Privacy policy

Effective date: September 6, 2026

Hoya etcetera inc. ("Hoya etcetera," "we," "us" or "our") operates hoyaetcetera.ca and its related online store, content, features, tools, products and customer services (the "Services"). Shopify provides the e-commerce platform that enables us to offer the Services. This Privacy Policy explains how we collect, use, disclose and otherwise process personal information when you visit or use the Services, make a purchase or communicate with us.

If this Privacy Policy conflicts with our Terms of Service regarding personal information, this Privacy Policy controls. By using the Services, you acknowledge that you have read this Policy.

1. Personal Information We Collect

Personal information means information that identifies you or can reasonably be linked to you. Depending on your interaction, location and applicable law, we may collect:

·     contact and order information, including name, email, telephone number, billing and delivery addresses, order number and delivery instructions;

·     payment and transaction information, including payment method, payment confirmation, products viewed or purchased, cart activity, discounts, cancellations and past transactions;

·     account information, including login credentials, preferences and settings;

·     communications and claim information, including emails, website-chat messages, voicemail, photographs and delivery evidence;

·     device and usage information, including IP address, browser, device, network identifiers, cookie data and website interactions; and

·     export and customs information when required, including importer identification, permits, tax or customs numbers and, for certain U.S. shipments, an SSN or EIN. Never send an SSN or EIN by ordinary email; use only our secure portal or provide it directly to FedEx Brokerage as instructed.

We may draw reasonable inferences from this information to prevent fraud, understand use of the Services and improve operations. Effectively anonymized or de-identified information that cannot reasonably identify a person is not personal information under this Policy.

2. Sources of Personal Information

·     directly from you when you browse, order, create an account, submit a form, use website chat, leave voicemail or contact us;

·     automatically from your device through Shopify, cookies and similar technologies;

·     from payment processors, carriers, customs brokers, plant-health and government authorities, fraud-prevention providers and other service providers; and

·     from advertising, analytics and other business partners where permitted by law.

3. How and Why We Use Personal Information

We use personal information for identified business purposes and as permitted or required by law. For people in the European Economic Area and other places requiring a legal basis, the principal bases are:

·     Contract: processing payment, accepting and fulfilling orders, arranging shipping, sending order notices, administering cancellations or claims and responding to service requests.

·     Legal obligation: maintaining tax and business records and complying with customs, sanctions, plant-health, consumer-protection, fraud-prevention and other legal requirements.

·     Legitimate interests: securing the Services, preventing misuse, supporting customers, managing inventory and operations, analyzing performance and improving the Services, provided those interests are not overridden by your rights.

·     Consent: non-essential cookies, personalized advertising and optional marketing where consent is required. Consent may be withdrawn prospectively at any time.

We may also process information to establish, exercise or defend legal claims, enforce our terms and respond to lawful requests from courts, regulators, law enforcement or government agencies.

4. How We Disclose Personal Information

We may disclose personal information, only as reasonably necessary, to:

·     Shopify and providers supporting hosting, payments, security, analytics, customer service, email, storage, fulfillment and store functions;

·     carriers and customs brokers, including FedEx and Purolator, and customs, plant-health, tax or other government authorities. Export identifiers may appear on commercial invoices or clearance documents when legally required;

·     advertising and marketing partners where permitted by law and subject to applicable consent and opt-out rights;

·     a person or service you direct us to use or to whom you consent to disclosure;

·     professional advisers and authorities where reasonably necessary to comply with law, protect rights, prevent fraud or handle a dispute; and

·     a purchaser, successor or adviser in a proposed or completed merger, financing, reorganization, sale or insolvency process, subject to applicable law.

We do not publish customs identifiers and do not ask customers to send an SSN or EIN through ordinary email.

5. Shopify

Shopify hosts the Services and processes personal information about access and use to provide and improve Shopify services. Store information is transmitted to Shopify and may be processed in countries other than your own. Certain enhanced Shopify features may combine interactions with our store, other merchants and Shopify. For processing Shopify controls independently, Shopify is responsible for the applicable privacy requests.

Read the Shopify Consumer Privacy Policy or use the Shopify Privacy Portal.

6. Cookies, Analytics and Advertising

We and Shopify may use cookies and similar technologies to operate the store, remember preferences, measure performance, prevent fraud and, where permitted, support advertising. Non-essential technologies are controlled through the website's privacy or cookie settings where required. Rejecting optional cookies may affect personalized features but should not prevent essential store functions.

Depending on where you live, you may opt out of certain data sharing or targeted advertising through our data-sharing opt-out page. Where legally required and technically supported, we also honor Global Privacy Control signals for the relevant browser or device.

7. Marketing Choices

We may send promotional email where permitted. You may unsubscribe through the link in a promotional email. Even after opting out, you may still receive non-promotional communications concerning an account, order, shipment, claim or requested service.

8. Third-Party Websites and Services

The Services may link to platforms we do not control. Their privacy, security and terms apply when you use them. Public or semi-public information posted through reviews or third-party social platforms may be visible to others. A link does not by itself mean that we endorse the third party.

9. Children's Information

The Services are not intended for children, and we do not knowingly collect personal information from anyone under the age of majority where they live. A parent or guardian who believes a child supplied personal information may contact us to request deletion. We do not knowingly sell or share, as those terms may be defined by law, personal information of anyone under 16.

10. Security and Retention

We use administrative, technical and organizational safeguards appropriate to the information. No system is perfectly secure. Do not use an unsecured or ordinary channel to send sensitive information such as an SSN or EIN.

We retain personal information only as long as reasonably necessary to provide the Services, maintain accounts and transaction records, satisfy tax, customs and other legal obligations, resolve disputes, prevent fraud and enforce agreements. Periods vary by category and law. We delete, destroy or de-identify information when no longer required, subject to lawful exceptions and backup cycles.

11. Your Privacy Rights and Choices

Depending on where you live and subject to legal exceptions, you may have the right to request access, correction or deletion; obtain a portable copy; withdraw consent; object to or restrict certain processing; and opt out of sale, sharing or targeted advertising as defined by law. You may also have a right to appeal a decision about a request.

Submit a request using the contact details below or a privacy link on the Services. We may verify your identity and, where permitted, an agent's authority. We will not discriminate against you for exercising a privacy right and will respond within the legally required period.

12. EEA and Swiss Rights

If you reside in the European Economic Area or Switzerland, applicable law may additionally give you rights to object to processing based on legitimate interests, restrict processing, withdraw consent and complain to your local data-protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal.

A list of European Economic Area supervisory authorities is available from the European Data Protection Board.

13. International Transfers

Personal information may be processed outside the country where you live. When personal information is transferred from the European Economic Area or Switzerland to a country not recognized as providing adequate protection, we or the relevant provider rely on an approved transfer mechanism where required, such as the European Commission's Standard Contractual Clauses, together with supplementary safeguards when appropriate.

14. Complaints

Contact our Privacy Officer first if you have a concern about our handling of personal information. Depending on where you live, you may also complain to the competent privacy or data-protection authority. In Quebec, this may include the Commission d'acces a l'information du Quebec. In the European Economic Area or Switzerland, this may include the authority where you live, work or believe an infringement occurred.

15. Changes to This Privacy Policy

We may update this Policy to reflect changes in our practices, Services or legal obligations. We will post the revised version, update the effective date and provide any additional notice required by law.

16. Contact the Privacy Officer

Privacy Officer: Hoya etcetera inc.

Email: orders@hoyaetcetera.ca

Telephone: +1 514-447-0766

Business location: Greater Montreal, Quebec, Canada

Registered business address (administrative correspondence only): 301-520 Place Juge-Desnoyers, Laval, Quebec H7G 4X1, Canada. This is not our nursery or operational facility, is not a retail location and is not open to the public.

Telephone calls may be answered by voicemail. Messages are delivered electronically and monitored during normal business operations. For privacy requests, email provides the fastest documented response.

For applicable data-protection law, Hoya etcetera inc. is the controller of personal information it determines how and why to process. Shopify and other providers may act as processors or as independent controllers for certain activities, as described in their own privacy notices.