Privacy Policy

Introduction

This policy explains what Outbox House ("we", "us") collects, why, and who we share it with. It covers our website, orders, appointments and quotes.

By using our website, you agree to the practices described here.

Information We Collect

Information you give us:

• Orders and quotes: name, email, phone, billing and shipping address, and what you buy
• Payment: card details go straight to Stripe. We never see or store them
• Appointments: name, email, phone, any notes, how you heard about us, and the pieces you looked at before booking
• Reviews: your rating and what you write
• Email sign up: your email address
• Messages: what you send us by email or WhatsApp

Information we collect automatically:

• Device and usage: browser, device, pages visited and the site that sent you
• Location: the country your connection comes from, so we can show the right store. We do not track your precise location
• Ad attribution: campaign tags and ad click IDs from Google and Meta. These are kept on your device for 30 days and sent with your order or booking
• Shopping events: product views, add to cart, checkout and purchase
• Email activity: whether our emails are opened and which links are clicked

Your wishlist is saved on your device only. We just count how many people saved each piece.

How We Use Your Information

We use your information to:

• Process, ship and support your orders and quotes
• Book, remind you about and run your appointments
• Send order, shipping and appointment updates by email or text
• Send marketing emails, which you can stop at any time
• Answer your questions
• Measure and improve our website and advertising
• Prevent fraud and keep our website secure
• Meet legal and accounting obligations

Who We Share It With

We share information with service providers who help us run the business:

• Payments: Stripe for online payments, Square for appointments and in studio payments
• Shipping: Shippo, and carriers such as Canada Post, UPS, FedEx and DHL
• Messages: Amazon Web Services for email, Twilio for text messages, Google Meet for video consultations
• Address search: Google Maps, when you type your address at checkout
• Analytics and advertising: Google (Analytics, Ads and Merchant Center) and Meta (Facebook and Instagram)
• Hosting and storage: the companies that host our website, database and files, including Amazon Web Services
• Legal: when the law requires it, or to protect our rights

We do not sell your personal information.

Cookies and Tracking

We use cookies and similar tools to:

• Remember your cart and which store you chose
• Understand how people use our website
• Measure our advertising and show you relevant ads

Google

We use Google Tag Manager, Google Analytics and Google Ads to measure visits, shopping events and ad results, and to show ads to people who visited us.

Meta

We use the Meta Pixel to record page views, product views, add to cart, checkout and purchases. When you buy, we also send Meta your email, phone, name and address in hashed (scrambled) form. This links the purchase to our ads on Facebook and Instagram and helps us find similar shoppers.

How to opt out

• Browser settings: block or clear cookies. Some parts of the site may stop working
• Meta: facebook.com/ads/preferences
• Google: adssettings.google.com or the Google Analytics opt out add-on
• Interest based ads: optout.aboutads.info
• Emails: use the unsubscribe link in any marketing email

Third Party Policies

These providers have their own privacy policies:

• Stripe
• Square
• Google
• Meta

Where Your Data Is Stored

We are based in Canada. Some of our providers store or process data in the United States and other countries. Their laws may differ from yours.

Data Retention

• Order and payment records are kept as long as tax and accounting law requires.
• Other information is kept while we need it, or until you ask us to delete it.

Your Rights

Under Canadian privacy law (PIPEDA), and similar laws in some US states, you can:

• See the information we hold about you
• Ask us to correct it
• Ask us to delete it
• Stop marketing emails
• Complain to the Office of the Privacy Commissioner of Canada

Email [email protected] and we will reply within 30 days.

Children

Our website is not meant for children under 13, and we do not knowingly collect their information.

Data Security

We protect your information with access controls and encryption in transit. Payments are handled by Stripe, which is PCI DSS compliant. No system is completely secure, so we cannot guarantee it.

Changes to This Policy

We may update this policy. We will post the new version here and change the date at the top.

Contact Us

Questions about your privacy? Contact us: