Vistara Labs is a Canadian business. We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). This policy sets out what we collect, why we collect it, and who else sees it.
What We Collect
When you place an order: your name, email address, shipping address, phone number if you provide one, and the contents of your order.
When you join our mailing list, enter a giveaway, or use the contact form: your email address and anything you choose to write in your message.
Automatically: our server keeps standard access logs, and your browser stores a cart cookie so your items are still there when you return. That cookie holds nothing that identifies you.
What We Do Not Do
We use a self-hosted, cookieless tool to count page views. We do not use third-party analytics services, advertising pixels, or cross-site trackers. We do not build advertising profiles, and we never sell, rent, or trade your information.
How We Use It
Order information is used to process and ship your order and to reply to you if you write to us about it. Every order is reviewed by a person before dispatch.
If you enter your email address at checkout but do not complete the order, we may send you a short reminder. You can opt out of these at any time.
Mailing list subscribers receive occasional product and offer emails. Every message carries an unsubscribe link, and unsubscribing takes effect immediately.
Payment Information
Card payments are handled by an external payment processor. Card details are entered with that processor and are never received or stored on our systems.
Interac e-Transfer payments are made through your own bank. We receive confirmation that a transfer arrived, and we never see your banking credentials.
Who Else Sees It
The carrier delivering your parcel receives your name and shipping address.
Providers that run the site on our behalf, covering hosting, content delivery, email delivery, and payment processing, handle limited information solely to provide those services. Some of them operate outside Canada, so information may be stored or processed in another country and be subject to its laws.
Nobody else sees it, unless we are legally required to disclose it.
How Long We Keep It
Order records are kept for six years. Mailing list details are kept until you unsubscribe. Access logs are kept briefly and then discarded.
Your Information
Write to [email protected] to ask what we hold about you, to have it corrected, or to have it erased, and we will respond within 30 days. Erasure covers everything except completed order records, which we are required to keep for the period above.
Security
The site runs over HTTPS, and access to order data is limited to those who need it. No system is perfectly secure; if a breach ever affects your information, we will tell you and notify the authorities where required.
Contact
Last updated 8 September 2026.
