Privacy policy

Effective date: April 26, 2026

Velura Hair (“Velura,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what personal information we collect when you visit velurahair.ca or buy our products, how we use and share it, and the choices you have. It is written to comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

We currently sell and ship within Canada only. At launch, orders to Quebec are not accepted. If you are a Quebec resident, please do not submit personal information to us through this site; we will update this policy when we begin serving Quebec.

1. Who we are

Velura Hair is the controller of your personal information.

Mailing address:
Velura Hair
PO Box 20004, RPO Tower Hill
Richmond Hill, ON L4E 0K9
Canada

Privacy contact: privacy@velurahair.ca

If you have questions, requests, or complaints about how we handle your information, contact us at the email above. We respond within 30 days.

2. Information we collect

We collect the following categories of personal information:

Information you give us

  • Order information — name, shipping address, billing address, email, phone number, and the items you purchase.
  • Account and contact details — if you sign up for our newsletter or create an account at checkout.
  • Payment information — handled directly by our payment processors (see Section 4). We do not store full card numbers on our servers.
  • Customer support correspondence — messages you send us by email and the information you choose to include.
  • Product reviews — name, email, and review content if you submit a review.

Information collected automatically

When you visit velurahair.ca, we and our service providers automatically collect:

  • Device and browser data — IP address, browser type and version, operating system, device identifiers, screen size, language, and referring URL.
  • Usage data — pages viewed, links clicked, time on page, scroll depth, and the route you take through the site.
  • Cookies, pixels, and similar technologies — see Section 5.

Information from third parties

  • Payment confirmations from Shopify Payments and PayPal.
  • Shipping status from carriers fulfilling your order.
  • Review submissions from Judge.me, our reviews platform.

We do not knowingly collect personal information from children. The site is intended for users who are old enough to enter into a binding contract under the law of their province (generally the age of majority — 18 in Ontario). If you believe a child has provided us information, contact us and we will delete it.

3. How we use your information

We use personal information to:

  • process and ship your order, send order and shipping confirmations, and handle returns;
  • provide customer support;
  • send marketing emails and SMS if you have opted in (you can unsubscribe at any time);
  • operate, secure, and improve the site, including diagnosing errors and preventing fraud;
  • measure how visitors use the site so we can improve product pages, navigation, and content;
  • comply with legal obligations, including tax recordkeeping under the Income Tax Act (Canada).

Our legal basis under PIPEDA is your consent — given expressly when you submit information, or implied by the context of your visit (for example, browsing the site or completing a purchase). For marketing communications, we rely on the express consent you provide when you sign up.

4. Service providers we share information with

We share personal information only with service providers that help us operate the store. Each is bound by contract or its own published terms to use the information only to provide services to us.

Service provider Purpose Information shared
Shopify Inc. (Canada) E-commerce platform, hosting, checkout, transactional emails Order, account, contact, device, and usage data
Shopify Payments Credit/debit card processing Name, billing address, payment details
PayPal Alternate payment method Name, billing address, PayPal account identifier
Klaviyo (USA) Email marketing and newsletter delivery Name, email, marketing preferences, on-site activity
Judge.me Product reviews Name, email, review content
Google LLC — GA4 (USA) Site analytics Cookies, device data, usage data, pseudonymized identifiers
Meta Platforms — Meta Pixel (USA) Advertising measurement and audiences Cookies, device data, page events
TikTok — TikTok Pixel (USA) Advertising measurement and audiences Cookies, device data, page events
Umami Privacy-friendly site analytics Aggregated, cookieless usage data
PostHog (forthcoming) Product analytics and session insights Cookies, device data, usage data
Sentry Error and performance monitoring Device data, error context, IP address
Shipping carriers (e.g., Canada Post) Order fulfillment and delivery tracking Name, shipping address, phone, email

Several of these providers are based in the United States or process data there. By using the site or submitting your information, you acknowledge that your personal information may be transferred to, stored in, and processed in jurisdictions outside Canada, and may be accessible to law enforcement and national security authorities of those jurisdictions in accordance with their laws.

We may also disclose personal information:

  • to comply with a subpoena, court order, or other legal obligation;
  • to enforce our terms of service or protect the rights, property, or safety of Velura, our customers, or others;
  • in connection with a merger, acquisition, financing, or sale of all or part of our business — in which case we will require the recipient to honour this Privacy Policy.

We do not sell your personal information.

5. Cookies and tracking technologies

Cookies are small text files placed on your device. We use them, along with pixels and similar technologies, for the following purposes:

  • Strictly necessary — keep you logged in, remember the contents of your cart, and maintain checkout state. The site cannot function without these.
  • Analytics — Google Analytics (GA4), Umami, and (soon) PostHog help us understand how the site is used.
  • Advertising — Meta Pixel and TikTok Pixel help us measure ad performance and show relevant ads on Meta and TikTok properties.
  • Error monitoring — Sentry helps us detect and fix bugs.

You can refuse or delete cookies through your browser settings. Most browsers also let you block third-party cookies specifically. Disabling cookies may break parts of the site, including checkout.

You can also opt out of interest-based advertising at:

To opt out of Google Analytics specifically, install the Google Analytics Opt-out Browser Add-on.

6. Marketing communications

If you sign up for our newsletter or check the marketing consent box at checkout, we may send you emails about new products, restocks, sales, and content from Velura. We deliver these through Klaviyo.

You can withdraw consent at any time by clicking the unsubscribe link in any marketing email or by emailing privacy@velurahair.ca. We will continue to send transactional messages (order confirmations, shipping updates, customer service replies) regardless of your marketing preferences.

7. Data retention

We keep personal information only for as long as we need it for the purposes described in this policy.

  • Order, billing, and tax records — retained for seven (7) years to comply with the recordkeeping requirements of the Income Tax Act (Canada) and the Excise Tax Act.
  • Marketing data — retained until you unsubscribe or ask us to delete it.
  • Analytics data — retained per the default retention windows of each provider (typically 14 months for GA4).
  • Customer support correspondence — retained for up to 3 years.

When information is no longer needed, we delete it or irreversibly anonymize it.

8. Your rights

Under PIPEDA you have the right to:

  • Access the personal information we hold about you;
  • Correct information that is inaccurate or incomplete;
  • Withdraw consent to our use of your information, subject to legal and contractual restrictions;
  • Make a complaint about how we handle your information.

To exercise any of these rights, email privacy@velurahair.ca. We may need to verify your identity before responding. We respond to requests within 30 days, in line with PIPEDA timelines.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada:

Office of the Privacy Commissioner of Canada
30 Victoria Street, Gatineau, Quebec K1A 1H3
1-800-282-1376
priv.gc.ca

9. Security

We use technical and organizational safeguards designed to protect your personal information, including encrypted connections (HTTPS), access controls, and reliance on PCI-DSS-compliant payment processors. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach that creates a real risk of significant harm to you, we will notify you and the Privacy Commissioner of Canada as required by PIPEDA.

10. Links to other sites

Our site may link to third-party websites, including social media platforms. We are not responsible for the privacy practices of those sites. Review their privacy policies before submitting any information to them.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Effective date” at the top reflects the latest version. Material changes will be brought to your attention through a notice on the site or, where appropriate, by email. Your continued use of the site after changes take effect constitutes acceptance of the updated policy.

12. Contact

For any questions, requests, or complaints about this Privacy Policy or our handling of your personal information:

Velura Hair — Privacy
PO Box 20004, RPO Tower Hill
Richmond Hill, ON L4E 0K9
Canada
privacy@velurahair.ca