Privacy Policy

PRIVACY POLICY

BuySinopec

www.buysinopec.ca

Last Updated: May 2026 | Effective Date: May 2026

BuySinopec (“Company”, “we”, “us”, or “our”), operating in Canada under a federally registered business name, operates the website located at www.buysinopec.ca, including all related information, content, features, tools, products, and services (collectively, the “Services”). Our store is powered by Shopify Inc., which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, store, disclose, and protect your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us. It is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s Anti-Spam Legislation (CASL), and applicable provincial privacy legislation.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.

1. PERSONAL INFORMATION WE COLLECT

When we use the term “personal information,” we are referring to information about an identifiable individual, as defined under PIPEDA. Personal information does not include information that has been anonymized or de-identified such that it cannot reasonably identify an individual.

Depending on how you interact with the Services, we may collect or process the following categories of personal information:

Contact Information: your name, billing address, shipping address, telephone number, and email address.
Business Information (B2B Customers): your company name, business registration number, GST/HST number, job title, and business contact details.
Financial Information: credit card or debit card numbers, payment card information, financial account details, transaction records, billing history, and payment confirmations. Note: Payment card information is processed directly by our payment processors and is not retained on our servers.
Account Information: your username, password (encrypted), security questions, account preferences, communication preferences, and order history.
Transaction Information: products you view, add to cart, add to wishlist, purchase, return, exchange, or cancel; shipping details; and past order history.
Communications: information you provide when contacting our customer service team, including support tickets, emails, chat transcripts, and call recordings (where permitted by law).
Device and Technical Information: your IP address, browser type, operating system, device identifiers, referring URLs, and other technical data automatically collected when you use the Services.
Usage Information: how you interact with and navigate the Services, including pages viewed, time spent on pages, clicks, and similar behavioural data collected through cookies and similar technologies.
Verification Information: where required for fraud prevention or order verification (per Terms of Service Section 6A), we may collect government-issued identification, proof of billing address, or other verification documents.

2. SOURCES OF PERSONAL INFORMATION

We may collect personal information from the following sources:

Directly from You: when you create an account, place an order, contact our customer service team, subscribe to communications, or otherwise interact with the Services.
Automatically Through the Services: from your device when you visit our website, through cookies, web beacons, pixel tags, log files, and similar tracking technologies.
From Our Service Providers: including Shopify, payment processors, shipping carriers, fraud prevention providers, and analytics providers acting on our behalf.
From Business Partners: such as marketing partners, advertising networks, and referral sources, where you have consented to share your information with us.
From Publicly Available Sources: such as government business registries, where reasonably necessary for B2B verification purposes.

3. HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information for the following purposes, as permitted under PIPEDA and applicable law:

3.1 Providing and Improving the Services

To fulfill our contract with you and to operate the Services, including to:

Process and fulfill your orders, payments, returns, exchanges, and cancellations;
Create, maintain, and manage your customer account;
Arrange shipping, delivery tracking, and logistics support;
Provide customer service and respond to inquiries;
Maintain transaction records as required by tax and accounting laws; and
Improve, personalize, and develop the Services based on usage patterns and feedback.

3.2 Marketing and Communications

Where permitted under CASL and applicable law, we may use your information to:

Send marketing emails, newsletters, promotional offers, and product updates, where you have provided express or implied consent;
Display targeted online advertisements based on your interests and previous interactions;
Inform you of new products, services, or industry developments relevant to your account;
Conduct customer satisfaction surveys and request product reviews.

All commercial electronic messages (CEMs) we send will include an unsubscribe mechanism. You may withdraw consent at any time by clicking the unsubscribe link or emailing info@buysinopec.ca.

3.3 Security, Fraud Prevention, and Order Verification

To protect our business, customers, and the integrity of the Services, including to:

Authenticate your account and verify your identity;
Provide a secure payment and shopping experience;
Detect, investigate, and prevent fraudulent, unauthorized, illegal, unsafe, or malicious activity, including chargeback fraud and unauthorized resale activity;
Verify orders flagged by fraud detection systems, payment processors, or internal security reviews (per Terms of Service Section 6A);
Protect public safety and the rights and property of BuySinopec and others; and
Maintain audit logs, IP address records, and transaction histories for security and dispute resolution purposes.

3.4 Legal and Compliance Reasons

To comply with applicable laws and respond to legal process, including to:

Comply with tax, accounting, customs, export, and trade regulation requirements;
Respond to valid legal requests from law enforcement, government agencies, or courts of competent jurisdiction;
Investigate and defend against legal claims, including in chargeback disputes, civil discovery, or other adversarial proceedings;
Enforce our Terms of Service, Return Policy, and other applicable agreements; and
Cooperate with regulatory authorities and meet our reporting obligations.

4. LEGAL BASIS FOR PROCESSING (PIPEDA)

Under PIPEDA, we collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances. Our legal bases for processing your personal information include:

Consent: you have provided express or implied consent for specific processing activities, such as marketing communications and optional cookies.
Contractual Necessity: processing is necessary to perform our contract with you (e.g., fulfilling orders, processing payments, arranging shipping).
Legitimate Business Interests: processing is necessary for legitimate purposes such as fraud prevention, security, business operations, and service improvement, balanced against your privacy interests.
Legal Obligations: processing is required to comply with applicable laws, including tax, customs, and consumer protection legislation.

5. HOW WE DISCLOSE PERSONAL INFORMATION

We do not sell your personal information. We may disclose your personal information to third parties only in the following circumstances:

Service Providers: with Shopify, payment processors (such as Stripe and PayPal), shipping carriers, fraud prevention providers, IT service providers, cloud hosting providers, analytics providers, and customer support platforms acting on our behalf and bound by confidentiality and data protection obligations.
Business and Marketing Partners: with marketing partners and advertising networks who provide services to us. Such partners process information in accordance with their own privacy policies.
With Your Consent or at Your Direction: when you direct us to share information with a third party, such as a shipping carrier or social media platform you have connected to your account.
Affiliates and Corporate Group: with our affiliates or otherwise within our corporate group, where reasonably necessary for business operations.
Legal and Regulatory Disclosures: with law enforcement agencies, courts, regulators, or other authorities where required by law, court order, subpoena, search warrant, or similar legal process; or where reasonably necessary to enforce our Terms of Service, protect our rights, or investigate fraud.
Business Transactions: with prospective buyers, investors, or successors in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets, subject to reasonable confidentiality protections.
Payment Dispute Defence: with payment processors, financial institutions, insurers, or fraud prevention networks in connection with the investigation or defence of payment disputes or suspected fraudulent chargebacks (per Terms of Service Section 6C and Return Policy Section 12).

6. RELATIONSHIP WITH SHOPIFY

The Services are hosted by Shopify Inc. (“Shopify”), which collects and processes personal information about your access to and use of the Services in order to provide and improve the e-commerce platform. Information you submit to the Services will be transmitted to and shared with Shopify, as well as third-party service providers that may be located in countries other than where you reside, in order to provide and improve the Services.

Shopify processes personal information in accordance with its own privacy policy and applicable privacy laws. To learn more about how Shopify uses your personal information and any rights you may have in relation to data processed by Shopify, please visit:

Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy/customers
Shopify Privacy Portal: https://privacy.shopify.com/en

7. COOKIES AND TRACKING TECHNOLOGIES

We and our service providers (including Shopify) use cookies, web beacons, pixel tags, and similar tracking technologies to operate and improve the Services, analyze usage, personalize content, and deliver advertising.

Cookie categories we use include:

Strictly Necessary Cookies: required for the Services to function (e.g., shopping cart, login, security). These cannot be disabled.
Performance and Analytics Cookies: help us understand how visitors use the Services so we can improve performance and user experience.
Functional Cookies: remember your preferences and settings.
Advertising and Targeting Cookies: used to deliver relevant advertisements and measure campaign effectiveness.

You may manage your cookie preferences through your browser settings or, where available, through the cookie consent banner on our Website. Disabling certain cookies may affect Service functionality.

8. THIRD-PARTY WEBSITES AND LINKS

The Services may contain links to third-party websites, social media platforms, or online services not operated by us. We are not responsible for the privacy practices or content of these third parties.

Information you share on public or semi-public venues, including third-party social networking platforms, may be viewable by other users without limitation as to its use. We encourage you to review the privacy policies of any third-party websites or platforms you visit through links on our Services.

9. CHILDREN’S PRIVACY

The Services are not intended for use by individuals under the age of majority in their province or territory of residence. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at info@buysinopec.ca and we will take reasonable steps to delete such information.

10. SECURITY AND RETENTION OF YOUR INFORMATION

10.1 Security Safeguards

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, theft, or misuse. These safeguards include encryption of data in transit, secure storage practices, access controls, and regular security reviews.

Please be aware that no security measure is perfect or impenetrable. We cannot guarantee absolute security of information transmitted to or stored by us. You should not use insecure channels to communicate sensitive or confidential information.

10.2 Retention Period

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, including:

To maintain your account and provide ongoing Services;
To comply with legal, tax, accounting, and regulatory obligations (typically 6–7 years for Canadian tax records);
To resolve disputes, enforce agreements, and defend against legal claims;
For legitimate business purposes such as fraud prevention and security analysis.

When personal information is no longer needed, we will securely delete, anonymize, or destroy it in accordance with our data retention practices and applicable law.

11. YOUR RIGHTS UNDER PIPEDA

Under PIPEDA and applicable provincial privacy legislation, you have the following rights with respect to your personal information:

Right to Access: you may request access to personal information we hold about you and information about how it has been used or disclosed.
Right to Correction: you may request that we correct inaccurate or incomplete personal information.
Right to Withdraw Consent: you may withdraw consent to certain uses of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Note that withdrawal of consent may affect our ability to provide certain Services to you.
Right to Delete: you may request deletion of your personal information, subject to legal retention requirements and legitimate business interests (e.g., we may need to retain transaction records for tax purposes).
Right to Portability: in certain circumstances, you may request a copy of your personal information in a structured, commonly used format.
Right to Complaint: you may file a complaint about our privacy practices with us or with the Office of the Privacy Commissioner of Canada (see Section 13).

To exercise any of these rights, please contact us at info@buysinopec.ca with your name, account email, and details of your request. We may need to verify your identity before processing your request. We will respond within thirty (30) days as required by PIPEDA, or longer where permitted by law (with notice to you).

We will not discriminate against you or refuse to provide Services for exercising any of these rights. However, we may decline requests where permitted by law (e.g., where compliance would violate another person’s privacy, reveal confidential business information, or interfere with legal proceedings).

12. MARKETING COMMUNICATIONS AND CASL COMPLIANCE

We comply with Canada’s Anti-Spam Legislation (CASL) in all commercial electronic messages we send.

CASL principles we follow:

We send commercial electronic messages only with your express or implied consent;
All messages identify the sender and provide our contact information;
All messages include a clear unsubscribe mechanism that takes effect within ten (10) business days;
We honour unsubscribe requests promptly and free of charge;
We maintain records of consent and unsubscribe requests as required by CASL.

If you opt out of promotional communications, we may still send you transactional or service-related messages (such as order confirmations, shipping notifications, or account-related updates) as these are not subject to CASL consent requirements.

13. COMPLAINTS AND OPC CONTACT

If you have a concern about how we handle your personal information, please first contact us at info@buysinopec.ca. We take privacy concerns seriously and will respond within a reasonable timeframe.

If you are not satisfied with our response, or if you believe we have not adequately addressed your concern, you may lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC):

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376
Website: www.priv.gc.ca

Residents of Alberta, British Columbia, and Quebec may also have the right to contact their provincial privacy commissioner.

14. INTERNATIONAL DATA TRANSFERS

Your personal information may be transferred to, stored in, or processed in countries other than Canada, including the United States and other jurisdictions where Shopify, our payment processors, our cloud hosting providers, or other service providers operate.

These countries may have data protection laws that differ from those in Canada. When personal information is transferred outside Canada, it may be subject to access by foreign authorities under lawful processes, such as subpoenas or court orders, under the laws of those jurisdictions.

We require our service providers to implement appropriate contractual and security safeguards designed to protect personal information consistent with applicable Canadian privacy standards.

15. AUTOMATED DECISION-MAKING

Some of our fraud prevention and order verification systems use automated decision-making to flag, hold, or cancel suspicious orders (per Terms of Service Section 6A). If your order has been affected by such automated processes and you believe an error has occurred, you may contact us at info@buysinopec.ca for human review.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational reasons. The updated Privacy Policy will be posted on our Website with a revised “Last Updated” date.

For material changes, we will provide additional notice as required by applicable law, such as through email notification or prominent notice on the Website. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

17. CONTACT INFORMATION

For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our Privacy Officer at:

BuySinopec — Privacy Officer
Operating in Canada under a federally registered business name.
Email: info@buysinopec.ca
Website: www.buysinopec.ca

We endeavour to respond to all privacy inquiries within thirty (30) days, as required under PIPEDA.

This Privacy Policy forms part of and should be read together with our Terms of Service and Return Policy.