Privacy policy

Alterwares™ Privacy Policy

Last updated: July 24, 2025

1. Introduction

1.1 Alterwares™ (“Alterwares”, "Alterwares™", “we”, “us”, or “our”) operates this online store and website, together with all associated information, content, features, tools, products, and services (collectively, the “Services”), in order to provide you with a curated shopping experience. The Services are powered by Shopify Inc. (“Shopify”), which enables us to make our store available to you and provides important infrastructure, hosting, analytics, advertising, fraud prevention, and other capabilities that affect how your personal information is processed. This Privacy Policy explains, in detail and without omission, how we collect, use, disclose, store, retain, transfer, and otherwise process your personal information when you visit, use, or make a purchase or other transaction through the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

1.2 By accessing or using any of the Services, you acknowledge that you have read and understood this Privacy Policy and that you consent, where consent is required by law, to the collection, use, disclosure, and other processing of your personal information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, you should not use the Services.

2. Scope and Governing Laws

2.1 This Privacy Policy is intended to satisfy the requirements of applicable privacy legislation, including but not limited to Alberta’s Personal Information Protection Act (“PIPA”), Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”) to the extent it applies to interprovincial or international commercial activities, Canada’s Anti‑Spam Legislation (“CASL”), the European Union’s General Data Protection Regulation (“GDPR”) and the United Kingdom GDPR and Data Protection Act 2018 (collectively, “UK GDPR”) where these laws apply to individuals in those jurisdictions who interact with our Services, and comparable U.S. state privacy laws that grant rights concerning access, deletion, correction, sale/sharing opt‑outs, targeted advertising, and profiling, where applicable. If any specific jurisdiction’s law provides you with stronger rights or imposes stricter obligations than what is otherwise stated here, we will comply with those requirements for individuals covered by those laws.

3. What “Personal Information” Means

3.1 When we use the term “personal information,” we mean information about an identifiable individual or information that can reasonably be linked to an identifiable individual, as defined under applicable law. Personal information does not include anonymized or de‑identified information that cannot reasonably be used to identify you. We may create, use, and disclose de‑identified or aggregated information for any lawful purpose.

4. Personal Information We Collect or Process

4.1 We collect, use, and process personal information that you provide to us directly, that is collected automatically through your interaction with the Services, and that we receive from third parties, including Shopify and other service providers and business partners. Depending on how you interact with the Services, the jurisdiction in which you reside, and as permitted or required by law, this may include your name; email address; telephone number; billing and shipping addresses; payment card information and other financial information associated with transactions; account credentials and authentication data such as usernames, passwords, security questions, and account preferences; transactional information such as items you view, place in your cart, wishlist, purchase, return, exchange, or cancel; order history and related communications; communications you send to us, including customer support messages and any information included in those communications; device and technical information such as your IP address, browser type, device identifiers, operating system, network information, and other unique identifiers; usage information such as dates and times of your visits, pages and products viewed, features used, navigation paths, referring and exit URLs, search terms, clickstream data, and information about how you interact with the Services; cookie, pixel, SDK, and similar tracking technology information that helps us operate the Services, maintain security, measure performance, and deliver or measure advertising; and inferences we draw or that are drawn by Shopify or our advertising and analytics partners from the above information to create a profile about your preferences, interests, or purchasing tendencies so that we can better tailor and improve the Services and our marketing.

5. Sources of Personal Information

5.1 We collect personal information directly from you when you engage with us through the Services, create or log into an account, make a purchase, request a return or exchange, contact customer support, sign up for marketing communications, or otherwise communicate with us. We collect personal information automatically when you browse or use the Services through cookies, pixels, SDKs, server logs, and other technological means. We receive personal information from Shopify, which hosts our store and provides significant functionality that involves the processing of your personal information, and from other service providers who act on our behalf to process transactions, detect and prevent fraud, facilitate fulfillment and shipping, provide analytics and advertising technology, provide cloud hosting and storage, deliver communications, and support our IT, security, and marketing operations. We may also receive information from our business or advertising partners, social media platforms if you interact with us there or use social login or widgets, and publicly available sources, as permitted by law.

6. How and Why We Use Your Personal Information

6.1 We use your personal information to provide, operate, secure, and improve the Services; to process your payments; to fulfill and deliver your orders; to handle returns, exchanges, refunds, and other post‑purchase services; to administer and maintain your account; to remember your preferences and items of interest; to personalize your experience and provide product recommendations and related content; to communicate with you about your account, transactions, and the Services; to send you marketing, promotional, and advertising communications when permitted by applicable law or with your consent, and to measure and improve the performance of those communications; to deliver and measure online, cross‑context, and interest‑based advertising on the Services and on third‑party websites, mobile apps, and platforms; to authenticate users, detect, investigate, and help prevent fraudulent, illegal, malicious, or otherwise harmful activity; to secure our systems, protect our rights and the rights of our users and the public, and to enforce our Terms of Service and other policies; to comply with applicable legal, regulatory, accounting, tax, or audit obligations or respond to valid legal requests, including from courts, law enforcement, regulators, and governmental authorities; and to support corporate transactions such as mergers, acquisitions, reorganizations, financings, insolvency, or bankruptcy proceedings in which personal information may be transferred subject to appropriate confidentiality and legal protections.

6.2 We will only collect, use, and disclose personal information for purposes that a reasonable person would consider appropriate in the circumstances, as required by Alberta PIPA. When we rely on consent, we will obtain it in the manner required by law (express or implied, depending on the sensitivity of the information and your reasonable expectations), and you may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, as described below.

7. Relationship with Shopify

7.1 Our store is hosted on and powered by Shopify. Shopify collects, uses, and discloses personal information about you in order to provide infrastructure, hosting, payment processing, analytics, anti‑fraud, and advertising capabilities to us and other merchants. Shopify may process your personal information in countries other than the one in which you reside, including Canada, the United States, and other jurisdictions in which Shopify or its service providers operate. In addition, to help protect, grow, and improve our business, we use certain enhanced Shopify features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify itself. In those circumstances, Shopify is the controller (or equivalent under applicable law) for the processing of your personal information for those enhanced features, including for responding to your requests to exercise rights over such processing. To learn more about how Shopify uses your personal information, and to exercise any rights you may have directly with Shopify, please consult the Shopify Consumer Privacy Policy and Shopify Privacy Portal, which provide detailed information and self‑service tools for privacy requests.

8. International Transfers

8.1 We are located in Edmonton, Alberta, Canada, and we serve customers internationally. Your personal information may therefore be transferred to, stored in, or otherwise processed in countries outside your place of residence, including but not limited to Canada and the United States, and any other jurisdiction where Shopify or our other service providers maintain operations or data centers. These jurisdictions may have privacy and data protection laws that differ from those in your jurisdiction and may not be deemed to provide the same level of protection. Where required by law, we implement appropriate safeguards for cross‑border transfers, including reliance on adequacy decisions, Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner’s Office (as applicable), or other lawful transfer mechanisms. You may contact us to obtain more information about these transfer safeguards.

9. Cookies, Pixels, SDKs, and Similar Technologies

9.1 We rely on cookies, pixels, tags, SDKs, local storage objects, and similar technologies to operate and secure the Services, enable core functionality such as shopping cart and checkout, remember your preferences, understand how the Services are used, measure and improve performance, and provide and measure marketing and advertising, including interest‑based and cross‑context behavioral advertising. You can manage cookies via your browser settings, use platform‑specific opt‑out tools, or in some jurisdictions exercise rights to opt out of certain processing for targeted advertising or “sale”/“sharing” of personal information under applicable law. Please note that if you disable cookies, some features of the Services may not function properly. We recognize Global Privacy Control (GPC) signals where legally required, and when we can associate a GPC signal with a known account, we will apply the signal to that account as well. Except where applicable law requires otherwise, we do not respond to other “Do Not Track” browser signals.

10. Security and Retention

10.1 We implement reasonable administrative, technical, and physical safeguards designed to protect personal information in our custody or control against unauthorized access, use, alteration, or disclosure. Despite these measures, no information system can be perfectly secure, and we cannot guarantee “perfect security.” Information you send to us might not be secure while in transit, so you should not use unsecure channels to transmit sensitive or confidential information to us. We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with legal, regulatory, accounting, tax, or audit requirements, to resolve disputes, to enforce our agreements, and for other legitimate and lawful business purposes. When personal information is no longer required, we will delete, destroy, or de‑identify it in a secure manner, in accordance with Alberta PIPA and other applicable laws.

11. Your Rights and Choices

11.1 Your rights with respect to your personal information depend on where you reside. Subject to applicable law, and to certain exceptions and limitations, you may have the right to request access to the personal information we hold about you; to request correction of inaccurate or incomplete personal information; to request deletion of personal information; to withdraw consent to our collection, use, or disclosure of your personal information, subject to legal or contractual restrictions and reasonable notice; to receive a copy of certain personal information and to request its transfer to another party (data portability); to opt out of certain processing, including the “sale” or “sharing” of personal information or processing for targeted advertising under U.S. state privacy laws; to object to or restrict processing under the GDPR/UK GDPR; and to lodge a complaint with your local data protection authority. We will not discriminate against you for exercising any of these rights.

11.2 If you are resident in Alberta, you have the right under PIPA to request access to and correction of your personal information in our custody or control, and to complain to the Office of the Information and Privacy Commissioner of Alberta (OIPC) if you are not satisfied with our response to your privacy concerns. If you are resident in the EEA or UK, you may have additional rights under the GDPR/UK GDPR, including the right to object to certain processing, to restrict processing, and to withdraw consent where processing is based on consent, without affecting the lawfulness of processing based on consent prior to its withdrawal. If you are resident in certain U.S. states, you may have the right to appeal our decision if we decline to act on your request.

11.3 You may exercise your rights where self‑serve tools are available on the Services or by contacting us using the details below. We may need to verify your identity (or the identity and authority of your authorized agent) before acting on your request, as permitted or required by law. When applicable, we will respond within the timelines established by law.

12. Marketing Communications and CASL Compliance

12.1 We may send you marketing, promotional, or advertising communications by email, SMS, or postal mail, in accordance with CASL and any other applicable anti‑spam or marketing laws, if you have provided the appropriate consent or if otherwise permitted by law. You may at any time opt out of receiving such communications by following the unsubscribe instructions included in those communications or by contacting us. Even if you opt out of marketing communications, we may still send you transactional or relationship communications, such as order confirmations, shipping updates, and important notices regarding your account or changes to our policies.

13. Children’s Data

13.1 Our Services are not intended for or directed to children, and we do not knowingly collect personal information from individuals under the age of majority in their jurisdiction (18 in Alberta) without appropriate consent as required by law. If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the information below so that we can take appropriate steps to delete such information. As of the effective date of this Privacy Policy, we do not have actual knowledge that we “sell” or “share” personal information of individuals under 16 years of age, as those terms are defined in applicable privacy laws.

14. Automated Decision‑Making and Profiling

14.1 We may use automated tools, including those provided by Shopify, payment processors, and advertising partners, to help detect and prevent fraud, to authenticate users, to personalize and optimize your experience, and to deliver targeted or interest‑based advertisements. Where applicable law grants you the right to request meaningful information about the logic involved in such automated decision‑making, to object to it, or to request human review, you may do so by contacting us using the information below.

15. Complaints and Escalation

15.1 If you have any questions or complaints about how we handle your personal information, we encourage you to contact us first using the contact details provided below so that we can attempt to resolve your concerns directly.

15.2 Alberta residents who are not satisfied with our response have the right to file a complaint with the Office of the Information and Privacy Commissioner of Alberta (OIPC). EEA/UK residents may lodge a complaint with their local data protection authority. Individuals in other jurisdictions may have similar rights to escalate complaints to their respective regulators.

16. Changes to This Privacy Policy

16.1 We may update this Privacy Policy from time to time to reflect changes in our practices, in Shopify’s platform or services, or for other operational, legal, or regulatory reasons. When we make changes, we will post the revised Privacy Policy on this page, update the “Last updated” date above, and provide any additional notice required by applicable law. Your continued use of the Services after any such changes have been posted signifies your acceptance of the revised Privacy Policy.

17. Contact Information and Data Controller

17.1 For the purposes of applicable data protection laws, Alterwares™ is the data controller of your personal information, except where Shopify acts as an independent controller for its own enhanced features as described above. If you wish to make a privacy request, exercise your rights, withdraw consent, or ask a question about this Privacy Policy or our privacy practices, please contact us at:

Alterwares™ – Privacy Officer
Email: support@alterwares.com
Address: 9605 165 St NW, Edmonton, Alberta, T5P 3S5, Canada