1.1 Introduction & Scope
At Jasmine Anthea Naturals ("we," "us," or "our"), a company based in Canada, we respect your privacy. This Privacy Policy (the "Policy") details how we collect, use, and protect your personal information when you visit or make a purchase on our website, www.jasmineanthea.com (the "Website").
Our Commitment: We are committed to transparency and to protecting the personal information of all our users, including those in Canada (under PIPEDA), the United States, and the European Union (under GDPR).
This Policy is designed to clearly explain:
Data Collection & Processing:
The types of information we collect and the methods we use to process it. We define Personal Information as any data that could directly or indirectly identify you (e.g., name, address, email, or IP address). This is equivalent to "personal data" under the European Union's GDPR and "personal information" under Canada's PIPEDA.
Your Privacy Rights:
A summary of your rights regarding your personal information, including the rights of access, rectification, and erasure.
Data Controller:
Who is the Data Controller responsible for the processing of your information.
Information Sharing:
The third parties with whom your information is shared.
Cookies & Tracking:
Our policy regarding the use of cookies and similar tracking technologies.
Note: This Privacy Policy should be read alongside our Terms of Use, which can be found at:
https://www.jasmineanthea.com/terms-of-use
1.2 Definitions
For the purpose of this Privacy Policy:
"Personal Information" (also referred to as "Personal Data" or "Data") means any information relating to an identified or identifiable natural person. This includes but is not limited to your name, mailing address, email address, location, and IP address.
Note: This term is used broadly to encompass the definitions found in Canada's PIPEDA, the EU's GDPR (General Data Protection Regulation), and relevant US privacy laws.
"Data Subject" or "User" means the identified or identifiable natural person (you) whose Personal Information is collected, used, or processed by us.
"Controller" or "Data Controller" means the organization that determines the purposes and means of processing Personal Information. For this Policy, the Controller is Jasmine Anthea Naturals.
"Processor" or "Data Processor" means any natural or legal person, public authority, agency, or other body that processes Personal Information on behalf of the Controller. This includes third-party service providers like payment processors or shipping companies.
"Website" refers to the website www.jasmineanthea.com.
1.3 Data Controller Contact Details
The Data Controller responsible for the processing of Personal Information collected through the Website is:
Legal Entity Name: Jasmine Anthea Naturals
Data Controller (The Responsible Party): The owner/operator of Jasmine Anthea Naturals
Contact Address:
Jasmine Anthea Naturals
86-50 Burnhamthorpe Rd W
Box 210
Mississauga, ON L5B 3C2
Contact Email (for all Privacy Inquiries): privacy@jasmineanthea.com
2.1 Information We Collect
We collect and process various types of Personal Information from you, which generally fall into the following categories:
A. Identity & Contact Data
Description & Examples:
Information used to identify and communicate with you (e.g., First and last name, email address, billing address, shipping address, phone number).
Source of Collection:
Directly from you (during checkout, account creation, or newsletter sign-up).
B. Financial & Transaction Data
Description & Examples:
Information necessary to process payments and fulfill orders (e.g., Details about your purchases, payment method type and status of the transaction).
Source of Collection:
Directly from you (during checkout).
C. Technical & Usage Data
Description & Examples:
Information collected automatically when you browse the Website (e.g., Internet Protocol (IP) address, browser type, location, operating system, pages viewed, time spent on pages).
Source of Collection:
Automatically (via cookies, server logs, and analytics software).
D. Marketing & Communications Data
Description & Examples:
Your preferences regarding receiving marketing from us (e.g., Your marketing communication preferences).
Source of Collection:
Directly from you (via consent forms or preference settings).
2.2. How We Use Your Information (Purposes of Processing)
We use your Personal Information only for the specific purposes listed below, supported by a valid legal basis:
Fulfilling Orders & Services:
Data Used:
Identity & Contact, Financial & Transaction, Marketing & Communications.
Legal Basis:
Contractual Necessity (Necessary to perform the contract of sale with you).
Account Management:
Data Used: Identity & Contact, Technical & Usage.
Legal Basis:
Contractual Necessity or Legitimate Interest (To manage your user account and keep records).
Marketing Communications:
Data Used:
Identity & Contact, Marketing & Communications.
Legal Basis:
Consent (Where you have explicitly opted in to receive promotional emails).
Security & Fraud Prevention:
Data Used:
All Categories
Legal Basis:
Legal Obligation and Legitimate Interest (To protect our business and the Website from fraud and security threats).
Website Improvement & Analytics:
Data Used:
Technical & Usage.
Legal Basis: Legitimate Interest (To analyze and improve our Website, products, and services).
Customer Support:
Data Used:
Identity & Contact, Financial & Transaction.
Legal Basis:
Contractual Necessity or Legitimate Interest (To respond to your inquiries and troubleshoot issues).
2.3. Legal Bases for Processing (GDPR Compliance)
Under the GDPR, we must have a lawful basis for processing your Personal Data. We rely on the following bases:
Contractual Necessity: Processing is necessary to perform a contract with you (e.g., processing your payment and delivering your order).
Consent: You have given clear, affirmative permission for us to process your data for a specific purpose (e.g., sending marketing newsletters). You have the right to withdraw this consent at any time.
Legitimate Interest: Processing is necessary for our legitimate interests (or those of a third party), provided your rights and freedoms do not override those interests (e.g., using analytics to improve our website experience).
Legal Obligation: Processing is necessary to comply with a law or regulation (e.g., retaining transaction records for tax or accounting purposes).
2.4. Data Minimization & Retention
We will only retain your Personal Information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Data Minimization
* We adhere to the principle of data minimization (under GDPR) and limiting collection (under PIPEDA), meaning:
* We limit the collection of Personal Information to that which is strictly necessary to provide our products and services.
* We do not process data for a new purpose unless we inform you and, where required, obtain new consent.
Data Retention
To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your Personal Information, and applicable legal requirements.
* Transaction Data: We are legally required to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for a minimum of six (6) years after they cease being customers for tax and financial record-keeping purposes.
* Marketing Data: If you have consented to receive marketing emails, we will keep your email address until you withdraw your consent (unsubscribe).
*Usage Data: Technical and Usage Data is generally kept for a shorter period, except when this data is used to strengthen the security or improve the functionality of our Website, or we are legally obligated to retain it for longer time periods.
Once the retention period expires, your Personal Information will be either securely deleted or anonymized so that it can no longer be associated with you.
3.1. Sharing Your Personal Information
We do not sell, rent, or trade your Personal Information. We share your data only with specific categories of third-party service providers and under certain necessary circumstances to operate our business and fulfill our legal obligations. These third parties are bound by contractual terms to keep your information confidential and use it only for the purposes for which we disclose it to them.
We share data with the following categories of recipients:
*Payment Processors: We share Financial and Transaction Data with third-party payment gateways (e.g., Stripe, PayPal, etc.) to securely process your purchases. We do not store or directly handle your credit card details; they are securely processed by these third parties.
*Shipping and Logistics Providers: We share Identity and Contact Data (name, address, phone number) with shipping carriers (e.g., Canada Post, FedEx, UPS) to deliver your purchased products.
*IT and Systems Providers: We use third-party platforms for hosting our Website, storing data, and managing our internal systems. These providers may have access to all categories of data required to maintain the functionality and security of the Website.
*Analytics Providers: We share Technical and Usage Data with analytics providers (e.g., Google Analytics) to monitor and analyze the use of our Website, helping us improve our services. This data is generally anonymized or aggregated.
*Marketing and Communication Platforms: We share Identity and Contact Data with email service providers and other marketing platforms to send newsletters and promotional materials, based on your consent.
*Professional Advisors: We may disclose your Personal Information to our professional advisors, such as lawyers, auditors, or accountants, when necessary for legal, financial, or compliance matters.
3.2. Legal Compliance and Business Transfers
We may also disclose your Personal Information:
*Legal Obligation: When we believe disclosure is necessary to comply with a legal requirement, regulation, judicial proceeding, court order, or legal process served on our business.
*Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
3.3. International and Cross-Border Data Transfers
As a Canadian company serving customers globally, your Personal Information may be transferred to, and processed in, countries other than your country of residence, including Canada and the United States (where our service providers and IT systems may be located).
*Safeguards: When transferring Personal Data outside of the European Economic Area (EEA), we take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable laws, including implementing necessary contractual clauses (such as Standard Contractual Clauses under GDPR) or relying on other legally recognized transfer mechanisms to ensure an adequate level of protection.
*Local Access: Please be aware that the laws of the countries to which your Personal Information is transferred may not provide the same level of protection as the laws of your home country. By providing your information, you acknowledge this risk.
You have specific rights regarding your Personal Information. We are committed to honoring these rights regardless of your location. To exercise any of these rights, please refer to the contact details provided in Section 1.3.
4.1. Your Data Protection Rights
Depending on the jurisdiction, you may have the following rights:
*Right to Access (PIPEDA & GDPR): You have the right to request copies of the Personal Information we hold about you. This is also known as a Data Subject Access Request (DSAR).
*Right to Rectification (GDPR): You have the right to request that we correct any information you believe is inaccurate or complete any information you believe is incomplete.
*Right to Erasure (GDPR): Also known as the "Right to be Forgotten." You have the right to request that we erase your Personal Information, under certain conditions (e.g., when the data is no longer necessary for the purposes for which it was collected).
*Right to Restrict Processing (GDPR): You have the right to request that we restrict the processing of your Personal Information, under certain conditions.
*Right to Object to Processing (GDPR): You have the right to object to our processing of your Personal Information, under certain conditions, particularly where we rely on Legitimate Interest as the legal basis.
*Right to Data Portability (GDPR): You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions, provided the data is processed by automated means and based on consent or a contract.
*Right to Withdraw Consent (GDPR & PIPEDA): Where we are relying on your consent to process your Personal Information, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdraw your consent.
4.2. Exercising Your Rights and Response
How to Submit a Request
To exercise any of the rights outlined above, please submit your request in writing to the Data Controller using the contact methods provided in Section 1.3: Data Controller Contact Details, specifying which right you wish to exercise.
Verification Process
To protect the confidentiality of your information, we may need to request specific information from you to confirm your identity before we can process your request. This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it.
Response Time
We aim to respond to all legitimate requests within one (1) month of receipt. Occasionally, it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
4.3. Marketing and Opt-Out
You can ask us to stop sending you marketing messages at any time by:
*Following the unsubscribe link at the bottom of any marketing email sent to you.
*Contacting us directly via the email address in Section 1.3.
4.4. Right to Complain to a Supervisory Authority
If you are an EU or UK resident, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement.
For Canadian residents (PIPEDA): You may contact the Office of the Privacy Commissioner of Canada (OPC) if you feel that we have not addressed your concerns adequately.
This section covers the security measures you take, your policy on children's data, links to external sites, and how you update the policy over time.
5.1. Security Measures
We have implemented appropriate physical, technical, and administrative security measures designed to protect your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure.
* All data transmitted to and from our Website is protected using SSL/TLS encryption
* Access to your Personal Information is restricted to employees, agents, contractors, and other third parties on a "need to know" basis and subject to strict confidentiality duties.
*In the event of a Personal Data breach, we have procedures in place to address the breach promptly and notify affected parties and regulatory authorities as legally required under GDPR and PIPEDA.
5.2. Children's Privacy
Our Website is not intended for use by anyone under the age of eighteen (18), or the age of majority in their jurisdiction. We do not knowingly collect Personal Information from individuals under 18. If you are under 18, do not use or provide any information on this Website or through any of its features.
If we learn we have collected or received Personal Information from an individual under 18 without verification of parental or guardian consent, we will delete that information immediately. If you believe we might have any information from or about a person under 18, please contact us immediately using the details in Section 1.3.
5.3. Third-Party Links
The Website may contain links to third-party websites, applications, and services. These links are provided for your convenience. If you click on a third-party link, you will be directed to that site. We strongly advise you to review the Privacy Policy of every site you visit.We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. This Policy applies only to information collected by Jasmine Anthea Naturals.
5.4. Policy Updates
We reserve the right to modify this Privacy Policy at any time. When we make changes, we will revise the "Effective Date" at the top of the Policy.
* If we make material changes to how we treat our users' Personal Information, we will notify you through a notice on the Website homepage or by email, where appropriate.
* Your continued use of the Website after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.
6.1. What are Cookies?
Cookies are small text files that are stored on your computer or mobile device when you visit a website. They are widely used to make websites work more efficiently, as well as to provide reporting information and to remember your preferences (like login details and shopping cart contents).
We use cookies and similar tracking technologies (like pixels and web beacons) to collect Technical and Usage Data (as described in Section 2.1) and distinguish you from other users of the Website.
6.2. How We Use Cookies
We use cookies for the following purposes:
* Necessary Cookies (Essential): These cookies are strictly required for the operation of our Website, such as enabling you to navigate the site, use the shopping cart, and access secure areas. The Website cannot function correctly without them.
* Performance and Analytics Cookies: These cookies help us understand how visitors interact with the Website by providing information about the areas visited, the time spent on the Website, and any issues encountered (like error messages). This data is often aggregated and anonymized.
* Functionality Cookies: These cookies allow the Website to remember choices you make (such as your username, language, or region) and provide enhanced, more personal features.
* Targeting and Advertising Cookies: These cookies are used to track your browsing habits across different websites to deliver advertising that is more relevant to you and your interests. We use these for our marketing efforts with service providers like Google and Facebook (Meta).
6.3. Your Cookie Choices
You have the ability to accept or decline cookies. We are committed to giving you control over non-essential cookies:
* Cookie Banner/Preference Tool: Upon your first visit to our Website, you will be presented with a cookie preference tool (often a banner) that allows you to accept or decline cookies, or customize your preferences.
* Browser Settings: You can also configure your web browser (Chrome, Firefox, Safari, etc.) to refuse or delete cookies. Note that if you disable essential cookies, some parts of the Website may not function properly.For detailed information on how to manage or delete cookies, please visit your browser's help pages.
