1. Introduction
Shieldandstow (“we”, “us” or “our”) respects the privacy of individuals who visit www.shieldandstow.com, purchase our products or contact us regarding our business.
This Privacy Policy explains how we collect, use, disclose, retain and otherwise handle personal information in connection with our online retail activities.
We operate from Canada and offer our products to customers in European markets. We handle personal information in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and applicable European data protection legislation, including the General Data Protection Regulation (GDPR), where applicable.
By using our website, you acknowledge that you have had the opportunity to read this Privacy Policy. Where consent is required by law, we will seek that consent separately. Visiting our website does not, by itself, constitute consent to optional cookies or marketing communications.
2. Data Controller
For the purposes of this Privacy Policy, the data controller is:
Brand Name: Shieldandstow
Website: https://www.shieldandstow.com
Email: control@shieldandstow.com
Country of Operation: Canada
Shieldandstow determines the purposes for which personal information is collected and the means by which it is handled in connection with our retail activities.
For privacy enquiries, requests to exercise your rights or questions about our handling of personal information, please contact us at control@shieldandstow.com.
3. Personal Information We Collect
We collect personal information that is relevant to operating our website, processing orders and responding to customer enquiries.
3.1 Information You Provide
Depending on how you interact with our website, this may include:
- Name and contact details, including email address and telephone number.
- Billing and delivery addresses.
- Order details, purchased items, quantities and transaction references.
- Information submitted through contact forms or email correspondence.
- Information you provide when requesting assistance, a return or a refund.
- Communication preferences and marketing consent records, where applicable.
Please provide only information relevant to your enquiry or purchase.
3.2 Payment Information
Payments on our website are processed by Stripe, which provides payment processing services.
Depending on the payment method and checkout arrangement, payment-related information may include transaction references, payment status, billing details and information required to process a payment.
Card details and other payment credentials are handled through Stripe’s payment arrangements where applicable. We do not intentionally store complete payment card numbers or card security codes in our ordinary customer records.
Stripe may collect and process personal information under its own privacy terms when acting as an independent data controller for particular activities. Stripe may also act as a data processor when providing services on our instructions.
For further information, please review the Stripe Privacy Centre.
3.3 Website and Device Information
When you visit our website, certain information may be collected automatically, depending on the website functions and your cookie preferences. This may include:
- IP address and approximate location derived from it.
- Browser type, operating system and device information.
- Pages visited, referring pages and interaction records.
- Access dates, timestamps and diagnostic records.
- Cookie identifiers and similar online identifiers, where permitted.
We use this information for website operation, visitor preferences, performance assessment and the investigation of unusual website activity, as appropriate to the purpose and applicable law.
4. Purposes and Lawful Bases for Processing
We process personal information only for identified purposes and where an appropriate legal basis applies.
| Purpose | Applicable legal basis, where required under GDPR |
|---|---|
| Processing and fulfilling orders | Performance of a contract |
| Arranging payment, refunds and transaction records | Performance of a contract and compliance with legal obligations |
| Responding to customer enquiries | Performance of a contract, pre-contractual steps or legitimate interests, depending on the enquiry |
| Maintaining accounting and tax records | Compliance with legal obligations |
| Handling returns and order-related complaints | Performance of a contract, legal obligations or legitimate interests, as applicable |
| Maintaining website functionality and diagnosing errors | Legitimate interests or consent, depending on the activity |
| Sending optional promotional communications | Consent where required, or another lawful basis where legally permitted |
| Using optional analytics or advertising cookies | Consent where required by applicable law |
| Establishing, exercising or defending legal claims | Legitimate interests or another applicable legal basis |
Where we rely on legitimate interests, we consider the relevant interests and the rights and freedoms of the individuals concerned.
Where consent is the applicable legal basis, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
5. How We Use Personal Information
We may use personal information to:
- Confirm and administer purchases.
- Process payments, refunds and related transaction records.
- Arrange the fulfilment of orders and provide order updates.
- Respond to product questions and customer requests.
- Maintain purchase histories and relevant business records.
- Manage returns and address order-related concerns.
- Maintain website functionality and review website performance.
- Identify irregular transactions and investigate suspected misuse.
- Meet applicable accounting, tax and record-keeping obligations.
- Exercise or defend legal claims where necessary.
- Send promotional communications where permitted by law.
We do not use personal information for purposes incompatible with the purposes explained in this Policy unless an appropriate legal basis permits the additional processing.
6. Stripe Payment Processing
Shieldandstow uses Stripe to process payments made through our website.
When you place an order, relevant information may be transmitted to Stripe to facilitate the transaction. Depending on the payment method and transaction, this information may include your name, email address, billing details, transaction amount, payment method details and other information required for payment processing.
Stripe may process information to:
- Authorise and process payments.
- Record transaction outcomes.
- Administer refunds and payment-related requests.
- Detect and investigate suspected fraudulent activity.
- Meet applicable legal and regulatory obligations.
Stripe’s role depends on the processing activity. When processing payment information on our behalf, Stripe acts as a data processor. For activities where Stripe independently determines the purposes and means of processing, Stripe acts as a separate data controller.
Stripe may disclose relevant information to financial institutions, payment method providers, affiliated entities and service providers where necessary for its services or required by law.
The processing of personal information by Stripe is also subject to Stripe’s applicable privacy terms. You can read more at https://stripe.com/legal/privacy-center.
We do not require customers to create a Stripe account merely to purchase products through our website unless a particular payment arrangement expressly requires one.
7. Disclosure of Personal Information
We may disclose relevant personal information to the following categories of recipients when necessary for the purposes described in this Policy:
Stripe and relevant financial service providers: To process payments, administer refunds and maintain transaction records.
Order fulfilment and delivery providers: To prepare and deliver orders using the recipient and delivery details required for fulfilment.
Website hosting and service providers: To operate our website, maintain records and provide customer support.
Professional advisers: To obtain accounting, legal or other professional assistance where required.
Public authorities and legal bodies: Where disclosure is required by applicable law, a valid legal demand or a lawful regulatory process.
We limit disclosures to information relevant to the applicable purpose. Where required, we enter into appropriate contractual arrangements with service providers that process personal information on our behalf.
We do not sell personal information in exchange for payment.
8. International Data Transfers
As our business operates from Canada and serves customers in Europe, personal information may be processed in Canada and other countries where our service providers or their relevant affiliates operate.
Where personal information subject to European data protection law is transferred outside the European Economic Area, we will apply an appropriate transfer mechanism where required, such as an applicable adequacy decision or the European Commission’s Standard Contractual Clauses, together with any additional measures required by the circumstances.
Transfers involving the United Kingdom or other jurisdictions will be handled under the transfer rules applicable to those jurisdictions.
The privacy laws of the country receiving the information may differ from those of your country of residence. Where required by law, we will provide information about the relevant transfer mechanism upon request.
9. Personal Information Retention
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, subject to applicable legal, accounting, tax and record-keeping requirements.
Our intended retention periods are as follows:
| Information category | Intended retention period |
|---|---|
| Order and transaction records | Generally up to 6 years after the relevant transaction or accounting period, where applicable legal and tax requirements call for this period |
| Customer account information, if accounts are available | While the account remains active and for a reasonable period afterwards, where needed for outstanding matters or legal obligations |
| Customer service correspondence | Generally up to 24 months after the enquiry is resolved, unless a longer period is reasonably required |
| Return, refund and complaint records | For the period needed to resolve the matter and meet applicable legal, accounting or claims-related requirements |
| Marketing preferences and consent records | While the relevant marketing activity continues and for a reasonable period afterwards to document consent, objections or withdrawals |
| Website access and diagnostic logs | Generally up to 12 months, unless further retention is necessary to investigate an incident or meet a legal obligation |
| Optional cookie identifiers | For the lifespan of the relevant cookie, as explained in our Cookie Policy and consent settings |
These periods are applied according to the type of record and the purpose for which it is held. Where applicable law requires a different period, the legally required period will apply.
We may retain certain records for longer where necessary to comply with a legal obligation, resolve an outstanding transaction, establish or defend a legal claim, or document a request to stop receiving marketing communications.
When personal information is no longer required, we will delete it, destroy it or anonymise it, as appropriate, subject to applicable law and the retention capabilities of the relevant service providers.
Stripe maintains its own retention practices for information processed under its privacy terms. Requests concerning information held independently by Stripe may need to be directed to Stripe.
10. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support essential website functions, remember preferences, understand website usage and provide optional analytics or advertising functions where applicable.
Cookies may be categorised as follows:
- Essential cookies: Required for functions such as shopping baskets, checkout operations and session management.
- Preference cookies: Used to remember selected website preferences.
- Analytics cookies: Used to assess website visits and interactions where permitted.
- Advertising cookies: Used for advertising-related purposes where such functions are enabled and permitted.
Non-essential cookies will be activated only after consent where consent is required. You may change or withdraw your preferences through the available cookie settings.
Stripe may use cookies or similar technologies in connection with payment processing and related functions, subject to its applicable terms and the consent requirements that apply to the relevant technology.
For further details, please refer to our Cookie Policy.
11. Your Privacy Rights
Depending on your location and the applicable law, you may have the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal information where the applicable legal conditions are met.
- Request restriction of certain processing activities.
- Object to processing based on legitimate interests in circumstances permitted by law.
- Request a copy of certain information in a portable format where applicable.
- Withdraw consent where processing is based on consent.
- Object to direct marketing and stop receiving promotional communications.
- Lodge a complaint with the relevant privacy regulator.
These rights are subject to applicable legal conditions and exceptions. For example, we may need to retain certain transaction records to meet accounting obligations or establish or defend legal claims.
To exercise a right, contact control@shieldandstow.com. We may request information reasonably necessary to verify your identity and locate the relevant records before responding.
We will respond within the timeframe required by the applicable law. Where permitted, we may extend a response period or decline a request in whole or in part when a lawful exception applies. If we do so, we will explain the applicable reason where required.
12. Canadian Privacy Rights
Canadian privacy requirements may apply to our handling of personal information, including under PIPEDA and any applicable provincial privacy legislation.
Subject to the relevant legal conditions, individuals may request access to their personal information, seek correction of inaccurate records and raise concerns about how their information has been handled.
We will assess requests in accordance with the applicable legal requirements. Where a concern cannot be resolved directly, individuals may contact the Office of the Privacy Commissioner of Canada or the relevant provincial or territorial privacy regulator, as appropriate.
13. European Privacy Rights
Where the GDPR applies, individuals may exercise the rights described in that Regulation, subject to its conditions and exceptions.
If you are located in the European Economic Area, you may contact your local data protection authority to raise a complaint. You may also contact the relevant supervisory authority in the United Kingdom or another applicable jurisdiction where appropriate.
If we rely on consent for a particular activity, you may withdraw that consent without affecting processing carried out before withdrawal.
14. Direct Marketing
We may send order-related messages, such as order confirmations and transaction updates, where necessary to fulfil a purchase or meet a legal obligation.
Promotional emails will be sent only where we have an appropriate legal basis and have met applicable consent and marketing requirements.
You may unsubscribe from promotional emails using the unsubscribe link provided or by contacting control@shieldandstow.com.
Unsubscribing from promotional communications will not prevent us from sending essential messages relating to an existing order or other necessary business communication.
15. Data Handling and Organisational Measures
We maintain organisational procedures intended to limit access to personal information to individuals and service providers who need it for authorised business purposes.
Measures may include access controls, staff instructions, appropriate service-provider arrangements, record management and procedures for responding to suspected personal information incidents.
No online transmission or storage arrangement is entirely free from risk. Where a personal information breach occurs, we will assess and respond to it in accordance with the notification and reporting obligations applicable to the circumstances.
16. Children’s Information
Our website is intended for general retail customers and is not directed at children.
We do not knowingly seek to collect personal information from children in circumstances where parental authorisation or other legal requirements apply. If we become aware that information has been collected unlawfully, we will assess the appropriate steps in accordance with applicable law.
17. Links to Other Websites
Our website may contain links to external websites or services. Those websites operate under their own privacy terms and information-handling practices.
We encourage visitors to review the relevant privacy policies before submitting personal information to an external website. This Privacy Policy applies to the information handled by Shieldandstow within the scope described above.
18. Changes to This Privacy Policy
We may update this Privacy Policy when our business practices, website functions or applicable legal requirements change.
The latest revision date will be displayed at the beginning of this document. Where required by law, we will provide notice of material changes or seek renewed consent before applying a change to processing activities that require it.
19. Contact Us
For questions about this Privacy Policy, requests concerning personal information or other privacy-related matters, please contact:
Email: control@shieldandstow.com
Please describe your request clearly and include relevant details that help us identify the information concerned. Do not send full payment card details or passwords by email.
We will review privacy enquiries and respond in accordance with applicable legal requirements.
Shieldandstow
Privacy Policy
Website: www.shieldandstow.com
Email: control@shieldandstow.com