Privacy policy

What we collect, why we collect it and the choices you have. It follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Last updated Nov 11, 2026

Draft, not yet in force

This page is a working draft while the store is being built. It has not been reviewed or approved, and the store is not taking orders yet.

Who is responsible

RaveShyt, based in British Columbia, Canada, is responsible for the personal information described here. Questions and requests go to our privacy contact at support@raveshyt.com.

What we collect

Account: your name, email address and a scrambled (hashed) version of your password.
Orders: what you bought, shipping and billing addresses, an optional phone number for the courier, and the text you type for custom items.
Payment: handled by Stripe. We receive the payment status and a reference number, never your full card number.
Sign-in security: the IP address and browser of each device that is signed in, so you can review and sign out devices.

Why we collect it

To create your account and keep it secure.
To take payment, make and deliver your order, and send order emails.
To handle returns, refunds and questions.
To meet tax and record-keeping duties and to prevent fraud.

We do not sell your personal information and we do not use it for advertising.

Who we share it with

Stripe, our payment processor, to take payments, calculate tax and pay refunds.
Our email delivery provider, to send account and order emails.
Shipping carriers, who get the name, address and phone number needed to deliver a parcel.

These providers may process information outside Canada, where it is subject to the laws of that country. We may also disclose information when the law requires it.

Cookies

The site uses two cookies, and both are needed for it to work: one keeps you signed in, and one remembers your cart before you sign in. There are no advertising cookies, no analytics trackers and nothing loaded from third parties except Stripe's payment form at checkout.

How long we keep it

Account details: until you ask us to delete your account.
Order and payment records: as long as tax law requires, which is generally six years after the end of the tax year.
Sign-in sessions: 30 days after the device was last used.
Carts that were never checked out: removed after a period of inactivity.

How we protect it

The site runs on a server we control, over an encrypted connection. Passwords are hashed, access to customer records is limited to the store's administrator, and the database enforces that one customer can never read another's orders.

Your choices and rights

You can see and change your name, email, password and addresses in your account.
You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account.
You can withdraw consent, though we must keep records the law requires and may not be able to complete an order without the information it needs.

Email support@raveshyt.com and we will answer within 30 days. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Changes to this policy

If we change how we handle personal information we will update this page and the date at the top. For significant changes we will email account holders.