Privacy policy

Privacy Policy

PH8 Holdings Inc., carrying on business as SIP N SHIFT PH8 (“Sip n Shift PH8,” “we,” “us” or “our”), respects your privacy and is committed to responsibly managing the personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you:

• Visit sipnshiftph8.com;
• Create a customer account;
• Place or attempt to place an order;
• Subscribe to the PH8 Drop List;
• Contact customer service;
• Submit a product request, review or other content;
• Participate in a promotion or event; or
• Otherwise interact with SIP N SHIFT PH8.

This policy applies to the Canadian website and online store operated by PH8 Holdings Inc. It should be read together with our Terms of Service, Return and Refund Policy, Shipping and Delivery Policy and any additional terms displayed during checkout.

1. Who is responsible for your information

The organization responsible for personal information collected through this website is:

Legal business: PH8 Holdings Inc.
Operating name: SIP N SHIFT PH8
Jurisdiction: Ontario, Canada
Website: sipnshiftph8.com
Privacy Officer: Privacy Officer, PH8 Holdings Inc.
Privacy email: team@sipnshiftph8.com

Our Privacy Officer is responsible for overseeing our privacy practices and responding to privacy questions, access requests and complaints.

PIPEDA’s accountability principle requires an organization to designate responsibility for personal-information compliance and make information about its privacy practices publicly available. 

2. What personal information means

“Personal information” means information about an identifiable individual.

Depending on how you interact with us, personal information may include:

• Name;
• Email address;
• Telephone number;
• Billing address;
• Shipping address;
• Order history;
• Products viewed, purchased or requested;
• Customer-account information;
• Payment and transaction information;
• Communications with customer service;
• Reviews, comments, photographs or videos you submit;
• Marketing preferences;
• Internet Protocol address;
• Browser, device and operating-system information;
• Website activity and interaction data;
• Approximate location derived from an IP address;
• Cookie and pixel identifiers;
• Fraud-prevention and order-verification information; and
• Any other information you voluntarily provide.

Personal information does not normally include information that has been properly anonymized or aggregated so that it can no longer reasonably identify an individual.

3. Information you provide directly

We collect information you provide when you:

• Place an order;
• Create or update an account;
• Contact us;
• Subscribe to marketing communications;
• Request information about a product;
• Submit a “Find My Grail” or want-list request;
• Enter a promotion;
• Request a return or refund;
• Submit a review or photograph;
• Arrange local pickup;
• Report a missing or damaged shipment; or
• Communicate with us through social media or another channel.

You may choose not to provide certain information. However, we may be unable to process an order or provide a requested service when the information is reasonably necessary for that purpose.

4. Information collected automatically

When you access the website, Shopify and other authorized technologies may automatically collect information such as:

• IP address;
• Device type;
• Browser type;
• Operating system;
• Referring website;
• Pages viewed;
• Products viewed;
• Search terms;
• Cart activity;
• Approximate geographic region;
• Date and time of access;
• Session duration;
• Cookie identifiers; and
• Information about how you interact with the website.

This information may be collected through cookies, pixels, local storage, server logs and similar technologies.

Shopify provides merchants with customer-privacy controls that can include a privacy policy, cookie banner and data-sharing opt-out page. 

5. Information received from other sources

We may receive personal information from service providers and other parties involved in operating the store, including:

• Shopify;
• Payment processors;
• Fraud-prevention providers;
• Shipping carriers;
• Delivery services;
• Marketing and email platforms;
• Analytics providers;
• Social-media platforms;
• Review applications;
• Customer-service applications; and
• Professional advisers.

For example, a payment processor may tell us that a transaction was approved or declined, and a courier may provide tracking and delivery information.

We may also receive information when someone purchases a product for you, authorizes you to collect an order or identifies you as a delivery recipient.

6. How we use personal information

We may use personal information to:

Process and fulfill orders

This includes:

• Confirming an order;
• Processing payment;
• Preparing products;
• Arranging shipment or pickup;
• Providing tracking information;
• Communicating delivery updates;
• Processing returns, exchanges and refunds; and
• Maintaining transaction records.

Operate customer accounts

We may use information to:

• Create and maintain an account;
• Authenticate account access;
• Display order history;
• Save customer preferences; and
• Respond to account-related requests.

Provide customer service

We may use information to:

• Answer questions;
• Resolve order concerns;
• Investigate missing or damaged shipments;
• Assist with product searches;
• Review warranty or condition concerns; and
• Communicate about returns and refunds.

Protect the business and customers

We may use information to:

• Verify transactions;
• Detect or prevent fraud;
• Protect customer accounts;
• Enforce purchase limits;
• Investigate suspicious activity;
• Protect website security;
• Prevent abuse of policies; and
• Establish, exercise or defend legal claims.

Improve our website and services

We may use information to:

• Understand how customers use the website;
• Identify navigation or checkout problems;
• Improve website performance;
• Evaluate products and collections;
• Improve customer service;
• Measure marketing effectiveness; and
• Develop new features or services.

Send marketing communications

With appropriate consent or another lawful basis, we may send:

• New-arrival announcements;
• Preorder notices;
• Product-drop notifications;
• Promotions;
• Mission Skyline updates;
• Event announcements; and
• Other SIP N SHIFT PH8 news.

You may unsubscribe from promotional emails using the unsubscribe link included in the message or by contacting us.

Unsubscribing from promotional communications will not prevent us from sending necessary transactional communications, such as order confirmations, shipping updates, security notices or responses to your enquiries.

Canada’s Anti-Spam Legislation governs commercial electronic messages and includes requirements relating to consent, sender identification and unsubscribe mechanisms. 

Meet legal and regulatory obligations

We may use personal information to:

• Maintain accounting and tax records;
• Respond to lawful requests;
• Comply with court orders;
• Address privacy or consumer complaints;
• Cooperate with regulatory authorities; and
• Meet other legal obligations.

7. Consent

We seek consent for the collection, use and disclosure of personal information where consent is required.

Consent may be:

• Express, such as selecting a marketing-subscription box;
• Implied from the circumstances, such as providing a shipping address so an order can be delivered; or
• Obtained through another legally permitted method.

We will identify the purposes for collecting information at or before the time it is collected, except where the purpose is obvious and consent can reasonably be inferred.

Under PIPEDA, valid consent requires that a person can reasonably understand the nature, purpose and consequences of the collection, use or disclosure. 

You may withdraw consent, subject to reasonable notice and any legal or contractual restrictions. Withdrawing consent may affect our ability to provide a product or service.

For example, we cannot complete an online order without using the information needed to process payment and deliver the order.

8. When we disclose personal information

We do not disclose personal information except as described in this policy, with consent or as otherwise permitted or required by law.

We may disclose information to the following categories of recipients.

Shopify

Our online store is hosted through Shopify. Shopify processes information necessary to provide the ecommerce platform, checkout, store administration, security, analytics and other enabled services.

Shopify provides tools intended to help merchants offer customers transparency and control over personal information. 

Payment providers

Payment information may be processed by Shopify Payments, banks, credit-card networks or other payment providers.

We do not normally receive or store your complete credit-card number. We may receive transaction information such as:

• Payment status;
• Payment method;
• Partial card details;
• Billing information;
• Fraud-screening results; and
• Transaction identifiers.

Payment providers handle information according to their own privacy policies and legal obligations.

Shipping and delivery providers

We may provide a courier or delivery service with information necessary to deliver an order, such as:

• Recipient name;
• Address;
• Telephone number;
• Email address;
• Package information; and
• Delivery instructions.

Technology and business-service providers

We may disclose information to providers that assist with:

• Website hosting;
• Email delivery;
• Customer service;
• Fraud prevention;
• Analytics;
• Advertising;
• Reviews;
• Data storage;
• Information security;
• Accounting; and
• Business administration.

These providers are authorized to process information for services they provide to us, subject to their contracts, privacy obligations and applicable law.

Professional advisers

Information may be provided to accountants, lawyers, insurers, auditors and other professional advisers where reasonably necessary.

Legal authorities

We may collect, use or disclose information without consent where permitted or required by law, including to:

• Comply with a court order or lawful demand;
• Investigate fraud;
• Collect a debt;
• Address a security incident;
• Protect a person’s safety;
• Enforce our legal rights; or
• Cooperate with law enforcement or regulatory authorities.

PIPEDA permits certain collections, uses and disclosures without consent in circumstances specified by law. 

Business transactions

Personal information may be disclosed as part of a proposed or completed:

• Sale;
• Merger;
• Financing;
• Reorganization;
• Transfer of assets; or
• Similar business transaction.

Where applicable, reasonable safeguards will be used and the receiving organization will be required to protect and use the information for permitted purposes. PIPEDA includes obligations for personal information transferred during qualifying business transactions. 

9. Selling or sharing personal information

We do not sell customer personal information in exchange for money.

Certain analytics, advertising or platform technologies may be legally characterized as “selling,” “sharing” or targeted advertising under the laws of some jurisdictions, even where no money is exchanged.

Where applicable, eligible customers may be provided with a cookie banner, data-sharing opt-out page or other privacy control.

Shopify permits merchants to configure cookie and data-sharing controls by country or region. 

10. Cookies and similar technologies

Cookies are small files or identifiers placed on or associated with a browser or device.

We may use the following categories of cookies.

Necessary cookies

These support essential functions such as:

• Website security;
• Customer login;
• Cart functionality;
• Checkout;
• Payment processing; and
• Remembering privacy selections.

Disabling necessary cookies may prevent parts of the website from functioning.

Analytics cookies

These help us understand:

• Website traffic;
• Pages viewed;
• Product interest;
• Website performance; and
• How visitors navigate the store.

Functional cookies

These may remember preferences and provide enhanced website features.

Advertising cookies and pixels

Where enabled, these may help:

• Measure advertising performance;
• Avoid repeatedly displaying the same advertisements;
• Understand whether an advertisement resulted in a website visit or purchase; and
• Provide advertising that may be more relevant.

You may be able to manage cookies through:

• Our cookie banner;
• Shopify’s privacy controls;
• Your browser settings;
• Device settings; or
• Applicable advertising opt-out tools.

Blocking some technologies may affect website functionality.

11. Shopify Network Intelligence

Shopify may offer optional features that use information across Shopify services to provide enhanced analytics, advertising, security or commerce features.

If Shopify Network Intelligence or related enhanced services are enabled for our store, we will use Shopify’s required privacy settings and notices, which may include a Shopify privacy portal where customers can exercise applicable choices.

Shopify requires merchants using certain enhanced services to provide disclosures and access to applicable privacy controls. 

12. International processing

Shopify and some of our service providers may process or store personal information outside Ontario or outside Canada.

When information is processed in another jurisdiction, it may be subject to that jurisdiction’s laws and may be accessible to courts, governments or law-enforcement authorities under those laws.

We use providers that we reasonably believe maintain appropriate privacy and security practices, but no international transfer is entirely free from legal or security risk.

Contact our Privacy Officer for additional information about relevant service providers and foreign processing.

13. Retention

We retain personal information only as long as reasonably necessary for the purposes identified in this policy or as required or permitted by law.

Retention periods may depend on:

• Whether you maintain an account;
• Whether an order remains active;
• Accounting and tax requirements;
• Warranty, return or chargeback periods;
• Fraud-prevention requirements;
• Legal limitation periods;
• Outstanding disputes; and
• The sensitivity and purpose of the information.

When information is no longer reasonably required, we may securely delete, destroy or anonymize it.

PIPEDA requires organizations to limit use, disclosure and retention to identified purposes and to retain information only as long as necessary for those purposes. 

14. Security safeguards

We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the information.

Safeguards may include:

• Account-access controls;
• Password protection;
• Shopify platform security;
• Payment-provider security;
• Limited employee or contractor access;
• Secure devices;
• Fraud-monitoring processes;
• Software updates;
• Record-disposal practices; and
• Service-provider reviews.

PIPEDA requires safeguards appropriate to the sensitivity, amount, format and distribution of personal information. 

However, no website, transmission method or storage system can be guaranteed to be completely secure.

Customers should:

• Use a strong and unique password;
• Keep account credentials confidential;
• Avoid sending payment-card information by ordinary email;
• Sign out of shared devices; and
• Contact us if unauthorized account activity is suspected.

15. Privacy breaches

If a security incident involving personal information occurs, we will investigate and take reasonable steps to contain and address it.

Where required by PIPEDA, we will report a breach to the Office of the Privacy Commissioner of Canada and notify affected individuals when it is reasonable to believe the breach creates a real risk of significant harm. 

We will also maintain breach records where required by law.

16. Your privacy rights

Subject to applicable law and limited exceptions, you may request:

• Confirmation that we hold personal information about you;
• Information about how your personal information has been used or disclosed;
• Access to your personal information;
• Correction of inaccurate or incomplete information;
• Withdrawal of consent;
• Closure of a customer account;
• Deletion of information that is no longer legally or operationally required;
• A copy of certain information;
• A review of a privacy concern; or
• Information about our privacy practices.

PIPEDA provides individuals with rights to be informed of the existence, use and disclosure of personal information and to access and challenge its accuracy, subject to statutory exceptions. 

To submit a request, contact our Privacy Officer and provide enough information for us to:

• Verify your identity;
• Locate the relevant records; and
• Understand the request.

We will use reasonable verification procedures before releasing personal information.

We may be unable to provide access where disclosure would reveal another person’s personal information, confidential commercial information, legally privileged information or information that applicable law permits or requires us to withhold.

If access is refused, we will explain the reason where legally permitted.

17. Marketing choices

You may stop receiving promotional emails by:

• Selecting the unsubscribe link in a marketing email; or
• Contacting us at team@sipnshiftph8.com
• Please allow a reasonable period for the request to be processed.

Even after unsubscribing, you may continue to receive non-promotional messages concerning:

• Existing orders;
• Shipping;
• Returns;
• Refunds;
• Customer-service requests;
• Account security; or
• Legal or policy changes relevant to an active transaction.

18. Accuracy of information

We rely on customers to provide accurate and current information.

You may update certain details through your account or contact us to request a correction.

We may request verification before changing information connected with an order, account or payment.

19. Children and minors

Products sold through SIP N SHIFT PH8 may appeal to collectors of different ages. However, individuals who have not reached the age required to enter a binding purchase agreement should use the store only with the involvement of a parent or legal guardian.

We do not knowingly seek unnecessary personal information from children.

If a parent or guardian believes that a child provided personal information without appropriate authorization, they may contact our Privacy Officer to request review and deletion where appropriate.

20. Reviews and publicly submitted content

Information included in a public product review, comment, customer photograph or social-media submission may be visible to others.

Do not include sensitive information such as:

• Full addresses;
• Payment information;
• Account passwords;
• Private telephone numbers; or
• Information about another person without permission.

We may moderate or remove publicly submitted content according to our Terms of Service.

21. External websites and social media

Our website may contain links to external websites and social-media platforms.

Those third parties operate independently and have their own privacy practices. This Privacy Policy does not govern information collected directly by an external website or platform.

Review the third party’s privacy policy before submitting personal information.

22. Changes to this policy

We may update this Privacy Policy to reflect changes in:

• Business operations;
• Website features;
• Shopify services;
• Service providers;
• Privacy practices; or
• Applicable law.

The updated version will be posted on this website with a revised “Last updated” date.

Where required, we will provide additional notice or obtain consent before materially changing how previously collected information is used.

23. Questions and complaints

Questions, requests or complaints concerning personal information should be directed to:

Privacy Officer
PH8 Holdings Inc. / SIP N SHIFT PH8
Ontario, Canada

Website: sipnshiftph8.com
Email: team@sipnshiftph8.com