Privacy Policy
Last updated: May 8, 2026
Who We Are
Glozya Jewellery ("Glozya", "we", "us") is a Canadian online jewellery retailer based in Oshawa, Ontario. This policy describes how we collect, use, and safeguard personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).
Information We Collect
We collect information you provide directly — name, shipping and billing address, email, phone number (optional), and order details. Payment card data is collected and processed by Shopify Payments; we never see or store raw card numbers. We also collect technical data automatically: IP address, browser type, pages visited, referrer, and cookie identifiers.
Why We Collect It (Legal Basis)
We rely on your implied consent to fulfill orders you place (processing payment, shipping, providing customer support) and on your express consent for marketing emails. You may withdraw consent at any time — see the CASL Consent & Unsubscribe section below.
How We Use Your Information
To process and ship your orders, send transactional emails (order confirmations, tracking, return updates), respond to support requests, prevent fraud, comply with tax and export-law obligations, and — only with your express consent — send promotional emails about new collections and sales.
Third-Party Service Providers
We share data only with vendors necessary to operate the store: Shopify (storefront, checkout, order management), Shopify Payments (payment processing), Canada Post and other carriers (shipping), Google Analytics (aggregate traffic analysis), Klaviyo (email marketing platform; receives subscriber email addresses and onsite behavior such as products viewed and items added to cart, used to send newsletters and segment audiences), Vercel (hosting), and Sentry (error monitoring; configured to never collect IP addresses, request headers, or cookies, and to mask all on-screen text and media in the rare error-replay snapshots used to diagnose technical bugs). These parties are contractually bound to use your information solely to provide their services to Glozya and may not resell it.
International Transfers
Some of our service providers (including Shopify, Google, and Vercel) store or process data on servers located outside Canada, primarily in the United States. This means your personal information may be subject to the laws of those jurisdictions, including lawful access by foreign authorities. By using our site you consent to this transfer.
Data Retention
Order and transaction records are retained for seven (7) years to comply with Canadian tax law. Marketing profile data is retained until you unsubscribe or request deletion. Website analytics are retained for 26 months in aggregated form. Inactive accounts may be deleted after five (5) years of inactivity unless a longer retention is legally required.
Your Rights Under PIPEDA
You have the right to (1) access the personal information we hold about you, (2) request correction of inaccurate information, (3) request deletion of information that is no longer required for the original purpose, (4) withdraw consent at any time (subject to legal or contractual restrictions), and (5) receive a copy of your data in a portable format. To exercise any of these rights, email our Privacy Officer at support@glozya.ca with the subject line "Privacy Request". We will respond within 30 days.
CASL Consent & Unsubscribe
We send commercial electronic messages (promotional emails) only with your express, opt-in consent. Every marketing email contains a working one-click unsubscribe link and our Canadian mailing address. Unsubscribing takes effect within ten (10) business days but usually within minutes. Unsubscribing from marketing does not affect transactional emails required to fulfill your orders.
Cookies & Tracking
We use first-party cookies to remember your cart, preserve your session during checkout, and remember your preferences. We use Google Analytics to measure site performance in aggregate. Klaviyo, our email marketing platform, sets cookies and writes to browser localStorage to recognize you across pages and tie onsite behavior (products viewed, items added to cart) to your email address once you have signed up for our newsletter or otherwise identified yourself; this lets us send relevant follow-up emails. You may disable cookies in your browser; core shopping functionality will continue to work but some personalization will be lost. Sentry, our error monitoring tool, may briefly store technical diagnostic data in your browser to capture a masked replay if the page crashes; no readable customer information is included in these snapshots.
Children
Glozya does not knowingly sell to or collect information from individuals under 16. If you believe a child has submitted personal information to us, email support@glozya.ca and we will delete the record.
Security & Breach Notification
We protect personal information with HTTPS/TLS encryption, access controls, and vendor due diligence. In the event of a breach creating a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA, without unreasonable delay.
Contact Our Privacy Officer
Questions, access requests, complaints, or to withdraw consent: email support@glozya.ca (subject line "Privacy Request") or write to us at Glozya Jewellery, Attn: Privacy Officer, PO Box 30573, RPO Stevenson King, Oshawa, ON L1J 8L8, Canada. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.