Privacy Policy

Information we collect

We collect the information you provide to place an order — name, shipping address, email address, phone number if given, and order history. We do not store full payment card data; card details are entered on our payment processor's own hosted page and never reach our servers.

We also record limited technical information when you place an order: your IP address, browser user agent, and advertising cookie identifiers set by Meta (Facebook). These are stored alongside the order record and used as described below.

How we use it

To process and ship your order, communicate with you about your purchase, prevent fraud, measure the performance of our advertising, and meet legal record-keeping obligations under Canadian law.

Advertising and analytics

We use the Meta Pixel and Meta's Conversions API to understand how visitors find and use this site and to measure the results of our advertising. This works in two ways: cookies set in your browser (including _fbp and _fbc), and events sent directly from our servers to Meta when you view a product, add an item to your cart, begin checkout, or complete an order.

The server-side events may include your IP address, browser user agent, those Meta cookie identifiers, the products and amounts involved, and your email address in hashed form. Email addresses are converted to an irreversible SHA-256 hash before transmission — Meta receives the hash, not the address itself. We do not send Meta your name, shipping address, or phone number.

Meta processes this data as an independent controller under its own terms. You can limit how it is used through your Meta account's Off-Facebook Activity and ad settings, and through your browser's cookie controls. Blocking these cookies does not affect your ability to browse or place an order.

Sharing

We share data only with the service providers required to run this business: our payment processor (Bankful), our shipping and label provider (Stallion Express and the carrier that delivers your parcel), our transactional email provider (Resend), our hosting and database provider, and Meta as described above. We never sell personal information.

Retention

Order records, including the technical and advertising data described above, are retained for as long as required to fulfil the order and to meet Canadian tax and business record-keeping requirements, and are deleted or anonymised after that period unless we are legally required to keep them.

Your rights

Under Canadian privacy law you may request access to the personal information we hold about you, ask us to correct it, or ask us to delete it. Email support@hermeticalabs.store and we will respond within 30 days. You may also withdraw consent to advertising-related processing at any time; this does not affect our ability to complete an order you have already placed.

Security

All site traffic is encrypted in transit. Order data is stored on access-controlled systems hosted in Canada or the United States. Administrative access is restricted to authorised personnel.

Contact

Questions about this policy, or about the personal information we hold, can be sent to support@hermeticalabs.store.