Privacy & Data Handling Policy

What we collect

We collect only the information required to fulfill a customer's order on the marketplace where it was placed:

• Order details: order number, the item(s) purchased, quantity, and sale price.
• Delivery details: the recipient's name and shipping address.

We do not collect payment information (payments are processed entirely by the marketplace), and we do not collect any data for advertising or profiling.

How order data is used

Order and delivery data is used for exactly one purpose: producing and delivering the order that the customer placed, including handling returns, replacements, and customer service for that order. It is never sold, rented, or used for marketing.

Who it is shared with

Delivery details are shared only with our contracted print-and-ship manufacturer, and only to produce and ship the specific order they belong to. No other third party receives customer data.

How it is protected

• All data is transmitted exclusively over encrypted (TLS) connections.
• Order data is stored on a single access-controlled production server; access is restricted to the business owner.
• Credentials for systems that handle order data are unique, machine-generated, kept outside source control, and rotated on any suspicion of compromise.
• Systems are monitored, and failures or anomalous activity raise immediate alerts to the operator.

Retention and disposal

Personally identifiable delivery details (name and address) are retained only as long as operationally necessary to fulfill the order and cover the marketplace's return and dispute window, after which they are purged from our systems on a scheduled basis. Non-identifying order records (item, quantity, dates) may be retained longer for accounting and tax purposes.

Contact

Fresh Leaf Shirts Ltd, Alberta, Canada.
Questions about this policy or requests regarding your data: edmontonwellnessguide@gmail.com