Privacy Policy
What we collect
- Email — only if you give it (receipts, order updates, passwordless sign-in). Any password you set is stored hashed, never in plain text.
- An anonymous device id so your cart, saved items, and recommendations work without an account.
- Saved items, cart contents, and purchases — used to provide those features and personalize your feed.
- Order & shipping details you enter at checkout, to fulfil and ship your order.
- Approximate country from your IP address, for fraud prevention and regional availability.
Payments & saved cards
Card payments are processed by Stripe; your full card number never touches our servers. If you're signed in, Stripe securely keeps your card on file so you can check out one-tap next time — you'll see a consent notice when you pay, and you can remove a saved card at checkout anytime.
Transactional and optional marketing email is sent via Resend, with one-click unsubscribe (consistent with Canada's CASL and US CAN-SPAM). Opt out anytime.
Who we share with
Only the providers needed to run the store — Stripe (payments), Resend (email), and our print/shipping partner. We do not sell or share your personal information for advertising.
Your privacy rights
Wherever you are, you can ask us to access, correct, or delete your data, or to stop marketing — message us on the chat on our website and we'll respond within 30 days.
- EU / UK (GDPR / UK GDPR): you also have rights to data portability, to object to or restrict processing, to withdraw consent, and to complain to your data-protection authority. Our legal bases are fulfilling your order (contract), your consent (marketing), and legitimate interests (security, improving the store).
- California (CCPA / CPRA): rights to know, delete, and correct, and to opt out of the "sale" or "sharing" of personal information — we don't sell or share. No discrimination for exercising your rights.
- Canada (PIPEDA): access and correction rights; we collect only what's needed, with consent.
- Australia (Privacy Act / APPs): access and correction rights.
Retention & security
We keep order records as long as needed for the order, warranty, tax, and legal obligations, then delete or anonymize them. Data is encrypted in transit.
Cookies
We use only essential cookies for your cart, session, sign-in, and — if you turn it on — a "mature mode" age preference. We do not load third-party advertising scripts.
Contact
Privacy questions or requests: email hello@stickrfish.com or use the chat on our website. Stickrfish, Ontario, Canada.