Privacy Policy
Last updated: 2026-05-20
⚠️ Placeholder notice — replace with real legal name: This Privacy Policy is provided by [Owner Name] o/a Extaz, a sole proprietorship operating in Canada. We refer to this entity below as "Extaz", "we", "us", or "our".
1. What information we collect
When you visit or order from extaz.ca, we collect:
- Order information — name, shipping address, billing address, email address, phone number (if provided), and the items in your order.
- Payment information — handled directly by our payment processor (Shopify Payments / Stripe / PayPal). We never see your full credit card number.
- Browsing data — pages you visit, products you view, items added to cart, your IP address, device type, browser type, and referring page. This is collected via Shopify analytics and cookies.
- Communications — messages you send us by email or contact form.
2. How we use your information
- To fulfill your order — including communicating with our shipping carriers.
- To send order confirmations, shipping updates, and transactional emails.
- To respond to your support requests.
- To improve our site (aggregated, anonymized analytics).
- To prevent fraud and protect the security of our customers.
3. What we do NOT do
- We do not sell your personal information to third parties.
- We do not share your order contents with anyone outside of fulfillment.
- We do not send marketing emails unless you explicitly opted in. You can unsubscribe at any time.
4. Discreet handling of intimate-product orders
We understand that intimate-product orders carry an extra expectation of privacy. To that end:
- Every package ships in a plain, unbranded box.
- The return address on the package is generic — no mention of Extaz, adult products, or any product category.
- Your card statement reads neutrally.
5. Third parties we work with
Some service providers necessarily process your information to make the site work:
- Shopify Inc. — hosts our store and processes orders ([Shopify's privacy policy](https://www.shopify.com/legal/privacy)).
- Canada Post / shipping carriers — receive your name and shipping address to deliver the order.
- Payment processors — receive payment information directly; we don't store credit card details.
- Google Analytics / Shopify Analytics — receive anonymized browsing data for site analytics.
6. Cookies
We use cookies to keep you logged in, remember your cart, and provide analytics. You can disable cookies in your browser, but parts of the site (cart, checkout) may not function correctly without them.
7. Your rights (PIPEDA)
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:
- Request access to the personal information we hold about you.
- Request correction of any inaccurate information.
- Withdraw consent for marketing emails (one-click unsubscribe).
- Request deletion of your account and associated data (subject to legal record-keeping requirements for completed orders).
To exercise any of these rights, email us at extazua@gmail.com.
8. Data retention
We retain order records for 7 years for tax and accounting purposes, as required by Canadian law. Marketing email lists are retained until you unsubscribe.
9. Security
Our site uses HTTPS encryption end-to-end. Payment processing is PCI-DSS compliant via Shopify. We follow industry-standard practices to protect your data, but no online service is 100% secure.
10. Children's privacy
This site is intended for adults 18 years of age and older. We do not knowingly collect personal information from anyone under 18.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change.
12. Contact
Questions about this policy or your data: extazua@gmail.com