Privacy policy

Privacy Policy

Last Updated: April 2, 2026

NTRL Diffuser Co (“we,” “us,” or “our”) operates the website ntrldiffuser.com and is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, place an order, or otherwise interact with us.

By using our website, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our website or services.

1. Information We Collect

1.1 Information You Provide to Us

We collect information that you voluntarily provide when you:

  • Place an order: Name, email address, shipping address, billing address, and payment information
  • Create an account: Name, email address, and password
  • Subscribe to our newsletter: Email address and communication preferences
  • Contact us: Name, email address, and any information you include in your message
  • Leave a product review: Name, email address, and review content
  • Participate in promotions: Name, email address, and any information required for participation

1.2 Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and your interaction with our site, including:

  • Device information: IP address, browser type and version, operating system, device type, screen resolution, and language preference
  • Usage data: Pages visited, time spent on pages, links clicked, products viewed, referring website, and browsing patterns
  • Location data: General geographic location based on your IP address (city/region level)
  • Transaction data: Purchase history, order amounts, and product preferences

1.3 Information from Third Parties

We may receive information about you from third-party services, including:

  • Shopify: Our e-commerce platform processes order and payment data on our behalf
  • Payment processors: Transaction confirmation and fraud prevention data (we do not store your full credit card number)
  • Shipping carriers: Delivery status and tracking information

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Order fulfillment: Processing, shipping, and delivering your orders, and sending order confirmations and updates
  • Customer service: Responding to your inquiries, resolving issues, and providing support
  • Account management: Managing your account, preferences, and order history
  • Marketing and communications: Sending promotional emails, product updates, and special offers (with your consent, and you may unsubscribe at any time)
  • Website improvement: Analyzing usage patterns to improve our website design, product offerings, and user experience
  • Advertising: Delivering targeted advertisements on third-party platforms (such as Facebook and Instagram) based on your interactions with our website
  • Fraud prevention: Detecting and preventing fraudulent transactions and unauthorized access
  • Legal compliance: Complying with applicable laws, regulations, and legal processes

3. Cookies and Tracking Technologies

3.1 Cookies We Use

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small data files stored on your device. We use the following types of cookies:

  • Essential cookies: Required for the website to function properly, including shopping cart functionality, secure checkout, and session management. These cookies are set by Shopify, our e-commerce platform.
  • Analytics cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously. We use Google Analytics (GA4) for this purpose.
  • Marketing cookies: Used to track visitors across websites to display relevant advertisements. We use the Meta Pixel (Facebook/Instagram Pixel) to measure the effectiveness of our advertising campaigns on Meta platforms and to deliver targeted ads to users who have visited our website.
  • Preference cookies: Remember your settings and preferences (such as language and currency) to provide a personalized experience.

3.2 Meta Pixel (Facebook/Instagram)

We use the Meta Pixel, a tracking tool provided by Meta Platforms, Inc., to:

  • Measure the effectiveness of our advertising on Facebook and Instagram
  • Understand the actions you take on our website after viewing or clicking on our ads
  • Create custom audiences for targeted advertising on Meta platforms
  • Deliver retargeting ads to users who have previously visited our website

The Meta Pixel collects data such as pages visited, products viewed, items added to cart, and purchases made. This data is shared with Meta Platforms, Inc. and is subject to Meta’s Privacy Policy. You can opt out of Meta’s interest-based advertising through your Facebook ad settings or by using the Digital Advertising Alliance’s opt-out tool at optout.aboutads.info.

3.3 Google Analytics (GA4)

We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC, to:

  • Analyze website traffic and usage patterns
  • Understand how users navigate our website and interact with our content
  • Generate reports on website activity to improve our services
  • Measure the performance of our marketing campaigns

Google Analytics collects data through cookies and may transfer data to Google servers in the United States. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on. For more information, see Google’s Privacy Policy.

3.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when a cookie is being set. Please note that disabling cookies may affect the functionality of our website, particularly the shopping cart and checkout process.

4. Third-Party Services

We share your personal information with the following third-party service providers who assist us in operating our business:

  • Shopify: Our e-commerce platform hosts our online store, processes payments, and manages order data. Shopify’s use of your information is governed by Shopify’s Privacy Policy.
  • Meta Platforms, Inc.: Advertising and audience targeting through the Meta Pixel on Facebook and Instagram.
  • Google LLC: Website analytics through Google Analytics (GA4) and potentially Google Ads.
  • Shipping carriers: Canada Post, USPS, UPS, or other carriers used to deliver your orders.
  • Email service providers: For sending transactional emails (order confirmations, shipping updates) and marketing communications.

We only share information necessary for these providers to perform their services. We do not sell your personal information to third parties.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

  • Order and transaction data: Retained for 7 years from the date of the transaction for tax, accounting, and legal compliance purposes
  • Account information: Retained for the duration of your account and for 2 years following account closure or last activity
  • Marketing data: Retained until you unsubscribe from our communications or request deletion
  • Website analytics data: Retained in accordance with Google Analytics and Meta Pixel default retention settings (typically 14–26 months)
  • Customer service communications: Retained for 3 years from the date of the last communication

When your personal information is no longer needed, we will securely delete or anonymize it.

6. Data Security

We take reasonable precautions to protect your personal information from unauthorized access, use, alteration, or disclosure. Our security measures include:

  • SSL/TLS encryption: All data transmitted between your browser and our website is encrypted using industry-standard SSL/TLS protocols
  • PCI-DSS compliance: Payment processing is handled by Shopify Payments, which is PCI-DSS Level 1 compliant. We do not store, process, or have access to your full credit card information
  • Access controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions
  • Secure platform: Our website is hosted on Shopify’s secure infrastructure, which undergoes regular security audits

While we implement reasonable security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

7. International Data Transfers

NTRL Diffuser Co is based in Canada. Your personal information may be transferred to, stored, and processed in countries other than your country of residence, including Canada and the United States, where our service providers (such as Shopify, Google, and Meta) maintain servers and operations.

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with data protection laws, please be aware that these countries may not provide the same level of data protection as your home country. By using our website and providing your information, you consent to the transfer of your data to these countries. We rely on the following safeguards for international transfers:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions recognizing Canada’s adequate level of data protection under PIPEDA
  • Contractual obligations with our service providers requiring appropriate data protection

8. Your Privacy Rights

8.1 Rights Under Canadian Privacy Law (PIPEDA)

If you are a Canadian resident, the Personal Information Protection and Electronic Documents Act (PIPEDA) provides you with the following rights:

  • Right of access: Request access to the personal information we hold about you
  • Right to correction: Request correction of inaccurate or incomplete personal information
  • Right to withdraw consent: Withdraw your consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions
  • Right to complain: File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

8.2 Rights Under US State Privacy Laws (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with the following rights:

  • Right to know: Request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collection, and the third parties with whom we share it
  • Right to delete: Request deletion of your personal information, subject to certain exceptions
  • Right to correct: Request correction of inaccurate personal information
  • Right to opt out: Opt out of the “sale” or “sharing” of your personal information. We do not sell your personal information in the traditional sense; however, certain advertising activities (such as targeted advertising through the Meta Pixel) may constitute “sharing” under the CCPA/CPRA. You may opt out of this by contacting us
  • Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights

We are required to respond to verified consumer requests within 45 days.

8.3 Rights Under the EU General Data Protection Regulation (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the GDPR provides you with the following rights:

  • Right of access: Request a copy of your personal data
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure (“right to be forgotten”): Request deletion of your personal data in certain circumstances
  • Right to restrict processing: Request that we limit how we use your data
  • Right to data portability: Receive your personal data in a structured, commonly used, and machine-readable format
  • Right to object: Object to our processing of your personal data for direct marketing or based on legitimate interests
  • Right to withdraw consent: Withdraw your consent at any time where processing is based on consent

We will respond to GDPR-related requests within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8.4 Exercising Your Rights

To exercise any of the rights described above, please contact us at ntrldiff@gmail.com. We may need to verify your identity before processing your request. We will respond within the timeframes required by applicable law.

9. Children’s Privacy

Our website and products are not intended for individuals under the age of 19. We do not knowingly collect personal information from children under 19. If we become aware that we have collected personal information from a person under 19, we will take steps to delete that information promptly. If you believe that a person under 19 has provided us with personal information, please contact us at ntrldiff@gmail.com.

10. Do Not Track Signals

Some browsers transmit “Do Not Track” (DNT) signals to the websites you visit. Because there is no universally accepted standard for how to respond to DNT signals, our website does not currently respond to DNT signals. However, you can manage your privacy preferences through your browser settings and by opting out of tracking as described in Section 3 of this policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us:

NTRL Diffuser Co
Email: ntrldiff@gmail.com
Address: 1320 Carling Ave, Ottawa, ON K1Z 7K8, Canada
Website: ntrldiffuser.com

For Canadian privacy complaints, you may also contact the Office of the Privacy Commissioner of Canada.