Privacy policy
Last Updated: December 9, 2025
HeyWhiskey (“Company,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information in compliance with Canadian (PIPEDA, CPPA) privacy laws.
This policy applies to all users accessing or purchasing from heywhiskeyshop.com including customers in Canada.
1. Who We Are—Corporate Identity & Legal Operator
HeyWhiskey is a brand operated by the company Andrii Khavro
Registered Company Name: Andrii Khavro
Company Registration Number: 1001221008
VAT Number: 700711823RT0001
Registered Address: 8 Mercer Street, Toronto, Ontario, M5V 0C4, Canada.
Email: info@heywhiskeyshop.com
Phone: +1 437-870-1603
Business Hours: 9:00 AM–5:00 PM (Monday to Friday), (GMT-05:00) Eastern America Standard Time (Toronto)
2. Types of Personal Information We Collect
A. Direct Information (Provided by You)
- Full name
- Shipping/billing address
- Phone number
- Email address
- Account login data
- Order, return, refund, and warranty information
- Customer service communications
- Uploaded files or attachments
B. Payment Details (Securely Processed)
Collected by third-party processors (Visa, Mastercard, PayPal, Apple Pay, Google Pay, Shop Pay, etc.):
- Partial card info (masked)
- Transaction status & ID
- Fraud detection logs
We never store full credit card numbers or CVV codes.
C. Automatically Collected Data (Advanced Behavioral Tracking)
- IP address
- Geo-location (approximate)
- Device identifiers
- Browser details
- Session duration
- Pages visited
- Heatmaps & scroll tracking.
- Referrer URLs
- Shopping behavior patterns
- Abandoned cart activity
D. Cookies & Digital Identifiers
Includes:
- Session cookies
- Preference cookies
- Analytics cookies
- Advertising cookies
- Device fingerprinting identifiers
- Pixel tags
- Web beacons
- Server logs
E. Marketing Interaction Data
- Email open rate
- Link click tracking
- SMS deliveries & interaction logs
- Ad engagement metrics
F. Third-Party Data Integration
If you interact via:
- Google Login
- Facebook Login
- Apple Login
We may receive a name, email, profile ID, and authentication confirmation.
3. How We Use Your Information
A. Order Processing & Ecommerce Operations
- Validating orders
- Shipping to Canada
- Handling cancellations
- Processing returns & exchanges.
- Issuing refunds or warranty replacements
B. Customer Service & Communication
- Responding to inquiries
- Sending order updates
- Providing technical support
- Managing complaints
C. Marketing, Personalization & Advertising
- Personalized product recommendations
- Retargeting ads on Meta, Google, TikTok
- Email marketing
- Promotional notifications
- Behavioral segmentation
You may unsubscribe anytime.
D. Analytics, Research & Website Optimization
- Measuring traffic
- Understanding customer navigation
- Improving site layout
- A/B testing
- Troubleshooting errors
E. Fraud Detection & Security Monitoring
- Block suspicious transactions
- Identify stolen credit cards
- Protect accounts
- Prevent fraudulent returns
F. Legal & Regulatory Requirements
- Tax compliance
- Responding to lawful data requests
- Preventing misuse or abuse
4. Legal Basis for Data Collection
Canada (PIPEDA)
We rely on:
- Consent
- Contractual necessity
- Legitimate interest
- Legal obligation
5. Cookies & Tracking Technology
We use cookies for:
- Website operation
- Security verification
- Cart & checkout functionality
- Personalized advertising
- Analytics & performance tracking
Users can disable or customize cookie preferences at any time through their browser or cookie settings.
6. Sharing & Disclosure of Information
We may share information with:
A. Service Providers (Operational Support)
- Shopify
- Shipping carriers
- Payment processors
- Fraud monitoring companies
- Cloud hosting providers
B. Advertising/Marketing Partners
- Meta (Facebook, Instagram)
- Google Ads
- TikTok Ads (if used)
C. Legal & Government Authorities
Only when required by:
- Law
- Regulation
- Court order
D. Business Transfers
If HeyWhiskey is acquired, merged, or sold.
We do not sell personal data for money.
7. International Data Transfers
Your data may be processed in:
- Canada
- Other jurisdictions (via cloud partners)
We apply:
- Contractual safeguards
- Secure transfer mechanisms
- GDPR-equivalent protection
8. Data Retention
|
Data Type |
Retention Period |
Reason |
|
Order history |
7–10 years |
Accounting & tax compliance |
|
Customer accounts |
Until deleted by user |
Core service |
|
Payment logs |
2–3 years |
Fraud prevention |
|
Marketing preferences |
Until unsubscribed |
Customer choice |
|
Cookies |
30 days–2 years |
Website optimization |
|
Customer support messages |
3–5 years |
Quality & legal |
|
Warranty & return claims |
3–7 years |
Legal & service reference |
9. Security Measures
We protect your data through:
- SSL website encryption
- HTTPS secure browsing
- PCI-DSS-compliant payment processing
- Firewalls & anti-malware
- IP-based fraud scoring
- Device fingerprinting
- 24/7 security monitoring
- Limited employee data access
- Secure password hashing
Despite advanced protections, no system is 100% hack-proof.
10. Your Privacy Rights
HeyWhiskey respects the rights of customers located in Canada and their rights under the Personal Information Protection and Electronic Documents Act (PIPEDA).
10.1. Privacy Rights for Canadian Users (PIPEDA & Provincial Privacy Laws)
You have the following rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s provincial privacy regulations (Ontario, Alberta, British Columbia, and Quebec):
A. Right to Access Your Personal Information
You may request:
- A complete copy of the personal data we hold about you
- Information on how your data is used
- Categories of data collected
- Names of third parties your data is shared with
- Explanation of data processing purposes
We provide this information free of charge, typically within 30 days.
B. Right to Correct (Rectify) Inaccurate Information
If any personal information we hold is incorrect, outdated, incomplete, or misleading, you may request:
- Correction
- Update
- Amendment
We will make the changes promptly and notify relevant third parties where legally required.
C. Right to Withdraw Consent
Where consent is required (e.g., marketing emails), you may withdraw your consent at any time.
This does not affect:
- Order confirmation emails
- Legal notifications
- Security messages
D. Right to Request Data Deletion
You may request deletion of your personal information unless the data must be retained for:
- Tax records
- Fraud prevention
- Legal obligations
- Warranty or return history
- Transaction history
We delete what we legally can and inform you of any exceptions.
E. Right to Challenge Compliance
If you believe your data has been mishandled, you may file a complaint with:
- HeyWhiskey Privacy Office
- Office of the Privacy Commissioner of Canada (OPC)
- Provincial privacy authorities
We will cooperate fully with investigations.
F. Right to Transparency
You have the right to clear and understandable information about:
- Why data is collected
- How long it is kept
- Who has access
- What safeguards protect your data
G. Right to Be Informed of Data Breaches
If your personal information is involved in a breach that poses a real risk of significant harm, we will notify you as required under PIPEDA.
H. Right to Opt-Out of Direct Marketing
You may opt out of:
- Email promotions
- SMS promotions
- Retargeting or personalized marketing
- Newsletter subscriptions
You will still receive essential transactional messages.
11. How To Exercise Your Rights
You may exercise any of the rights above by contacting us:
- Email: info@heywhiskeyshop.com
- Phone: +1 437-870-1603
Verification Required
To prevent fraud, we may verify your:
- Email address
- Billing/shipping address
- Recent order numbers
- Identity confirmation
Response Time
- Canada: Up to 30 days
12. Automated Decision-Making & Profiling
We may apply algorithms for:
- Fraud detection
- Personalized ads
- Product recommendations
- Risk scoring
You may request to opt out.
13. Data Breach Response Plan
If a breach occurs:
1. Assess severity
2. Notify affected users
3. Report to regulators (PIPEDA requirement)
4️. Secure systems
5️. Prevent future breaches
14. Third-Party Links Disclaimer
We are not responsible for the privacy practices of:
- External websites
- Affiliate partners
- Advertising networks
15. Children’s Privacy Protection
We do not knowingly collect data from children under 16.
Parents may request immediate deletion.
16. Business Continuity & Data Backup Policy
We maintain:
- Secure data backups
- Disaster recovery plans
- Redundant storage systems
To ensure that customer data is not lost due to hardware failures.
17. Data Minimization & Purpose Limitation
We only collect data that is
- Necessary
- Purpose-driven
- Legally justified
No unnecessary or excessive data is stored.
18. User Responsibility Section
Users agree to:
- Provide accurate information
- Protect their passwords
- Use the site legally
- Avoid fraudulent activity
19. Policy Update & Version Control
HeyWhiskey may modify this Privacy Policy at any time.
Updates may occur due to:
- New legal requirements (Canada)
- New website features
- Third-party service changes
- Business structure updates
- Security improvements
How we notify changes:
- Updated “Last Updated” date on this page
- Optional email notification
- Website announcement
Continued use of the website indicates acceptance of updated policies.
20. Contact Information
For questions, complaints, or rights requests:
HeyWhiskey is a brand operated by the company Andrii Khavro
Registered Company Name: Andrii Khavro
Company Registration Number: 1001221008
VAT Number: 700711823RT0001
Registered Address: 8 Mercer Street, Toronto, Ontario, M5V 0C4, Canada.
Email: info@heywhiskeyshop.com
Phone: +1 437-870-1603
Business Hours: 9:00 AM–5:00 PM (Monday to Friday), (GMT-05:00) Eastern America Standard Time (Toronto)