Privacy Policy

1. Introduction

SphounFedCards (“we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you use our website, accounts, and related services (collectively, the “Services”).

We operate from Harrow, Ontario, Canada. This policy is designed to align with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial requirements. It is a general template and does not constitute legal advice; consult a qualified lawyer for advice specific to your situation.

2. Information we collect

Depending on how you use the Services, we may collect:

• Account and contact data: name, email address, username, password (stored securely), and similar identifiers you provide.
• Transaction and fulfillment data: order details, shipping address, payment-related references (payment processing may be handled by third parties; we do not store full card numbers on our servers).
• Communications: messages you send us (e.g. contact forms, email, or in-app messages).
• Technical and usage data: IP address, device/browser type, general location derived from IP, pages viewed, and cookies or similar technologies as described below.

3. How we use information

We use personal information to:

• Provide, operate, and improve the Services;
• Process orders, trades, and payments;
• Communicate with you about your account, orders, and inquiries;
• Send service-related notices and, where permitted, marketing (see CASL below);
• Detect, prevent, and address fraud, abuse, or security issues;
• Comply with law and enforce our terms.

4. Legal framework (Canada & Ontario)

We follow the fair information principles under PIPEDA, including accountability; identifying purposes; consent; limiting collection, use, disclosure, and retention; accuracy; safeguards; openness; individual access; and the right to challenge compliance.

Depending on the nature of our activities and any future changes in law, additional provincial statutes may also apply in Ontario. We will update this policy when practices or requirements materially change.

5. Disclosure of information

We may share personal information with:

• Service providers who assist us (e.g. hosting, analytics, email, payment processors), bound by contractual obligations appropriate to the sensitivity of the information;
• Professional advisors where reasonably necessary;
• Authorities when required by law or to protect rights, safety, and security.

We do not sell your personal information.

6. Storage, retention, and cross-border processing

Data may be processed or stored in Canada or in other countries where our service providers operate. Where personal information is transferred outside Canada, we take steps that are reasonable in the circumstances to ensure appropriate protection, consistent with PIPEDA.

We retain personal information only as long as needed for the purposes described here, unless a longer period is required or permitted by law.

7. Your rights and choices

Subject to law, you may request access to the personal information we hold about you and ask that we correct inaccuracies. You may also withdraw consent where processing is based on consent, subject to legal or contractual restrictions.

To exercise these rights, contact us using the contact options on our site. We may need to verify your identity before responding.

If you believe we have not handled your personal information appropriately, you may file a complaint with the Office of the Privacy Commissioner of Canada.

8. Cookies and similar technologies

We may use cookies, local storage, or similar technologies for essential site functionality, preferences, security, and analytics. You can control cookies through your browser settings; disabling some cookies may affect how the Services work.

9. Commercial electronic messages (CASL)

Where Canada’s Anti-Spam Legislation (CASL) applies, we will obtain appropriate consent before sending commercial electronic messages and will include identification and unsubscribe mechanisms as required.

10. Children

The Services are not directed to individuals under the age at which they can validly consent to collection of their personal information in their jurisdiction without parental involvement. If you believe we have collected information from a child in error, please contact us and we will take appropriate steps.

11. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Where changes are material, we will provide additional notice as appropriate.

13. Contact

Questions about this Privacy Policy: use the contact section on our website. SphounFedCards, Harrow, Ontario, Canada.