Last updated: August 2, 2026
Brolic is operated from Alberta, Canada. This policy explains what personal information we collect, why, who else sees it, and what you can ask us to do about it. We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
- When you order: your name, email, shipping and billing address, phone number if you provide one, and what you bought.
- Payment details: handled entirely by Stripe. Card numbers are entered into Stripe’s own hosted fields and never reach our server. We can see only the last four digits, card brand and result.
- If you create an account: your email and order history.
- Automatically: IP address and basic technical data in server logs, used for security and fraud prevention.
Who we share it with
We do not sell your personal information. We share only what is necessary to get your order to you:
| Who | What they receive | Why |
|---|---|---|
| Stripe | Payment and billing details | To take payment and prevent fraud |
| Fulfilment & print partners | Your name and shipping address | To pick, print, pack and ship your order |
| Shipping carriers | Name, address, contact | To deliver and provide tracking |
| Hostinger | Site and database hosting | To run this website |
| Our email provider | Your email address | To send order confirmations and shipping updates |
Some of these partners are outside Canada, including in the United States and elsewhere. That means your information may be stored or processed in another country and could be accessible to that country’s authorities under its laws. By placing an order you consent to this transfer, which is unavoidable for international fulfilment.
How long we keep it
- Completed orders: retained for accounting and tax records as required by Canadian law (generally six years).
- Pending and failed orders: 30 days.
- Cancelled orders: 90 days.
- Inactive customer accounts: 24 months.
Your rights
You can ask us to show you what we hold about you, correct anything wrong, or delete your personal information where we’re not legally required to keep it. Email support@brolic.io and we’ll respond within 30 days. We may need to confirm your identity first, so that someone else can’t request your data.
Cookies
We use cookies that are necessary for the site to work — keeping your cart contents and keeping you logged in. These can’t be switched off without breaking checkout. If we later add analytics or advertising cookies, we will ask your consent first and update this page.
Security
The site is served over HTTPS. Payment data is handled by Stripe under their PCI-DSS compliance, not by us. No system is perfectly secure, but we don’t store card numbers, which removes the most valuable thing an attacker could take.
Children
This store is not intended for children under 16 and we do not knowingly collect their information.
Contact
Questions or complaints about privacy: support@brolic.io. If you’re not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.