policies and procedures on the collection, use and disclosure of data obtained through your access to
and use of the services available on the Application and Website (the “Application”) operated by
ChangeRoom, 40 Cimarron Crescent, Ottawa, Ontario, Canada (“ChangeRoom”). The use of the Application is
ensuring the privacy and security of the data that you share with us in accordance with our obligations
under the applicable laws, rules and regulations. ChangeRoom is committed to fully comply with the
Canadian Regulatory Laws. By accessing the Application or using our services you agree to accept and be
When you install the App, we are automatically able to access certain types of
information from your Shopify account: shop information, product related data such as the image and
Additionally, we collect the following types of personal information from you and/or your customers of 16 years of age and above once you have installed the App: Information about you and others who may access the App on behalf of your store, such as your name, address, email address, phone number, and billing information; Information about individuals who visit your store, such as their IP address, web browser details, time zone, sizing data including age, weight, height and bra size and information about the cookies installed on the particular device.
We collect personal information directly from the relevant individual, through your Shopify account and using the following technologies: “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps. “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.
We use the personal information we collect from you and your customers in order to provide the Service and to operate the App. This information will help us provide accurate recommendations to your customers.
Finally, we may also share your Personal Information to comply with applicable laws and
regulations, to respond to a subpoena, search warrant or other lawful request for information we
receive, or to otherwise protect our rights.
Behavioural Advertising As described above, we use your Personal Information to provide you marketing communications we believe may be of interest to you.
Your Rights If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
When you place an order through the Site, we will maintain your Order Information for our records for 90 days unless and until you ask us to delete this information.
Your personal data is stored either in our database or in those of our service
providers, located in the Amazon Web Services. We maintain appropriate physical, electronic and
procedural safeguards to protect our System, including firewalls, individual passwords and encryption
and authentication technology, and take all other necessary and adequate administrative, organizational,
technical, personnel, and physical measures to safeguard the same against unauthorized or unlawful
processing and use, accidental loss or destruction or damage, theft, disclosure, or modification and to
ensure its integrity. Please note, however, that data transported over an open network, such as the
Internet or email, may be accessible to anybody. We cannot guarantee, and are not responsible for, the
confidentiality of any communication or information transmitted via such open networks. When disclosing
any Data via an open network, you should consider that it is potentially accessible to others, and
consequently, may be collected and used by others without your consent. In particular, while individual
data packets are often encrypted, the names of the sender and recipient are not. Even if both the sender
and recipient are located in the same country, data may be transmitted via such networks to other
countries regularly and without controls, including countries that do not afford the same level of data
protection as Canada. Your Data and Information may be lost during transmission or may be accessed by
unauthorised parties. We do not accept any liability for direct or indirect losses as regards the
security of the Data and Information during its transfer via Internet.