How we handle your information.

Effective April 23, 2026. Last updated April 23, 2026.

Sapphire Botanics Inc. ("Sapphire Botanics," "we," "us") respects your privacy. This policy explains what information we collect when you visit sapphirebotanics.com or purchase our products, how we use it, who we share it with, and the rights you have over it. It applies to visitors and customers in Canada, the United States, and anywhere else our site is accessible.

We are a Canadian corporation incorporated in Ontario. Our registered office is at 10 Thornmount Drive, Scarborough, Ontario M1B 3J4, Canada.

1. Information we collect

Information you give us directly

When you create an account, place an order, take our skin quiz, subscribe to our newsletter, or contact us, we collect the information you provide. This typically includes your name, email address, phone number, shipping and billing addresses, and any answers you give in the skin quiz.

Payment information

When you make a purchase, payment is processed by Shopify Payments and, where selected, Shop Pay, PayPal, Apple Pay, or Google Pay. We do not see or store your full credit card number, CVV, or expiry date. Our payment processors handle that data under their own privacy policies and PCI DSS compliance.

Information we collect automatically

When you use our site, we automatically collect certain technical information, including your IP address, browser type and version, device type, operating system, referring URL, pages viewed, time spent, and general location inferred from your IP address. This is standard for any commerce site and helps us understand how our store is used and detect fraudulent activity.

Information from third parties

If you interact with us through social media or use a connected third-party login, we may receive limited information from that platform, such as your name and email address. We also work with marketing partners who may provide us with aggregate information about site visitors.

2. How we use your information

We use the information we collect to:

• Process and fulfil your orders, including payment, shipping, and returns.
• Send order confirmations, shipping updates, and customer service communications.
• Respond to your questions and provide customer support.
• Match you to a product recommendation based on your skin quiz answers.
• Send you marketing emails and SMS messages if you have opted in, including offers, new product launches, and content about hormonally reactive skin.
• Personalise the content you see on our site and in our emails.
• Measure and improve the performance of our site and marketing.
• Prevent fraud, detect abuse, and protect our business, our customers, and the public.
• Comply with legal obligations and enforce our Terms & Conditions.

3. Legal basis for processing

Under Canadian privacy law (the Personal Information Protection and Electronic Documents Act, or PIPEDA), we process your personal information on the basis of your consent. Consent may be express (for example, when you check a box to receive our newsletter) or implied from the circumstances (for example, providing your shipping address in order to receive an order). You can withdraw your consent at any time, subject to legal or contractual restrictions, by contacting us using the details at the end of this policy.

Where you reside in a jurisdiction with a different legal framework, such as the European Union, the United Kingdom, or a US state with its own privacy law, we also rely on legitimate interests (operating our business), contractual necessity (fulfilling your order), and legal obligation where those bases are recognised.

4. Third parties we share information with

We do not sell your personal information. We share it only with service providers that help us run our business, and only to the extent each provider needs to do its job. Current service providers include:

Service	Purpose	Location
Shopify Inc.	E-commerce platform, payments, order fulfilment	Canada / United States
Klaviyo, Inc.	Email and SMS marketing, customer data platform	United States
Meta Platforms, Inc.	Advertising and conversion tracking (Meta Pixel)	United States
Google LLC	Google Analytics 4, advertising	United States
Microsoft Corporation	Microsoft Clarity session analytics	United States
Loox Ltd.	Customer review collection and display	Israel / United States
Seal Subscriptions	Subscription order management	European Union
Pop Convert	On-site marketing popups	United States
GOAFFPRO	Affiliate and referral program	United States / India
Shipping carriers	Order delivery (Canada Post, USPS, UPS as applicable)	Canada / United States

We may also share information in response to a lawful request from a government authority, to comply with applicable law, to enforce our Terms & Conditions, or to protect our rights or the safety of others. If Sapphire Botanics is acquired or merges with another company, your information may be transferred as part of that transaction, subject to this policy.

5. International data transfers

Because several of our service providers are located in the United States and elsewhere, your personal information may be transferred to, stored in, or processed in countries outside Canada. The privacy laws of those countries may not offer the same protections as Canadian law. When we transfer your information internationally, we rely on contractual protections and industry-standard safeguards to keep it secure.

6. Cookies and tracking technologies

We use cookies, pixels, and similar technologies to operate and improve our site. These include:

• Strictly necessary cookies required for the site to function, such as keeping you logged in and remembering the contents of your cart.
• Analytics cookies that help us understand how visitors use our site (Google Analytics, Microsoft Clarity).
• Marketing cookies used for advertising and measurement (Meta Pixel, Klaviyo).
• Preference cookies that remember settings like your country and currency.

You can control cookies through your browser settings. Blocking certain cookies may limit parts of the site.

7. Your rights

Depending on where you live, you have some or all of the following rights over the information we hold about you:

• Access the personal information we hold about you.
• Correct information that is inaccurate or out of date.
• Delete your information, subject to legal retention requirements (for example, we must keep certain order records for tax purposes).
• Withdraw consent to marketing communications at any time by using the unsubscribe link in our emails, replying STOP to any SMS, or contacting us directly.
• Port your information to another service.
• Object to certain uses of your information.
• Complain to the Office of the Privacy Commissioner of Canada or, if you live elsewhere, to the relevant privacy regulator in your jurisdiction.

To exercise any of these rights, email us at hello@sapphirebotanics.com. We will respond within thirty days.

8. How long we keep your information

We keep your personal information only as long as necessary for the purposes described in this policy or as required by law. Order records are typically retained for seven years to meet Canadian tax obligations. Marketing data is retained until you unsubscribe or ask us to delete it. Skin quiz responses are retained as long as your account is active so we can send relevant recommendations.

9. How we protect your information

We take reasonable administrative, technical, and physical steps to protect your information, including encryption in transit, access controls, and vetting of our service providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach that affects your information, we will notify you as required by law.

10. California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what categories of personal information we collect, the right to delete it, the right to opt out of any sale or sharing of personal information, and the right not to be discriminated against for exercising your rights. We do not sell personal information as the term is traditionally understood, but some of our advertising cookies may qualify as "sharing" under the CCPA. To opt out of this sharing, email hello@sapphirebotanics.com with the subject line "California Opt-Out."

11. Children's privacy

Our products and site are intended for adults. We do not knowingly collect personal information from anyone under the age of thirteen. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this policy to reflect changes in our practices, our services, or the law. When we do, we will post the updated version on this page and revise the "Effective" date at the top. Material changes will be communicated by email to active customers where appropriate.

13. How to contact us

For privacy questions, to exercise your rights, or to file a complaint, contact our Privacy Officer:

You may also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca if you believe we have not handled your information appropriately.