Privacy Policy

Last Updated: January 2026

Touch The Soul ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website soulevents.ca and use our services.

1. Information We Collect

We collect information that you provide directly to us, including:

• Personal Information: Name, email address, phone number, delivery address when you place an order or create an account
• Payment Information: Credit card details are processed securely through Stripe and are never stored on our servers
• Order Information: Products purchased, delivery preferences, event dates, and special instructions
• Communication Data: Messages sent through our contact forms, WhatsApp, or email correspondence
• Account Information: Login credentials and order history if you create an account

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, including delivery coordination
• Send order confirmations, status updates, and delivery notifications
• Communicate with you about your orders, quotes, or inquiries
• Provide customer support and respond to your requests
• Send promotional emails and newsletters (only with your consent)
• Improve our website, products, and services
• Comply with legal obligations and protect our rights

3. Payment Processing

All payment transactions are processed through Stripe, a PCI-DSS compliant payment processor. We do not store your complete credit card information on our servers. Stripe's privacy policy governs the collection and use of your payment information. You can view Stripe's privacy policy at stripe.com/privacy.

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service Providers: Third-party companies that help us operate our business (payment processing, email services, delivery partners)
• Legal Requirements: When required by law, court order, or government request
• Business Protection: To protect our rights, property, or safety, or that of our customers

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmission
• Secure password hashing for account credentials
• Regular security assessments and updates
• Limited access to personal information by authorized personnel only

6. Cookies and Tracking

Our website uses cookies to:

• Keep you logged into your account
• Remember items in your shopping cart
• Understand how you use our website to improve your experience

You can control cookies through your browser settings. Disabling cookies may affect some website functionality.

7. Your Rights Under PIPEDA

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

• Access: Request a copy of your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Withdrawal: Withdraw consent for certain uses of your information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Complaint: File a complaint with the Privacy Commissioner of Canada

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order records are kept for a minimum of 7 years for tax and legal purposes.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.