Last Updated: 2025-03-28

Brass Knuckles Canada ("Company," "we," "us," or "our"), is committed to safeguarding the privacy of visitors to our website brassknucklescanada.ca (the "Site") and purchasers of our products (collectively, "Users"). This Privacy Policy outlines our practices regarding the collection, use, disclosure, retention, and protection of Personal Information (as defined herein).

1. Definitions

"Personal Information" refers to data about an identifiable individual, including but not limited to: name, email address, telephone number, billing/shipping address, payment information, IP address, and device identifiers.

"Cookies" are small text files stored on a User’s device to track preferences, optimize Site functionality, and facilitate analytics.

2. Information Collection

We collect the following categories of Personal Information:

2.1 Directly Provided Data

Identifiers: Full name, email address, telephone number.

Commercial Information: Billing/shipping addresses, transaction history, product preferences.

Payment Information: Credit/debit card numbers, expiration dates, CVV codes (processed via PCI-DSS compliant third-party gateways).

2.2 Automatically Collected Data

Technical Data: IP address, browser type/version, operating system, device identifiers.

Usage Data: Pages visited, time spent on Site, clickstream patterns, cart activity.

Cookies: Session cookies (expire upon browser closure), persistent cookies (retained for 30 days), and third-party cookies (e.g., Google Analytics, Facebook Pixel).

3. Purposes of Data Processing

We process Personal Information for the following lawful bases:

3.1 Contractual Necessity

To fulfill orders, process payments, and deliver products via third-party logistics providers (e.g., Canada Post, UPS).

To provide customer support and respond to inquiries.

3.2 Legitimate Interests

To analyze Site traffic patterns via Google Analytics (GA4) and Facebook Pixel (Meta).

To monitor and prevent fraudulent transactions.

3.3 Consent

To send promotional communications via email/SMS, subject to explicit opt-in.

3.4 Legal Obligations

To comply with tax, accounting, or law enforcement requirements under Canadian federal/provincial statutes.

4. Third-Party Disclosures

We disclose Personal Information to the following categories of recipients:

Stripe, PayPal - Payment processing - Cardholder data, billing info

Canada Post, UPS - Order fulfillment - Name, shipping address

Google LLC - Site analytics - IP address, usage data

Meta Platforms, Inc. - Advertising retargeting - Cookies, device identifiers

LC Email - Marketing communications - Email address, purchase history

Data transfers to U.S.-based entities occur under GDPR-approved Standard Contractual Clauses (SCCs).

5. Data Retention

Transaction Records: Retained for 7 years to comply with Canada Revenue Agency (CRA) tax obligations.

Marketing Data: Retained until consent is withdrawn or 3 years post-last interaction.

Cookies: Session cookies expire immediately; persistent cookies expire after 30 days.

6. User Rights

Under PIPEDA (Canada) and GDPR (EU), Users may:

6.1 Access & Portability

Request a copy of their Personal Information in a structured, machine-readable format.

6.2 Rectification

Correct inaccuracies in billing/shipping addresses or contact details.

6.3 Erasure

Delete non-essential data (e.g., marketing preferences), subject to legal retention requirements.

6.4 Restriction/Objection

Limit processing of data for marketing purposes.
Submit requests via: [email protected]

We will respond within 30 calendar days.

7. Security Measures

Encryption: TLS 1.2/1.3 protocols for data in transit; AES-256 encryption for data at rest on Google Cloud Platform.

Access Controls: Role-based access limited to authorized personnel.

Audits: Annual penetration testing and vulnerability assessments.

8. Cookie Policy

Essential Cookies: Session ID cookies for cart persistence.

Analytical Cookies: Google Analytics (_ga, gid) to measure bounce rates.

Marketing Cookies: Facebook Pixel (fbp) to track ad conversions.

Manage preferences via browser settings or our Cookie Consent Manager.

9. International Data Transfers

Data may be transferred to and processed in the United States. Such transfers adhere to:

GDPR Article 46 (SCCs).

PIPEDA Principle 4.1.3 (Comparable Level of Protection).

10. Children’s Privacy

The Site is not directed at individuals under 18. We do not knowingly collect data from minors.

11. Policy Updates

Changes will be posted here with a revised "Last Updated" date. Material changes (e.g., new data uses) will trigger direct email notification.

12. Dispute Resolution

Privacy complaints may be directed to [email protected]. Unresolved disputes may be escalated to:

Office of the Privacy Commissioner of Canada (OPC):30 Victoria Street, Gatineau, QC K1A 1H3.

EU Data Protection Authority(if applicable).

13. Governing Law

This policy is governed by the laws of Ontario, Canada.

Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at [email protected]