Privacy Policy

URBAN LOOTS – PRIVACY POLICY

Last Updated & Effective: November 28, 2025

This Privacy Policy explains how Urban Loots (“Urban Loots,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you visit or make a purchase from our Shopify store (the “Store”) or otherwise interact with us (collectively, the “Services”).

We are committed to handling personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable laws. Office of the Privacy Commissioner+2Justice Laws+2

If you do not agree with this Privacy Policy, please do not use our Services.

1. Who We Are / Contact Information

Urban Loots
43 Young St.
Acton, ON L7J 2G7
Canada
Email: sales@urbanloots.com

2. Information We Collect

We collect personal information in the following ways:

2.1 Information You Provide Directly

When you interact with the Store, you may provide:

  • Contact details: name, email, phone number (if provided)

  • Order details: billing/shipping address, items purchased, delivery notes

  • Payment details: processed by Shopify/payments providers (we do not store full card numbers)

  • Account details: login credentials, wishlist, preferences

  • Customer support: messages, emails, chat logs, photos you send us

  • Reviews/UGC: product reviews, ratings, photos, social handles

2.2 Information Collected Automatically

When you browse the Store, we may automatically collect:

  • Device & browser data: IP address, device type, OS, browser, language

  • Usage data: pages viewed, products clicked, time on site, referral source

  • Approximate location: city/region inferred from IP

  • Cookies & similar tech: to run the Store, remember cart, analyze traffic, and market products (see Section 6)

2.3 Information From Third Parties

We may receive information from:

  • Shopify and integrated apps you interact with

  • Payment processors confirming payment status

  • Shipping carriers providing delivery updates

  • Marketing partners (e.g., Meta, Google) if you interact with ads

  • Public sources (e.g., social media) if you tag or message us

You may choose not to provide certain information, but that can limit our ability to process orders or provide support.

3. How We Use Your Information

We use personal information for the following purposes, consistent with PIPEDA’s “identified purposes” principle: Office of the Privacy Commissioner+1

  1. To provide the Services and fulfill orders

    • process payments, ship purchases, send order confirmations and updates

  2. To communicate with you

    • respond to inquiries, troubleshoot issues, handle returns/refunds

  3. To personalize your experience

    • show relevant products, remember preferences and cart contents

  4. To market and grow our business

    • send newsletters/promotions if you consent, run ads, measure campaigns

    • all marketing emails/texts follow CASL rules (Section 7) CRTC+2ISED Canada+2

  5. To improve and secure the Store

    • analytics, testing, fraud prevention, enforcing our Terms

  6. To meet legal obligations

    • tax, accounting, regulatory compliance, and responding to lawful requests

We may also de-identify or aggregate information for analytics and business reporting. De-identified data is not used to re-identify you.

4. How We Disclose Your Information

We do not sell your personal information for money. We share it only as needed for business purposes, including:

4.1 Service Providers (Processors)

We share information with trusted vendors who help operate our Store, including:

  • Shopify (hosting, checkout, store analytics)

  • Payment processors (credit card/alternative payments)

  • Shipping and fulfillment partners

  • Email/SMS providers for order and marketing messages

  • Analytics providers (e.g., Google Analytics)

  • Advertising platforms (e.g., Meta/Google) for targeted ads

  • Customer support tools and fraud-prevention services

These providers only use your information to perform services for us and must protect it.

4.2 Business Transfers

If Urban Loots is involved in a merger, acquisition, or sale of assets, customer data may be transferred as part of that transaction. You will continue to have the same privacy rights.

4.3 Legal and Safety Disclosures

We may disclose information where required or permitted by law, such as:

  • responding to court orders, subpoenas, or regulatory requests

  • enforcing our Terms or protecting rights, property, or safety

  • investigating fraud or security concerns

4.4 With Your Consent

We may share information with other parties if you direct us to do so.

5. Your Choices and Rights (Canada / Ontario)

Under PIPEDA, you have rights to access and correct your personal information and to withdraw consent, subject to legal limits. Office of the Privacy Commissioner+1

You may request:

  • Access to the personal information we hold about you

  • Correction of inaccurate or incomplete information

  • Withdrawal of consent for marketing or optional processing

  • Deletion where appropriate (note: some records must be kept for legal/tax reasons)

To make a request, email sales@urbanloots.com

.
We may verify your identity before fulfilling a request.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to:

  • enable core store functionality (cart, checkout, login)

  • remember preferences

  • analyze Store performance

  • provide relevant ads on third-party platforms

You can control cookies through your browser settings and, where available, our cookie banner/settings. Blocking some cookies may affect Store functionality.

7. Marketing Communications (CASL)

If you opt in to marketing, we may send you commercial electronic messages (emails/SMS) about products, drops, promos, and events. We comply with CASL by:

  • obtaining express or implied consent where permitted

  • clearly identifying Urban Loots as the sender

  • including a working unsubscribe option in each message Chamber+3CRTC+3ISED Canada+3

You can unsubscribe anytime using the link in our emails or by contacting us.

Even if you opt out of marketing, we may still send transactional messages (order updates, receipts, security notices).

8. Safeguards / Security

We use reasonable administrative, technical, and physical safeguards to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. Office of the Privacy Commissioner+1

However, no method of transmission over the internet is 100% secure. You use the Services at your own risk.

If a security breach creates a real risk of significant harm, we will notify affected individuals and regulators as required by law. Justice Laws

9. Retention

We retain personal information only as long as necessary for the purposes outlined in this Policy, including legal, tax, accounting, or dispute-resolution needs. When no longer required, data is securely deleted or anonymized.

10. International Transfers

Our Store runs on Shopify and may use third-party providers that process or store data outside Canada (including the United States). PIPEDA allows cross-border processing, but we remain accountable for protecting your information and ensuring comparable safeguards through contracts and vendor standards. Office of the Privacy Commissioner+2Shopify Help Center+2

By using the Services, you consent to these transfers.

11. Third-Party Links

Our Store may contain links to external websites or social platforms we don’t control. Their privacy practices are governed by their own policies, not ours.

12. Children

Our Services are not intended for anyone under 18. We do not knowingly collect information from minors. If we learn we have collected such information, we will delete it.

13. Changes to This Privacy Policy

We may update this Policy to reflect operational, legal, or technical changes. Updates take effect when posted, and the “Last Updated” date will change. If changes are material, we will take reasonable steps to notify you (e.g., banner or email).