Privacy Policy

Last updated: May 15, 2026

D’s Shop is operated by Cressoft Technology Inc. (“we”, “our”, “us”). This policy describes how we collect, use, disclose, and protect personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1. Information We Collect

When you visit our site, create an account, or place an order, we may collect:

• Name, email address, phone number
• Shipping and billing addresses
• Order history and product preferences
• Payment details (processed by Stripe and Shopify Payments; we never see or store full card numbers)
• Device, browser, and IP information for security and analytics

2. How We Use Your Information

• Processing and fulfilling your orders
• Sending order confirmations, shipping updates, and customer service replies
• Responding to support requests
• Improving our site, catalogue, and operations
• Detecting and preventing fraud or abuse
• Complying with our legal obligations

3. Service Providers

We share data only with vetted service providers who help us run D’s Shop:

• Shopify Inc. — storefront and hosted checkout (Canada and global infrastructure)
• Stripe Payments Canada, Ltd. — payment processing for non-Shopify checkout flows
• Convex, Inc. — account, wishlist, and content data storage
• CJ Dropshipping Limited and other supplier networks — order fulfilment
• Resend, Inc. — transactional and marketing email delivery
• Canada Post and international carriers (DHL, UPS, USPS) — shipping

We do not sell your personal information. Where data is transferred outside Canada (e.g., to U.S.-based service providers), it remains subject to comparable protections through contractual safeguards.

4. Cookies and Tracking

We use cookies and similar technologies to maintain your cart, keep you signed in, and understand how visitors use the site. Our cookie banner records your consent for measurement tools. You can disable cookies in your browser, though some features (cart, checkout, sign-in) will not work without them.

5. Data Retention

We retain order records for a minimum of seven years to comply with Canadian tax and consumer protection requirements. Account data is retained while your account is active and for up to two years after closure unless we are required to keep it longer.

6. Children Under 13

D’s Shop is not directed to children under 13. We do not knowingly collect information from children. If you believe a child has provided us information, please contact us so we can delete it.

7. Your Rights

Under PIPEDA you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Withdraw consent for marketing communications at any time
• Request deletion of your account and associated data
• Lodge a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, email privacy@d-shop.ca. We respond to verified requests within 30 days.

8. Breach Notification

If we discover a breach involving real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA. We will also maintain a record of all breaches for at least 24 months.

9. Security

We use industry-standard safeguards including encryption in transit (TLS), encrypted databases, restricted access controls, and audit logs. No system is perfectly secure, but we take reasonable steps to protect your information.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email to active customers and posted here with a revised date.

11. Contact and Privacy Officer