Privacy policy

 

LAST UPDATE TO PRIVACY POLICY MADE: DECEMBER 10, 2022

INTRODUCTION

Tom And Sawyer Inc. (“Tom&Sawyer”) believes that the transparency of everything we do is what builds and maintains the trust of its valued customers and those who engage in any business transaction with us. The following information relates to how we gather and use various types of information of persons interacting with us digitally.

This Tom&Sawyer Website Privacy Policy (the “Privacy Policy”) applies to the Tom&Sawyer website located at https://tomandsawyer.com (the “Site”). The terms “Tom&Sawyer,” “we,” “us” and “our” includes Tom&Sawyer Inc. and our affiliates and subsidiaries. This Privacy Policy explains how Tom&Sawyer may collect, use and disclose Personal Information (defined below) that we obtain through the Site, from your communications with us and/or from third parties. We describe, in the sections below, what we do with your information and choices available to you in how you interact with the Site and related platforms in which you may interact with us. 

As further outlined in this Privacy Policy, you agree to the terms and conditions of this Privacy Policy in their entirety when you access or use the Site for various purposes, including but not limited to: view videos, read content, place an order or enquire about products or subscriptions; access links to Tom&Sawyer’s social media pages/accounts on third party social media websites, such as Facebook, Instagram, Pinterest, Tik Tok, Twitter and YouTube (collectively, “Social Media Pages”); enter promotional offerings by Tom&Sawyer from time-to-time; and/or use any of the Site’s features, which may require the use of third party applications to provide services to you as the end user.

Please note that we currently offer our products and services to residents of Canada only. If you reside outside of Canada and are a resident elsewhere, such as a European Union Member State, resident of the State of California or any other governing law outside of Canada, you are not permitted to use the Site and/or the associated products, services and other offerings made available on the Site (collectively, the “Site Offerings”). 

IF YOU DO NOT RESIDE IN CANADA OR DO NOT AGREE TO THE TERMS OF THIS PRIVACY POLICY IN THEIR ENTIRETY, YOU MAY NOT ACCESS OR OTHERWISE USE THE SITE OR SITE OFFERINGS.  

Users with disabilities who wish to access this Privacy Policy in an alternative format can contact us in writing at: 

Tom And Sawyer Inc.
Attention: Privacy Officer
1247 Queen Street East
Toronto, Ontario M4L 1C2 

SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?

When you purchase something from our Site, engage with our Social Media Pages, enter a contest or provide your email address while on our website, as part of the buying and selling process and any other interaction with our company online, we collect the personal information you give us such as your name, phone number, address and email address.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.

With your permission, we may send you emails or updates about our store, new products and other updates by email, text or by other means of communication. Updates include Checkout Reminders. Webhooks will be used to trigger the Checkout Reminders messaging system.

By submitting your Personal Information by and through the Site Offerings, you agree that we may provide that Personal Information (other than Sensitive Information) to any third-party for any purpose permitted by law and work with other businesses to bring selected third-party offers to you and to enhance our Site. These businesses and third-parties may include, but are not limited to providers of direct marketing services and applications and e-mail marketers. 

SECTION 2 – CONSENT

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no or to cease proceeding within one or several areas on our Site.

How do I withdraw my consent? If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by either clicking the unsubscribe option at the bottom of our e-mail correspondence to you or by mailing us at:

Tom And Sawyer Inc.
Attention: Privacy Officer
1247 Queen Street East
Toronto, Ontario M4L 1C2 

As a Canadian resident, you can also contact us at the above address if you have any questions about the accuracy of the Personal Information that we have collected about you, you can obtain access to that Personal Information in order to verify and update it, unless we required under applicable law to refuse your access to such Personal Information. We will respond to requests within thirty (30) days.

You have the right to notify the Office of the Privacy Commissioner of Canada regarding any issues related to your request. We reserve the right to save transaction data as is necessary to comply with legal obligations or for purposes of standard business operations.

SECTION 3 – DISCLOSURE

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.

SECTION 4 – SHOPIFY

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.

Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall. Shopify also uses subprocessors for personal customer data.

Payment:
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.

PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).

SECTION 5 – THIRD-PARTY SERVICES

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.

Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

Service Providers:
We may share Personal Information with third party service providers who perform services on our behalf. These third parties are authorized to use your Personal Information only as necessary and in accordance with this Privacy Policy to provide these services to us, including, but not limited to: fulfilling orders; delivering orders; payment processing; and sending, evaluating and improving marketing communications.
We may also authorize third party service providers to use anonymized technical information in order to conduct research and analysis; marketing analytics and measurement (for example, Google Analytics, Facebook); measuring and improving the performance of the Site; and developing and improving Tom&Sawyer products and services.

Targeted Advertising:
We may combine Personal Information and technical information to help us deliver targeted advertising to consumers that is displayed on both Tom&Sawyer websites and unaffiliated websites, to assist us and our partners with providing better products and services, and to identify the audience most likely to respond to an advertisement. Third parties, including Facebook, may use cookies, web beacons, and other storage technologies to collect or receive information from our Site and elsewhere on the internet and use that information to provide measurement services and target ads, including Custom Audiences. You can understand and update your own Facebook preferences by accessing Facebook Ad Preferences. You can also learn more about opting out of remarketing pixels and technologies by visiting Networkadvertising.org

Should you wish to contact us for further information regarding the gathering and use of your Personal Information for the above purposes, or to unsubscribe to all targeting advertising from our Site, please email us at info@tomandsawyer.com with the subject line: Unsubscribe from Targeted Advertising List, and our Privacy Officer will be happy to assist you.

Links:
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

SECTION 6 – SECURITY

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

SECTION 7 – COOKIES

Like most other websites, Tom&Sawyer uses cookie technology throughout this Site. A cookie is a small removable data file that is stored by your web browser on your computer which often includes an anonymous unique identifier. Tom&Sawyer uses both session and persistent cookies on this Site; session cookies expire at the end of a particular visit to our Site, while persistent cookies (also called stored cookies) remain active until you disable them through your browser settings, or until a pre-set expiration date.

Most Internet browsers are initially set up to accept Cookies, but you can reset your browser to refuse all Cookies or to indicate when a Cookie is being sent. To disable and reject certain Cookies, follow the instructions associated with your Internet browser.  Even in the case where a User rejects a Cookie, you may still use the Site Offerings; provided, however, that certain functions of the Site Offerings may be impaired or rendered inoperable if the use of Cookies is disabled.  We reserve the right to retain Cookie data indefinitely. 

Here is a non-exhaustive list of some of the cookies that we use to help you choose if you want to opt-out of cookies or not.

_session_id
Unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc).
_shopify_visit
No data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
_shopify_uniq
No data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.
cart
Unique token, persistent for 2 weeks, Stores information about the contents of your cart.
_secure_session_id
Unique token, sessional storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
cartInfo
Used to transfer cart meta information, item_count & subtotal, between our shop domain and the rest of our site. Persistent for 1 day.

If you would like to learn more about other current cookies we use, please contact us at info@tomandsawyer.com and request to be contacted by the Privacy Officer for further assistance.

SECTION 8 – AGE OF CONSENT

By using this site, you represent that you are at least the age of majority in your province of residence, or that you are the age of majority in your province of residence and you have given us your consent to allow any of your minor dependents to use this site.

SECTION 9 – CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you. 

QUESTIONS AND CONTACT INFORMATION

If you would like to access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at info@tomsawyer.com or by mail at:

Tom&Sawyer
[Re: Privacy Compliance Officer]
1247 Queen St. East
Toronto, Ontario CA
M4L1C2

Facebook is a registered trademark of Facebook, Inc. (“Facebook”). Tik Tok is a registered trademark of Bytedance Ltd. (“Tik Tok”). LinkedIn is a registered trademark of LinkedIn Corporation (“LinkedIn”). Pinterest is a registered trademark of Pinterest, Inc. (“Pinterest”). Twitter is a registered trademark of Twitter, Inc. (“Twitter”). YouTube is a registered trademark of Google, Inc. (“Google”). Please be advised that Tom&Sawyer and its Site Offerings is not in any way affiliated or endorsed in any way with Facebook, Tik Tok, LinkedIn, Pinterest, Twitter, or Google.