Legal
Privacy Policy
How we collect, use, and protect your personal information.
Last updated: February 2026
Introduction
Capital City Cards ("we", "us", "our") is committed to protecting the privacy of our customers. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at capitalcitycards.ca and make purchases from our online store. We operate in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Information We Collect
When you place an order or create an account, we may collect the following personal information:
- Full name
- Email address
- Shipping address
- Phone number (if provided)
- Payment information (processed securely by Stripe)
We may also automatically collect non-personal information such as browser type, device type, and pages visited for the purpose of improving our website experience.
How We Use Your Information
Your personal information is used solely for the following purposes:
- Processing and fulfilling your orders
- Sending order confirmations and email receipts
- Communicating shipping updates and tracking information
- Responding to customer service inquiries
- Complying with legal obligations
We do not use your personal information for marketing purposes unless you have explicitly opted in to receive promotional communications from us.
Payment Processing
All payments are processed securely by Stripe, a PCI-DSS compliant payment processor. We do not store, process, or have access to your full credit card number, CVV, or other sensitive payment details on our servers. All payment data is transmitted directly to Stripe using industry-standard encryption.
Data Sharing and Third Parties
We do not sell, trade, or rent your personal information to third parties. We may share your information only with:
- Stripe — for secure payment processing
- Canada Post — for shipping and delivery of your orders
These third parties are only provided the information necessary to perform their specific services and are obligated to protect your data.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, including order records for accounting and legal compliance. You may request deletion of your personal data at any time by contacting us.
Your Rights Under PIPEDA
Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:
- Access the personal information we hold about you
- Request corrections to inaccurate or incomplete information
- Withdraw consent for the collection or use of your information
- Request deletion of your personal data
Security
We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data transmission.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Contact Us
If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us at 613capitalcitycards@gmail.com.