Shopright24 Privacy Policy

1. Introduction

At Shopright24, we know how important it is to protect your personal information and earn your trust. Whether you’re shopping with us online or in person, we want every customer experience to be safe and secure. In keeping with this goal, we are committed to transparency and accountability in our privacy practices. This Privacy Policy explains how Shopright24 Company (“Shopright24”, “we”, “us”, “our”) collects, uses, discloses, and protects your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario laws and regulations. We adhere to PIPEDA’s ten fair information principles – such as accountability, identifying purposes, consent, limiting use and disclosure, safeguards, and individual access – to handle your personal information responsibly. 

This Policy applies to:

• Our website: www.shopright24.com
• Any services, features, or online shops we provide (the “Service”)
• Information you provide by email, phone, or in person (e.g. at events or stores)

By accessing or using our Service, you acknowledge that you have read and agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.

Users with disabilities can request this Policy in an accessible format via:

support@shopright24.com
+1 (613) 261‑0638
24 Dumoulin Way, Orléans, ON K4A 4Z3, Canada

 

2. Information We Collect

We collect personal information by fair and lawful means and limit our collection to what is necessary for the purposes we identify. We will only collect, use, or disclose personal information for purposes that a reasonable person would consider appropriate in the circumstances. 

1. Information You Provide Directly
   We may collect the personal information you provide to us, such as:

• Name, email address, mailing address, and phone number
• Account login details (username and password)
• Payment and billing information (e.g. credit card details, billing address)
• Purchase history and order information
• Information you submit through forms, surveys, contests, or promotions
• Communications you send to us (emails, messages, customer support inquiries)

1. Automatically Collected Information
   When you visit our Site, we automatically collect certain technical and usage information, including:

• Device and Usage Data: IP address and general geolocation region; browser type and version; device identifiers; operating system
• Browsing Data: Pages or products viewed, time spent on pages, links clicked, and the referring URL or webpage that led you to our site
• Cookies and Similar Technologies: Data collected through cookies, web beacons, and similar tracking tools (see Cookies & Tracking below for details)

This information helps us improve website performance, enhance security, and optimize user experience. It is generally collected in aggregate form, but if we ever link it to you as an identifiable individual, we treat it as personal information.

1. Comments & User-Generated Content
   If you post comments or reviews on our Site (for example, on a blog or forum), we collect information related to your post, such as:

• The content of your comment or review
• Your name or username (as provided)
• Your IP address (for security and spam filtering)
• Your browser user agent information (to help detect spam)
• A hash of your email address for the Gravatar service (if you use it for a profile image)

1. Images Uploaded by Users
   If you upload images to our Site (for example, in product reviews or community forums), please ensure they do not contain embedded location data (EXIF GPS coordinates). Other visitors to the Site could download and extract any location information from images you upload. We are not responsible if such metadata is unintentionally shared.

3. Purposes for Collecting Personal Information

We collect and use personal information for the following purposes:

• To provide and improve our Service: Fulfill your orders and transactions, and enhance our website, products, and services based on feedback.
• To process orders, payments, and deliveries: Ensure your purchases are completed, paid for, and delivered to you (including facilitating shipping and returns).
• To manage your account and customer profile: Maintain your account credentials, preferences (like language or wish lists), and purchase history.
• To communicate with you: Send service-related communications about your orders, updates on deliveries, or respond to your inquiries and support requests.
• To send marketing communications: Provide you with news, offers, or promotions about our products or services, only with your consent and in line with Canada’s anti-spam laws (CASL). (You can opt out at any time, see Consent below.)
• To administer contests, promotions, or surveys: If you choose to participate, to process your entries and inform you of results.
• To detect and prevent fraud or security issues: Protect both you and Shopright24 from error, fraud, theft, or other harmful activities (e.g. verifying returns to prevent abuse).
• To comply with legal obligations: Meet requirements under laws or regulations, such as tax record-keeping, reporting obligations, or responding to lawful information requests.

We will not use your personal information for any purposes other than those identified above or at the time of collection, unless we obtain your additional consent or as otherwise permitted by law. In other words, we won’t surprise you by using your data in new ways without your knowledge and consent.

4. Legal Basis for Collection (PIPEDA Compliance)

Under PIPEDA, we ensure that we have an appropriate legal basis or authority to collect, use, and disclose your personal information. Depending on the context, our collection and use of information relies on one or more of the following grounds:

• Your Consent (express or implied): In most cases, we collect and use your information with your consent. Consent may be express (you explicitly agree, for example by checking a box to receive our newsletter) or implied through your actions (for example, when you provide your address to receive a delivery, you imply consent for us to use it to ship your order). We will seek express consent for sensitive information or when required by law.
• Contractual Necessity: We may process information as needed to fulfill a contract or transaction you’ve initiated. For instance, when you purchase a product from us, we must use your payment and address details to process payment and ship your order – this is necessary to perform our contract with you.
• Legal Obligations: In certain cases, we must collect or retain information to comply with our legal and regulatory obligations. For example, we may be required to keep records of purchases for accounting and tax purposes, or to disclose information if properly requested by authorities under the law.
• Legitimate Business Interests: We may use your information for legitimate business purposes, provided such use is reasonable and not outweighed by your privacy rights. This includes uses like improving our website functionality, performing analytics to understand our sales trends, preventing fraud, or securing our systems. In all cases, we ensure these interests are pursued in a fair and transparent manner and, where required, we will seek your consent. For instance, we might analyze aggregate customer behavior to improve the site navigation or use security tools to safeguard our platform.

If we ever need to process your personal information for a purpose that is not covered by one of the above bases, we will seek your consent before doing so.

5. Consent

Your knowledge and consent are the cornerstones of our collection, use, and disclosure of personal information (except in specific circumstances authorized by law). We obtain appropriate consent from you in the following ways:

• Express Consent: We will explicitly ask for your agreement in situations that involve sensitive personal information or optional uses of your data. For example, we might ask you to tick a checkbox or sign up when subscribing to a newsletter or when we want to use your information for marketing purposes beyond your original interaction with us.
• Implied Consent: In some cases, your consent can be inferred from your actions or the context. For instance, if you provide your shipping address and payment information to make a purchase, it is implied that you consent to our using that information to process and deliver your order. Similarly, if you contact us for customer support, we infer that we can use your contact information and details of your inquiry to assist you.

You may withdraw your consent at any time, subject to legal or contractual restrictions. This means if you change your mind about how we can use your information, you have the right to stop or adjust that use. For example, if you initially agreed to receive marketing emails, you can later opt out. Every marketing email we send will include an “unsubscribe” link at the bottom, allowing you to stop future emails easily[7]. You can also contact us directly at any time to update your communication preferences or withdraw consent for specific uses.

Please note that withdrawing consent may affect our ability to provide you with certain services. For instance, if you withdraw consent for us to use your payment information and address, we may not be able to fulfill existing orders. We will inform you if such situations arise. However, withdrawing your consent for marketing or other optional communications will not affect your ability to use our core services. We will promptly honor your request and will not penalize you for changing your mind.

6. Cookies & Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your experience and gather information about usage. Cookies are small text files stored on your device by your browser. We use cookies to:

• Maintain your session: For example, to keep you logged in as you navigate between pages.
• Store preferences: Such as language preferences or items in your shopping cart, so that you don’t have to re-enter this information.
• Analyze site traffic and performance: We use analytics cookies to understand which pages are popular, how users move through the site, and to identify any issues, which helps us improve our website design and performance.
• Enable core features: Certain cookies are essential for features like the shopping cart and checkout to function properly. If you disable these cookies, you may not be able to add items to your cart or complete purchases.

You have the option to disable or block cookies through your browser settings. Most browsers allow you to refuse new cookies or delete existing ones. However, please be aware that if you disable cookies, some features of our Site may not function properly – for example, items in your cart might not be remembered, or you may need to log in repeatedly.

Some of our third-party partners (for example, analytics services like Google Analytics or advertising networks) may also set their own cookies or similar tracking technologies on our Site to collect information about your online activities over time and across different websites. We do not have control over cookies set by third parties and are not responsible for their use – those are governed by the privacy policies of the third-party providers. For instance, if we display content from a partner or you click a third-party link, that third party might place cookies subject to their own rules. We recommend reviewing the privacy and cookie policies of any third-party services for details on their practices.

We only use marketing and advertising cookies with your opt-in consent, in accordance with guidance from the Office of the Privacy Commissioner of Canada (OPC) on meaningful consent. This means that non-essential cookies – such as those used for targeted advertising – will be disabled unless and until you agree (for example, via a cookie consent banner or settings). You can change your cookie preferences at any time using our website’s settings or your browser controls.

7. How We Use Your Information

In summary, the personal information we collect is used to serve you and improve our operations. Here are the main ways we utilize your information (many of which align with the purposes outlined in Section 3):

• To authenticate users: We use login credentials and identifiers to verify your identity when you access your account, helping to prevent unauthorized access.
• To process and deliver orders: Your information enables us to fulfill orders you place – this includes processing payments, providing order confirmations and receipts, shipping products to your address, and notifying you about the status of your delivery.
• To personalize your shopping experience: We may use information about your browsing and purchase history to tailor the content you see on our Site. For example, we might show you recommendations or products related to your interests, or remember your preferences such as language and currency. This personalization makes your experience more relevant and convenient.
• To respond to customer inquiries: When you contact us with questions, feedback, or support requests, we use your provided information (like your email or phone number and any details about your issue) to communicate with you and resolve your concerns.
• To prevent fraud and security threats: We actively use data (such as device info, IP addresses, and transaction history) to detect and block fraudulent activity or security vulnerabilities. This includes verifying details for large or unusual orders, monitoring for malicious attacks on our Site, and ensuring the integrity of user accounts.
• To improve website functionality and for analytics: We continuously analyze how users interact with our website and services. Information like site traffic patterns and user feedback helps us identify bugs, understand what features are most used, and decide what new features or content to add. This data-driven approach allows us to refine our platform, making it more user-friendly and efficient.
• To comply with Canadian laws: Where relevant, we will use your information to adhere to requirements under Canadian law. This includes using your data in ways necessary to meet obligations in areas such as consumer protection, privacy, health and safety, or other regulations that apply to our operations.

If we ever intend to use your personal information for a purpose not listed here or in Section 3, we will update this Privacy Policy and notify you and/or obtain your consent as required before doing so. We want you to be fully informed of how your data is being used at all times.

8. Sharing & Disclosure of Information

Shopright24 understands the importance of your personal information and we do not sell, rent, or trade your personal data to third parties for their own marketing uses. We only share your information in limited scenarios, outlined below, and always with appropriate protections in place. We may share personal data only with:

• Payment Processors: To securely process transactions, we share necessary information with payment providers like Stripe, PayPal, or other payment gateways you choose. For example, when you make a purchase, your payment details are transmitted to the payment processor to complete the transaction. These processors are PCI-DSS compliant and are prohibited from using your info for anything other than processing payments.
• Shipping & Delivery Partners: We provide your name and shipping address (and sometimes phone or email for delivery updates) to postal services or courier companies (e.g., Canada Post, UPS, FedEx) in order to deliver your purchases. They will only use this information for logistics and delivery purposes.
• Service Providers (IT, Hosting, Analytics): We use trusted third-party companies to help us operate our business and improve our services. This includes website hosting providers, cloud storage providers, customer relationship management tools, analytics services (like Google Analytics), and security service providers. These partners may process or store personal information on our behalf as needed for their function – for example, an analytics service might process usage data to provide us with website traffic reports.
• Advertising and Marketing Partners: With your consent, we may share limited information with advertising networks or marketing platforms to help deliver relevant promotions. For instance, we might use a marketing platform to send email newsletters (using your email address and name), or we might work with online advertising partners to display targeted ads. In some cases, we might share a hashed (encrypted) version of your email with a social media or ad platform to match it with your account and show you Shopright24 ads there – but this is done only if you’ve consented to marketing. These partners are not allowed to use your data for their own purposes beyond providing services to us.
• Legal and Regulatory Authorities: We may disclose personal information if required by law, or if we believe in good faith that such disclosure is necessary to comply with legal processes. For example, in response to a valid court order, subpoena, or government request, or to protect our rights, property, or safety or that of our customers and others (such as exchanging information with other companies and organizations for fraud protection and credit risk reduction). If we receive a law enforcement request for user information, we will verify it’s legitimate and required by law before disclosure.

In all cases, we only share the minimum information necessary for the third party to perform their specific service or function. All third parties acting on our behalf must contractually agree to safeguard your personal information and to use it only for the purposes we specify, in compliance with PIPEDA’s requirements. We take steps to ensure that any organization we share data with provides a comparable level of protection. For example, we have agreements in place with service providers that require them to keep your data confidential and secure. We remain responsible for your personal information even when it is transferred to a third party for processing, and we monitor our service providers for compliance.

Aside from the parties and purposes listed above, Shopright24 will not disclose your personal information to other third parties without your explicit consent, unless we are legally allowed or required to do so.

9. Storage, Retention, & Security

We take the security of your personal information seriously. Shopright24 employs a combination of administrative, technical, and physical safeguards appropriate to the sensitivity of the information to protect against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification. These measures include:

• Encryption: We use encryption protocols (like SSL/TLS) to protect data transmitted on our Site (you’ll see the padlock in your browser address bar on secure pages). Sensitive information such as payment details are encrypted during transmission and sometimes additionally encrypted in storage.
• Secure Servers & Firewalls: Personal data is stored on secure servers, and we use firewalls and network security monitoring to prevent external intrusions. Our website and databases are hosted in environments with strong security controls.
• Restricted Employee Access: Internally, access to personal information is limited to employees or contractors who need that information to perform their duties (for example, customer service staff accessing your order details to assist you). We train our staff about the importance of confidentiality and privacy. All personnel with access are bound by strict confidentiality obligations.
• Multi-Factor Authentication: Where appropriate, we protect accounts and backend systems with multi-factor authentication and strong identity verification procedures. This adds an extra layer of security beyond just passwords.
• Regular Security Reviews: We routinely update and patch our systems and conduct security assessments. This includes periodically testing our infrastructure, reviewing our procedures, and staying up-to-date on emerging threats. If we detect any vulnerabilities, we address them promptly.

We retain personal information only for as long as necessary to fulfill the purposes we collected it for, unless a longer retention period is required or permitted by law. In practice, this means:

• We keep your information while your account is active or as needed to provide you services. For example, your order history is retained so you can review past purchases (and for our internal record-keeping).
• We retain data as needed to meet legal and accounting obligations. For instance, transaction records may be kept for a number of years for tax compliance and audit purposes. Likewise, if you make a warranty claim or return, we may need to keep those records.
• We retain information to resolve disputes or enforce our agreements. For example, if you unsubscribe from emails, we keep a suppression list to ensure we don’t accidentally send you further communications. If there’s a dispute or legal claim, we will retain relevant information until it is resolved.

When personal information is no longer necessary for the purposes for which it was collected, and we are not otherwise legally required to retain it, we will securely erase, anonymize, or delete the data. For example, we may remove personal identifiers so that data can be maintained in aggregate (non-identifiable) form for statistical purposes, or we will securely dispose of records containing personal data. We follow industry best practices for data destruction. In summary, we minimize retention and strive not to keep personal data indefinitely when it no longer serves a valid purpose.

Please note that no method of transmission over the Internet or method of electronic storage is 100% secure. While we are constantly improving our safeguards, we cannot guarantee absolute security. However, we pledge to notify you and the proper authorities of any significant breach as described in Section 14 below, and we are always available via the contact information at the end of this Policy if you have any questions about our security measures.

10. Your Rights (PIPEDA Individual Access and Choices)

We believe it is important that you can access and control your personal information. In accordance with PIPEDA and other applicable laws, you have several rights regarding the personal information we hold about you. Specifically, you have the right to:

• Access Your Personal Information: You can request confirmation of whether we hold personal information about you and to receive an explanation of the personal information we have, as well as an electronic or physical copy of the data[18]. This enables you to know what data of yours we possess.
• Request Correction of Inaccurate Information: If any of your personal details are incorrect or incomplete, you have the right to request that we correct or update them. For example, if you find that your contact information or preferences are wrong in our records, you can ask us to fix it, and we will do so. Keeping your data accurate and up-to-date helps us serve you better.
• Request Deletion of Data (Right to Erasure): In certain circumstances, you may ask us to delete the personal information we hold about you. For instance, if you withdraw consent or if information was collected in error, you can request its removal. We will honor such requests where possible, provided we are not required to retain the data for legal reasons. (For example, we might not be able to delete information related to an active transaction or data we must keep for legal compliance.) We will inform you if we cannot delete certain data and why.
• Request Information on How Your Information Has Been Used or Disclosed: You have the right to ask how we have used your personal information and to whom it has been disclosed. This includes learning the purposes for which your data was used and the types of third parties (if any) that have had access to it[20]. We will provide as much detail as reasonably possible about how your information has been handled, while respecting the privacy of others.
• Withdraw Consent: As mentioned in the Consent section, if you previously gave consent for a specific use of your information (e.g., receiving marketing emails), you have the right to withdraw that consent at any time. We will then stop the related use of your information (e.g., stop sending marketing emails) going forward, subject to any legal constraints. Withdrawal of consent will not affect the lawfulness of any processing we did based on your earlier consent.

These rights are not absolute – there are some exceptions under the law. For example, we might not release information that would reveal personal data about another individual, and we might refuse access if it would violate legal privilege or security. However, our policy is to be as open and transparent as possible, and we will explain the reasons for any refusal.

To exercise any of your rights, please contact us at support@shopright24.com with your request (see Contact Us below). For security, we may need to verify your identity (for example, by asking for certain information) before fulfilling your request, to ensure that we do not disclose data to the wrong person. We will respond to your inquiry within 30 days, as required by PIPEDA. If for some reason we need more time (due to the complexity of the request or the need for clarification), we will inform you of the reason and extension in writing. There is generally no cost for reasonable requests, but if you request additional copies of data or make excessive/repetitive requests, we may charge a minimal fee or refuse the request as allowed by law (in which case we would explain why).

We are committed to enabling you to exercise your rights. We will not discriminate against or penalize you for making any of these requests. Our goal is to give you control over your personal information and ensure your privacy rights are respected.

11. Children’s Privacy

Our Service is not intended for individuals under the age of 13. We do not knowingly solicit or collect personal information from children under 13 years old. If you are under 13, please do not use or provide any information on this Site or through any of its features.

In the event we discover that we have inadvertently collected personal information from a child under 13 without verified parental consent, we will take immediate steps to delete that information from our servers. If you are a parent or guardian and believe that we might have any information from or about a child under 13, please contact us right away (see Contact Us below) so that we can investigate and address the issue promptly.

We encourage parents and guardians to be involved in and supervise their children’s online activities. Educating children about privacy and limiting the information they share online helps keep their online experiences safe.

12. Third-Party Services & Embedded Content

Our Site may include links to third-party websites or embedded content (for example, product videos from YouTube, or social media plugins from Instagram/Facebook). If you click those links or interact with that embedded content, your activity and personal information may be collected by those third-party providers under their own privacy policies. This means that once you leave our website (or interact with a plug-in that sends data to a third party), their privacy policy and terms, not ours, will govern the handling of any information they obtain. We provide access to these third-party features for your convenience (for instance, to view a video or share a product on social media), but we are not responsible for the privacy practices or content of external websites.

For example, if you follow a link to an electronics manufacturer’s site or a blog post on another site, information like your IP address or any information you provide on that site will be subject to that site’s privacy rules. Or, if we embed a YouTube video, YouTube might collect usage data through its own cookies or trackers. We recommend that you review the privacy policies of any third-party websites or services before providing any personal information to them.

That being said, we strive to only partner or integrate with reputable third parties. If you have feedback about a third-party integration on our Site (for example, if you feel an embedded feature isn’t operating as described), please let us know.

13. International Transfers

Shopright24 is based in Canada, but we may utilize services, cloud infrastructure, or other operational resources that reside in other countries. In particular, some of our third-party service providers or affiliates might process or store personal information outside of Canada (for example, in the United States or other jurisdictions). If your personal information is transferred to and stored in a foreign country, it may be subject to the laws of that country and could potentially be accessed by that country’s courts, law enforcement, or national security authorities in accordance with local laws. For instance, information stored on servers in the U.S. might be lawfully accessed by U.S. authorities under American law.

Regardless of where your personal information is located, we remain committed to protecting it. If we transfer data to third parties outside Canada, we will ensure that appropriate safeguards are in place to maintain a level of protection equivalent to that provided under Canadian privacy law (PIPEDA). Such safeguards may include contractual clauses (e.g., data processing agreements) binding the recipient to protect the information, technical measures like encryption, and due diligence/monitoring of those third parties. In essence, our Privacy Policy travels with your data – we require anyone who handles personal information on our behalf, regardless of location, to respect our standards and comply with PIPEDA principles.

If you have questions about our policies and practices regarding service providers outside of Canada, or if you want more information about the countries in which your personal information may be accessible, you can contact us and we will be happy to provide further details. We understand that cross-border data flows can be complex, and we want to be transparent with you about how your information is handled globally.

14. Data Breaches (Mandatory Reporting)

We have put in place preventative security measures (see Section 9: Security above) to reduce the risk of data breaches. However, in the unlikely event of a breach of security safeguards that involves your personal information, we will act promptly in accordance with Canadian breach notification laws. If a breach occurs that poses a real risk of significant harm (e.g., potential for identity theft, financial loss, or humiliation), we will take the following actions:

• Notify affected individuals – If your personal data is involved in such a breach, we will notify you as soon as feasible after we determine the breach has occurred. We will contact you via email, letter, telephone, or any other appropriate method, and provide you with sufficient information to understand the scope of the breach and any steps you should take to protect yourself (for example, changing passwords or monitoring your accounts).
• Report to the Office of the Privacy Commissioner of Canada (OPC) – We will report the breach to the OPC as required by law. Our report will include details such as the nature of the breach, when it happened, what information was involved, and our proposed remediation steps. The OPC oversees compliance and may provide guidance to us or require additional steps.
• Maintain a breach record for 24 months – We will keep a record of all data breaches, regardless of severity, for at least 24 months following the incident. This record will document what happened and the outcome, and it may be reviewed by the OPC if needed. Keeping these records helps ensure transparency and allows authorities to verify that we handled the breach properly.

Our notifications to you (and to the OPC) will include information about the breach such as the types of personal data affected, a brief description of what occurred, an assessment of the risk of harm, and the actions we are taking to mitigate the harm and prevent future incidents. We will also provide you with contact information for someone at Shopright24 who can answer your questions, as well as steps you can take to further protect yourself (for example, how to change your password or contact credit bureaus if financial information was involved). Our goal is to be completely forthright and helpful in such a situation, reducing any potential negative impact on you.

Aside from notifying you and authorities, we will do everything we can to contain and remedy the breach. This might include isolating affected systems, changing access credentials, increasing monitoring, and working with cybersecurity experts to ensure the vulnerability is fixed.

Please note that if a breach does not meet the “real risk of significant harm” threshold (for example, a minor incident like a misdirected email that was immediately remedied and posed no risk), we may not notify individuals, but we will still document the incident internally. We follow the regulations and OPC guidance to make these determinations.

If you have any concerns about our breach response or need further information on a breach that affected you, you can contact us (see Contact Us below). Additionally, you have the right to contact the OPC if you believe we are failing to report or address a significant breach.

15. Changes to This Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our business practices, technologies, or legal obligations. For example, if we introduce a new feature or service that affects how we handle personal information, or if privacy laws change, we will update this Policy accordingly. Whenever we make significant changes, we will post the updated Privacy Policy on this page and adjust the “Last Updated” date. Changes take effect on the date posted unless otherwise indicated.

If the changes are substantial or affect your rights and interests, we will take additional steps to inform you. This could include posting a prominent notice on our homepage, or in some cases, contacting you directly via email or through your account. We encourage you to review our Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of our Service after any changes to this Privacy Policy signifies your acceptance of the updated terms. If we update the Policy, we will not use or share your personal information in newly permitted ways without first giving you a chance to consent (if required by law). Rest assured, we will never retroactively apply material changes to how we handle previously collected data unless legally required or we obtain your consent.

In short, while we reserve the right to modify this Policy, we will do so openly and transparently. Our commitment to your privacy will remain paramount, and any changes will aim to improve clarity or align with best practices and legal requirements.

(Last updated: December,04th, 2025)

16. Contact Us

Accountability is important to us. Shopright24 is responsible for the personal information under its control and has appointed a Privacy Officer to oversee our privacy program and ensure compliance with this Policy and applicable laws. If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, or if you wish to exercise any of your rights described above (access, correction, withdrawal of consent, etc.), please reach out to us. We are here to help and will do our best to address your inquiry in a prompt and courteous manner.

You can contact our Privacy Officer (or the Shopright24 privacy team) using any of the methods below:

•  Email: support@shopright24.com
•  Phone: +1 (613) 261‑0638
•  Adress: 24 Dumoulin Way, Orléans, ON K4A 4Z3, Canada

When you contact us, please provide as much detail as possible about your question or request, and include your preferred contact information. This will help us respond more effectively. We may need to verify your identity for certain requests (as noted in Section 10) to protect your privacy.

We will respond to inquiries or investigate complaints as soon as possible, and no later than 30 days from receipt. If a complaint is found to be justified, we will take appropriate measures to resolve it, including, if necessary, changing our policies or practices.

If you have raised a privacy concern with us and you feel that we have not addressed it satisfactorily, you have the right to escalate the matter. In Canada, you can contact the Office of the Privacy Commissioner of Canada (OPC) for further guidance or to file a formal complaint. The OPC is the independent federal body that oversees privacy compliance. Contact information for the OPC can be found on their website (priv.gc.ca). If you reside in a province with its own privacy commissioner (such as Québec, B.C., or Alberta), you may also contact those offices as applicable. We do ask that you please attempt to resolve any issues with us first, as we genuinely value the opportunity to correct and improve our practices.

Thank you for reading our Privacy Policy. Your trust is very important to us, and we are continuously striving to protect your privacy. We appreciate you choosing Shopright24, and we look forward to serving you in accordance with these principles. If you have any questions or need clarifications about this Policy, do not hesitate to contact us. Your feedback and peace of mind are our priority.