Privacy Policy

Last updated: March 4, 2026

Whisper of Botanicals Inc. (“Whisper of Botanicals”, “we”, “us”, “our”) operates whisperofbotanicals.ca (the “Site”) and provides related products and services (the “Services”).

We are a British Columbia, Canada–based company.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our Services. If there is any conflict between this Privacy Policy and our Terms of Service and Sale, this Privacy Policy governs with respect to personal information.

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

0. Language (Québec residents notice) / Langue (Avis aux résidents du Québec)

This Privacy Policy is available in English and French. Both versions are intended to have the same meaning.

Québec residents: The French version of this Privacy Policy was made available to you first. You may choose to be bound by the English version where permitted by applicable law. If applicable law requires that the French version apply, the French version shall prevail to the extent required.

French version: https://whisperofbotanicals.ca/fr/policies/privacy-policy

La présente Politique de confidentialité est disponible en anglais et en français. Les deux versions sont destinées à avoir la même signification.

Résidents du Québec : La version française de la présente Politique de confidentialité vous a été mise à disposition en premier. Vous pouvez choisir d’être lié(e) par la version anglaise lorsque la loi applicable le permet. Si la loi applicable exige que la version française s’applique, celle-ci prévaudra dans la mesure requise.

Version française : https://whisperofbotanicals.ca/fr/policies/privacy-policy

1. What is “Personal Information”?

“Personal information” means information about an identifiable individual, or information that could reasonably be linked to you. It does not include anonymized or aggregated information that cannot reasonably identify you.

Some personal information is collected directly from you (for example, when you place an order), and some is collected automatically (for example, through cookies and similar technologies).

2. Personal Information We Collect

Depending on how you interact with us, we may collect:

A) Contact and Identity Information

Name
Billing and shipping address
Email address
Phone number

B) Order and Transaction Information

Products purchased, order history, timestamps
Cart activity and items viewed/added
Order value, discounts, gift cards, and taxes
Payment confirmation details (e.g., authorization status)

Payment card details: Payments are processed securely by our payment providers. We do not store full payment card numbers.

C) Account Information (if applicable)

Account login details (e.g., email)
Password (stored in encrypted/hashed form by the platform)
Preferences (e.g., language, saved addresses)

D) Communications and Content You Provide

Customer service inquiries and correspondence
Reviews, feedback, and user-submitted content (if you choose to submit it)

E) Technical, Device, and Usage Information (collected automatically)

Collected through cookies, pixels, SDKs, server logs, and similar technologies:

IP address
Device identifiers and approximate location (derived from IP)
Browser type, device type, operating system
Referring/exit pages, pages viewed, time spent
Interaction events (e.g., add to cart, checkout steps, purchase)
Advertising interaction data (e.g., ad clicks and conversions)

We may also generate inferences from some of the above (for example, likely interests based on browsing behavior) to improve the Services and marketing.

3. Sources of Personal Information

We may collect personal information:

Directly from you (orders, account creation, contact forms, reviews)
Automatically when you use the Site (cookies, pixels, logs)
From service providers that support our Services (payments, shipping, analytics, fraud prevention)
From advertising/marketing partners (for example, attribution and measurement data)

4. Cookies, Pixels, and Similar Technologies (Including Server-Side Tracking)

We use cookies and similar technologies to operate our Site, provide core functionality, remember preferences, measure performance, and support marketing.

Depending on our configuration, these tools may include:

Shopify technologies (storefront, checkout, fraud prevention, performance)
Analytics tools (e.g., Google Analytics 4)
Advertising tools and pixels (e.g., Google Ads, Meta Pixel)
Server-side event sharing tools (e.g., Meta Conversions API, and similar tools that send events from our servers to ad platforms)
Other advertising/analytics partners we may enable from time to time

These technologies may collect or receive:

Device and browser information
IP address
Interaction events and purchase-related events
Cart activity and referral sources

Notice to Québec Residents — Identification, Location, and Profiling Technologies

Some technologies we use may include functions that can allow you to be identified, located, or profiled based on your interactions with our Site. We will inform you of the use of such technologies and provide means to activate/manage these functions (for example, through our cookie preference tool and relevant platform settings).

What these technologies enable

They may be used to:

Operate and secure the Site (essential functions)
Understand how the Site is used (analytics)
Measure advertising performance and attribution
Deliver interest-based advertising and retargeting
Build and refine audiences
Conduct profiling based on browsing and purchasing behavior (see Section 9)

Advertising/analytics partners may combine information from our Site with other information they hold about you, in accordance with their own privacy policies.

Where required by law, we obtain consent before activating non-essential cookies and tracking technologies.

Non-essential technologies may include:

Analytics cookies
Advertising/marketing cookies
Retargeting and audience-building tools
Server-side advertising event integrations

You can control cookies and similar technologies by:

Using our cookie consent banner / preference tool on the Site (where available)
Adjusting your browser settings to delete or block cookies
Using advertising platform settings (e.g., Google, Meta) to limit interest-based ads

If you withdraw consent, some features (especially analytics and advertising measurement) may be reduced or disabled. Essential cookies required for core Site functionality cannot be disabled.

(Note: Some browsers offer “Do Not Track” signals. The Site may not respond uniformly to these signals, as industry standards vary.)

6. How We Use Personal Information

We use personal information to:

Provide the Services (including processing payments and fulfilling orders)
Create and manage customer accounts (if applicable)
Provide customer support and respond to inquiries
Communicate with you about orders, shipping, and account activity
Detect, prevent, and investigate fraud or security issues
Improve the Site, product selection, and customer experience
Conduct analytics and performance measurement
Send marketing communications (where permitted and/or with consent)
Deliver and measure advertising (including personalized/interest-based advertising, where enabled)
Comply with legal obligations and enforce our agreements

We do not sell personal information for monetary consideration. However, sharing data with advertising platforms for targeted advertising or measurement may be considered “sharing” under some privacy laws.

7. How We Disclose Personal Information

We may disclose personal information in the following circumstances:

A) Service Providers

We may share personal information with service providers who help us operate the Services, such as:

Ecommerce platform and hosting (including Shopify)
Payment processing and fraud prevention
Order fulfillment and shipping carriers
Customer support tools
Email/SMS service providers (if used)
Analytics and performance tools
IT and security providers

Service providers are permitted to use personal information only as necessary to provide services to us and as permitted by applicable law.

B) Advertising and Marketing Partners

We may share information (such as device identifiers, event data, and purchase-related events) with advertising partners to:

Measure ad performance
Attribute conversions
Build and refine audiences
Deliver interest-based advertising

C) Legal, Compliance, and Protection

We may disclose personal information when we believe it is necessary to:

Comply with applicable law, regulation, or legal process
Respond to lawful requests (e.g., court orders)
Protect the security and integrity of the Services
Protect our rights, customers, or the public

D) Business Transactions

If we are involved in a reorganization, merger, acquisition, financing, or sale of assets, personal information may be disclosed as part of that transaction, subject to appropriate safeguards.

E) With Your Direction

We may disclose personal information when you direct us to do so (for example, when you request a particular delivery option or use third-party integrations you choose to connect).

8. Relationship with Shopify

Our online store is hosted on Shopify, which provides the ecommerce platform that allows us to sell products and services to you. When you visit, browse, or make a purchase through our Site, personal information is processed by Shopify and by service providers we use (for example, for checkout, payments, order management, fraud prevention, and Site performance).

Shopify may also process certain information in accordance with its own policies. You can learn more through Shopify’s privacy resources:

Shopify Consumer Privacy Policy: https://www.shopify.com/ca/legal/privacy/consumers
Shopify Privacy Controls/Portal: https://privacy.shopify.com/en

9. Profiling and Automated Processing

We may use automated tools to:

Analyze browsing behavior and engagement
Evaluate purchasing patterns
Personalize content and marketing
Optimize advertising campaigns

This may constitute “profiling” under applicable privacy laws.

We do not use automated decision-making that produces legal or similarly significant effects on individuals.

10. International Transfers

Your personal information may be transferred to and processed in jurisdictions outside your province or country, including the United States, where our service providers and partners may operate.

These jurisdictions may have privacy laws that differ from those in Canada. We take reasonable steps to ensure appropriate safeguards are in place where required by law.

11. Data Retention

We retain personal information only as long as necessary for the purposes described in this Privacy Policy, including to:

Fulfill orders and provide customer support
Maintain business, accounting, and tax records
Comply with legal obligations
Resolve disputes and enforce agreements

Recordkeeping note (Canada): Some records must generally be retained for at least six years after the end of the tax year to which they relate (subject to exceptions and legal requirements).

Retention periods vary based on the type of information and the reason we hold it.

12. Security and Incident Handling

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification.

No method of transmission over the Internet is completely secure. If a breach of security safeguards occurs, we maintain procedures to assess and respond to the incident, keep required records, and notify affected individuals and regulators where required by law.

13. Children’s Information

The Services are not directed to children under the age of majority in their province or territory of residence. We do not knowingly collect personal information from children.

14. Your Privacy Rights (Canada)

Depending on your province and the nature of our relationship with you, you may have the right to:

Request access to your personal information
Request correction of inaccurate information
Withdraw consent (subject to legal/contractual restrictions)
Request deletion in certain circumstances (subject to legal obligations)
Request information about data transfers and how we use/disclose personal information

Québec (Law 25) residents may also have additional rights, which may include:

Request information about profiling practices and the categories of personal information used
Request data portability (where applicable)
Request cessation of dissemination or de-indexation in certain circumstances
File a complaint with the Commission d’accès à l’information du Québec (CAI)

How to make a privacy request (and timing)

To exercise your privacy rights, contact us via our Customer Service page and indicate “Privacy Request” in your message. We may need to verify your identity before processing your request.

We generally respond within 30 days of receiving a complete request, subject to extensions permitted by law.

Complaints

If you have concerns about how we handle personal information, contact our Privacy Officer (Section 16). If we cannot resolve your concern, you may contact the appropriate regulator, such as:

The Office of the Privacy Commissioner of Canada (OPC)
The Office of the Information and Privacy Commissioner for British Columbia (OIPC BC)
The Commission d’accès à l’information du Québec (CAI) (for Québec residents)

15. Marketing Communications

You can unsubscribe from promotional emails and SMS (texts), if used, at any time by:

Using the unsubscribe link in the email, or
Following the opt-out instructions in the message

Transactional messages (e.g., order confirmations, shipping updates, security messages) are not marketing and cannot be opted out of.

16. Third-Party Websites and Links

The Site may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies before providing personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on the Site with a revised “Last updated” date. Where required by law, we will provide additional notice or obtain consent.

18. Contact and Privacy Officer

For privacy questions or requests, we recommend using our Customer Service page so your request is properly documented and directed to the appropriate team member. Please select “Privacy Request” in the form.

Alternatively, you may write to:

Whisper of Botanicals Inc.
Privacy Officer
250 – 997 Seymour Street
Vancouver, BC V6B 3M1
Canada

This is our registered office address only. It is not a retail location and does not accept visitors or returns.

Language