Privacy Policy

Last updated: December 2, 2025

This Privacy Policy describes how Aurelia Mastectomy Bra (“Aurelia”, “we”, “us”, or “our”) collects, uses, discloses, and protects your personal information when you visit our website, make a purchase, or otherwise interact with us (collectively, the “Services”).

We are based in Edmonton, AB, Canada and handle personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

By using our Services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Services.

Important: This Privacy Policy is for general information only and does not constitute legal advice. You should consult a qualified professional to ensure compliance with all laws that apply to your business.

1. Personal Information We Collect

“Personal information” means information about an identifiable individual, such as name, contact details, or other information that can be used to identify you.

We may collect the following types of personal information:

a) Information you provide directly

• Contact details (name, mailing address, email address, phone number)

• Order and billing information (products purchased, billing address, shipping address, payment method information – payment card details are usually processed by a third-party processor and not stored by us)

• Account information (username, password, order history, saved addresses)

• Customer support communications (emails, messages, inquiries, feedback)

• Reviews, photos, and testimonials you choose to submit

b) Information collected automatically

When you visit our website, we may automatically collect:

• Device and usage data (IP address, browser type, operating system, referring URLs, pages viewed, time and date of visits, clickstream data)

• Cookie data and similar technologies (see Section 5 – Cookies & Tracking Technologies)

This information helps us operate and improve our website, prevent fraud, and understand how visitors use our Services.

c) Information from third parties

We may receive information about you from:

• Payment processors (confirmation of payment status, limited card details such as last four digits and card brand)

• Shipping and delivery partners (delivery status and tracking information)

• Marketing tools or analytics services (aggregated or anonymized insights)

2. How We Use Your Personal Information

We use your personal information for the following purposes:

1. To provide and fulfill our Services

   • Process and deliver your orders

   • Manage payments and order confirmations

   • Provide customer support and respond to your inquiries

2. To manage your account (if applicable)

   • Create and maintain your customer account

   • Display your order history and saved preferences

3. To personalize your experience

   • Remember your preferences and improve website usability

   • Show relevant products, content, and offers

4. To communicate with you

   • Send transactional emails (order confirmations, shipping updates, important notices)

   • Send marketing emails, newsletters, or promotions with your consent, where required by law

5. To operate, maintain, and improve our website

   • Analyze usage trends and performance

   • Prevent fraud and enhance security

   • Develop new products or features

6. To comply with legal obligations

   • Meet tax, accounting, and regulatory requirements

   • Respond to lawful requests from authorities or regulators

We limit collection, use, and disclosure of personal information to purposes that a reasonable person would consider appropriate in the circumstances.

3. Legal Basis for Processing (If you serve EU/UK visitors)

If you choose to serve customers in the European Economic Area (EEA) or United Kingdom (UK), our legal bases for processing personal data include:

• Performance of a contract (e.g., to fulfill an order)

• Consent (e.g., for marketing emails, certain cookies)

• Legitimate interests (e.g., to improve services, prevent fraud)

• Legal obligation (e.g., tax and accounting records)

4. Consent & Your Choices

By providing personal information to us (e.g., placing an order, creating an account, contacting us), you consent to our collection, use, and disclosure of that information for the purposes identified at the time of collection and in this Privacy Policy.

You can:

• Withdraw consent for marketing emails at any time by clicking the “unsubscribe” link in our messages or contacting us.

• Decline non-essential cookies (see Section 5).

Withdrawing consent may affect our ability to provide certain Services (for example, we may not be able to send order updates if you opt out of all email communications).

5. Cookies & Tracking Technologies

We use “cookies” and similar technologies (such as pixels, tags, or local storage) to:

• Keep you logged in and remember your preferences

• Understand how our site is used and improve performance

• Measure the effectiveness of our marketing and advertising

Types of cookies we may use:

• Strictly necessary cookies – Required for basic site functions (e.g., shopping cart, checkout).

• Performance/analytics cookies – Help us understand how visitors use our site.

• Functional cookies – Remember your preferences and settings.

• Advertising/marketing cookies – Used to deliver more relevant ads (if we run advertising campaigns).

You can control cookies through your browser settings and, where required by law, through a cookie banner or preference tool on our site.

6. How We Share Your Personal Information

We do not sell your personal information. We may share your information with:

1. Service providers (processors)

   • Payment processors

   • Shipping and logistics providers

   • Website hosting and maintenance providers

   • Email and marketing platforms

   • Analytics and security tools

These third parties are given only the information they need to perform their services and are expected to protect that information and use it only for the agreed purposes.

1. Business transfers
   If we merge, re-organize, sell some or all of our assets, or are involved in a similar transaction, personal information may be transferred as part of that transaction, subject to confidentiality obligations.

2. Legal and regulatory requirements
   We may disclose your information if required to do so by law or in good faith belief that such action is necessary to:

   • Comply with a legal obligation or regulatory request

   • Protect and defend our rights, property, or safety, or that of our customers

   • Investigate or prevent fraud or security issues

We remain responsible for personal information transferred to third parties for processing and take steps to ensure those third parties offer comparable protection.

7. International Transfers

Our website and service providers may be located outside your province or country. As a result, your personal information may be stored or processed in other jurisdictions that may have different privacy laws than those where you live.

Where we transfer personal information outside of Canada, we take steps to ensure that appropriate safeguards are in place, consistent with applicable law.

8. Data Retention

We keep your personal information only as long as necessary for the purposes described in this Privacy Policy, or as required by law (for example, tax and accounting obligations).

After this period, we will securely delete, anonymize, or aggregate your information, unless a longer retention period is required or permitted by law.

9. Security of Your Information

We use reasonable physical, technical, and organizational safeguards designed to protect your personal information against loss, theft, misuse, unauthorized access, disclosure, alteration, or destruction.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we strive to protect your information to a level that is reasonable in the circumstances and in line with our legal obligations.

10. Your Rights & Access to Your Information

Depending on your location and applicable law, you may have the right to:

• Access the personal information we hold about you

• Request correction of inaccurate or incomplete information

• Withdraw consent to certain uses of your information (such as marketing)

• Challenge our compliance with privacy obligations

You can make a request by contacting us using the details in Section 13. We may need to verify your identity before responding. In some cases, legal exceptions may limit your access rights, and we will explain any such limitations in our response.

If you are in the EEA/UK or other jurisdictions with specific privacy laws, you may have additional rights (such as data portability or the right to lodge a complaint with a supervisory authority).

11. Children’s Privacy

Our Services are not intended for children under the age of 16, and we do not knowingly collect personal information from children under this age. If we become aware that we have collected personal information from a child under 16 without verifiable parental consent, we will take steps to delete such information.

12. Third-Party Websites & Links

Our website may contain links to third-party websites or services (e.g., social media, payment processors, partner sites). We are not responsible for the privacy practices or content of those third parties.

When you leave our site, we encourage you to review the privacy policies of any other sites you visit.

13. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact:

Privacy Officer
Aurelia Mastectomy Bra
Edmonton, AB, Canada
Email: sales@aureliamastectomybra.com

You also have the right to contact the appropriate privacy regulator in your jurisdiction (for example, the Office of the Privacy Commissioner of Canada) if you are not satisfied with our response.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we do, we will revise the “Last updated” date at the top of this page.

Your continued use of the Services after an updated Privacy Policy is posted means you accept the changes.