Privacy Policy
Effective date: April 17, 2026 ยท For customers in Canada and the United States
1. Who We Are
2TRDY ("we", "us", "our") operates this website. Our Privacy Officer, responsible for personal information protection, can be reached at 1infomaill89@gmail.com.
2. Information We Collect
You provide:
- Account data: username, password (hashed), optional name
- Order data: shipping address, billing address, phone, email
- Payment data: handled by Shopify Payments / Stripe โ we never store card numbers
- Communications: emails and support messages you send us
Collected automatically:
- Technical: IP address, browser type, device, OS
- Usage: pages visited, products viewed, session duration
3. Purpose of Collection
We collect personal information only for specific, legitimate purposes:
- Fulfill orders: process payments, ship products, communicate shipping status
- Account management: authenticate you, maintain your profile, sync cart/wishlist
- Customer support: respond to inquiries, handle returns and refunds
- Security: prevent fraud, enforce our Terms, audit logs
- Legal compliance: tax records, dispute resolution, regulatory obligations
- Marketing (opt-in only): newsletters, new product alerts, promotions
4. Legal Basis
Processing is based on: (a) contract performance for order processing; (b) your consent for marketing communications; (c) legitimate interest for security and fraud prevention; and (d) legal obligation for tax and compliance records.
5. Sharing with Third Parties
We share limited data only with:
- Shopify Inc. โ e-commerce infrastructure, payment processing
- Neon / Databricks โ database hosting
- Vercel Inc. โ website hosting
- Shipping carriers (Canada Post, USPS, UPS, FedEx) โ delivery fulfillment
- Resend โ transactional email delivery
We never sell your personal information. We do not share your data for advertising purposes without explicit consent.
6. Cross-Border Data Transfers
Our providers store data in Canada and the United States. We rely on standard contractual clauses and industry-standard protections. By using our services, you acknowledge that your personal information may be processed in either country.
7. Your Rights
Depending on your jurisdiction, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete data
- Delete your account and associated data
- Portability: receive your data in a structured, machine-readable format
- Withdraw consent for marketing at any time (unsubscribe links)
- Object to certain processing activities
- California residents have additional rights under the CCPA/CPRA, including the right to opt out of the sale or sharing of personal information (we do not sell or share).
To exercise your rights, email 1infomaill89@gmail.com. You can also delete your account directly from Settings, or request a full data export. We will respond within 30 days.
8. Data Retention
We keep your data only as long as necessary for the stated purposes or as required by law:
- Account data: until you delete your account
- Order records: 7 years (tax/accounting requirement)
- Support communications: 2 years
- Marketing consent: until withdrawn
- Anonymous analytics: 26 months
9. Security Measures
We apply industry-standard safeguards including:
- HTTPS encryption in transit (TLS 1.3)
- Passwords hashed with bcrypt
- Payment data tokenized by Shopify / Stripe (PCI-DSS Level 1)
- Two-factor authentication (2FA) available for all accounts
- Rate limiting and bot protection on API endpoints
- Regular security audits and vulnerability scanning
In the event of a data breach affecting your personal information, we will notify affected customers and relevant authorities as required by applicable law.
10. Children
Our services are not directed to children under 13 (US) or under 14 (Canada). We do not knowingly collect data from minors. If you believe a minor has provided us with personal information, contact 1infomaill89@gmail.com for immediate deletion.
11. Policy Updates
We may update this policy. Material changes will be communicated by email or a prominent site notice at least 30 days before taking effect.
12. Contact
All privacy inquiries: 1infomaill89@gmail.com
