Privacy policy
Privacy Policy
Effective Date: March 3rd, 2026
At Poppy’s Vintage Clothing, we respect your privacy. We collect only the personal information necessary to process transactions and operate our business.
This Privacy Policy explains how we collect, use, and protect your information when you visit or make a purchase from our website.
1. Information We Collect
When you place an order or contact us, we may collect:
-
Name
-
Billing and shipping address
-
Email address
-
Telephone number (if provided)
-
Payment details (processed securely by Shopify and payment providers)
-
Order information
When you browse our website, certain technical information may be collected automatically, including:
-
IP address
-
Browser and device information
-
Pages visited
-
Referring website
This information is collected through cookies and similar technologies.
We do not knowingly collect unnecessary personal information.
2. How We Use Your Information
We use your information only to:
-
Process and fulfill orders
-
Communicate with you about your purchase
-
Respond to inquiries
-
Arrange shipping and delivery
-
Comply with tax and legal requirements
-
Prevent fraud
-
Improve website functionality and customer experience
We do not sell, rent, or trade your personal information.
If you choose to subscribe to marketing emails (if offered), you may unsubscribe at any time.
3. Consent
By providing personal information to complete a transaction, you consent to its collection and use for that specific purpose.
If we request your information for any secondary purpose, such as marketing, we will request your express consent.
You may withdraw your consent at any time by contacting us at:
maryjane@poppysvintageclothing.com
4. Shopify & Payment Processing
Our store is hosted on Shopify Inc., which provides the e-commerce platform that allows us to sell our products.
Your data may be stored through Shopify’s secure servers, databases, and infrastructure.
If you choose a direct payment gateway, your payment information is encrypted and processed in accordance with PCI-DSS security standards. We do not store full credit card numbers on our own systems.
For more information, please review Shopify’s Privacy Policy at www.shopify.com.
5. Third-Party Services
We use trusted third-party providers necessary to operate our business, including:
-
Payment processors
-
Shipping carriers
-
Website hosting and infrastructure (Shopify)
These providers receive only the information necessary to perform their services and are governed by their own privacy policies.
If a service provider operates outside Canada, your information may be subject to the laws of that jurisdiction.
6. Cookies
Our website uses cookies to:
-
Enable essential site functionality
-
Maintain your shopping cart
-
Analyze general website traffic
-
Improve user experience
You may disable cookies through your browser settings, though this may affect website functionality.
Where required by law, a cookie notice or consent tool will be displayed.
7. Data Retention
We retain order information for accounting, tax, and legal purposes. Personal information is kept only as long as necessary to fulfill these obligations.
8. International Data Transfers
If you are located outside Canada, your information may be transferred to and processed in Canada or other jurisdictions where Shopify or our service providers operate.
By using this website and providing your information, you consent to this transfer.
9. Your Rights
Depending on your location, you may have rights under applicable privacy laws, including:
-
The right to access personal information we hold about you
-
The right to request correction of inaccurate information
-
The right to request deletion of personal data (where legally permitted)
-
The right to withdraw consent
To exercise these rights, contact us at:
maryjane@poppysvintageclothing.com
Mailing address:
Poppy’s Vintage Clothing
388 Lafontaine
Châteauguay, Québec
J6J 2G5
Canada
10. Security
We follow reasonable security practices and rely on Shopify’s secure infrastructure to protect your personal information.
While no system can guarantee absolute security, we take appropriate precautions to protect personal data from unauthorized access or misuse.
11. Age of Majority
This website is not intended for individuals under the age of majority in their jurisdiction of residence.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. The updated version will be posted on this page with a revised effective date.
Additional Information for Customers in the European Union and European Economic Area
If you are located in the EU or EEA, the following applies to how we collect and process your personal data in accordance with the General Data Protection Regulation (GDPR).
Legal Basis for Processing We process your personal data to fulfil your order, comply with legal obligations, and where necessary, on the basis of our legitimate business interests. We do not sell your personal data to third parties.
Your Rights You have the right to access, correct, or delete the personal data we hold about you. You may also request that we restrict or stop processing your data, or request a copy of your data in a portable format. To exercise any of these rights, please contact us at [your contact email].
Data Retention We retain your personal data only for as long as necessary to fulfil your order and comply with applicable legal obligations.
Complaints If you believe your data has been handled unlawfully, you have the right to lodge a complaint with your local data protection authority.
These rights are in addition to any other privacy rights described in this policy.