Last updated: August 3, 2026
Brolic is operated from Alberta, Canada. This policy explains what personal information we collect, why, who else sees it, and what you can ask us to do about it. We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
- When you order: your name, email, shipping and billing address, phone number if you provide one, and what you bought.
- Payment details: handled entirely by Stripe. Card numbers are entered into Stripe’s own hosted fields and never reach our server. We can see only the last four digits, card brand and result.
- If you create an account: your email and order history.
- Automatically: IP address and basic technical data in server logs, used for security and fraud prevention.
Who we share it with
We do not sell your personal information. We share only what is necessary to get your order to you:
| Who | What they receive | Where | Why |
|---|---|---|---|
| Stripe | Payment and billing details | USA / Ireland | To take payment and prevent fraud |
| CJ Dropshipping | Your name, shipping address and phone number | China, plus regional warehouses | To pick, pack and ship accessories |
| Printful | Your name and shipping address | USA / EU | To print and ship branded apparel |
| Shipping carriers | Name, address, contact | Varies by route | To deliver and provide tracking |
| Hostinger | Site hosting, database, email | USA / EU | To run this website and send order email |
Your information is transferred outside Canada, including to China. We are telling you plainly rather than burying it: to have an order shipped, your name, address and phone number must be sent to the facility that packs it, and for accessories that facility is often in China. Data held in another country is subject to that country’s laws and may be accessible to its authorities, and those protections may be weaker than Canada’s.
Under PIPEDA we remain accountable for your information even when a processor handles it on our behalf. If you are not comfortable with this transfer, please do not place an order — there is no way to ship you a product without it.
How long we keep it
- Completed orders: retained for accounting and tax records as required by Canadian law (generally six years).
- Pending and failed orders: 30 days.
- Cancelled orders: 90 days.
- Inactive customer accounts: 24 months.
Your rights
You can ask us to show you what we hold about you, correct anything wrong, or delete your personal information where we’re not legally required to keep it. Email support@brolic.io and we’ll respond within 30 days. We may need to confirm your identity first, so that someone else can’t request your data.
Cookies
We use cookies that are necessary for the site to work — keeping your cart contents and keeping you logged in. These can’t be switched off without breaking checkout. If we later add analytics or advertising cookies, we will ask your consent first and update this page.
Security
The site is served over HTTPS. Payment data is handled by Stripe under their PCI-DSS compliance, not by us. No system is perfectly secure, but we don’t store card numbers, which removes the most valuable thing an attacker could take.
Children
This store is not intended for children under 16 and we do not knowingly collect their information.
Contact
Questions or complaints about privacy: support@brolic.io. If you’re not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.