Privacy Policy

1. Accountability & Contact

TinsXpress is responsible for personal information under our control. Questions, concerns, or complaints about how we handle your personal information should be directed to our Privacy Contact:

We will investigate all complaints and respond within 30 days. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

2. What Information We Collect

Information you provide directly:

• Name, email address, phone number, and mailing address
• Billing address and payment information (Interac e-Transfer details)
• Account credentials (username and password)
• Contact form submissions, review form submissions, and customer service correspondence
• Contact preferences and communication history

Information collected automatically:

• IP address, browser type, and device characteristics
• Operating system and language preferences
• Referring URLs, pages visited, and time spent on our site
• Cookie data and similar tracking technologies

This automatically collected information does not reveal your specific identity but helps us maintain site security, improve our services, and perform internal analytics.

3. How We Use Your Information

We only collect information for purposes that a reasonable person would consider appropriate. Specifically, we use your information to:

• Process orders — fulfil purchases, arrange shipping, and manage payments
• Manage your account — facilitate account creation, authentication, and login
• Communicate with you — respond to inquiries, send order confirmations, and provide customer support
• Send marketing — promotional communications about products and offers (with your consent, which you may withdraw at any time)
• Improve our services — analyse site usage, troubleshoot issues, and enhance user experience
• Legal compliance — comply with applicable laws, regulations, and legal processes

4. Your Consent

We rely on your consent to collect, use, and disclose your personal information. By using our website and services, you consent to the collection and use of information as described in this policy.

For marketing communications, we obtain your express consent before sending promotional material. You may withdraw your consent at any time by contacting us at support@tinsxpress.com or using the unsubscribe link in any marketing email.

Please note that withdrawing consent may affect our ability to provide certain services to you. We will explain the consequences of withdrawal at the time of your request.

5. Sharing Your Information

We do not sell your personal information. We only share information in the following limited circumstances:

• Service providers — trusted third parties who help us operate our business (e.g., shipping carriers, payment processors, hosting providers). These providers are contractually required to protect your information and only use it for the purposes we specify.
• Legal requirements — when required by law, regulation, legal process, or government request
• Business protection — to protect the rights, property, or safety of TinsXpress, our customers, or the public
• With your consent — in any other situation where we have your explicit permission

6. Cookies & Tracking

We use cookies and similar tracking technologies to collect and store information about how you interact with our website. Cookies help us remember your preferences, keep your session secure, and understand how our site is used.

Types of cookies we use:

• Essential cookies — required for the site to function (e.g., shopping cart, login sessions)
• Analytics cookies — help us understand site traffic and usage patterns
• Marketing cookies — used to deliver relevant advertising (with your consent)

You can control cookies through your browser settings. Disabling certain cookies may affect your experience on our site.

7. How Long We Keep Your Information

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Account data — retained for as long as your account is active, plus a reasonable period after closure
• Order records — retained as required for tax, legal, and accounting obligations
• Marketing preferences — retained until you withdraw consent

When personal information is no longer needed, we will securely delete or anonymise it.

8. How We Protect Your Information

We implement organizational and technical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for all data transmitted through our website
• Secure payment processing through Interac e-Transfer
• Access controls limiting who within our organisation can view personal information
• Regular review of our security practices

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information to the best of our ability.

9. International Data Transfers

Our website is hosted and operated in Canada. Some of our service providers (such as hosting, email, or analytics providers) may process data in jurisdictions outside of Canada. When this occurs, your information may be subject to the laws of those jurisdictions.

We take reasonable steps to ensure that any third-party service providers handling your data outside of Canada maintain adequate security safeguards consistent with this policy and PIPEDA requirements.

10. Your Privacy Rights

Under PIPEDA, you have the following rights regarding your personal information:

• Right of access — request to know what personal information we hold about you and how it is used
• Right to correction — request that we correct any inaccurate or incomplete information
• Right to withdraw consent — withdraw your consent for the collection, use, or disclosure of your information at any time, subject to legal or contractual restrictions
• Right to challenge compliance — challenge our compliance with this policy and PIPEDA principles

To exercise any of these rights, contact us at support@tinsxpress.com. We will respond to access requests within 30 days. There is no fee for submitting a request, though we may charge a reasonable fee for excessive or repetitive requests.

11. Breach Notification

In the event of a security breach involving your personal information that poses a real risk of significant harm, we will:

• Notify affected individuals as soon as feasible
• Report the breach to the Office of the Privacy Commissioner of Canada
• Notify any other organisations that may be able to reduce the risk of harm
• Maintain records of all breaches for a minimum of 24 months

12. Children & Minors

Our products contain nicotine and are intended for adults only. We do not knowingly collect personal information from anyone under the age of 19 (the legal age of majority in Ontario). If we discover that we have collected information from a minor, we will delete it immediately. If you believe a minor has provided us with personal information, please contact us at support@tinsxpress.com.

13. Do-Not-Track Signals

Some browsers include a Do-Not-Track (DNT) feature that signals your preference not to be tracked online. No uniform standard for recognising DNT signals has been adopted. As such, we do not currently respond to DNT signals. If a standard is adopted in the future, we will update this policy accordingly.

14. Updates to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or services. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your information.