Privacy policy
Privacy Policy
Last updated 5 Sep 2025
PONOS (“we,” “our,” “us”) is committed to protecting your personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL).
1. Information We Collect
| Category | Examples | How We Collect |
|---|---|---|
| Identity & Contact | Name, email, phone, billing & shipping address | Checkout forms, account sign-up |
| Payment | Cardholder name, last 4 digits, transaction ID | Processed securely via Shopify Payments (we do not store full card numbers) |
| Usage Data | Pages visited, time on site, device type | Cookies, Shopify reports, Google Analytics |
| Marketing Prefs | Email/SMS opt-in status | Newsletter forms, checkout tick-box |
2. How We Use Your Information
-
Order fulfilment & customer support
-
Transactional updates (shipping, refunds)
-
Marketing only if you have expressly opted in (CASL-compliant opt-out links in every message)
-
Site analytics & optimization (aggregated, anonymized)
3. Sharing & Disclosure
We share your data only with trusted service providers:
| Partner | Purpose | Safeguard |
|---|---|---|
| Shopify Inc. | Storefront hosting & payments | Data stored on CA/US servers under Standard Contractual Clauses (SCCs) |
| Shipping Chimp / Carriers | Label creation & delivery tracking | Name, address, phone sent via encrypted API |
We never sell or rent your personal data.
4. Your Rights (Canada)
You may at any time:
-
Access or correct your personal information
-
Withdraw marketing consent (unsubscribe link or reply “STOP” for SMS)
-
Request deletion of non-transactional data
To exercise these rights, email privacy [at[ ponos [co]
5. Data Retention
-
Transactional records: 7 years (tax & audit).
-
Marketing data: purged 24 months after last engagement or upon deletion request.
6. Cross-Border Transfers
Data may be processed in the United States or other jurisdictions. We rely on SCCs and comparable safeguards to protect your information.
7. Cookies & Tracking
We use first-party and limited third-party cookies for essential functionality and analytics. A cookie banner lets you manage non-essential cookie consent.
7a. Facebook & Instagram Advertising (Meta Pixel and Conversion API)
We use Meta technologies (including the Facebook Pixel and Conversions API) to understand how visitors interact with our site and to deliver relevant advertising on Facebook, Instagram, and other Meta services. These tools allow us to measure the effectiveness of our ads, improve our marketing, and reach people who are most likely to be interested in our products.
Information shared with Meta may include device data, browsing actions, and purchase events. This data is used in accordance with Meta’s Data Policy. You can opt out of Meta ad tracking at any time by adjusting your Facebook Ads Preferences or by changing Off-Facebook Activity settings in your Meta account.
8. Children
Our site is not directed to children under 13; we do not knowingly collect data from them.
9. Changes to This Policy
We may update this policy from time to time; the “Last updated” date will change accordingly. Continued use of the site means you accept the revised terms.
10. Contact
PONOS Skincare
Toronto ON M4V 1J4, Canada
Email: privacy [at[ ponos [co]