ShivaDurga Inc. (“we,” “us,” “our,” or “ShivaDurga”) operates the online store located at shop.shivadurgai.com (the “Site”). We are committed to protecting the privacy of our customers and visitors and to handling your personal information responsibly.

ShivaDurga Inc. is based in Ontario, Canada. Ontario does not have its own general private-sector privacy law, so businesses operating here are governed by the federal Personal Information Protection and Electronic Documents Act (PIPEDA), overseen by the Office of the Privacy Commissioner of Canada. This Privacy Policy explains what personal information we collect, how we use and disclose it, how we protect it, and the choices you have, in accordance with PIPEDA.

If you are a resident of a province with its own private-sector privacy law — Quebec (Law 25), Alberta (PIPA), or British Columbia (PIPA) — certain additional rights or requirements under those laws may apply to you, and we will honour them where applicable.

By using the Site, making a purchase, or otherwise providing us with your personal information, you consent to the practices described in this Policy. If you do not agree, please do not use the Site.

1. Who We Are and How to Contact Us

We are responsible for the personal information under our control. You can contact us with any questions, requests, or complaints about your personal information:

2. Personal Information We Collect

We collect personal information that is necessary to operate our store, fulfil your orders, and improve your experience. The information we collect includes:

2.1 Information you provide directly

• Identity and contact details: name, email address, phone number, billing and shipping addresses.
• Order information: products purchased, order history, gift messages, and preferences.
• Account information: username and password if you create an account.
• Communications: messages you send us through contact forms, email, chat, or social media, including customer-service and product inquiries.
• Marketing preferences: your choices about receiving newsletters or promotional messages.

2.2 Payment information

When you make a purchase, payment card and transaction details are collected and processed by our third-party payment processors (for example, Stripe, PayPal, or any other third-party payment provider). We do not store full credit or debit card numbers on our own servers. Our payment processors handle this information under their own security standards and privacy policies.

2.3 Information collected automatically

• Device and usage data: IP address, browser type, device type, operating system, referring pages, pages viewed, and time spent on the Site.
• Cookies and similar technologies: small files and identifiers used to operate the Site, remember your cart, analyze traffic, and (with your consent) support advertising. See Section 7 for details.

3. Why We Collect and Use Your Information

We collect, use, and disclose your personal information only for purposes that a reasonable person would consider appropriate in the circumstances, including to:

• Process, fulfil, ship, and confirm your orders, and manage returns, exchanges, and refunds.
• Process payments and detect, prevent, and investigate fraud or unauthorized transactions.
• Create and manage your account.
• Provide customer support and respond to your inquiries.
• Send transactional messages such as order confirmations, shipping updates, and receipts.
• Send marketing communications where you have consented, and allow you to unsubscribe at any time.
• Operate, maintain, secure, and improve the Site and our products and services.
• Understand how visitors use the Site through analytics.
• Comply with legal, regulatory, tax, and accounting obligations.

We will not use or disclose your personal information for purposes other than those identified above without your consent, unless permitted or required by law.

4. Consent

We obtain your consent to collect, use, and disclose your personal information, except where otherwise permitted or required by law. The form of consent we seek depends on the sensitivity of the information and the circumstances:

• Express consent is obtained for sensitive information, for sending commercial electronic messages (in compliance with Canada’s Anti-Spam Legislation, CASL), and for non-essential cookies.
• Implied consent may be relied upon where the purpose is obvious and you voluntarily provide the information — for example, providing your shipping address to receive an order.

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. For example, you can unsubscribe from marketing emails using the link in any message, or by contacting us. Withdrawing consent may limit our ability to provide certain products or services to you (for instance, we cannot ship an order without an address).

5. How We Share and Disclose Information

We do not sell your personal information. We share it only as described below:

5.1 Service providers

We share information with third parties who perform services on our behalf, such as payment processors, e-commerce and hosting platforms, shipping and logistics carriers, email and marketing providers, and analytics providers. These providers are authorized to use your information only as necessary to provide services to us and are required to protect it.

5.2 Legal and safety reasons

We may disclose personal information where required or permitted by law, including in response to a valid legal request, to comply with regulatory or tax obligations, to enforce our terms, or to protect the rights, property, or safety of our customers, our business, or others.

5.3 Business transfers

If our business is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

6. Storage, Cross-Border Transfers, and Retention

Your personal information may be stored and processed in Canada and in other countries, including the United States, where some of our service providers operate. When personal information is transferred outside of Canada, it may be subject to the laws of those jurisdictions, and may be accessible to government authorities, courts, and law enforcement in accordance with those laws. We take reasonable steps, including contractual safeguards, to ensure your information receives a comparable level of protection wherever it is processed.

We retain personal information only as long as necessary to fulfil the purposes for which it was collected, to provide our services, and to meet legal, tax, and accounting requirements. When personal information is no longer needed, we securely destroy, erase, or anonymize it.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Site and improve your experience. We use the following categories:

• Strictly necessary cookies: required for core functions such as shopping cart and checkout. These cannot be turned off.
• Analytics cookies: help us understand how visitors use the Site (for example, Google Analytics).
• Marketing and advertising cookies: used, with your consent, to deliver and measure relevant advertising.

Where required by law, we will request your consent before placing non-essential cookies, and you can manage your preferences through our cookie banner or your browser settings. Disabling certain cookies may affect how the Site functions.

8. Your Privacy Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you and receive information about how it has been used and disclosed.
• Request correction of inaccurate or incomplete information.
• Withdraw your consent to certain uses, such as marketing.
• Request deletion of your personal information, where applicable.
• Request data portability or de-indexing where you reside in a province whose law provides those rights (for example, Quebec residents under Law 25).
• File a complaint with us, and with the appropriate privacy regulator.

To exercise any of these rights, contact us using the details in Section 1. We will respond within the timeframes required by law (generally within 30 days under PIPEDA). We may ask you to verify your identity before fulfilling your request.

9. How We Protect Your Information

We maintain physical, organizational, and technological safeguards appropriate to the sensitivity of the information, including encryption of data in transit (HTTPS/SSL), restricted access on a need-to-know basis, secure payment processing, and regular review of our security practices. While we take reasonable measures to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Data Breach Notification

If a breach of security safeguards involving your personal information creates a real risk of significant harm to you, we will notify you and report to the Office of the Privacy Commissioner of Canada (and any applicable provincial regulator) as required by law, and we will keep records of breaches as required.

11. Children’s Privacy

Our Site is intended for adults. We do not knowingly collect personal information from children without appropriate parental or guardian consent. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to address it.

12. Third-Party Links

The Site may contain links to third-party websites or services that we do not operate or control. This Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page and revise the “Last Updated” date above. Material changes may be communicated to you more directly. Your continued use of the Site after changes take effect constitutes acceptance of the updated Policy.

This Policy and our handling of your personal information are governed by the laws of the Province of Ontario and the applicable federal laws of Canada.

14. Complaints and Regulators

If you have a concern about how we handle your personal information, please contact us first so we can address it. If you are not satisfied with our response, you may contact the relevant privacy authority:

• Office of the Privacy Commissioner of Canada (OPC): priv.gc.ca · 1-800-282-1376. As an Ontario business, the OPC is the authority that oversees our compliance under PIPEDA.
• If you reside in another province with its own private-sector privacy law, you may also contact that province’s regulator — for example, the Commission d’accès à l’information (Quebec), or the Office of the Information and Privacy Commissioner (Alberta or British Columbia).

Note: Ontario’s Information and Privacy Commissioner (IPC) oversees the public and health sectors, not private-sector commercial businesses; privacy complaints about our store are handled federally by the OPC.