How we collect, use, and protect your personal information at ZynCanada. We comply with PIPEDA (federal) and Quebec Law 25 where applicable.
Who we are
ZynCanada is a Canadian online retailer of nicotine pouches operating at zyncanada.ca (and any subdomains). We are the data controller for personal information collected through this site.
What we collect
You give us:
- Order details: name, shipping address, billing address, email, phone (optional), date of birth confirmation.
- Account information (if you create one): same as order details, plus chosen password.
- Payment information: handled by our payment processor (Stripe by default; we don’t store card numbers ourselves).
- Communication: emails, contact form submissions, support messages.
Collected automatically when you visit:
- Cookies and similar technologies: see Cookie information below.
- Server logs: IP address, browser type, pages visited, timestamps. Used for security and analytics.
- Analytics data: aggregated visit data via Google Analytics (or equivalent), used to understand site usage. Pseudonymised; not tied to identifiable users.
How we use your information
- To process orders: shipping, payment, customer service.
- To verify age: federal and provincial requirement for nicotine sales.
- To communicate with you: order confirmations, shipping updates, support replies.
- For analytics: understand site performance, identify problems, plan improvements.
- For legal compliance: tax reporting, audit, response to legal requests.
- For marketing (only if you opt in): newsletters, promotional offers. You can unsubscribe at any time.
We do not sell your personal information. We do not share your data with third parties for their own marketing.
Who we share data with
- Payment processor (Stripe or equivalent): receives only the data needed to process payment. Subject to their own privacy policy.
- Shipping carrier (Canada Post): receives your name and shipping address to deliver the order.
- Analytics provider (Google Analytics or equivalent): receives anonymised site-usage data. Configured with IP anonymisation where supported.
- Email service (e.g. Mailchimp, when implemented): only if you’ve opted in to marketing emails.
- Legal authorities: when required by Canadian law, court order, or regulatory request.
How long we keep your data
- Order records: 7 years (Canadian tax/audit retention requirement).
- Account data: as long as your account is active. Delete your account at any time by emailing us.
- Marketing list data: until you unsubscribe.
- Server logs: 90 days, then deleted or aggregated.
- Analytics data: 26 months by default in Google Analytics, configurable down.
Your rights
Under PIPEDA (and Quebec Law 25 for Quebec residents), you have the right to:
- Access your personal information we hold.
- Correct inaccurate information.
- Delete your account and associated data (where retention obligations don’t apply).
- Withdraw consent for marketing communications.
- Portability of your data (Quebec Law 25 specifically).
- File a complaint with the federal Privacy Commissioner (priv.gc.ca) or Quebec’s Commission d’accès à l’information.
To exercise any of these rights, email us — see the Contact page.
Cookies
We use cookies for:
- Essential site function (cart, checkout, login, age gate, language preference): always on, no consent required.
- Analytics (Google Analytics or similar): tracks usage patterns. Requires consent.
- Marketing (only when implemented): used for retargeting or campaign attribution. Requires explicit consent.
Cookie consent is managed via our Complianz cookie banner. You can review and change your preferences at any time using the banner.
Security
We use HTTPS site-wide. Passwords are hashed. Payment data is handled by our payment processor (PCI-compliant). Server-side data is protected by standard hosting security practices.
No system is perfectly secure. If a data breach occurs that affects you, we’ll notify you per Canadian breach-notification requirements.
Children
We do not knowingly collect data from anyone under 19 (under 18 in Quebec and Manitoba). Age verification at site entry and checkout is designed to prevent underage access.
Changes to this policy
Posted at this URL. Material changes are flagged via a site banner for 30 days.
Last updated: 2026-05-19. For questions: see Contact.