Privacy Policy

Introduction and Scope

Prairie Clean Enterprises is committed to protecting the privacy of our customers and website users. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information on our Shopify-powered website and related services. It applies to all personal information collected from individuals in Canada and internationally. This Policy complies with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), provincial privacy laws, and anticipates updates under Bill C-27. It also includes additional protections for provinces such as Quebec under Law 25.

Accountability

PCE has appointed a Privacy Officer responsible for compliance. Questions about your personal information may be directed to info@prairiecleanlitter.ca. We maintain internal policies and procedures to ensure personal information is handled according to this Policy and applicable laws.

What Personal Information We Collect

We only collect necessary information. This may include your name, contact details, payment info (processed securely), order history, login credentials, and communication records. With your consent, we may collect your name and email for marketing purposes. Browsing and device data may also be collected via cookies. Information is collected directly from you unless otherwise permitted by law or with your consent.

Purposes of Collection, Use, and Disclosure

  • Order Fulfillment and Customer Service: To process and deliver orders, notify you of status, and handle returns.
  • Payment Processing: To securely process transactions via PCI-compliant gateways. We do not store full credit card data.
  • Account Management: To manage login, order history, and preferences. Account data is stored securely on Shopify’s servers.
  • Marketing and Newsletters: To send promotions and updates, only if you opt in. You may unsubscribe at any time.
  • Personalization and Analytics: To improve user experience and website performance using tools like Google Analytics.
  • Legal Compliance and Fraud Prevention: To meet legal obligations and protect against misuse. For example, verifying identity for high-value orders.

Consent

By using our site or submitting your information, you consent to our privacy practices. Consent is collected at the time of data entry. You may withdraw consent at any time, subject to legal limits. Withdrawal may affect our ability to fulfill services like processing orders or sending updates.

Limiting Collection and Data Minimization

We collect personal information fairly and only for necessary purposes. We do not request unnecessary identifiers (e.g., SIN or license number) and encourage you to share only the minimum required information.

Limiting Use, Disclosure, and Retention

We do not sell or rent personal data. We may share information with trusted service providers for the purposes listed above, including:

  • Shipping carriers
  • Payment processors
  • IT infrastructure providers (e.g., Shopify, analytics tools)
  • Marketing/email platforms
  • Customer service platforms (e.g., CRM/help desk)

We contractually require these providers to protect your data. Personal information is kept only as long as needed for its purpose or as required by law. For example:

  • Tax records are retained for 7 years.
  • Account data is retained while your account is active. Deleted accounts are anonymized where possible, except for legally required data.
  • Opt-out requests are stored on suppression lists to ensure compliance with your preferences.

Accuracy

We aim to keep personal data accurate and current. You may update your profile, and request corrections if your information is incorrect. We rely on the details you provide, especially for service delivery.

Safeguards

We use physical, organizational, and technological measures to protect your data:

  • Technological: SSL/TLS encryption, secure servers, firewalls, authentication controls, regular updates, and audits.
  • Physical: Secure premises, restricted access, and shredding/disposal of sensitive documents.
  • Organizational: Staff training, role-based access, and breach response protocols.

No system is completely secure. In the event of a breach, we will notify affected individuals and authorities as required by law. We currently comply with PIPEDA and Law 25 breach reporting obligations.

Individual Access and Choices

You may access or request correction of your personal information. Upon verifying your identity, we will disclose how we use and share your data. Some exceptions apply (e.g., legal privilege or another person’s data). Quebec residents may request data deletion under the "right to be forgotten." All requests will be handled in accordance with applicable law.

Children’s Privacy

Our site is not intended for users under 13. We do not knowingly collect data from minors without parental consent. If we discover such data, it will be deleted. For minors aged 13–18, we expect parental consent if personal data is provided.

Cookies and Online Tracking

We use cookies to enhance your experience (e.g., keep you logged in, remember cart items). Some cookies are essential, others optional. You may disable cookies in your browser. We respect Do Not Track (DNT) settings and avoid tracking for DNT-enabled users. We do not use profiling or automated decisions that significantly affect you without notice or consent. If this changes, we will update our policy and seek your permission if required.

Third-Party Links

Our website may contain links to other sites. We are not responsible for their privacy practices and recommend reviewing those third-party privacy policies separately.

Anticipated Changes – Bill C-27

We are monitoring Bill C-27 and will update this Policy as needed. Anticipated updates include:

  • Stronger transparency and consent rules
  • Right of erasure and data portability
  • Data de-identification for internal use
  • AI transparency and regulation under the Artificial Intelligence and Data Act
  • New enforcement powers and a Data Protection Tribunal

PCE is committed to meeting all new requirements. We will review this Policy with legal counsel upon the passage of Bill C-27 to ensure compliance.

Contact and Complaints

If you have questions or concerns, contact info@prairiecleanenergy.com. We will respond promptly. You may also contact your provincial privacy regulator. For example, the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec. We encourage contacting us first for a quick resolution.

This Privacy Policy may be updated from time to time. Changes will be posted with an updated effective date. Significant changes may also be communicated via email or site notice. Continued use of our services implies acceptance of the updated Policy unless additional consent is required by law.