24K Maple Supply Privacy Policy

This Privacy Policy is drafted for publication use. It is designed for a Shopify-based Canadian ecommerce business selling oversized beauty, spa, massage, and treatment equipment, and is written to be detailed, operationally practical, and legally conservative.

1. Scope and Application

This Privacy Policy describes how 24K Maple Supply (“24K Maple Supply”, “we”, “us”, or “our”) collects, uses, discloses, stores, safeguards, and otherwise processes personal information in connection with our website located at 24kmaplesupply.com, our online storefront, customer accounts, quote and order inquiries, email and SMS communications, social media interactions, shipping and delivery coordination, warranty administration, return and refund review, and other customer service or after-sales support activities.

Our business is focused on supplying large-format beauty, spa, massage, and treatment equipment, including beauty beds, facial chairs, massage tables, treatment tables, and related furnishings and accessories for salons, spas, clinics, studios, wellness businesses, and other customers. Because many of our products are oversized and may involve freight delivery, appointment scheduling, damage inspection, warranty support, or returns review, our privacy practices necessarily extend beyond basic website browsing and can include information required to coordinate logistics and post-sale service.

This Privacy Policy applies to personal information collected from individuals acting in their personal capacity and from individuals acting on behalf of a business or organization. It does not apply to information that has been irreversibly anonymized or de-identified so that it can no longer reasonably be linked to an identifiable individual. It also does not govern personal information practices of third parties that operate independently from us, including third-party payment providers, shipping carriers, social media platforms, or other websites linked from our site, except to the extent we are legally responsible for their processing as our service providers.

This Privacy Policy is intended to comply with applicable Canadian privacy requirements, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) where applicable, applicable provincial private-sector privacy requirements, including Quebec’s private-sector privacy law where applicable, Canada’s anti-spam requirements for marketing communications, and other consumer protection or data protection rules that may apply to our activities. If you are located in a jurisdiction that grants additional rights, the supplemental sections below also apply to the extent required by law.

2. Who We Are

24K Maple Supply is a Canadian supplier of beauty, wellness, treatment, and professional furniture and equipment. Our current website contact details identify our business at 3600A Laird Rd Unit 9, Mississauga, Ontario, L5L 0A3, Canada.

For general support, order, warranty, or delivery inquiries, you may contact us through the contact details posted on our website. For privacy-specific inquiries, access requests, correction requests, consent-withdrawal requests, or complaints, you may contact: Privacy Officer, 24K Maple Supply, sales@24kmaplesupply.com, support@24kmaplesupply.com, telephone +1-289-723-2424, mailing address 3600A Laird Rd Unit 9, Mississauga, Ontario, L5L 0A3, Canada. Please include the phrase “Privacy Request” in the subject line where possible.

3. Personal Information We Collect

The personal information we collect depends on how you interact with us. We may collect the following categories of personal information, to the extent relevant and permitted by law:

Information you provide directly to us. This may include your name; business name; job title; billing address; shipping address; email address; telephone number; language preference; account credentials; order details; product interests; cart contents; coupon or promotion information; order notes; customer service communications; quote requests; delivery instructions; loading dock or access information; stair or access limitations; preferred appointment times; support inquiries; waitlist or back-in-stock requests; newsletter subscription information; SMS opt-in details; review or survey submissions; photos or videos you send in connection with warranty, delivery, damage, defect, safety, or return matters; serial numbers or model numbers associated with an order; and any other information you choose to provide to us.

Information collected automatically when you use our website. Depending on the tools enabled on our site and your browser settings, this may include your IP address; device type; browser type; operating system; approximate location derived from IP; language settings; referring URL; pages viewed; products viewed; clicks and on-site interactions; session identifiers; cookie identifiers; cart and checkout activity; date and time stamps; log data; and information about how you navigate or interact with our storefront, account features, and promotional forms.

Information from third parties and service providers. We may receive personal information from the e-commerce platform that powers our online store, payment processors, shipping and freight partners, white-glove or delivery contractors, fraud prevention and security vendors, analytics or advertising providers where enabled, email and SMS service providers, social media platforms when you interact with our official pages or advertisements, and other service providers that support our operations. We may also receive updated delivery or address information, carrier status information, or claim-related information from logistics providers.

Information related to claims, service, or disputes. If you report shipping damage, a missing component, a product malfunction, a safety issue, or a warranty concern, we may collect additional information needed to assess and document the matter, including proof of purchase, photographs of packaging, delivery receipts, carrier labels, videos showing electrical or motorized issues, description of installation conditions, and the sequence of events leading to the claim.

Business contact information. If you communicate with us on behalf of a salon, spa, clinic, studio, or other organization, we may collect and use your business contact details, purchase role, and job-related information in connection with the transaction and customer relationship. Depending on applicable law, certain business contact details may still constitute personal information.

4. Purposes for Which We Collect and Use Personal Information

We collect, use, and disclose personal information only for purposes that are reasonable in the circumstances and consistent with applicable law.

These purposes include operating and maintaining our website and online storefront, authenticating users, providing account functionality, remembering cart contents, supporting checkout, and improving site performance and usability.

They also include processing orders, payments, taxes, invoices, fulfillment, shipping, freight scheduling, white-glove requests, delivery appointments, post-delivery support, and communications necessary to complete a transaction or respond to an inquiry.

We may use personal information to administer discounts, coupon codes, newsletter sign-ups, SMS campaigns, back-in-stock alerts, customer surveys, review requests, educational content, and other marketing or engagement efforts where permitted by law or based on your consent.

We may use personal information for fraud screening, chargeback prevention, security monitoring, abuse detection, internal analytics, demand planning, inventory planning, product and service improvement, claims handling, warranty administration, dispute resolution, legal compliance, and the establishment, exercise, or defense of legal claims.

Where we wish to use personal information for a purpose materially different from the purpose originally identified, we will take steps required by applicable law, which may include providing additional notice or obtaining fresh consent.

We may also create aggregated, statistical, or de-identified information derived from personal information and use or disclose that information for lawful business purposes, including analytics, inventory planning, service improvement, and reporting, provided that the resulting information does not reasonably identify you.

5. Our Grounds for Processing and Consent

Where required by law, we rely on your consent to collect, use, or disclose personal information. In other situations, our processing may be justified because it is necessary to perform a contract with you or to take steps at your request before entering into a contract, because it is required or authorized by law, or because it is reasonably necessary for legitimate business purposes that are appropriate in the circumstances and not overridden by applicable legal restrictions.

Examples of consent-based processing may include email marketing subscriptions, SMS marketing subscriptions, recurring back-in-stock notifications, certain review or survey outreach, and certain analytics or advertising activities depending on the technologies enabled on our site and applicable law. Examples of contract-based processing include processing your order, arranging shipment, coordinating delivery appointments, verifying payment, and handling warranty or return requests related to a purchase.

You may withdraw consent at any time for future processing that is based on consent, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent does not affect processing already completed before the withdrawal and may limit our ability to provide certain optional services, communications, or account features.

6. Cookies, Pixels, and Similar Technologies

Our website may use cookies, web beacons, pixels, scripts, tags, local storage, session technologies, and similar tools that help the site function and help us understand how the site is used. Some of these technologies are strictly necessary for the operation of the site and support functions such as cart management, checkout continuity, fraud prevention, account login, language or interface preferences, session integrity, and security.

Depending on the tools enabled on our site, we or our service providers may also use performance, analytics, and measurement technologies to understand which pages are visited, how customers move through the site, which campaigns or channels lead to visits or purchases, how often products are viewed, whether customers return to a page, and how the site can be improved. If enabled, marketing or advertising technologies may also help us tailor content, limit repetitive advertising, measure campaign performance, or reconnect with users who previously engaged with our site.

Our site features, subscriptions, and reminders may also rely on cookies or similar technologies to recognize your device or browser over time. For example, cookies or checkout/session data may help identify an abandoned shopping session so that a reminder can be sent where you have provided the required consent or where otherwise permitted by law. We may also use technologies in relation to back-in-stock notifications, forms, discount sign-up flows, and campaign attribution.

You can control certain cookies through your browser or device settings and, where available, any consent or preference tools presented on the site. Please note that disabling strictly necessary technologies may cause certain site features, including cart, account, or checkout functionality, not to work properly. Because browser and device controls vary, you should review the help materials for the browser or device you use.

7. Email Marketing, SMS Marketing, Promotional Offers, and Waitlists

If you subscribe to our email list, request marketing updates, enter your email in a promotional sign-up form, create an account, ask to be notified when a product is back in stock, or otherwise opt into communications, we may send you emails regarding our products, promotions, collection updates, educational content, service announcements, review requests, or related store news, subject to applicable law and your preferences.

If you opt into SMS communications, we may send recurring text messages relating to order updates, abandoned cart reminders, text marketing offers, transactional messages, review requests, and other communications covered by your consent or permitted by law. Message frequency may vary. Consent to receive marketing messages is not a condition of purchase. Message and data rates may apply according to your mobile carrier plan. You may opt out of marketing SMS by replying STOP to a message from us, and you may seek assistance by replying HELP where supported or by contacting us through the contact information in this Privacy Policy.

We may retain records relating to your marketing consent, subscription status, sign-up source, or unsubscribe history to help us demonstrate compliance with applicable communication laws, honor your preferences, and prevent unwanted messages.

If you submit your email address for “notify me when available,” recurring restock notifications, or similar waitlist or inventory alerts, we may use your email address or other provided contact details to notify you when the relevant product is back in stock or when related inventory becomes available. If you agree to recurring notifications, we may continue to notify you according to the preference you selected until you unsubscribe, the product is no longer supported, or the waitlist feature is discontinued.

We may also offer promotional discounts, coupon codes, first-order offers, or similar incentives in connection with newsletter or SMS sign-up. Participation in such offers is voluntary. We use the contact information you provide to administer the offer, verify eligibility, deliver the promised discount or promotion, and send related communications according to your preferences and applicable law. You can withdraw from the promotional relationship at any time by unsubscribing or texting STOP, but doing so may end your eligibility for future messages or program benefits associated with the sign-up.

Even if you opt out of marketing communications, we may still send you non-marketing or transactional messages when necessary to complete your order, manage your account, schedule a delivery, respond to a support inquiry, send legal notices, or otherwise service the customer relationship.

8. Payment Processing

Our online store is powered by Shopify, and payments may be processed through Shopify and/or third-party payment providers depending on the payment option you select at checkout. Available payment methods shown on our site may include card payments and digital wallet or third-party provider options such as PayPal, Apple Pay, Google Pay, and Shop Pay, among others made available through our checkout environment.

When you make a purchase, payment card and payment account information is typically collected and processed by the relevant payment processor rather than stored in full by us. We may receive limited transaction details necessary to confirm payment, detect fraud, address chargebacks, reconcile accounting records, and fulfill your order. We do not generally need or intend to store the full primary account number or full security code of your payment card.

Payment processors and digital wallet providers operate under their own privacy notices, terms, and security controls. We encourage you to review their policies before using those services because their handling of your payment information is governed by their own practices, except to the extent we direct or control the processing.

9. Freight Delivery, White-Glove Services, Warranty Support, Returns, and Refund Review

Because many of our products are oversized and delivered through freight carriers, we may collect and use personal information that is specifically necessary to coordinate shipping and delivery. This may include the recipient’s name, business name, delivery address, phone number, alternate contact, access restrictions, loading dock details, preferred appointment times, building constraints, stair or elevator information, and delivery acknowledgments or signatures where applicable.

Where white-glove, inside placement, unpacking, debris removal, or light assembly services are requested or arranged, we may disclose relevant delivery and contact information to the applicable service providers so the delivery can be scheduled and completed. We may also communicate with you and the delivery provider regarding rescheduling, missed appointments, additional handling requirements, remote area limitations, surcharges, safety issues, and delivery completion status.

If you make a warranty claim, shipping damage claim, wrong-item claim, return request, refund request, safety complaint, or defect report, we may collect and use additional information to investigate and document the issue. This may include proof of purchase, product photographs, packaging photos, carrier label photos, video of product operation, installation context, serial or model information, dates of delivery and unpacking, whether the item was assembled or used, and related correspondence. We may disclose relevant claim information to carriers, freight brokers, insurers, suppliers, manufacturers, repair technicians, or parts providers to assess the issue and provide an appropriate remedy.

Claim and support information may be retained for longer periods than ordinary browsing or marketing data because warranty administration, accounting obligations, legal defense, product safety, recall management, insurance review, and dispute resolution may require a documented record of the transaction and subsequent service history.

10. How We Disclose Personal Information

We may disclose personal information to service providers and other recipients where reasonably necessary and permitted by law.

These recipients may include e-commerce, hosting, and storefront platform providers; payment processors and financial service providers; shipping carriers, freight brokers, logistics coordinators, white-glove or delivery contractors; manufacturers, suppliers, warranty administrators, repair vendors, or replacement-part providers; cloud, software, IT, cybersecurity, fraud-prevention, and backup vendors; email, SMS, review, survey, and communication platforms; analytics, attribution, and advertising providers where those tools are enabled; insurers, legal counsel, accountants, auditors, and other professional advisers; government or regulatory bodies; and counterparties in a merger, acquisition, financing, or similar transaction.

We do not sell personal information for monetary consideration. However, like many e-commerce businesses, if certain analytics, measurement, or advertising technologies are enabled on our site, limited online identifiers or browsing-related information may be made available to those providers in a way that could be characterized under some laws as a “sale,” “sharing,” or processing for targeted advertising. Where applicable law grants you the right to opt out of such processing, you may exercise that right by contacting us as described below and by using any browser, device, or site-level controls that may be made available to you.

We may also disclose personal information without consent where such disclosure is authorized or required by law, including for fraud prevention, legal compliance, debt collection, tax reporting, emergency or safety response, or the establishment, exercise, or defense of legal claims.

11. Cross-Border Storage and Processing

We are based in Canada, but the service providers that help us run our website, payment systems, communications, analytics, logistics, support, or data storage may operate in Canada, the United States, or other jurisdictions. As a result, your personal information may be stored or processed outside your province, territory, or country of residence.

When personal information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to courts, law enforcement, national security authorities, or regulators in that jurisdiction. Where required by law, we use contractual or other appropriate safeguards designed to require service providers to protect personal information to a standard that is appropriate in the circumstances.

12. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, or for a longer period where retention is required or justified by law, warranty obligations, tax or accounting requirements, fraud prevention, insurance review, dispute resolution, product safety, recall administration, legal defense, or the enforcement of our agreements and policies.

Retention periods may vary depending on the type of information and context. For example, order, invoice, shipping, claim, and warranty records may be retained longer than ordinary browsing data because they relate to transaction history, accounting records, and legal obligations. Marketing contact information may be retained until you unsubscribe, ask us to delete it where applicable, or it is no longer necessary for the purpose for which it was collected. Account information may be retained until the account is closed or becomes inactive for a prolonged period, and even then certain underlying transaction records may still be retained where legally or operationally necessary.

When personal information is no longer required, we will delete, anonymize, aggregate, or otherwise securely dispose of it in a manner appropriate to the sensitivity of the information and the format in which it is stored, subject to any residual backup, archival, evidentiary, or legal retention requirements.

13. Accuracy

We aim to keep personal information as accurate, complete, and up to date as necessary for the purposes for which it is used. You are responsible for providing accurate information and for notifying us if your contact details, delivery information, or account information changes. This is especially important for freight delivery, appointment scheduling, warranty support, and other time-sensitive communications.

14. Security Safeguards

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the personal information in our control. These safeguards may include access controls, role-based restrictions, password controls, platform and vendor security features, secure transmission measures where appropriate, staff confidentiality practices, and policies designed to reduce the risk of unauthorized access, use, disclosure, alteration, or destruction.

No method of transmission over the Internet, mobile network, or electronic storage system is completely secure. Accordingly, although we take reasonable steps to protect personal information, we do not guarantee absolute security. You should also take steps to protect yourself, such as using strong passwords, safeguarding account credentials, and notifying us promptly if you believe your account or communications with us have been compromised.

Where applicable law requires notice of a breach of security safeguards or confidentiality incident, we will assess the incident, keep required records, and provide notifications to affected individuals, regulators, or other parties as required by law.

15. Sensitive Information and Information We Prefer Not to Receive

Our business is focused on physical equipment and furniture, and we do not seek to collect patient records, client treatment histories, health files, biometric identifiers, or other highly sensitive information about your own customers or patients as part of ordinary website use or product purchases. Please do not send us sensitive medical, biometric, government-issued identifier, or similar high-risk information unless it is reasonably necessary for a support, safety, accessibility, financing, legal, or warranty matter and you have been specifically asked to provide it or you determine that providing it is necessary to explain the issue.

If you choose to provide sensitive information to us, you consent to our handling of that information for the specific purpose for which it was provided, subject to applicable law. Where the information concerns another individual, you represent that you are authorized to provide it and to permit us to use it for the purpose connected to your request.

16. Customer Accounts and User Submissions

If you create an account on our website, we may collect and retain account credentials, order history, saved addresses, login-related information, and communications linked to your account. You are responsible for maintaining the confidentiality of your account credentials and for activities that occur through your account, except to the extent caused by our own actions or legal responsibilities.

If you submit a product review, testimonial, image, video, comment, social media tag, or other user-generated content to us or to a feature connected to our store, that content may be published or otherwise made visible to others depending on the feature you use and your settings. Please do not include confidential, financial, or sensitive information in public-facing submissions. We may moderate or remove submissions in accordance with our policies, platform rules, legal obligations, or business judgment.

17. Children’s Privacy

Our website and products are intended for adult customers and business users, not children. We do not knowingly collect personal information directly from children under the age of 16, or under another age threshold where required by applicable law, without appropriate consent from a parent or guardian. If you believe a child has provided personal information to us inappropriately, please contact us so we can review and take appropriate action.

18. Professional Customers and Third-Party Information

Many of our customers are salons, spas, clinics, studios, and other businesses. If you purchase from us or interact with us on behalf of a business, you may provide us with information about colleagues, delivery contacts, or authorized representatives. You are responsible for ensuring that you have authority to provide such information to us and to permit us to use it for the transaction or support purpose for which it was provided.

If you use products purchased from us in your own business, you remain independently responsible for the privacy compliance of your own organization with respect to your customers, clients, patients, employees, and other individuals. Except where we separately agree otherwise in writing, we do not act as a custodian, controller, processor, or service provider for your own clients’ or patients’ records merely because you use our physical products in your business.

19. Your Rights and Choices

Depending on the law applicable to your personal information, you may have one or more of the following rights: to know whether we hold personal information about you; to request access to your personal information; to request correction or rectification of inaccurate or incomplete personal information; to withdraw consent for future processing where consent is the basis of processing; to request deletion, erasure, or anonymization of personal information in appropriate circumstances; to request information about categories of personal information collected, sources, purposes, and categories of disclosures; to object to or opt out of certain marketing, profiling, analytics, or targeted advertising activities where such rights apply; to request portability of certain information where applicable law grants that right; and to file a complaint with us or with an applicable privacy regulator.

To exercise a right, please contact us using the contact information in this Privacy Policy. We may ask you to verify your identity before acting on a request. In some cases, we may need additional information to understand the scope of your request, identify the information at issue, or confirm authority where a request is submitted through an authorized representative.

Where the law permits, we may decline or limit a request, for example where providing access would reveal another person’s personal information, reveal privileged material, interfere with legal obligations, compromise security, or where the requested deletion is not possible because the information must be retained for legal, accounting, warranty, fraud-prevention, or dispute-related reasons.

We will not discriminate against you for exercising applicable privacy rights, subject to lawful differences that are reasonably related to a transaction, service relationship, promotional program, or legal requirement.

20. Additional Notice for Canadian and Quebec Residents

If PIPEDA or another Canadian private-sector privacy law applies to your personal information, you may request access to and correction of personal information in accordance with applicable law, subject to lawful exceptions. We aim to respond to privacy requests within the time required by law. In many cases, that period is 30 days unless an extension or exception applies under the governing legal framework.

If you are located in Quebec or if Quebec’s private-sector privacy law otherwise applies, you may have additional rights, including rights relating to access, rectification, withdrawal of consent in appropriate circumstances, and complaint handling. Where required by Quebec law, we will publish this policy in clear and simple language, provide notice of material amendments, and provide any notices required in relation to technologies that identify, locate, or profile individuals or otherwise collect personal information by technological means.

If you are not satisfied with our response to a privacy concern, you may have the right to complain to the Office of the Privacy Commissioner of Canada and, where applicable, to the Commission d’accès à l’information du Québec or another competent regulator.

21. Additional Notice for Residents of Certain U.S. States (Where Applicable)

This section applies only if and to the extent a U.S. state privacy law applies to 24K Maple Supply with respect to your personal information. Residents of certain U.S. states may have rights that include the right to confirm whether we process personal information about you, access such information, correct inaccuracies, delete certain personal information, obtain a copy of certain personal information in a portable format, opt out of processing for targeted advertising, opt out of certain profiling activities, or opt out of the sale or sharing of personal information as those terms are defined under applicable state law.

We do not sell personal information for monetary consideration. However, if certain analytics, advertising, or retargeting technologies are enabled on our site, the disclosure of online identifiers or browsing-related information to those providers may, depending on the law, be characterized as “sale,” “sharing,” or processing for targeted advertising. You may request to opt out of such processing where applicable by contacting us and by using any browser, device, or site-level controls available to you.

Where a state law provides an appeal right after we deny a privacy request, you may ask us to review the decision by replying to our response and stating that you wish to appeal. Where authorized agents are permitted, we may require proof of authorization and identity verification before processing a request through an agent.

22. Third-Party Websites, Platforms, and Social Media

Our website may link to third-party sites or services, and our business may maintain a presence on social media or video-sharing platforms such as Instagram, TikTok, and YouTube. If you leave our website or interact with us on a third-party platform, your information will also be subject to that third party’s own privacy practices, terms, cookies, and controls. We are not responsible for the independent privacy practices of third parties that we do not control.

If you communicate with us through social media direct messaging, comments, or platform tools, we may receive information associated with your profile and your interaction. We may use that information to respond to you, manage customer service, monitor brand interactions, or improve our communications, subject to applicable law and the platform’s own rules.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, technology, legal requirements, services, or privacy practices. When we do, we will post the updated version on our website and revise the “Last Updated” date at the top of the policy. Where required by law, we will provide additional notice or obtain consent for material changes before those changes take effect.

24. Contact Us

Questions, concerns, and requests regarding this Privacy Policy or our privacy practices may be directed to:

Privacy Officer
24K Maple Supply
3600A Laird Rd Unit 9
Mississauga, ON, L5L 0A3
Canada
Email: sales@24kmaplesupply.com
Support: support@24kmaplesupply.com
Phone: +1-289-723-2424

To help us process your request efficiently, please include your full name, the email address or phone number you used to interact with us, your order number if relevant, and a clear description of the request or concern.