Privacy policy

Last updated: 11 March 2026

Thistle & Tundra ("Thistle & Tundra", "we", "our", or "us") operates this website and online store to provide customers within Canada with access to our products and services (the "Services").

This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

Personal Information We Collect

We may collect the following types of personal information:

Contact Information: Full name, billing and shipping address, email address, and phone number.
Order & Transaction Information: Products purchased, order history, payment confirmation details, and records of returns or exchanges.
Payment Information: Payments are processed securely through third-party providers (such as Shopify Payments). We do not store your full credit card details on our servers.
Device & Usage Information: Automatically collected information including IP address, browser type, device identifiers, pages visited, and time spent on site. This is collected using cookies and similar tracking technologies.

How We Collect Personal Information

We collect personal information:

Directly from you when you place an order, create an account, subscribe to marketing, or contact support.
Automatically through cookies and website analytics as you navigate the site.
From service providers who support our business operations (e.g., fraud prevention services).

How We Use Your Information

We use your personal information to:

Process and fulfill your orders, including shipping and delivery.
Manage returns, refunds, and customer support inquiries.
Communicate with you regarding your account or transactions.
Improve our website functionality and user experience.
Prevent fraud and enhance the security of our Services.
Send marketing communications (only where you have provided express consent).
Comply with Canadian legal and regulatory requirements.

Marketing & Anti-Spam (CASL)

In compliance with Canada’s Anti-Spam Legislation (CASL), we will only send you commercial electronic messages (emails or texts) if you have opted in to receive them or if we have an existing business relationship with you. You may withdraw your consent at any time by clicking the "unsubscribe" link in our emails.

Cookies & Tracking Technologies

We use cookies to enable core site functionality and analyze traffic. We use Google Ads to deliver relevant advertising. You can manage your preferences via your browser settings or our website's cookie consent banner.

Disclosure of Personal Information

We may disclose your personal information to:

Service Providers: Including Shopify (platform), payment processors, and IT/hosting providers.
Shipping Carriers: Such as Canada Post, UPS, or FedEx.
Legal Authorities: Where required to comply with a subpoena, warrant, or court order.

We do not sell your personal information to third parties.

Cross-Border Transfers

Some of our service providers (including Shopify) may store or process your data outside of Canada, including in the United States. While stored outside of Canada, your information may be subject to the laws of those jurisdictions, including the right of local authorities to access data. We ensure all service providers maintain protections equivalent to those in Canada.

Data Security & Retention

We maintain administrative, technical, and physical safeguards to protect your personal information against unauthorized access or loss.

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or notice requirements.

Your Rights

Depending on your province of residence, you have the following rights regarding your personal information:

Access: The right to request a copy of the personal information we hold about you.
Correction: The right to request that we correct inaccurate or incomplete info.
Withdrawal of Consent: The right to withdraw consent for data processing at any time (subject to legal or contractual restrictions).
Deletion: In certain jurisdictions (such as Quebec), you may request the deletion of your data.

To exercise these rights, please contact us at support@thistleandtundra.com.

Children’s Privacy

Our Services are not directed to individuals under the age of majority in their province of residence. We do not knowingly collect personal information from minors.

Complaints

If you have questions or concerns about our privacy practices, please contact us at support@thistleandtundra.com.

If we are unable to resolve your concern, you may contact the Office of the Privacy Commissioner of Canada (OPC) or your provincial Privacy Commissioner.