Privacy Policy

We collect your email address at checkout, and again if you subscribe to our newsletter; we use it to send your order confirmation and shipping updates, and a newsletter address is only ever used once you have confirmed the subscription by clicking the link we send you. Checkout also asks for your name and delivery address, which we use to deliver your order and to calculate the sales tax your province requires; if you choose pickup instead, we take a billing address rather than a delivery one, and the tax is worked out as a British Columbia sale because that is where the goods change hands. And we keep the details of the sale itself: what you bought, when, for how much, and where it went, because that record is what lets us answer a question about your order months later, honour a return, and satisfy the tax authorities that the sale happened the way we said it did.

Like every website, the providers that serve our pages and screen our payments see routine technical data, your IP address and browser type, while they do that work; that data reaches us as security signals, not as a profile of you. There are no customer accounts. Checkout is guest only, so we hold no passwords, no profiles, and no history tied to a login, because no login exists.

Card numbers, first of all. Payment is processed by Stripe; your card details go to Stripe directly, over an encrypted connection, and never reach our servers. What comes back to us is the record a shopkeeper needs, the card brand and its last four digits, not the card itself, and Stripe's own privacy policy applies to the data it handles: stripe.com/privacy. We do not collect your browsing habits for advertising. There is no advertising pixel on this site and no data broker waiting at the end of it, and we do not sell or rent your information to anyone, for any price. We do measure how the shop is used, with Google Analytics, so we can see which pages people actually read and where the site fails them; that is described under Cookies below.

Two sets of cookies, and no advertising ones. Google Analytics sets a pair from your first page, so we can tell one visit from another and count how many people the shop actually reaches; we look at those numbers in aggregate, we have turned off sharing them back to Google for its own products, and none of it is used to advertise to you anywhere. Stripe sets the other set when you reach checkout, to screen payments for fraud. You can block cookies in your browser and the shop will browse fine, and if your browser sends a Do Not Track or Global Privacy Control signal we are glad to be counted out. Checkout keeps Stripe's either way, because that is what keeps payments safe.

Your cart lives in your own browser, in local storage, not on our servers. It contains product and option IDs and quantities, nothing personal, and we cannot see it until you check out. Clearing your browser data clears it.

Everything between your browser and this site travels encrypted. Card details are handled entirely by our payment processor, which is certified to the card industry's highest standard, and the order records we do keep live in a managed database that only the operator can reach. No system on the internet is perfectly secure, ours included, which is one more reason we keep what we store to the minimum worth storing.

A handful of service providers runs this shop with us: payment processing, website hosting, our database, the email that carries your confirmations, and Google Analytics for the visit counts described above. Each receives only what it needs to do its job, and none may use your information for anything else. Because some of these providers operate in the United States, your order information may be stored or processed outside Canada and can be subject to the laws there; that is the cost of using well-run infrastructure, and we state it here rather than in a footnote.

Transactional email only: an order confirmation when you pay, tracking when we ship, pickup arrangements when you have chosen to collect, and replies when you write to us. If you subscribe to our newsletter we send that too, but only after you confirm by email, and every letter carries a working unsubscribe. We do not send marketing you did not ask for, and an email address used at checkout does not put you on any list.

Order records are kept for as long as Canadian tax law requires, currently six years from the end of the tax year they relate to, because that is what the law asks of every business. We do not keep personal information longer than we have a reason to.

Under Canadian privacy law, PIPEDA and BC's Personal Information Protection Act, you can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email info@tuofo.ca and a person will respond. One caveat: we may need to keep basic order records to meet tax and accounting obligations even after a deletion request, and we will tell you exactly what stays and why.

If this policy changes, the new version is posted here with an updated date, the same date shown at the top of this page. We will not weaken how your existing data is handled without telling you first.

Privacy questions: info@tuofo.ca. The owner reads and answers them, and is responsible for this policy. Tuofo (Gagahoho Trade Corp), 1039-1322 West Broadway, Vancouver BC V6H 1H2, Canada. 604 369 3020.