// Legal
Privacy Policy
Last revised · May 10, 2026
Information We Collect
We collect information you provide directly to us when you create an account, place an order, contact support, or interact with our Services:
- Identity: name, date of birth (for age verification)
- Contact: email address, phone number, shipping & billing addresses
- Order: purchase history, preferences, communications
- Payment: payment method details (processed securely by our payment provider — we do not store full card numbers)
- Technical: IP address, browser type, device information, pages visited
How We Use Your Information
We use your information to:
- Process and fulfill your orders
- Communicate with you about your orders, account, and support inquiries
- Send transactional emails (order confirmations, shipping notifications, COA updates)
- Improve our website, products, and customer experience
- Detect and prevent fraud or unauthorized activity
- Comply with legal obligations
Cookies & Tracking
We use cookies and similar technologies to remember your preferences, keep you signed in, analyze site usage, and improve performance. You can disable cookies in your browser settings, though some features may not function properly without them.
Information Sharing
We do not sell your personal information. We share information only with:
- Service providers who help us operate (payment processors, shipping carriers, analytics, email)
- Legal authorities when required by law or to protect our rights and safety
- Successors in the event of a business transfer (merger, acquisition, sale of assets)
Data Security
We use industry-standard security measures including SSL encryption, secure servers, and access controls to protect your information. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Data Retention
We retain your information for as long as your account is active or as needed to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements.
Your Rights (PIPEDA)
Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, you have the right to:
- Access the personal information we hold about you
- Request corrections to inaccurate information
- Request deletion of your account and associated data
- Withdraw consent to non-essential data processing
- File a complaint with the Office of the Privacy Commissioner of Canada
To exercise these rights, contact us at support@greygem.ca.
Third-Party Services
We use trusted third-party services for payment processing, analytics, email, and shipping. Each has their own privacy policies and is contractually obligated to protect your information.
Children's Privacy
Our Services are not directed to anyone under 18 years of age. We do not knowingly collect information from minors. If we learn we have collected such information, we will delete it promptly.
International Users
If you access our Services from outside Canada, your information will be transferred to and processed in Canada. By using the Services, you consent to this transfer.
Changes to This Policy
We may update this Privacy Policy from time to time. The most current version will always be posted on this page with an updated "Last revised" date.
Contact Us
For privacy questions or concerns, contact us at support@greygem.ca. For formal privacy requests, please reference "Privacy Request" in your subject line.