Privacy policy

This Policy was last updated: 2 November 2026

This privacy Policy (“Policy”) describes how Loam & Lark (the “Site, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from loamandlark.ca (the “Site”) or otherwise communicate with us (collectively, the “Services”). For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or other individual whose information we have collected pursuant to this Privacy Policy.

This Privacy Policy is a legally binding agreement between you ("User", "you" or "your") and Loam & Lark. ("we", "us" or "our"). By accessing and using our Site, you acknowledge that you have read, understood, and agree to be bound by this Policy's terms.

It describes how Personally Identifiable Information ("Personal Information"), Usage Data, Device Information, and Log Data ( collectively "Data") is collected, protected and used. It also describes the choices available to you regarding our use of your Personal Information and how you can access and update your Personal Information. This Policy also informs you about the nature, scope, and purpose of the Personal Information and Data we process.

Please read this policy carefully. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

PERSONAL INFORMATION & DATA WE COLLECT

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

The types of personal information we obtain about you depends on how you interact with our Site and use our Services. When we use the term “personal information”, we are referring to information that identifies, relates to, describes or can be associated with you. The following sections describe the categories and specific types of personal information we collect.

Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

Basic contact details including your name, address, phone number, email.
Order Information including your name, billing address, shipping address, payment confirmation, email address, phone number in addition to any further relevant order information we require to process your request.
Shopping information including the items you view, put in your cart, or add to your wishlist.
Customer support information including the information you choose to include in communications with us, for example, when sending a message through the Services, country of residence, phone number, username, or account password.

Order Information & Customer Support

This information is used as necessary to fulfil orders placed through our Site, process your payment information, arrange shipping, and provide you with any supplementary invoices or confirmations, or provide general customer support.

Your order information may at any time also be used in general communication with you, to screen orders for fraud, or to provide you (with your explicit consent) with information or related advertising for our offers and products.

We share order information with third-party service providers that we employ to provide us with the necessary operational services for taking and processing payments, accounting services, collecting information for our newsletter, and shipping our goods to you. Our service providers are obligated not to use or disclose your Personal Information for purposes outside of fulfilling their services to us.

As you go through checkout, this site may auto-complete your shipping and billing address by sharing what you type with the Google Places API and returning suggestions to you to improve your checkout experience.

Should you reach out to us via our Site, Email, Or Social Media for customer support, we may collect additional information from you to best serve your needs.

Information We Collect through Cookies

We also collect Data automatically through tracking and analytics cookies, beacons, and pixels, in addition to information that is requested explicitly with your consent.

All Personal Information and Data we collect help us provide an optimal customer experience, continually develop and improve our products, market our products, improve the information provided through our website, and enrich our overall customer experience.

Some features of the Services may require you to directly provide us with certain information about yourself . You may elect not to provide this information, but doing so may prevent you from using or accessing these features.

Device Information

While browsing our website, various Data is collected automatically by Shopify, our IT tools and systems. Data gathered includes (but is not limited to):

the date you visited our website
the time you visited our website
your timezone
your computer's internet protocol (IP) address
web pages visited prior to coming to this website
the device you use to access our website
the time of day you may have accessed our site
time spent on our web pages
your browser, network and operating system
information you search for on our website
individual web pages or products that you viewed
what websites or search terms referred you to the Site
Information about how you interact with the Site

This information may also include details about your use of this website, including:

Clicks
Internal links
Pages visited
Scrolling
Searches
Timestamps

Collection of such Data may also occur via the use and implementation of our third-party service providers. We refer to this automatically-collected information as “Device Information”.

Device Information is shared with our website hosting and processing provider, Shopify, as well as Cloudflare domain and cyber security, and payment processor PayPal.

Information We Obtain from Third Parties

Finally, we may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

Companies who support our Site and services, such as Shopify.
Our payment processors, who collect payment information (e.g. bank account, credit or debit information, billing address) to process your payment in order to fulfill your orders and provide you with products or services you have requested, in order to perform our contract with you.
When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We are not responsible or liable for the accuracy of the information provided to us by third parties and are not responsible for any third party’s policies or practices.

HOW WE USE YOUR PERSONAL INFORMATION & DATA

Personal Information and Data we collect help us operate our business, provide customer support, improve our product and service offerings, and ensure the information and content we provide are optimized and helpful. We do not share or sell your Personal Information with third parties for their commercial use without your explicit consent.

To Provide Products and Services and Operate Our Business

We use your Personal Information to provide you with Services in order to perform our contract with you, including to process your payments, fulfill your orders, to send notifications to you related to your account, purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to assist you with customer service requests, to arrange shipping or deal with shipping-related inquiries, to facilitate any returns and exchanges, and to enable you to post reviews,

Customer Account Registration

If you create a customer account on this Site, we collect personal information to improve our checkout experience and customer service.

This information may include, but is not limited to, your:

Billing and shipping address(es)
Details about your orders (for example, your shirt size)
Email address
Name
Phone number
Order and Account Emails

We may email you with messages about your order or account activity. For example, we may email you to tell you that:

You've created a Customer Account
Your Customer Account password has been reset or updated
You've made a purchase
Your order has shipped

It's not possible to unsubscribe from these messages.

Email Signups

When you sign up for our email marketing, we collect your email address to send you emails about new product launches, studio updates, events, special offers, or other related content. In accordance with the CAN-SPAM Act, you can unsubscribe at any time at the bottom of the email or contact us directly. Each email sent from us via our email service provider(s) will also clearly state who the email is from.

Customer Service & Support

At any point in communication with us or by utilizing our Services you may be required to provide us with certain Personal Information in order for us to assist you with customer service and support inquiries. We take reasonable measures to ensure all Personal Information shared with us in this respect is securely transmitted. Any type of data communicated to us over the internet, for example, via chat or through email communications, may be subject to security breaches. We do our utmost to ensure your data is protected, but absolute protection from third-party access is impossible and therefore not guaranteed. Through such channels, your communication with us and the information you choose to share is at your own risk.

Marketing and Advertising

We use your Personal Information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you advertisements from products or services. This may include using your Personal Information to better tailor the Services and advertising on our Site, other websites, and social media platforms.

To Improve and Develop Our Offerings

We may use your Personal Information and Usage Data from time-to-time to assess, improve, and develop our existing product lines, new products, social media strategies, website strategies, and Services.

To Collect User Feedback

We may use your Personal Information to post User testimonials on our website and social media platforms, to request customer feedback in advance of a launch, or following a purchase from our shop.

Abandon Cart Emails

You'll receive an automated email within 24 hours after you abandon your shopping cart if all of the following occur:

You enter your email address at checkout or are logged into your Customer Account.
You add a product that is in stock to your shopping cart.
You close your browser or leave this website without completing your purchase.

You can unsubscribe from these messages at the bottom of the email.

The email will link back to this website, where you can pick up where you left off and complete your purchase.

Security and Fraud Prevention

We use your Personal Information to detect, investigate, or take action regarding possible fraudulent, illegal or malicious activity. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password, or other access details with anyone else. If you believe your account has been compromised, please contact us immediately.

to protect both you and our Services, to prevent fraudulent and suspicious activity, and to protect your information.

Communication with You

We use your Personal Information to provide you with customer support and improve our Services. This is in out legitimate interests in order to be responsive to you, to provide effective services to you and to maintain our business relationship with you.

COOKIES

Like many websites, we use Cookies on our Site. For specific information about the Cookies that use related to powering our store with Shopify, see https://www.shopify.com/legal/cookies. We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services (in our legitimate interests to administer, improve, and optimize the Services). We may also permit third parties and services providers to use Cookies on our Site to better tailor the services, products, and advertising on our Site with other websites.

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing cookies or blocking Cookies can negatively impact your user experience and may cause some of the Services, including certain features and general functionality, to work incorrectly or no longer be available. Additionally, blocking Cookies may not completely prevent how we share information with third parties such as our advertising partners.

More information about our Cookie usage can be found in our Cookie Policy.

You may, at any point, prevent cookies from being stored on your computer. There are a few ways you can do this. If you do disable any cookies, it may affect the proper functioning and experience of our website:

Browser permissions: Adjust your cookie permissions in your browser settings.
Opt-out browser plugin: Install the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout/.

HOW WE SHARE YOUR PERSONAL INFORMATION & DATA

Disclosure

We reserve the right to disclose your Personal Information to third parties for legitimate purposes subject to this Privacy Policy, if and when we are required to do so by law when we believe in good faith that disclosure is necessary to protect our rights, protect your safety and the safety of others, investigate fraudulent activity, respond to any government request, or if you are in clear violation of our Terms of Service.

Vendors or Third-Party Service Providers

Each of the third-party service providers we use only collect, use, and disclose information to the extent required to perform the services they provide to us. Any external data processing is strictly governed by the existing privacy policies of our third-party service providers.

With Businesses and Marketing Partners

We share your information with business and marketing partners, including Shopify, to provide services and advertise to you (for example, we use Shopify to support personalized advertising with third-party services). Our business and marketing partners will use your information in accordance with their own privacy notices.

We share Usage Data with certain third-party service providers, to learn about site traffic and activity.

Certain third-party service providers may be located in or have facilities and servers that are located in a different jurisdiction than either you or us, and your information may become subject to disclosure under any applicable legislation.

Once you leave our Site or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our Site’s Terms of Service.

Facebook & Instagram

We utilize Facebook and Instagram Shop and Ads using Meta Pixel, advanced matching, and Conversions API - Privacy Policy. We have chosen a maximum level of data sharing with Meta Pixel, advanced matching, and Conversion API for the commerce services they provide to us. This option helps us get the best possible results with tracking our conversion and is continually updated with Facebook’s latest advertising technology. Customers can disconnect this data from their Facebook account by changing their settings for Off-Facebook Activity.

The Conversions API sends the purchase event between Shopify and Facebook servers. Data sent from server to server can't be blocked by browser-based ad blockers. The Maximum setting shares customer's personal information to match users on Facebook's network. The information that is collected using this setting includes: customer's name, location, email address, and phone number, as well as customer browsing behavior in our online store.

This data helps enable ad personalization, optimization, and measurement across Meta technologies, showing our ads to people more likely to find them relevant. It connects our marketing data directly to Meta, helping us reach more customers, reduce ad cost and better understand the impact of our ads.

Customer information is hashed server-side before transmission to Meta.

The following events are tracked.

Customer First Name (hashing required)

Customer Last Name (hashing required)
Customer Email (hashing required)
Customer Phone Number (hashing required)
Customer Address (City, State, Zip Code, Country - hashing required)
PageView - when a visitor views a page
ViewContent - when a visitor views a product
Search - when a visitor makes a search
AddToCart - when a visitor adds a product to the shopping cart
When an item is removed from the cart
InitiateCheckout - when a visitor clicks the checkout button
AddPaymentInfo - when a visitor enters payment information in the checkout
Purchase - When a visitor completes a purchase and views the thank you page in the checkout.
Customer Click ID - a unique click token generated when a user clicks a Facebook or Instagram ad, allowing Meta to link a website conversion back to a specific ad click
Customer Agent ID - helps Meta identify device characteristics and improve event match accuracy
Payment information

Google Ads

We share visitor/customer information with Google Ads, to perform ad measurement and personalization services.

You can opt out of personalized advertising through tools like My Ad Center. You can also turn off ads personalization and permanently delete the activity data tied to your account at any time with the data and privacy settings.

Google Analytics

When you visit our website, Google Analytics cookies are placed on your computer to analyze how you use and experience our website. The information generated is transmitted to and stored on a Google server in the United States of America.

Information we collect via Google Analytics relates, but is not limited to, demographics, device type, use, age, gender and general interest on the website pertaining to the content, products, pages visited, and other site visit interests. Information collected enables us to optimize our website, services, and goods we offer as a business and our advertising and social media strategies.

Data retention terms:

Event data (2 months)
User data (2 months)

Opt-out browser plugin: Install the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout/

Metricool

We use Metricool to help us better understand our website analytics, benchmarking, for social media management and communication.
Privacy Policy

Shopify & Apps

Shopify processes your data when you visit and make purchases on our Site, including to provide services based on your interactions with other merchants and with Shopify. Your information will be shared with Shopify and other third parties that may be located in other countries, in order to provide services to you, including those that incorporate data from your interactions with other merchants and with Shopify.

Our third-party service providers and sub-processors that handle Personal Information and Usage Data:

Shopify (website hosting, email marketing, SMS marketing, WhatsApp marketing, analytics, order processing and management, shipping) - Shopify’s Consumer Privacy Policy
Shopify’s Shop App (sales channel, email marketing, analytics, and shopping experience) - Shop App User Privacy Policy
Built For Shopify Additional Website Apps:

Account & Checkout (customize customer accounts and checkout, invoice availability) Privacy Policy
EasyRoutes Local Delivery (local delivery route mapping and delivery confirmations) Privacy Policy
Krown Product Blocks (shop theme features and functionality to enrich the customer experience) Privacy Policy
Stamp Show Variants on Collection (displaying product variants on collections pages) Privacy Policy
Descriptions Studio (content snippets throughout website) Privacy Policy
Shopify Search & Discovery (website search, filters, product boosting, analytics, store search and discovery performance) Privacy Policy
Judge.me Reviews (collect, display, convert, manage product reviews, reach customers through email, SMS, WhatsApp and QR codes) Privacy Policy
Smile.io Rewards (rewards/points, referrals program and customer loyalty) Privacy Policy
Shopify Messaging (send emails, SMS, WhatsApp campaigns to customers directly from Shopify for updates, exclusive offers, product tips and track results like click-through rates, conversion rates, and other analytics to help us understand our audience and grow our business.) Privacy Policy
Shopify Flow (automate workflows for ecommerce tasks, SMS, and e-mail campaigns) Privacy Policy
Shopify Forms (pop-ups and inline forms to capture leads, tag customers, boost conversion, segment and manage customer information) Privacy Policy
Magic Wishlist (customer wishlist and save-for-later functionality, back in stock alerts to customers) Privacy Policy
C:Hub Customer Accounts (customer accounts backend services and invoice availability) Privacy Policy
Easify Custom Product Options (custom product options and product customizations) Privacy Policy
TinyCookie (privacy law compliance, cookie consent and management) Privacy Policy
TinySEO Speed Image Optimizer (search engine optimization, AI powered search engine optimization services) Privacy Policy
TinyBackup (Shopify store backups and restore) Privacy Policy
Translate & Adapt (Shopify’s native translation app) Privacy Policy

Cloudflare (domain host and cyber security) - Privacy Policy
Quickbooks Online (accounting) Privacy Policy
Paypal (payment processing) - Privacy Policy

With Your Explicit Consent

There may be instances throughout the course of business where you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations, with your consent.

There may be instances throughout the course of business where we request, with your explicit consent, your Personal Information, for example, in regards to an exclusive customer account or newsletter signup benefit, an exclusive sale or marketing offer, a giveaway, etc. We will never sign you up for any of our marketing services without your explicit consent.

Affiliations

There may be instances throughout the course of business where we share your personal information with our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.

Business Transactions

Throughout the course of business, there may be instances where we share your Personal Information, such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

Sale of Our Business

Throughout the course of business, we may sell or purchase assets. If our business is sold, acquired, merged, or sale of our business in whole or part takes place, Personal Information and Data we have collected about you, analytics, and your order details may be transferred as an asset to such entity. Should any of the above occur, we will make reasonable efforts to require that the person or organization utilize the information in line with this Policy.

Font Hosting Servers

This website uses font files from Google Fonts and Adobe Fonts. To correctly display this site to you, servers, where the font files are stored, may receive personal information about you, including:

Information about your browser, network, or device
Your IP address

HOW YOU CAN MANAGE YOUR INFORMATION & DATA

Customer Accounts and Sign-In

If you opt to create a customer account through our Site, you can log in and update your email address, shipping addresses, and payment information. If you change your email address, then your previous email marketing consent preferences remain the same.

Sign-in sessions persist for up to 365 days, so you don’t have to sign in again when you come back to check your account or continue shopping. If you sign in to your account using an external identity provider (Gmail, Etc.), then you cannot update your email address from your account. In this case, you will need to create a new account associated with your new email address.

Saving Payment Information

Shopify stores credit cards and payment methods using tokenization, meaning raw card numbers are never stored on Shopify’s servers. Your sensitive payment information will be converted into a secure, scrambled token and processed by PCI-Compliant third-party payment gateways such as Stripe (powering Shopify Payments), Shop Pay, or PayPal.

Store Credit and Gift Cards

Store credit and gift cards are stored directly in our admin backend as digital balances tied to your specific customer profile. During checkout, customers who log into their accounts can apply their available credit to the order total.

Opting In To The Shop Pay App

Shop Pay is an accelerated checkout option designed to enhance the customer experience for you, for our website, and our shop within the Shop app. Shop Pay saves your email address, payment method, and shipping and billing information, eliminating the need for you to enter these details every time you make a purchase. This significantly speeds up the checkout process.

Opting Out of The Shop Pay App

If you signed up for Shop Pay by mistake or you no longer want to use the service. You can opt out of using the Shop Pay app here.

Email Marketing & (SMS) Promotion

We may send you promotional emails from time-to-time. We would love to have you as part of the Loam & Lark community and will always honour your decision when it comes to your receipt of any of our email marketing.

When you subscribe to our newsletter or fill in your contact information via any of our Signup forms on our Site, your contact information is automatically synced to our applicable list(s) in Shopify and our email and SMS marketing platform - Shopify Messaging.

Data synced to Shopify Messaging includes your email and SMS marketing subscription status, and your email and SMS received, opened, and clicked events.

You may unsubscribe at any time from our email marketing directly via email marketing sent to you by clicking on "unsubscribe" or by contacting us directly. In the event that you unsubscribe from our email marketing, we will continue to send you mandatory service or transactional communications.

You may opt-out at any time from our SMS marketing by directly responding “STOP” in your SMS messaging service which will automatically instruct our services to discontinue messaging you via SMS about our products and services.

We have, in the past 12 months disclosed the following categories of Personal Information and sensitive personal information (denoted by *) about users for the purposes set out above in “Personal Information & Data We Collect”, “How We User Your Personal Information & Data”, and “How We Share Your Personal Information & Data”:

Category

Identifiers such as basic contact details and certain order and account information
Commercial information such as order information, shopping information and customer support information
Internet or other similar network activity, such as Usage Data

Categories of Recipients

Vendors and third parties who perform services on our behalf (such as Internet service providers, payment processors, fulfillment partners, customer support partners and data analytics providers)
Business and marketing partners
Affiliates

We do not use or disclose sensitive Personal Information for the purposes of inferring characteristics about you.

We have “sold” and “shared” (as those terms are defined in applicable law) personal information over the preceding 12 months for the purpose of engaging in advertising and marketing activities, as follows.

Category of Personal Information

Identifiers such as basic contact details and certain order and account information
Commercial information such as records of products or services purchased and shopping information
Internet or other similar network activity, such as Usage Data

Category of Recipients

Business and marketing partners

User Generated Content

The Services may enable you to post product reviews and other user-generated content. If you choose to submit user generated content to any public are of the Services, this content will be public and accessible by anyone.

We do not control who will have access to the information that you choose to make available to others, and cannot ensure that parties who have access to such information will respect your privacy and keep it secure. We are not responsible for the privacy or security of any information that you make publicly available, or for the accuracy, use or misuse of any information that you disclose or receive from third parties.

CONSENT

Providing your personal information to us in the following manners implies that you fully consent to the collection and processing of your personal information to the extent necessary to fulfil said action:

Processing a transaction through our shop
Verifying your credit card information
Placing an order for postal or courier delivery
Returning a product
Communicating to us via email, social media, or any other means regarding your order
Signing up for our email marketing requires your direct and explicit consent.

If at any point you feel you would like to withdraw your consent for us to process your Personal Information, you are welcome to contact us directly by email at hello@loamandlark.ca with your request. Any Personal Information and Data received by us before your request may still be legally processed.

Many Personal Information and Data processing operations, which are part of our website and its function, are only possible with your explicit consent. You understand that revoking your consent may impact the quality of our website performance, your transactions, as well as access to content provided via our website or email marketing.

INTERNATIONAL VISITORS, CUSTOMERS, AND USERS

Your personal information may be transferred to, stored in, and processed in countries other than the country in which you reside. This information may also be accessed and processed by our employees, service providers, and business partners located in those jurisdictions.

Where we transfer personal information outside the European Economic Area (EEA), the United Kingdom, or other jurisdictions with data transfer restrictions, we will implement appropriate safeguards as required by applicable law.

Depending on where you live, in accordance with the General Data Protection Regulations (GDPR), you may have some or all of the rights listed below in relation to your personal information. The right to data protection is not an absolute right, and may apply only in certain circumstances and with certain limitations. In certain cases where required or permitted by law, we may decline your request.

Right to Access (Article 15, Recitals 63 & 64 GDPR)

You may have the right to access personal data which are ‘processed’ (i.e. used in any way) by ‘controllers’ (i.e. us and/or our third-party processors), as well as other relevant information. This could be information that we hold in our systems about you, including details related to the ways we use and share your information. These requests are often referred to as ‘data subject access requests’, or ‘access requests’.

Right to be Informed (Article 13 & 14 of the GDPR)

Any processing of personal data should be lawful, fair, and transparent. We do our utmost to be clear and transparent regarding the personal data we collect, use, consult, or otherwise process, as well as to what extent the personal data are, or will be, processed.

Right to Rectification (Articles 16 & 19 of the GDPR)

If your personal data is inaccurate, you may have the right to request that we correct the data that we maintain about you.

Right to Erasure / Right to be Forgotten (Articles 17 & 19 of the GDPR)

Where your personal data are no longer necessary in relation to the purpose for which it was collected or processed, you may have a right to request that we delete personal information we maintain about you.

Right to Data Portability (Article 20 of the GDPR)

In some circumstances and with certain exceptions, you may be entitled to obtain a copy of your personal data from us in a format that makes it easier to reuse your information in another context, and to transmit this data to a third-party.

The Right of Restriction (Article 18 of the GDPR)

You may have the right to request that we restrict or no longer process your personal information.

Right to Object (Article 21 of the GDPR)

You may have the right to request us not to "sell" or "share" your personal information or to opt out of the processing of your personal information for purposes considered to be "targeted advertising", as defined in applicable privacy laws. Please note that if you visit our Site with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out of the "sale" or "sharing" of information for the device and browser that you use to visit the Site.

More information on managing your data as a merchant customer, user of Shopify services (incl. Shop or Shop Pay), making a request on behalf of someone else, or as another type of Shopify user, is available via Shopify’s Privacy Portal here.

Right to Withdrawal of Consent (Article 7 of the GDPR)

In circumstances where we rely on consent to process your personal information, you may have the right to withdraw this consent.

Right to Appeal (Article 77 & 79 of the GDPR)

If we decline to process your request, you may have a right to appeal our decision. You can do so by replying directly to our denial.

You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below.

We will not deny, restrict, or otherwise treat you differently for exercising any of your privacy rights. To protect your personal information, we may request information necessary to verify your identity before processing your request, such as your email address, account details, or other identifying information.

Where permitted by applicable law, you may appoint an authorized representative to submit a request on your behalf. Before processing such a request, we may require proof that the representative has been authorized to act for you and may also ask you to verify your identity directly.

We will respond to all verified requests in a timely manner as required by applicable law.

SOCIAL MEDIA

We adopt a Social Media Policy to ensure our business conducts itself accordingly online. While we may have official profiles on social media platforms, users are advised to verify such profiles' authenticity before engaging with, or sharing information with, such profiles. We will never ask for user passwords or personal details on social media platforms.

There may be instances where our website features social sharing buttons ("like" and "share"), which help share web content directly from (our) web pages to the respective social media platforms. You use social sharing buttons at your discretion and accept that doing so may publish content to your social media profile feed or page.

As owners of our website, we do not receive, nor are knowledgeable of, the data transmitted to, and potentially used by, Facebook, Instagram, Threads, TikTok, Pinterest, or X (formerly Twitter), or any other social media platform should you engage with our social interactions on our website. Before you opt to share information via your social platform, we encourage you to read the relevant platform's privacy policies.

Facebook

When you visit our website, your internet browser makes a direct connection with Facebook's server, enabling Facebook to receive information that you have visited our site from your IP address. If you click on the "like" button at any point while you are signed-in to your Facebook account, then Facebook will present you with the opportunity to link content that you like on our website directly with your Facebook profile. Please be aware that this is at your own risk. If you do not want Facebook to make any association or connection between our website or your visit to our website and your personal Facebook account, you must ensure you are logged out of your Facebook account. More information is available via Facebook's Data Policy.

Instagram

Our website integrates with Instagram. If you are logged in to your Instagram account, you will be able to directly associate your presence on our website with your Instagram user account by clicking on any of our Instagram links. More information is available via Instagram's Data Policy.

Pinterest

Any time you visit our website pages containing a Pinterest button or plugin, your internet browser will make a direct connection with Pinterest servers in the United States of America. Your data (for example, your IP address, when you visited our website, the browsers you used to access our website, log data, cookie data, and device data) is then transmitted to Pinterest.

More information on Pinterest's privacy policy and measures that you can take to protect your privacy are available in Pinterest's Privacy Policy.

AFFILIATIONS

We may participate in select affiliate programs. Where affiliate links are included, in distributed content on our website, through our email marketing, or within our blog posts, we will clearly note our affiliation. You are not obligated to interact with our affiliate links. Doing so is at your own risk.

DOWNLOADS & MEDIA FILES

Any downloadable documents, files or media made available on this website are provided to users at their own risk. We take reasonable precautions to ensure only genuine downloads are available; however, we always advise you to verify the download's authenticity using third-party anti-virus software or similar applications.

We accept no responsibility for third-party downloads and downloads provided by external third-party websites. You should always verify the authenticity of third-party and external downloads using anti-virus software or similar applications.

EXTERNAL LINKS

Although we only aim to include quality, safe, and relevant external links, users of and visitors to our website, social media profiles, and shop are advised to adopt a policy of caution before clicking any external web links mentioned throughout..

We cannot guarantee or verify the contents of any externally linked website despite our best efforts. We are not responsible for the privacy or security of any external links, including the accuracy, completeness, or reliability of information found via these links. Users should, therefore, note they click on external links at their own risk, and we cannot be held liable for any damages or implications caused by visiting any external links mentioned.

Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

We encourage you to read the sites' privacy policies whose links you may encounter throughout our website, social media profiles, and shop to confirm their privacy statements align with your expectations.

CHILDREN’S DATA

We do not knowingly collect information from minors. By using this site, you represent that you are at least the age of majority in your province or state of residence, or that you are the age of majority in your province or state of residence, and you have given us your consent to allow any of your minor dependents to use this site.

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined by applicable laws) personal information of individuals under 18 years of age.

SECURITY

We take the protection of your Personal Information and Data very seriously. We treat your Personal Information and Data with the utmost confidentiality by following legal data protection regulations, our Policy, as well as implementing additional physical and technical safeguards against unauthorized access. Please bear in mind that no method of Information and Data transmission or method of electronic storage is 100% secure nor reliable. We cannot, therefore, guarantee its absolute security.

Website Hosting

Our website and online shop are hosted on Shopify servers in the United States that utilize the latest technology and security infrastructure. Shopify stores your data securely behind a firewall. You can learn more about Shopify’s privacy measures here: https://www.shopify.com/legal/privacy.

Data Encryption

Our website utilizes SSL (the predecessor to TLS) encryption. This cryptographic protocol is a security measure that provides authentication and data encryption between servers, machines and applications operating over a network (for example, you connect to your webserver). It protects the transmission of confidential content via our website. In your browser address tab, you will be able to recognize the encrypted connection when you see "https" in place of "http". Some browsers may also display a lock icon in the address bar. Third-parties cannot view any data that is transferred to us through our SSL encryption.

Payment Processing

The Payment Card Industry Data Security Standard (PCI DSS) is a security standard for organizations that handle credit and debit card information and was created to increase controls around payment data to reduce fraud. The PCI Security Standards Council manages PCI DSS, a joint effort of Visa, MasterCard, American Express, JCB International, and Discover Financial Services.

Our website and shop are PCI-DSS compliant in addition to extra security measures we take to ensure your data is well protected. Adhering to these measures helps our service providers and us ensure that your information is handled with the utmost care and security.

When you checkout through our shop, you have the option to pay via all major credit cards (processed by Shopify Payments, powered by Stripe) or via Paypal. As two of the world's leading payment gateways, both Shopify Payments and Paypal are PCI DSS compliant.

Your Personal Data

All of the customer data we collect is secured against unauthorized use or access. Personal Information is protected by security safeguards appropriate to the sensitivity of the information. You recognize that there are always risks, and in the unfortunate case that such risks may occur, we will notify you and the appropriate authorities.

In the event of a data breach, we will make reasonable efforts to notify affected individuals if we believe there is a reasonable risk of harm to the user as a result of such a breach or if notice is required by law. In the event of a data breach, we will notify the affected party by email and, where necessary, report the breach to the necessary authorities.

DATA RETENTION

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security”. In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

We reserve the right to retain order and transaction information for so long as required to comply with our legal obligations, resolve disputes, and enforce agreements unless an extended period of retention is required or permitted by law. Personal information that is no longer necessary to fulfil the identified purposes will be deleted. Your right to access, amend, move, or erase your data cannot be enforced after the retention period's expiration.

CHANGES TO THIS POLICY

We reserve the right to update, at any time without notice, this Policy to reflect, among others, changes to our business operations, practices or for any legal or regulatory reasons. Any updates to this Policy will be effective immediately upon publishing the applicable revision unless otherwise specified. When updates to this Policy occur, the "last updated" date noted at the end of this Policy will be revised. You may also be notified directly, at our discretion, about such changes through the contact information you have provided to us.

CONTACT

Should you wish to access, amend, or delete your personal information or address security questions or concerns please email us at hello@loamandlark.ca or contact us at P.O. Box 93, Saanichton, British Columbia, V8M 2C3, Canada. We will review and respond to your complaint in accordance with applicable laws.

If you are not satisfied with our response, you may have the right, depending on your location, to appeal our decision or lodge a complaint with your local data protection authority. For individuals of the European Free Trade Association (EFTA) and European Economic Area (EEA), contact information for your relevant Supervisory Authority can be found here.

We reserve the right to take legal action should we feel any violation of our direct contact information. We strictly prohibit all unrequested solicitation of promotional materials to our email and mailing address unless we have specifically made a direct request.

For the purposes of applicable data protection laws, and unless otherwise expressly stated, we act as the data controller of your personal information.