Last updated: April 14, 2026

MISIYO Candle Co. (“Misiyo,” “we,” “our,” or “us”) operates misiyo.com and our in-store point-of-sale system (collectively, the “Services”). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website, make a purchase online or in-store, sign up for our emails, or otherwise interact with us.

This policy is designed to comply with applicable privacy laws, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Act respecting the protection of personal information in the private sector (Law 25), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable U.S. state privacy laws (Virginia CDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA).

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to personal information.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood how we collect and use your information as described here.

1. Personal Information We Collect

We collect the following categories of personal information depending on how you interact with us:

• Contact details. Name, mailing address, billing and shipping address, phone number, and email address.
• Financial and transaction information. Credit/debit card details, transaction amounts, payment confirmation, and purchase history.
• Account information. Username, password, and account preferences (for online accounts).
• Order and purchase history. Products viewed, added to cart, purchased, returned, or exchanged — whether online or in-store via our point-of-sale system.
• Communications. Customer support messages, emails, and other communications you send us.
• Device and technical information. IP address, browser type, device identifiers, and operating system.
• Usage and analytics information. How you navigate our website, which pages you visit, and how long you spend on them.
• Inferences. Inferences drawn from the above to understand your preferences and interests.

2. How We Collect Personal Information

We collect personal information from the following sources:

• Directly from you. When you create an account, place an order, sign up for emails, contact us, or make an in-store purchase.
• Automatically through our website. Via cookies, pixels, and similar tracking technologies when you visit our website. This includes data collected by Google Analytics, Meta Pixel (Facebook/Instagram), and Shopify’s built-in analytics.
• From our service providers. Shopify (our e-commerce and POS platform), Klaviyo (our email marketing platform), payment processors, and shipping carriers collect and process data on our behalf.
• From advertising and marketing partners. We may receive information from our marketing platforms based on your interactions with our ads on third-party sites and social media.

3. How We Use Your Personal Information

We use your personal information to:

• Fulfill purchases. Process orders, payments, fulfillment, shipping, returns, and exchanges.
• Manage your account. Create and manage your account, and remember your preferences.
• Send transactional communications. Send order confirmations, shipping updates, and other transactional messages.
• Send marketing communications. Send promotional emails and campaigns via Klaviyo. You can unsubscribe at any time.
• Advertise to you. Serve you relevant ads on our website, social media (including Meta/Instagram), and other platforms based on your browsing and purchase activity.
• Analyze and improve our Services. Understand how customers use our site and improve our products and experience.
• Protect against fraud and ensure security. Detect fraud, prevent unauthorized activity, and maintain the security of your account and our systems.
• Comply with legal obligations. Meet our obligations under PIPEDA, Quebec Law 25, CCPA/CPRA, and other applicable laws.

4. How We Disclose Personal Information

We may share your personal information with:

• Shopify. Shopify processes data to power our online store and in-store POS. See Shopify’s Consumer Privacy Policy at privacy.shopify.com.
• Klaviyo (email marketing). We use Klaviyo to send email campaigns and automated flows. Klaviyo may process your email address and purchase behavior on our behalf.
• Google Analytics and Meta Pixel. Google Analytics collects anonymized usage data. Meta Pixel tracks website visits and purchases for ad targeting on Facebook and Instagram.
• Shipping and payment providers. Shipping carriers (Canada Post, UPS, etc.) and payment processors receive the information necessary to fulfill and process your order.
• Legal and compliance reasons. We may disclose information if required by law, court order, or to protect our legal rights.
• Business transfers. In the event of a merger, acquisition, or sale of our business, your information may be transferred as part of that transaction.

We do not sell your personal information to third parties for their own marketing purposes.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to operate the site, remember your preferences, analyze traffic, and serve targeted ads. These include:

• Essential cookies. Required for the website to function (e.g., your shopping cart, login session).
• Analytics cookies. Help us understand how visitors use our site (Google Analytics).
• Advertising and targeting cookies. Used by Meta Pixel and other platforms to show you relevant ads.

You can manage your cookie preferences at any time by visiting our Cookie Preferences page. You may also use browser settings to control cookies, though this may affect site functionality.

6. Your Privacy Rights

Depending on where you live, you may have the following rights:

Canadian Residents (PIPEDA and Quebec Law 25)

Under PIPEDA and Quebec’s Law 25, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Withdraw consent to collection or use of your personal information (subject to legal or contractual restrictions).
• Request deletion of your personal information where we no longer have a legitimate purpose to retain it.
• File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Commission d’accès à l’information du Québec (for Quebec residents).

Quebec residents also have the right to data portability and the right to be informed about automated decision-making.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell about you.
• Request deletion of your personal information, subject to certain exceptions.
• Request correction of inaccurate personal information.
• Opt out of the “sale” or “sharing” of your personal information for targeted advertising purposes.
• Limit the use and disclosure of sensitive personal information.
• Not be discriminated against for exercising your privacy rights.

To opt out of the sale or sharing of your personal information, visit our Your Privacy Choices page.

Authorized agents may submit requests on your behalf with proper written authorization.

Other U.S. State Residents

Residents of Virginia, Colorado, Connecticut, and Utah have similar rights to access, delete, correct, and opt out of targeted advertising. You may exercise these rights using the contact details below.

EU and UK Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to access, correct, delete, restrict processing of, and port your personal information. You may also object to processing and lodge a complaint with your local data protection authority.

7. How to Exercise Your Rights

To exercise any of the above rights, please contact us at hello@misiyo.com or by mail at 7312 50 Street NW, Edmonton, AB, T6B 2J8, Canada.

We will respond to verifiable requests within the timeframes required by applicable law (30 days for most jurisdictions; 45 days for CCPA requests, with a possible 45-day extension). We may need to verify your identity before processing your request.

You may also manage your email preferences directly via the unsubscribe link in any marketing email we send.

8. Children’s Privacy

Our Services are not intended for children under the age of majority in their jurisdiction (18 in most Canadian provinces; 13 in the U.S. under COPPA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it.

As of the last updated date of this Privacy Policy, we do not knowingly sell or share the personal information of individuals under 16 years of age.

9. Relationship with Shopify

Our online store and in-store POS are powered by Shopify. Shopify collects and processes personal information about your use of the Services in order to provide and improve their platform. To learn more, visit the Shopify Consumer Privacy Policy. You may also exercise certain rights related to Shopify’s processing via the Shopify Privacy Portal.

10. International Data Transfers

We are based in Edmonton, Alberta, Canada. Your personal information may be transferred to and processed in other countries, including the United States, where our service providers (such as Shopify, Klaviyo, Google, and Meta) operate. These countries may have different data protection laws than your own.

Where we transfer personal information outside the European Economic Area or United Kingdom, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent instruments.

11. Data Retention and Security

We retain your personal information for as long as necessary to provide our Services, maintain your account, comply with legal obligations, resolve disputes, and enforce our policies. When we no longer need your information, we will delete or anonymize it.

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy on our website and update the “Last updated” date at the top. Where required by law, we will notify you of material changes.

14. Contact Us

For questions about this Privacy Policy, to exercise your privacy rights, or to make a complaint about our data practices:

MISIYO Candle Co.7312 50 Street NW Edmonton, AB, T6B 2J8Canada

Email: hello@misiyo.com

We will respond to your inquiry within a reasonable time, and within legally required timeframes where applicable.