Last Updated: June 6, 2026

At Moyvia, we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase from our store, or otherwise communicate with us. Our data practices are structured in strict compliance with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial privacy statutes (including Quebec's Law 25), and the statutory data protection principles under the upcoming Consumer Privacy Protection Act (CPPA / Bill C-27) framework.

1. Personal Information We Collect or Process

We collect and process various categories of personal information that identify, relate to, or can reasonably be linked to an individual consumer:

• Contact Details: Your full name, shipping address, billing address, phone number, and email address.
• Financial Information: Credit card numbers, debit card details, secure payment tokens, and transaction histories processed exclusively through secure, PCI-compliant gateways.
• Account Parameters: Usernames, encrypted password configurations, security questions, and profile preferences.
• Technical & Network Activity: Device indicators, browser types, network connections, IP addresses, and interaction metrics tracked automatically via operational cookies.
• Communication Records: Any personal information or specific details you choose to include when submitting a customer support inquiry.

2. Purpose of Data Processing

In accordance with PIPEDA requirements for establishing clear, legitimate purposes, Moyvia utilizes your records to:

• Fulfill Orders & Contractual Services: Process financial payments, validate billing parameters, arrange for direct consumer shipping, and issue invoices or order confirmations.
• Mitigate Risk & Prevent Fraud: Authenticate account credentials and monitor incoming transactions to detect, investigate, or block unauthorized or illegal activities.
• Execute Marketing & Advertising (CASL Compliant): Deliver tailored promotional updates, newsletters, or text messages, strictly subject to your express opt-in consent under Canada’s Anti-Spam Legislation (CASL). You can opt out at any time.
• Customer Care: Provide reliable customer support, answer sizing or logistics inquiries, and maintain our business relationship with you.

3. Disclosure & Cross-Border Data Flows

We disclose your personal information to trusted third-party service providers who directly assist us in operating our online store. This includes Shopify (our e-commerce hosting platform), secure payment processors, and analytics providers such as Google Analytics.

International Cross-Border Transfers: Because our infrastructure relies on global hosting services, your information will be securely transmitted, stored, and processed outside of Canada (primarily within the United States). While your data is heavily protected under strict commercial contracts, it may be subject to lawful access requests by foreign government, national security, or law enforcement authorities under local legislation.

4. Security Protocols & Fixed Data Retention

Security Controls: We use industry-standard Secure Sockets Layer (SSL) encryption to safeguard your financial credentials during checkout. While no digital infrastructure can guarantee absolute security, we continuously monitor our perimeters.

Defined Retention Policy: We do not hold consumer files indefinitely. Core transactional records, order confirmations, and financial data are securely archived for a strict duration of 7 years. This specific window is mandatory to comply with Canadian corporate tax tracking, fiscal auditing, and financial record-keeping frameworks enforced by the Canada Revenue Agency (CRA).

5. Statutory Consumer Rights (PIPEDA & CPPA)

Depending on your province of residence in Canada, you hold specific legal rights regarding your personal parameters under PIPEDA and the evolving CPPA framework:

• Right to Access & Know: You have the right to request a transparent breakdown of the specific personal information we hold about you.
• Right to Rectification: You may request that we immediately correct inaccurate, incomplete, or outdated personal details within our records.
• Right to Deletion / Erasure: You can request the deletion of your personal history, subject to our mandatory 7-year CRA corporate tax retention obligations.
• Right to Data Portability (CPPA Core Feature): You have the right to request that your personal records be securely exported and transferred to another platform or provider in a structured, commonly used electronic format.
• Right to Withdraw Consent: Where data processing is based on consent (such as commercial cookies or marketing), you may alter your preferences or opt out at any time.

6. Complaints & Accountability

Moyvia is fully accountable for the data under its control. If you wish to exercise any of your privacy rights, ask questions about our data handling, or lodge a formal complaint, please contact our Data Privacy Desk directly at: info@moyvia.com. We will review your inquiry and respond within 30 days as mandated by law.

If you feel our internal resolution is unsatisfactory, you maintain the legal right to escalate your grievance by contacting the federal privacy watchdog:

Office of the Privacy Commissioner of Canada (OPC)
30 Victoria Street, Gatineau, Quebec, K1A 1H3
Web Link: www.priv.gc.ca