Privacy policy
home&things — Privacy Policy
Effective date: September 28, 2026
home&things (“we,” “us,” “our”) operates homeandthingsco.com and homeandthingsco.ca (the “Site”). This policy explains what personal information we collect, why, how we use and share it, and the choices and rights you have — under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Act respecting the protection of personal information in the private sector (Law 25), and Canada’s Anti-Spam Legislation (CASL) where it applies to our email communications.
1. Who we are
home&things is operated by Highrise International Inc., incorporated in Ontario (corporation number 1562354), Oakville, Ontario, Canada.
Privacy contact: support@homeandthingsco.com Mailing address: 1459 Everest Cres, Oakville, ON L6H 3S4, Canada
2. What personal information we collect
Contact and order information: name, email, shipping and billing address, phone number, order history.
Payment information: processed directly by our payment processor (Shopify Payments and/or the card networks it uses) — we do not store full card numbers ourselves.
Account information: if you create an account, your login credentials and saved preferences.
Communications: messages you send us (support requests, reviews, contest entries) and our replies.
Device and usage information: IP address, browser type, pages viewed, referring site, and similar data collected automatically through cookies and similar technologies (see Section 5).
Marketing preferences: whether you’ve opted in to promotional emails, and your engagement with them (opens/clicks), where our email platform provides this.
We collect this directly from you (when you browse, create an account, place an order, or contact us) and automatically through cookies and analytics tools.
3. Why we collect and use your information
We collect and use personal information only for the purposes below:
to process and fulfill your orders, including passing your name, address, and order details to our fulfillment suppliers and shipping carriers;
to communicate with you about your order (confirmations, shipping updates, customer service);
to run and secure the Site (fraud prevention, account authentication, troubleshooting);
to send you marketing communications, but only where you’ve given consent (Section 7);
to understand how the Site is used and improve it (analytics);
to comply with legal, accounting, and tax obligations (e.g., GST/HST/QST records).
We do not sell your personal information.
4. Consent
By using the Site and providing your information, you consent to our collecting, using, and disclosing it as described in this policy, for the purposes it describes. Where the law requires a higher standard of consent — most notably, marketing emails under CASL and non-essential cookies under Quebec’s Law 25 — we ask for it separately and explicitly, as described in Sections 5 and 7. You can withdraw consent at any time, subject to legal or contractual restrictions, by contacting us at the address in Section 1; withdrawing consent may limit our ability to provide some services (for example, we can’t ship an order without a delivery address).
5. Cookies and tracking technologies
We use cookies and similar technologies (pixels, local storage, analytics scripts) on the Site.
Strictly necessary cookies — required for the Site to function (cart, checkout, login, security). These don’t require consent and can’t be turned off through our cookie tool, though you can block them in your browser at the risk of breaking site functionality.
Functional, analytics, and advertising cookies — used for things like remembering preferences, understanding traffic, and marketing/retargeting, if enabled.
For visitors in Quebec, Law 25 requires non-essential tracking technologies to be off by default until you actively turn them on, with consent that is specific to each purpose. We apply that standard site-wide rather than by geography, since it’s a simpler and more protective baseline.
You can also control cookies through your browser settings; see aboutcookies.org for how, by browser.
6. How we share your information
We share personal information only where needed to run the business:
Shopify — our e-commerce platform, which hosts the Site, processes checkout, and stores order/customer data on our behalf.
Payment processors — Shopify Payments and any other payment method you choose at checkout.
Fulfillment suppliers — who receive your name, shipping address, and order details in order to pick, pack, and ship your order.
Shipping carriers — to deliver your order and provide tracking.
Email/SMS and analytics providers — if and when we adopt them, to send order and marketing communications and to measure Site usage.
Legal and safety — where required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of home&things, our customers, or others.
We require these providers to protect your information and use it only for the purpose we’ve shared it for.
7. Cross-border data transfers
Some of the organizations in Section 6 — including Shopify’s infrastructure and our fulfillment and manufacturing partners — store or process personal information outside Canada, including in the United States and, for some products, China. That means your information may be accessed by, or subject to the laws of, those countries while it’s there.
8. Marketing communications (CASL)
We’ll only send you promotional emails (new products, sales, restocks) if you’ve given express, opt-in consent — for example, by checking an unchecked box at checkout or account signup, or by signing up separately for our newsletter. We won’t pre-check that box for you.
Every marketing email we send will include our business name, a mailing address where we can be reached by mail, and a working, one-click unsubscribe link that doesn’t require you to log in.
If you unsubscribe, we’ll stop sending marketing emails within 10 business days, as required by CASL. Order-related and transactional emails (confirmations, shipping updates, account notices) aren’t marketing messages and aren’t affected by unsubscribing from marketing.
9. How long we keep your information
We keep order and account information for as long as needed to fulfill the purposes in Section 3, and afterward as required for tax, accounting, and legal recordkeeping (generally several years under Canadian tax law). We keep marketing consent and unsubscribe records for as long as needed to demonstrate compliance with CASL.
10. How we protect your information
We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information — including relying on Shopify’s PCI-DSS-compliant payment infrastructure so we never handle full card numbers directly, and limiting access to personal information to what’s needed to run the business. No online system is completely secure, and we can’t guarantee absolute security.
11. Your privacy rights
Under PIPEDA, you can ask us to tell you what personal information we hold about you and how it’s used, correct inaccurate information, and withdraw consent (subject to legal/contractual limits — see Section 4).
If you’re a Quebec resident, Law 25 gives you additional rights: access and rectification (request a copy of your information and correct it), de-indexing (“right to be forgotten”) in limited circumstances, data portability, and the right to object to automated decision-making (we don’t currently use any automated decision-making that produces legal or similarly significant effects on customers). You can also withdraw consent and file a complaint with us or with Quebec’s Commission d’accès à l’information (CAI).
To exercise any of these rights, contact us at the address in Section 1. We’ll respond within the time required by applicable law. If you’re not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, for Quebec residents, the CAI (cai.gouv.qc.ca).
12. Children’s privacy
The Site isn’t directed at children, and we don’t knowingly collect personal information from anyone below the age of majority in their province of residence without a parent or guardian’s involvement. If you believe a child has given us personal information, contact us and we’ll delete it.
13. Changes to this policy
We may update this policy from time to time. If we make material changes, we’ll post the updated version here with a new effective date, and where required by law, we’ll take additional steps to notify you.
14. Contact us
Questions, requests, or complaints about this policy or your personal information:
Email: support@homeandthingsco.com Mail: Highrise International Inc., 1459 Everest Cres, Oakville, ON L6H 3S4, Canada