Privacy Policy

Gold Mist Perfumes Inc. ("Gold Mist", "we", "us", "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what we collect, how we use it, who we share it with, and the choices you have.

This policy is governed by Canadian federal privacy law (PIPEDA, the Personal Information Protection and Electronic Documents Act) and Ontario's privacy laws.

Information We Collect

When you visit goldmistperfumes.com or place an order, we collect:

• Contact information: name, email, phone number, shipping address, billing address.
• Order information: products purchased, order history, currency selected.
• Payment information: payment is processed by Stripe. We do not store your full credit card number. We receive only the last 4 digits of the card and the brand, which appear on your receipt.
• Technical information: IP address, browser type, device type, pages visited, referring URL. This is collected automatically.
• Communications: emails, messages, or feedback you send us via the Contact form.

We do not knowingly collect information from children under 18.

How We Use Your Information

We use your information to:

• Process and fulfill your orders.
• Send order confirmations, shipping updates, and delivery notifications.
• Respond to your customer service inquiries.
• Comply with our tax, accounting, and legal obligations (including HST/GST remittance to the Canada Revenue Agency).
• Detect, prevent, and address fraud, abuse, security incidents, and illegal activity.
• Analyze site traffic and improve our products and services.

We do not sell or rent your personal information to third parties for marketing purposes.

Service Providers Who Process Your Data

We share necessary information with third-party providers who help us operate our business:

Provider	Purpose	Data shared
Stripe	Payment processing	Name, email, billing address, card data
EasyPost & Canada Post	Shipping label generation and parcel tracking	Name, shipping address, phone, order info
Resend	Transactional email delivery	Name, email, order info
Cloudinary	Product image hosting	None of your personal data
Render	Web hosting	All site data, processed in transit
Sentry	Error and performance monitoring	Anonymized error logs, may include IP
Google Analytics	Site analytics	Anonymized usage data, IP

These providers are bound by their own privacy policies and process data on our behalf under data-processing agreements.

We may also disclose your information if required by law, court order, or government request, or to protect our legal rights.

Cookies and Tracking

We use cookies and similar technologies to:

• Keep your shopping cart contents across visits.
• Remember your preferences (currency, language).
• Track conversion analytics.
• Detect fraud and protect against malicious traffic.

You can disable cookies in your browser settings, but some site features (including the shopping cart and checkout) will not work without them. We display a cookie consent banner on your first visit.

Data Retention

We retain your information only as long as necessary:

• Order records: 7 years (Canada Revenue Agency tax retention requirement).
• Contact form submissions: 2 years.
• Marketing emails: until you unsubscribe.
• Analytics data: 14 months (Google Analytics default).

Your Privacy Rights

Under PIPEDA, you have the right to:

• Access the personal information we hold about you.
• Correct any inaccurate information.
• Withdraw consent to our processing (this may limit your ability to use our service).
• Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe we've violated your privacy rights.

To exercise any of these rights, email us at goldmist77@gmail.com with the subject "Privacy Request". We will respond within 30 days.

Data Security

We use industry-standard security measures including encryption in transit (HTTPS), encrypted database storage, and access controls. However, no electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

If we discover a data breach affecting your information, we will notify you and the Privacy Commissioner of Canada as required by PIPEDA.

International Data Transfers

Some of our service providers (Stripe, Resend, Sentry, Google Analytics) are based in the United States and process data outside Canada. By using our site, you consent to your information being processed in jurisdictions outside Canada, which may have different privacy laws than your own.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new version with an updated "Last updated" date. For material changes, we will provide notice via email to your most recent order address or a prominent banner on the site.

Contact Us

Gold Mist Perfumes Inc. Kingston, Ontario, Canada

Email: goldmist77@gmail.com Phone: (613) 483-5256

For privacy-related inquiries, use the subject "Privacy Request" in your email.