What we collect, and why.

• When you order: your name, email, phone number, shipping address, any note you add, what you bought and what you paid.
• At checkout, before you order: your name and email address are recorded once you have typed them, so we can see where checkouts stop and follow up on an order that was not finished.
• When you sign up for a discount code: your email address, and whether the code has been used.
• When you join the partner program: your name, email, and what you tell us about your audience.
• When you write to us: whatever you include.

To process, ship and support orders; to send order confirmations and replies; to match an Interac e-Transfer to its order; to pay partners their commission; to keep the records the law requires; and to understand which parts of the site work and which do not.

We use service providers, who handle information on our behalf:

• Supabase — the database orders and sign-ups are stored in.
• Resend — sends order emails.
• Vercel — hosts the site, and counts visits and actions anonymously.
• Whop — processes card payments. Card details go to Whop directly and never reach us; we receive the payment status and amount.
• Google — suggests addresses as you type at checkout.
• TikTok and Google — advertising measurement, including cookies set by their tags. When an order is placed or paid, TikTok receives your email and phone number in hashed (one-way encrypted) form, so it can match the sale to an ad without receiving them in readable form.

Some of these providers store or process information outside Canada, including in the United States, where it is subject to local law.

Your cart, your age confirmation and a summary of your last order are kept in your own browser, not on our servers. Signing in to the partner dashboard sets a cookie that keeps you signed in. Advertising tags from TikTok and Google may set their own cookies. Vercel’s analytics does not use cookies.

Order records are kept for as long as Canadian tax and accounting rules require — currently six years. Other information is kept while it is useful for the purpose it was collected for, and deleted on request where the law allows.

You can ask to see the personal information we hold about you, to correct it, or to delete it. Email novaevum@gmail.com. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.