Last updated: January 2025
Overview
Plain English: We are a tiny operation. We collect only what we need to get your chaga to you. We do not sell your data. We do not do email marketing unless you ask. We do not share your information with anyone except Stripe (who processes your payment) and Canada Post (who delivers your order).
This Privacy Policy describes how East Coast Chaga ("we," "us," or "our") collects, uses, and shares information when you visit our website or place an order. We are committed to protecting your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
What Information We Collect
When you place an order, the following information is collected through our payment processor Stripe:
- Your name
- Your email address
- Your shipping address
- Your payment information (card details are handled entirely by Stripe — we never see or store your card number)
When you contact us through our contact form, we collect:
- Your name and email address
- The content of your message
Our website does not use analytics software or tracking pixels at this time. We do not collect browsing behaviour or device information.
How We Use Your Information
We use your information only for the following purposes:
- To fulfill your order — your name and address are used to address and ship your package via Canada Post.
- To communicate about your order — we may email you if there is an issue with your order or shipment.
- To respond to your messages — if you contact us through our contact form.
We do not use your information for marketing emails or promotions unless you have specifically asked us to keep you informed.
Stripe & Payment Processing
Your payment info never touches our hands. Stripe handles everything.
All payment processing is handled by Stripe, Inc. When you complete a purchase, you are directed to a Stripe-hosted checkout page. Your payment card details are entered directly into Stripe's secure environment and are never transmitted to or stored by East Coast Chaga.
Stripe is PCI-DSS compliant. Their privacy policy is available at stripe.com/privacy.
Data Sharing
We do not sell, rent, or trade your personal information. We share your information only in the following limited circumstances:
- Canada Post: Your name and shipping address are printed on your mailing label.
- Stripe: Your order and contact information is associated with your Stripe payment record.
- Formspree: If you use our contact form, your message data passes through Formspree to reach us. Their privacy policy is at formspree.io/legal/privacy-policy.
- Legal requirements: We may disclose information if required by law or to protect our rights.
Data Retention
We retain order information for a minimum of 7 years as required for Canadian tax and business records. Contact form messages are retained only as long as needed to respond to your inquiry.
Your Rights
Under PIPEDA, you have the right to:
- Know what personal information we hold about you
- Request corrections to inaccurate information
- Withdraw consent to certain uses of your information (where applicable)
To exercise any of these rights, please contact us. We will respond within 30 days.
Cookies
Our website does not use tracking cookies or third-party advertising cookies. Your browser may store session data as part of normal website function, which is cleared when you close your browser.
Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised date. We encourage you to review this policy periodically.
Contact
If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact us. We take privacy seriously and will respond promptly.