1. Data Controller Overview

www.shadeandcord.com (referred to as “we”, “us”, or “our”) operates as the data controller responsible for the personal data collected through this website. We are dedicated to processing personal data in accordance with applicable data protection laws, including the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) and the European Union General Data Protection Regulation (GDPR).

Contact Details:

Data Controller: www.shadeandcord.com

Brand: Shadeandcord

Address: 2901 Kennedy Rd Unit A, Scarborough, ON M1V 1S8, Canada

Phone: +1 4163218828

Email: control@shadeandcord.com

  1. Personal Data We Collect

We collect personal information necessary to process orders, fulfill purchases, and provide customer support services. The personal data collected includes:

Identity Data: Full name.

Contact Data: Delivery address, billing address, email address, and contact phone number.

Transaction Data: Details regarding products purchased, order reference numbers, and transaction history.

Technical Data: IP address, browser type, device information, and site interaction data gathered via cookies required for essential site functionality.

  1. Legal Basis for Processing (GDPR & PIPEDA Compliance)

We process personal data based on explicit legal grounds required under European Union and Canadian privacy laws:

Performance of Contract: To accept, process, ship, and deliver orders placed on our website, and to handle customer inquiries regarding orders.

Compliance with Legal Obligations: To fulfill mandatory statutory, accounting, tax, and reporting obligations under applicable jurisdiction requirements.

Legitimate Interests: To protect against fraud, manage commercial security, maintain operational efficiency, and address customer service claims.

Consent: Where required for optional communication channels or analytical preferences, which may be withdrawn at any point.

  1. Payment Processing with Stripe

Payment processing on www.shadeandcord.com is securely handled by our third-party payment processing provider, Stripe.

When completing a transaction on our store, your payment card information and transaction metadata are transmitted directly to Stripe for processing. We do not store, retain, or process raw credit card numbers or security CVV codes on our servers.

Stripe collects and processes payment card data, device IDs, and technical transaction details to facilitate payment execution, authenticate authorization, and perform fraud screening. The processing performed by Stripe is governed by Stripe’s privacy policy and standard operational safeguards.

  1. Third-Party Data Sharing & Transfers

We share personal data strictly as required to fulfill obligations related to order execution and statutory operations:

Logistics Providers: Customer names, shipping addresses, and phone numbers are shared with transport and delivery courier services to enable physical delivery of ordered goods.

Payment Processor: Transaction information is processed by Stripe to facilitate billing and order completion.

IT Infrastructure Services: Web hosting and technical infrastructure providers that support website accessibility and storage under operational confidentiality obligations.

Personal data transferred between Canada, the European Union, and third countries is safeguarded in accordance with standard data protection contract terms approved by relevant regulatory authorities.

  1. Data Retention Period

We retain personal information only for as long as necessary to fulfill the operational purposes for which it was collected, or to satisfy legal, tax, accounting, and statutory requirements.

Order and Accounting Records: Retained for up to 7 years from the date of the transaction to comply with statutory tax laws, legal requirements, and financial record-keeping obligations in Canada and European jurisdictions.

Customer Support Data: Retained for up to 2 years following the resolution of the last customer inquiry to manage order history and customer service continuity.

Technical and Log Data: Retained for up to 12 months for security verification, audit trails, and server stability monitoring.

Upon the expiry of the applicable retention period, personal data is permanently deleted, destroyed, or fully anonymized.

  1. Data Security Measures

We implement administrative, organizational, and technical security measures designed to protect personal data from unauthorized access, accidental loss, alteration, or disclosure. Communications with our website use SSL/TLS encryption protocol technology. Access to personal data is limited strictly to personnel and authorized service providers who require access for operational execution.

  1. Your Data Protection Rights

Under Canadian and European Union data protection regulations (including GDPR and PIPEDA), you possess statutory rights regarding your personal information:

Right of Access: You have the right to request access to the personal data we hold about you.

Right to Rectification: You may request correction of inaccurate or incomplete personal records.

Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data where processing is no longer required or where legal retention requirements do not apply.

Right to Restrict Processing: You may request the restriction of processing under specific legal conditions.

Right to Data Portability: You may request a structured copy of personal data provided to us.

Right to Object: You may object to data processing activities based on legitimate interests.

Right to Withdraw Consent: Where processing relies on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at control@shadeandcord.com. You also retain the right to lodge a complaint with your local data protection supervisory authority.

  1. Cookies

www.shadeandcord.com uses necessary cookies required for basic website operation, such as shopping cart functionality and session management. Additional preferences or non-essential functionality cookies are deployed only in accordance with user choices managed through our cookie banner settings.

  1. Updates to This Policy

We reserve the right to modify or update this Privacy Policy to reflect operational, technical, or regulatory changes. Any updates will be posted directly on this page with an updated effective date.