Privacy policy

Last updated: November 12, 2026

1. Introduction

Chimely respects the privacy of all visitors and customers and is committed to protecting personal information. This policy explains what information is collected, how it is used, who receives it, and what choices are available. It is designed to comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL), and reflects good practice under other privacy laws that may apply to visitors from other regions.

2. Information Collected

Information provided directly

  • Name, email address, phone number
  • Billing and shipping addresses
  • Order history and product selections
  • Messages sent to customer support, including attachments such as photos
  • Marketing preferences and newsletter sign-ups
  • Reviews or other content submitted on the site

Payment information
Payment details are entered directly into secure payment providers integrated with the store. Chimely does not receive or store complete card numbers.

Information collected automatically

  • IP address and approximate location
  • Device type, operating system, and browser type
  • Pages viewed, time on site, clicks, and referral source
  • Cart activity and checkout progress
  • Cookie identifiers and similar technologies

Information from third parties
Information may be received from payment processors, shipping carriers, fraud-prevention tools, and advertising platforms such as TikTok, Meta, and Google, including confirmation of ad interactions leading to a visit.

3. How Information Is Used

  • Processing, fulfilling, and delivering orders
  • Sending order confirmations, shipping updates, and replies to support requests
  • Verifying payments and preventing fraud
  • Sending marketing emails and promotions, where consent has been given
  • Measuring and improving site performance, product selection, and advertising
  • Showing relevant advertising on other platforms
  • Complying with legal, tax, and accounting obligations
  • Enforcing the Terms of Service and resolving disputes

4. Legal Basis and Consent

Information is collected and used with consent, which may be express or implied depending on the circumstances, or where needed to complete a purchase, meet legal requirements, or pursue legitimate business interests. Consent to marketing can be withdrawn at any time without affecting the ability to purchase.

5. Marketing Communications

Marketing emails are sent only where consent has been provided, in line with CASL. Every marketing message includes an unsubscribe link, and requests may also be sent to support@chimely.ca. Order-related messages, such as confirmations and shipping updates, continue to be sent because they are necessary to complete a purchase.

6. Sharing of Information

Personal information is never sold for money. Information is shared only as needed with:

  • Platform and hosting providers: Shopify and related infrastructure
  • Payment processors: to authorize and process payments
  • Shipping and fulfillment partners: to pick, pack, and deliver orders, including international suppliers and carriers
  • Marketing and analytics providers: email platforms, analytics tools, and advertising platforms
  • Fraud-prevention and security services
  • Professional advisors: accountants, lawyers, and insurers
  • Authorities: where required by law, court order, or to protect rights and safety

Some advertising and analytics sharing, such as pixel-based tracking, may be considered a “sale” or “sharing” under certain laws, and the rights in Section 11 apply.

7. International Transfers

Service providers may be located outside Canada, including in the United States and other countries, where information may be subject to the laws of that jurisdiction and accessible to local authorities. Chimely requires providers to protect information to an appropriate standard.

8. Cookies and Tracking Technologies

Cookies and similar tools are used to keep items in the cart, maintain checkout sessions, remember preferences, measure traffic, and support advertising. Categories include:

  • Essential: required for the cart, checkout, and security
  • Analytics: measure visits and page performance
  • Marketing: measure ad performance and show relevant ads

Browser settings can be changed to block or delete cookies, and opt-out tools are offered by major ad platforms. Blocking essential cookies may stop parts of the site from working.

9. Data Retention

Personal information is kept only as long as needed to fulfill orders, provide support, meet tax and accounting obligations (typically up to 7 years for transaction records), prevent fraud, and resolve disputes. Information is then deleted or anonymized.

10. Security

Reasonable technical and organizational safeguards protect personal information, including encrypted connections and access controls, and rely on the security measures of trusted providers. No online transmission or storage method is completely secure, so absolute security cannot be guaranteed. Any suspected breach should be reported to support@chimely.ca.

11. Individual Rights

Depending on the region, individuals may have the right to:

  • Access the personal information held about them
  • Request correction of inaccurate information
  • Request deletion of personal information, subject to legal retention requirements
  • Withdraw consent to marketing or other uses
  • Object to or restrict certain processing
  • Request a copy of information in a portable format
  • Opt out of the sharing of information for targeted advertising
  • Not be discriminated against for exercising these rights

Requests may be sent to support@chimely.ca with the subject line “Privacy Request”. Identity may need to be verified, and Chimely will respond within 30 days. Complaints can also be directed to the Office of the Privacy Commissioner of Canada.

12. Children’s Privacy

The site is not directed at children, and personal information is not knowingly collected from anyone under the age of majority. A parent or guardian who believes a minor has provided information should contact support@chimely.ca so it can be removed.

13. Third-Party Links

The site may link to external websites that have their own privacy practices. Chimely is not responsible for those practices, and reviewing their policies is recommended.

14. Changes to This Policy

This policy may be updated from time to time. The latest version is always posted on this page with a revised “Last updated” date. Material changes may also be communicated by email.

15. Contact

Privacy questions and requests may be sent to support@chimely.ca.