Privacy policy

Last updated: October 16, 2026

Astra MD ("us", "we", or "our") operates this online store (the "Service"). This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit or make a purchase through the Service.

PERSONAL INFORMATION WE COLLECT

When you place an order or contact us, we may collect:

- Your name, email address, phone number, billing and shipping address

- Order details and purchase history

- Payment information, which is collected and processed by our payment processor and is not stored by us

We collect, use and disclose personal information in accordance with applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy requirements.

Our Service is intended for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18.

HOW WE USE YOUR INFORMATION

We collect personal information only for reasonable purposes and only to the extent necessary for those purposes, including to:

- Process and fulfill your order, including shipping and payment

- Respond to your inquiries and provide customer support

- Maintain accurate order and account records

- Improve our website and the Service

- Meet legal, regulatory, security and fraud-prevention requirements

- Send you updates about your order

CONSENT

We will obtain your consent to collect, use or disclose personal information, unless we are permitted or required by law to do so without consent. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice; withdrawing consent may affect our ability to provide certain services, such as processing an order already placed.

We do not sell your personal information.

MARKETING COMMUNICATIONS

We may send marketing or promotional communications only where permitted by applicable law, including Canada's Anti-Spam Legislation (CASL), and only where appropriate consent has been obtained. You may withdraw consent to marketing communications at any time using the unsubscribe link in our emails or by contacting us directly.

LOG DATA AND COOKIES

We may collect information that your browser sends when you visit the Service ("Log Data"), which may include your IP address, browser type, the pages you visit, and the time and date of your visit. We use cookies and similar technologies to operate, improve, and analyze the Service; you can set your browser to refuse cookies, though some parts of the Service may not function properly without them.

We may use third-party services, including analytics and advertising tools, to help us understand how the Service is used. These providers have their own privacy policies governing how they use such information.

SERVICE PROVIDERS

We may employ third-party companies, including our e-commerce platform, payment processor, and shipping carriers, to facilitate the Service on our behalf. These providers may access personal information only to perform tasks for us and are required to protect it and not use it for any other purpose.

CROSS-BORDER PROCESSING

Some of our service providers may store or process personal information outside Ontario or outside Canada. Where this occurs, that information may be subject to the laws of the jurisdiction where it is stored or processed. We use reasonable contractual and security measures to protect personal information handled by our service providers.

RETENTION AND DESTRUCTION

We retain personal information only as long as necessary to fulfill the purposes it was collected for, or as required for legal, regulatory, or business purposes. When no longer required, we securely destroy, delete, or anonymize it.

SAFEGUARDS

We use reasonable physical, organizational and technical safeguards to protect personal information against loss, theft, unauthorized access, disclosure, copying, use or modification.

BREACH NOTIFICATION

If a privacy breach creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada where required by law, and keep records of the breach as required.

YOUR PRIVACY RIGHTS

Subject to applicable law, you may:

- Request access to the personal information we hold about you

- Request correction of inaccurate or incomplete information

- Ask how your information has been used or disclosed

- Withdraw consent to its collection, use or disclosure, subject to legal or contractual restrictions

Requests must be made in writing with enough detail for us to identify you and respond.

COMPLAINTS

If you have a concern about our privacy practices, contact us first so we can review and respond. If your concern is not resolved, you may contact the Office of the Privacy Commissioner of Canada.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Changes are effective when posted on this page. If we make material changes, we will notify you through the email address you have provided or by a notice on our website.

CONTACT US

If you have questions about this Privacy Policy, contact us at info@astramdskincare.com