Privacy Policy.

The Southpaw Shop ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make a purchase, or interact with us.

If you do not agree with our practices, please do not use our Site. Your use indicates that you have read and agree to this Privacy Policy. It applies to all operations of The Southpaw Shop and is compliant with the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada.

1.1 Information you provide directly.

Account registration: name, email, mailing address, phone, password (hashed), optional profile info (handicap, preferred brands).

Checkout & transactions: billing/shipping address, payment method (processed by Stripe — we do not store full card numbers), order history, trade-in submissions (photos, condition, specs).

Communication: when you contact us, sign up for the newsletter, submit reviews, or share feedback.

Refinishing service: shipping preferences, special instructions, finish selections.

1.2 Information collected automatically.

Website & browsing data: IP, device/browser/OS, pages visited, referral source, search queries, product interactions.

Cookies & tracking: session, persistent, analytics, and (with consent) marketing cookies. We use Google Analytics — you can opt out via Google's browser extension.

Payment processing: transaction ID, amount, and date via Stripe. We do not store full credit card numbers.

Fulfilling transactions: processing orders, sending confirmations, trade-in payouts, refinishing coordination, refunds.

Customer service: responding to inquiries, troubleshooting, service announcements.

Marketing (with consent): newsletters, promotions, personalized experience, surveys. Opt out anytime via the unsubscribe link or by emailing support.

Analytics & improvement: traffic analysis, feature development, testing.

Fraud prevention & security: detecting fraud, verifying identity, protecting against unauthorized access, legal compliance.

Legitimate business interests: inventory forecasting, back-in-stock notifications (if opted in), targeted advertising (consent-based).

• Contractual necessity: to fulfill your order or service
• Consent: marketing, analytics, non-essential tracking
• Legal obligation: tax, export, fraud-prevention laws
• Legitimate interests: improving services, fraud prevention, support

4.1 Service providers.

4.2 Legal compliance: we may disclose information if required by court order, government agency, or to protect legal rights and prevent fraud.

4.3 Business transfers: if The Southpaw Shop is acquired or merged, your information may transfer. We will notify you.

4.4 With your consent: any other sharing requires explicit consent, which you can withdraw anytime.

Request deletion of non-essential data anytime at support@thesouthpawshop.com. We will comply within 30 days unless legal obligations require retention.

Access: request a copy of the personal information we hold. Provided within 30 days at no cost.

Correct: request corrections to inaccurate information, or update your Locker Room directly.

Delete: request deletion of personal information (subject to legal retention). We delete non-essential data within 30 days.

Withdraw consent: unsubscribe from marketing, disable cookies in your browser, or email support to opt out of analytics.

Portability: request your information in a machine-readable format (CSV, JSON).

Lodge a complaint: Privacy Commissioner of Canada — priv.gc.ca · 1-800-282-1376.

To exercise any right, email privacy@thesouthpawshop.com with your name, email, and the right you're requesting. We respond within 30 days and may verify your identity.

Essential cookies: session ID, cart data, CSRF tokens.

Preference cookies: language, filter/sort settings, last viewed products.

Analytics cookies: Google Analytics (anonymized) — page views, time on site, bounce rate.

Marketing cookies (consent-only): Google Ads remarketing, Facebook Pixel retargeting.

Manage cookies in your browser (Chrome, Firefox, Safari, Edge). Our Site does not respond to Do Not Track signals; disable tracking cookies in browser settings for similar results.

• SSL/TLS encryption on all data in transit (HTTPS)
• PCI-DSS Level 1 payment processing via Stripe
• Encryption at rest and access controls via Supabase
• Authorized-staff-only access to customer data
• Regular monitoring for vulnerabilities
• Full credit card numbers are never stored

If a breach affects your personal information, we will notify you by email within 30 days as required by PIPEDA, including nature of the breach, information affected, protective steps, and our response.

The Site is not directed at children under 13. We do not knowingly collect personal information from children under 13; if we discover we have, we delete it immediately. For users 13–18, we collect only what is necessary for purchase and service.

The Site may contain links to third-party websites. This Privacy Policy does not apply to them. Please review their policies before providing information.

Your information may be stored in Canada (Supabase) and processed by providers in the US and EU (Stripe, Google, Mailchimp). By using the Site, you consent to these transfers, which comply with PIPEDA and international standards including GDPR where applicable.

No. The Southpaw Shop does not sell, trade, or rent your personal information to third parties for marketing purposes.

We may update this policy periodically. Material changes are announced via email or a prominent Site notice. Non-essential changes take effect immediately; changes affecting your rights take effect 30 days after notice. Continued use indicates acceptance.

The Southpaw Shop
Email: privacy@thesouthpawshop.com
Support: support@thesouthpawshop.com
Phone: [Insert phone]
Address: St. John's, Newfoundland and Labrador, Canada

We acknowledge requests within 5 business days and respond substantively within 30 days.

Privacy Commissioner of Canada — 1-800-282-1376 · priv.gc.ca · info@priv.gc.ca