers relevant to your interests
  • Conducting customer satisfaction surveys and market research
  • Administering contests, sweepstakes, and loyalty programs (where applicable)

5.4 Analytics and Site Improvement

  • Analyzing user behavior and traffic patterns to optimize Site functionality and user experience
  • Identifying and correcting technical errors, bugs, and performance issues
  • Developing new features, services, and product categories
  • Monitoring the effectiveness of our marketing campaigns

5.5 Security and Fraud Prevention

  • Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other security incidents
  • Verifying your identity and the legitimacy of payment methods used
  • Protecting our customers, employees, and business from illegal activities

5.6 Legal Compliance

  • Complying with legal obligations, court orders, and regulatory requirements
  • Exercising or defending our legal rights and protecting our interests
  • Responding to lawful requests from government authorities

6. DISCLOSURE AND SHARING OF PERSONAL INFORMATION

We do not sell, trade, or rent your Personal Information to third parties for their independent marketing purposes. We may share your Personal Information under the following circumstances:

6.1 Service Providers and Sub-Processors

We engage third-party service providers to perform functions on our behalf. These providers have access to your Personal Information only to the extent necessary to perform their functions and are contractually obligated to maintain the confidentiality and security of your information. Categories of service providers include:

  • Payment Processors: To facilitate payment card transactions (e.g., Stripe, PayPal, Moneris). These processors are PCI DSS Level 1 certified and do not retain your full card information beyond the transaction authorization period.
  • Shipping Carriers: To dispatch your orders and provide tracking services (e.g., Canada Post, Purolator, FedEx). We share your name, address, phone number, and email address with these carriers.
  • IT and Hosting Providers: To host our Site, manage databases, and provide technical support.
  • Marketing and Analytics Partners: To assist with email marketing campaigns, customer segmentation, and data analytics (e.g., Google Analytics, Mailchimp). These partners have access to anonymized or aggregated data where possible.
  • Customer Support Platforms: To manage support tickets and live chat interactions.

6.2 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your Personal Information may be transferred to the acquiring entity as part of the business transition. We will notify you of any such transfer and provide you with the opportunity to withdraw your consent before the transfer occurs, subject to applicable law.

6.3 Legal Compliance and Enforcement

We may disclose your Personal Information to law enforcement, regulatory authorities, or other government entities when:

  • Required by applicable law, regulation, or court order
  • Necessary to establish, exercise, or defend our legal rights
  • Necessary to investigate or prevent suspected illegal activities, fraud, or threats to public safety

6.4 With Your Consent

We may share your Personal Information with third parties in other circumstances where you have provided your explicit consent to such disclosure.

7. INTERNATIONAL DATA TRANSFERS

ZenCartCanada.com and its service providers are primarily located in Canada. However, certain service providers may process your Personal Information in countries outside Canada, including the United States. In such cases, we ensure that appropriate safeguards are in place to protect your information, including:

  • Standard contractual clauses approved by applicable authorities
  • Data processing agreements that require providers to comply with Canadian privacy standards
  • Verification of provider compliance with GDPR, PIPEDA, or equivalent frameworks

You acknowledge that Personal Information transferred to jurisdictions outside Canada may be subject to the laws of those jurisdictions and may be accessible to foreign courts and authorities. We take all reasonable steps to ensure that your information receives equivalent protection regardless of where it is processed.

8. DATA RETENTION AND DESTRUCTION

We retain your Personal Information only for as long as necessary to fulfill the purposes outlined in this Policy, or as required by applicable laws, including tax, accounting, and consumer protection legislation.

  • Transaction Records: We retain transactional information for a period of seven (7) years to comply with Canada Revenue Agency requirements and to address any warranty, return, or dispute matters.
  • Account Information: We retain active customer account information until you request deletion of your account. Inactive accounts may be archived and retained for a period of two (2) years before deletion.
  • Marketing Preferences: We retain your marketing consent records for as long as you remain subscribed to our communications. Upon opt-out, we retain your email address on a suppression list to honor your preferences.
  • Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely for business intelligence purposes.

When Personal Information is no longer required, we securely delete, anonymize, or destroy it using industry-standard methods, including data purging from databases and secure shredding of physical records.

9. COOKIES AND TRACKING TECHNOLOGIES

9.1 Overview

We use cookies and similar tracking technologies (web beacons, pixels, and device identifiers) to enhance your browsing experience, analyze site traffic, and personalize content. Cookies are small text files placed on your device that allow us to recognize your browser and store certain information about your preferences.

9.2 Types of Cookies We Use

(a) Strictly Necessary Cookies: These cookies are essential for the operation of our Site. They enable core functions such as navigating pages, maintaining secure sessions, and processing orders. You cannot opt out of these cookies without disabling Site functionality.

(b) Performance and Analytics Cookies: These cookies collect aggregated information about how visitors use our Site, including pages visited, load times, and error messages. We use this data to improve Site performance and user experience. These cookies do not identify you individually; all data is anonymized.

(c) Functional Cookies: These cookies allow the Site to remember your preferences, such as your language selection, currency preference, and shopping cart contents. They enhance your experience by providing personalized features.

(d) Targeting and Advertising Cookies: These cookies track your browsing habits to deliver relevant advertisements and product recommendations. They may be placed by our advertising partners (e.g., Google Ads, Meta) and may link your activities across different websites and devices.

9.3 Managing Cookie Preferences

You can manage or disable cookies through your browser settings. Most browsers allow you to:

  • View and delete individual cookies
  • Block third-party cookies
  • Block all cookies from our Site
  • Set preferences for future cookie placement

Please note that disabling non-essential cookies may affect Site functionality and user experience. For comprehensive instructions, refer to your browser’s help documentation.

9.4 Do Not Track Signals

Our Site currently does not respond to “Do Not Track” signals from web browsers, as there is no universally accepted standard for processing such signals. You may manage your preferences through browser settings or third-party cookie opt-out tools.

10. YOUR RIGHTS AND CHOICES

Under PIPEDA and applicable Canadian privacy laws, you have the following rights regarding your Personal Information:

(a) Right of Access: You have the right to request access to the Personal Information we hold about you. Upon request, we will provide you with a copy of your information in a structured, commonly used format, along with an explanation of how it has been used and disclosed.

(b) Right of Rectification: You may request correction of inaccurate or incomplete Personal Information. We will amend your records and notify any third parties to whom we may have disclosed the incorrect information.

(c) Right of Deletion: You may request deletion of your Personal Information where:

  • It is no longer required for the purposes for which it was collected
  • You withdraw your consent and we have no other lawful basis for processing
  • The processing was unlawful or in violation of our obligations

(d) Right of Withdrawal of Consent: You may withdraw your consent to the collection, use, or disclosure of your Personal Information at any time, subject to legal or contractual restrictions. Withdrawal may affect our ability to provide certain services to you (e.g., order processing).

(e) Right to Opt-Out of Marketing: You may unsubscribe from our promotional communications at any time by clicking the “unsubscribe” link at the bottom of our emails or by contacting us directly. We will process your opt-out request within ten (10) business days.

(f) Right to Lodge a Complaint: If you believe that we have violated your privacy rights, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca or by calling 1-800-282-1376.

To exercise any of these rights, please submit a written request to support@zencartcanada.com. We will respond to your request within thirty (30) days, as required by PIPEDA. We may verify your identity before processing your request to protect your information from unauthorized access.

11. SECURITY MEASURES

We implement a comprehensive set of technical, organizational, and physical security measures to safeguard your Personal Information against loss, theft, unauthorized access, alteration, disclosure, or destruction:

(a) Encryption: We use Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers. Sensitive information, including payment details, is encrypted during transmission. Our databases are encrypted at rest using industry-standard AES-256 encryption.

(b) PCI DSS Compliance: Our payment processing systems and procedures comply with the Payment Card Industry Data Security Standard (PCI DSS Level 1), ensuring that cardholder data is handled securely.

(c) Access Controls: Access to Personal Information is restricted to authorized employees and service providers who have a legitimate business need to access such data. Employees are subject to confidentiality obligations and security training.

(d) Firewall and Intrusion Detection: We deploy firewalls, intrusion detection systems, and monitoring software to protect our infrastructure from cyberattacks and unauthorized network access.

(e) Regular Audits: We conduct periodic security audits, vulnerability assessments, and penetration testing to identify and remediate potential security weaknesses.

(f) Incident Response: We maintain an incident response plan to address data breaches and security incidents. In the event of a breach involving your Personal Information, we will notify you and the Office of the Privacy Commissioner of Canada in accordance with applicable breach notification requirements.

Despite our best efforts, no security measure is infallible. We cannot guarantee the absolute security of your information and assume no liability for unauthorized access beyond our reasonable control.

12. MINOR’S PRIVACY

Our Site and services are not directed toward minors under the age of majority (18 years or 19 years, depending on the province). We do not knowingly collect Personal Information from minors without verifiable parental consent. If we become aware that we have inadvertently collected information from a minor, we will delete such information promptly. Parents or guardians who believe their minor child has provided us with Personal Information should contact us immediately.

13. UPDATES AND AMENDMENTS

This Privacy Policy may be updated periodically to reflect changes in our practices, legal requirements, or technological developments. We will post the updated Policy on this page with a revised “Effective Date.” For significant changes, we will provide additional notice, such as an email notification or a prominent banner on our Site.

We encourage you to review this Policy regularly. Your continued use of our Site and services after any update constitutes your acceptance of the revised terms.

14. CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer:

Privacy Officer
ZenCartCanada.com
6828 Angus Dr, Vancouver, BC V6P 5J5
Email: support@zencartcanada.com
Phone: +1 778 829 3688

Office Hours: Monday–Friday, 9:00 AM – 5:00 PM (Pacific Time)

For inquiries related to your account, orders, or other customer service matters, please continue to use our regular support channels.