Privacy Policy

We are a farm and ranch supply store in Millet, Alberta. We collect the information we need to take your order, deliver it, answer your questions and run the store. We do not sell your personal information, and we never see your full credit card number. You can ask us at any time what we hold about you, have it corrected, or have your account deleted.

This policy applies to pipestonefarmsupply.ca and to Pipestone Farm Supply at 4918 50 St, Millet, Alberta T0C 1Z0. We handle personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA). We have designated a Privacy Officer who is accountable for the practices described here.

When you browse, we collect standard technical information: your IP address, browser and device type, the pages you view and the site you arrived from. We use this to keep the site working, to keep it secure, and to understand which products and pages people find useful.

When you place an order, we collect your name, email address, phone number, shipping and billing address, an optional company name, and the contents of your order. We use this to take payment, fulfil the order, arrange shipping or in-store pickup, handle returns and warranty questions, and meet our tax and record-keeping obligations.

When you create an account, we store your email address and a securely hashed password, along with your order history and any addresses you save. When you write a product review, we store the review text and the display name you choose. When you subscribe to our newsletter, we store your email address until you unsubscribe. When you contact us, we keep your message and our reply so we can help you properly next time.

We do not collect or store your full credit card number. Card details are entered directly into our payment processor, Stripe, which is PCI-DSS compliant. We receive only a confirmation that payment succeeded and the last four digits of the card.

We use a small number of cookies and browser storage keys, and we would rather tell you exactly what they are than hide behind a generic notice.

Strictly necessary: session-id keeps your session active; __dpl is set by our hosting platform to serve you the correct version of the site; __stripe_mid is set by Stripe to detect and prevent payment fraud; and an authentication token beginning sb- keeps you signed in to your account.

Functional: pfs.cart.v1 remembers what is in your cart between visits, and pfs_newsletter_popup_v1 remembers that you have already seen or dismissed the newsletter signup so we do not show it again.

Analytics and advertising: described in the next section.

You can block or delete cookies in your browser settings. The strictly necessary ones cannot be turned off without breaking sign-in, the cart or checkout.

We use Google Analytics 4 to understand how the site is used, and Google Ads to measure and improve our advertising. These set cookies and may be used to show you our ads on other sites after you visit ours, a practice usually called remarketing.

We apply Google Consent Mode, and we deliberately do not send analytics or advertising identifiers to Google before consent for visitors in regions that require prior consent.

Where a purchase is completed we may send Google a securely hashed, irreversible version of your email address or phone number so that a sale can be matched to an ad click. Google receives the hash, not your address. We do not send Google your name, your street address, or the contents of your order as personal information.

We do not sell your personal information, and we do not share it with advertising networks for their own purposes.

To opt out: you can turn off personalised Google advertising at myadcenter.google.com, install Google's analytics opt-out browser add-on from tools.google.com/dlpage/gaoptout, or block cookies in your browser. The store will still work.

We share only what each provider needs to do its job: Stripe for payment processing; Supabase for hosting and our database; Google for the analytics and advertising described above; and the shipping carriers we use to deliver your order. Each processes your information on our instructions. Some of these providers store or process data outside Canada, including in the United States, where it may be accessible to foreign courts, law enforcement and regulators under the laws of that country. We may also disclose information where the law requires it, or to protect our rights, property or safety.

Order and transaction records are kept for at least six years, in line with Canada Revenue Agency record-keeping requirements. Account information is kept until you ask us to delete the account. Newsletter subscriptions are kept until you unsubscribe. Analytics data is retained for 14 months.

You can ask us what personal information we hold about you and why, ask us to correct anything that is wrong, ask us to delete your account, or withdraw your consent to marketing at any time. Every marketing email also has an unsubscribe link. We will respond within 30 days, and we will not charge you or treat you differently for asking. If you are not satisfied with our response you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca, or the Office of the Information and Privacy Commissioner of Alberta at oipc.ab.ca.

The site runs over HTTPS, account passwords are stored hashed, administrative access is restricted to staff who need it, and card data is handled by Stripe and never stored on our systems. No system is perfectly secure, but we take reasonable steps to protect what you give us, and we will notify you and the appropriate regulator if a breach creates a real risk of significant harm.

The store is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

If we change how we handle personal information we will update this page and change the date at the top. If the change is significant we will say so on the site.

Privacy Officer, Pipestone Farm Supply, 4918 50 St, Millet, Alberta T0C 1Z0. Phone (403) 679-5334. You can also reach us through the contact page on this site.