This Privacy Policy applies to all personal information collected by 1001316683 Ontario Inc., operating under the registered name VolumeTee, through our website (volumetee.com), email communications, customer service interactions, and any other channels through which we provide products or services.

We are committed to complying with the Personal Information Protection and Electronic Documents Act (PIPEDA) — Canada's federal privacy law — as well as applicable provincial privacy laws and, where relevant, consumer privacy laws applicable to our US customers.

The data controller responsible for your personal information is:

We collect personal information only to the extent necessary to provide our products and services. This includes:

• Identity data: First name, last name, username, or similar identifier
• Contact data: Email address, telephone number, billing address, and shipping address
• Transaction data: Details about products purchased, order amounts, and payment history
• Payment data: Payment card details (processed and encrypted by our payment provider — we do not store full card numbers)
• Communications data: Content of emails, support tickets, or messages you send us
• Marketing preferences: Your preferences for receiving marketing and promotional communications

• Usage data: Pages visited, time spent on pages, links clicked, and referring URLs
• Device data: IP address, browser type and version, operating system, device identifiers
• Cookie data: Information stored by cookies and similar tracking technologies (see Section 7)
• Location data: General geographic location inferred from your IP address (country/region level only)

We use your personal information only for the purposes for which it was collected or for compatible purposes. Specifically:

Under Canada's PIPEDA, we are required to have a valid legal basis for collecting and using your personal information. We rely on the following bases:

• Consent: You have given us consent to process your personal information for a specific purpose (e.g., subscribing to our newsletter, creating an account)
• Contractual necessity: Processing is necessary to fulfill a contract with you (e.g., processing an order)
• Legitimate interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, improving our website), where those interests are not overridden by your rights
• Legal obligation: Processing is required to comply with a legal or regulatory obligation applicable to us

We do not sell, rent, or trade your personal information. We may share your information with trusted third parties only in the following circumstances:

Our website uses cookies and similar technologies to enhance your browsing experience, remember your preferences, and analyze how our site is used.

• Strictly necessary cookies: Essential for the website to function (e.g., shopping cart, login sessions). Cannot be disabled.
• Functional cookies: Remember your preferences (e.g., language, region) to provide a personalized experience.
• Analytics cookies: Help us understand how visitors interact with our website using tools such as Google Analytics. Data is aggregated and anonymized where possible.
• Marketing cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns. Only placed with your consent.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal, accounting, or reporting obligations. The following general retention periods apply:

• Order and transaction records: Retained for a minimum of 7 years for tax and accounting compliance under Canadian law
• Account information: Retained for the duration of your account and for a reasonable period thereafter in case of disputes
• Marketing consent records: Retained until you withdraw your consent, plus a short period to document the withdrawal
• Customer support communications: Retained for up to 3 years from the date of last contact
• Website analytics data: Typically anonymized or aggregated within 26 months

When personal information is no longer required, we will securely delete or anonymize it in accordance with our data disposal procedures.

We take the security of your personal information seriously and implement appropriate technical and organizational safeguards to protect it from unauthorized access, use, disclosure, alteration, or destruction. Our security measures include:

• SSL (Secure Sockets Layer) encryption for all data transmitted between your browser and our website
• Secure, encrypted storage of personal data on protected servers
• PCI-compliant payment processing — we do not store full credit card numbers on our systems
• Access controls ensuring only authorized personnel can access personal data
• Regular security assessments and updates to our systems

If we become aware of a data breach that poses a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required by law.

Under PIPEDA and applicable Canadian privacy law, you have the following rights regarding your personal information:

To exercise any of these rights, please contact us at support@volumetee.com. We will respond to all verified requests within 30 days. We may ask you to verify your identity before processing your request.

If you are dissatisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.

Our website and services are not directed to or intended for individuals under the age of 18 years. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at support@volumetee.com.

If we become aware that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete that information from our records.

VolumeTee is based in Canada and primarily stores and processes data in Canada. However, some of our trusted service providers (such as email marketing platforms, payment processors, and analytics tools) may process or store your data in servers located in the United States or other jurisdictions outside Canada.

When your data is transferred outside Canada, we ensure that appropriate safeguards are in place to protect your information in accordance with PIPEDA standards, including contractual clauses that require recipients to apply privacy protections equivalent to those in Canada.

Our website may contain links to external websites, plug-ins, and applications operated by third parties. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy policies or practices.

We encourage you to read the privacy policy of every website you visit and every third-party service you use that is accessible through or linked from our website.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make changes, we will update the "Last updated" date at the top of this page.

For significant changes, we will make a reasonable effort to notify you — for example, by posting a prominent notice on our website or, where we have your email address, sending you a notification. However, we encourage you to review this Privacy Policy periodically to stay informed.

Your continued use of our website or services after any change to this Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us. We take all privacy inquiries seriously and will respond as quickly as possible.