Privacy Policy

This Privacy Policy describes how Sprig & Sprouts Limited (an Ontario, Canada corporation), operating as Nutra-Wave (the “Site,” “we,” “us,” or “our”), collects, uses, and discloses your personal information when you visit or use our services, make a purchase from nutra-wave.com, or otherwise communicate with us (collectively, the “Services”). For purposes of this Privacy Policy, “you” means the user of the Services, whether a customer, website visitor, or another individual whose information we have collected.

This version of our Privacy Policy applies to residents of Canada. If you are located elsewhere, please refer to the version that applies to your region. Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last updated” date, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain about you depend on how you interact with our Site and use our Services. When we use the term “personal information,” we are referring to information that identifies, relates to, describes, or can be associated with you.

Information you submit directly to us may include:

• Contact details including your name, address, phone number, and email.
• Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number.
• Account information including your username, password, security questions, and other information used for account security.
• Shopping information including items you view, add to your cart, or save to your account (such as loyalty points, reviews, referrals, or gift cards), and your purchases.
• Customer support information including information you choose to include in communications with us.

Some features may require you to provide certain information. You may elect not to provide it, but doing so may prevent you from using those features.

Information we collect about your usage. We may automatically collect information about your interaction with the Services (“Usage Data”) using cookies, pixels, and similar technologies (“Cookies”). Usage Data may include device information, browser information, network connection information, your IP address, and other information regarding your interaction with the Services.

Information we obtain from third parties. We may obtain information about you from vendors and service providers who collect information on our behalf, such as companies that support our Site (e.g., Shopify) and our payment processors, who collect payment information to process your orders. Any information we obtain from third parties will be treated in accordance with this Privacy Policy.

How We Use Your Personal Information

• Providing products and services — to process payments, fulfill orders, manage your account, arrange shipping, and facilitate returns and exchanges.
• Marketing and advertising — to send promotional communications and show you relevant advertising, subject to the consent and opt-out rights described below.
• Security and fraud prevention — to detect, investigate, and act on possible fraudulent, illegal, or malicious activity, and to keep the Services secure.
• Communicating with you and improving the Services — to provide customer support and improve our products and Services.

Cookies

We use Cookies to power and improve our Site and Services (including remembering your actions and preferences), to run analytics, and to better understand user interaction. We may also permit third parties to use Cookies to tailor services, products, and advertising. For information about the Cookies used to power our store with Shopify, see https://www.shopify.com/legal/cookies.

Most browsers accept Cookies by default, but you can set your browser to remove or reject them. Where required by applicable law, we obtain your consent before placing non-essential Cookies, and you can manage your preferences through the cookie banner or consent tool on our Site. Blocking Cookies may cause some features to work incorrectly.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties, subject to this Privacy Policy. Such circumstances may include:

• With vendors or third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping).
• With business and marketing partners to provide services and advertise to you, in accordance with their own privacy notices.
• When you direct, request, or consent to disclosure to third parties, such as to ship you products or through social media or login integrations.
• With our affiliates or within our corporate group.
• In connection with a business transaction (such as a merger or bankruptcy), to comply with legal obligations, to enforce terms of service, and to protect or defend our rights and those of others.

Third-Party Websites and Links

Our Site may link to websites or online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies. We do not guarantee and are not responsible for the privacy or security of such sites. Our inclusion of links does not imply endorsement.

Security and Retention of Your Information

No security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Information you send to us may not be secure while in transit; we recommend you do not use insecure channels to communicate sensitive information. How long we retain your personal information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce our contracts and policies.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request deletion.

Your Privacy Rights (Canada)

Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws (including Quebec’s Law 25, and the personal information protection acts of British Columbia and Alberta), you have rights in relation to your personal information. These rights are not absolute and may apply only in certain circumstances:

• Access — request access to the personal information we hold about you and information about how we use and share it.
• Correction — request that we correct inaccurate or incomplete personal information.
• Withdrawal of consent — withdraw your consent to our processing at any time, subject to legal or contractual restrictions and reasonable notice.
• Data portability — where applicable (including for Quebec residents), request a copy of the computerized personal information you provided to us in a structured, commonly used technological format.
• Withdrawal from marketing — opt out of promotional communications at any time using the unsubscribe link in our emails.

To exercise any of these rights, contact our Privacy Officer using the details in the Contact section below. We may need to verify your identity before responding, and we will respond within the timeframes required by law. We will not discriminate against you for exercising your rights.

Quebec Residents (Law 25)

If you are a resident of Quebec, additional rights and protections apply under Law 25. We have designated a person responsible for the protection of personal information (our Privacy Officer), identified in the Contact section. You may also request that we cease disseminating your personal information or de-index a link where permitted by law, and you have the right to data portability described above.

Consent and Marketing (CASL)

We send commercial electronic messages in accordance with Canada’s Anti-Spam Legislation (CASL). Where required, we obtain your express or implied consent before sending marketing emails, we identify ourselves as the sender, and we include a working unsubscribe mechanism in every commercial message. You can withdraw your consent to marketing at any time.

Storage and Cross-Border Transfer

Your personal information may be stored and processed in Canada, the United States, and other countries where we or our service providers (including Shopify and our payment and fulfillment partners) operate. As a result, your information may be subject to the laws of those jurisdictions and accessible to courts, law enforcement, and authorities in those countries. Where we transfer personal information outside Canada, we take reasonable contractual and organizational measures to provide a comparable level of protection.

Breach Notification

If a breach of security safeguards involving your personal information creates a real risk of significant harm, we will notify you and the relevant regulator(s) as required by applicable Canadian law, and we will keep records of breaches as required.

Complaints

If you have a complaint about how we handle your personal information, please contact our Privacy Officer first. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca). Residents of Quebec may also contact the Commission d’accès à l’information du Québec (CAI), and residents of British Columbia or Alberta may contact their respective provincial Information and Privacy Commissioner.

If you have questions about our privacy practices or this Privacy Policy, or wish to exercise your rights, please contact us:
Email: wecare@nutra-wave.com