Privacy policy

Privacy Policy

Keller Slate — Canadian Consumer Data Protection Compliance

Last Updated: June 6, 2026

At Keller Slate, we respect your privacy and are committed to protecting your personal information. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using our Services, or otherwise communicate with us. Our data practices are structured in strict compliance with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial privacy regulations, and the statutory principles under the Consumer Privacy Protection Act (CPPA / Bill C-27) framework.

1. Personal Information We Collect or Process

We collect and process categories of personal information that identify, relate to, or can reasonably be linked to an individual consumer:

  • Contact Details: Your full name, delivery address, billing address, phone number, and email address.
  • Financial Parameters: Credit card numbers, debit card details, secure payment token confirmations, and transactional histories handled exclusively through PCI-compliant gateways.
  • Account Information: Usernames, encrypted password configurations, and customer profile preferences.
  • Technical & Network Activity: Device descriptors, network connections, web browser configurations, IP addresses, and interaction metrics tracked automatically via operational cookies.
  • Communication Records: Any documented details, feedback, or identifiers you provide when lodging an inquiry with our customer care desk.

2. Purpose of Data Processing

In accordance with PIPEDA requirements for establishing clear, legitimate purposes, Keller Slate utilizes your records to:

  • Fulfill Orders & Contractual Commitments: Process payments, validate transactions, organize direct consumer transport, and issue invoices or order confirmations.
  • Mitigate Risk & Prevent Fraud: Authenticate account access and monitor incoming activity to detect, investigate, or block malicious or illegal transactions.
  • Execute Marketing Communications (CASL Compliant): Deliver tailored advertising or promotional updates via email or text message, strictly subject to your express, opt-in consent under Canada’s Anti-Spam Legislation (CASL). All promotional communications contain an immediate one-click opt-out option.

3. Disclosure & Cross-Border Data Transfers

We share personal information with third-party service providers who assist us in managing our e-commerce operations. This includes utilizing Shopify to power our digital storefront, secure payment gateways, and analytical infrastructure tools like Google Analytics.

International Infrastructure Transfers: As an online retailer operating via Shopify, information submitted by Canadian buyers will be securely transmitted, stored, and processed across cloud-based servers located outside Canada (primarily within the United States). Please note that while data remains secured under strict contractual limitations, foreign jurisdictions may access transactional indicators in compliance with local law enforcement directives.

4. Security Protocols & Fixed Data Retention

Security Controls: We leverage Secure Sockets Layer (SSL) industrial encryption channels during our checkout phases to safeguard payment indicators. While no transmission method over the internet is completely infallible, we continuously monitor our structural security perimeters.

Defined Retention Policy: We do not hold consumer files indefinitely. Core operational order details, invoices, and financial transaction histories are securely archived for a strict duration of 7 years. This retention window is mandatory to comply with Canadian corporate tax auditing, fiscal monitoring, and accounting frameworks enforced by the Canada Revenue Agency (CRA). Non-essential tracking tokens are deleted or anonymized once their analytical utility expires.

5. Statutory Privacy Rights (PIPEDA & CPPA Framework)

Canadian residents are granted specific statutory rights regarding their personal data under current privacy laws and upcoming federal updates:

  • Right to Access & Correction: You may submit an inquiry to review a transparent breakdown of your personal records maintained within our database and request immediate correction of any factual errors or omissions.
  • Right to Deletion: You can request the permanent removal of your personal parameters, subject to our mandatory 7-year CRA tax retention obligations.
  • Right to Data Portability (CPPA Core Framework): You have the right to request that your personal information be securely exported and transferred to another commercial provider in a structured, commonly used electronic format.
  • Right to Opt-Out: You have the right to withhold consent for non-essential tracking mechanisms. You may configure your internet browser to refuse cookies, or use specialized tools to disable analytics trackers (such as the Google Analytics Opt-out Browser Add-on).

6. Accountability & Complaints Procedure

In accordance with PIPEDA Principle 1, Keller Slate has appointed an internal Data Privacy Officer responsible for managing data compliance and addressing customer complaints. If you wish to exercise any of your statutory rights, please contact our officer directly at info@kellerslate.com. We will investigate all requests and respond within 30 days as required by law.

If you feel our internal resolution is unsatisfactory or that our data processing methods infringe upon your consumer protections, you maintain the formal legal right to escalate your grievance by filing an official complaint with the federal watchdog:

Office of the Privacy Commissioner of Canada (OPC)
30 Victoria Street, Gatineau, Quebec, K1A 1H3
Web Access: www.priv.gc.ca

Data Protection & Compliance Hub

Attn: Privacy Operations Desk

Email: info@kellerslate.com

Registered Corporate Office (Non-Return Location):
Keller Slate, 9000 Boulevard Leduc, Brossard, QC J4Y 0E6, Canada

© 2026 Keller Slate | Secure E-Commerce Data Management Canada