Privacy Policy

In short: naibl.ca operates naibl store from Ontario, Canada. Privacy questions: [email protected].

We are accountable for personal information under our control. This notice applies when you browse our store, add items to your cart, complete checkout, or contact customer service about an order.

For customers in Canada, we handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), and with applicable provincial privacy laws where they apply.

In short: We collect information you provide at checkout and technical data needed to run the store.

Personal information you provide:

• Name, email address, and shipping address when you place an order.
• Order notes and customer service messages.
• Payment status and order history (payment card details are handled by Stripe, not stored on our servers).

Information collected automatically:

• Device and browser information in server logs.
• Cart and session data needed to complete checkout.
• Analytics data when you accept analytics cookies, as described in our Cookie Policy.

In short: We use your information to fulfill orders, provide support, keep the store secure, and improve the shopping experience when you opt in to analytics.

• Process payments and forward orders to fulfillment partners.
• Send order confirmations, shipping updates, and support responses.
• Prevent fraud, abuse, and unauthorized access.
• Understand store usage when analytics cookies are accepted.
• Comply with legal obligations and respond to lawful requests.

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances, and we rely on consent or another valid legal basis where required.

In short: We share information only with vendors that help us operate the store, or when required by law.

• Stripe — payment processing.
• Fulfillment partners — shipping and delivery of your order.
• PostHog — analytics when you accept analytics cookies.
• Infrastructure providers — hosting required to operate the store.

We do not sell your personal information. We use contractual and other reasonable measures to require service providers to protect personal information and use it only for the purposes we specify.

In short: Personal information may be stored or processed outside Canada, including in the United States, where our service providers operate.

When information is processed in another country, it may be subject to the laws of that country and may be accessible to courts, law-enforcement agencies, and national-security authorities there. We assess these risks and use safeguards that are appropriate to the sensitivity of the information.

By placing an order or using optional analytics cookies, you acknowledge that your information may be processed across borders for the purposes described in this notice.

In short: We keep order and support records as long as needed to fulfill orders, comply with law, and resolve disputes.

Server logs are retained for a limited period for security and debugging. When we no longer need personal information, we delete or anonymize it where possible.

In short: You may request access to, correction of, or deletion of your personal information, subject to legal retention requirements.

Email [email protected] from the address used at checkout and include your order ID. We aim to respond to verified requests within 30 days. You can also manage analytics cookies through our Cookie Policy or Privacy Choices page.

If you are not satisfied with our response, Canadian residents may contact the Office of the Privacy Commissioner of Canada. Customers in other countries may have the right to contact a local privacy regulator where applicable law provides one.

In short: Additional rights may apply depending on where you live. We honour valid requests to the extent required by applicable law.

• Canada — rights under PIPEDA and, where applicable, provincial laws such as Quebec's private-sector privacy law.
• United States — certain state privacy laws may provide additional rights to residents of those states. We do not sell personal information.
• European Economic Area and United Kingdom — where GDPR or UK GDPR applies, you may have additional rights including data portability and the right to lodge a complaint with a supervisory authority.
• Other countries — local consumer and privacy laws may provide rights we will respect where they apply to your order.

Submit requests through our Privacy Choices page or by emailing [email protected].

In short: naibl store is not directed to children.

We do not knowingly collect personal information from children without appropriate consent where required by law. If you believe we have collected information from a child, contact us and we will delete it where required.

In short: We may update this Privacy Policy from time to time.

Material changes will be reflected by updating the date at the top of this page. Continued use of the store after changes means you accept the updated notice, subject to any non-waivable rights under applicable law.

Privacy questions or requests: [email protected]

This notice is governed by the laws of the Province of Ontario and the federal laws of Canada for interpretation, without limiting mandatory protections that apply to you where you live.