Privacy policy
1. Who we are and what this policy covers
Last updated: October 20, 2026
Vasanti Cosmetics ("Vasanti", "we", "us") operates the website vasanticosmetics.ca and the related online store (the "Service"). This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the choices and rights you have. It applies to visitors and customers of vasanticosmetics.ca.
We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for residents of Quebec, Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25).
By using the Service, you acknowledge the practices described in this policy. Where we rely on your consent, you can withdraw it at any time, as explained in sections 4, 5 and 8.
Terms used in this policy have the same meanings as in our Terms of Service, unless defined here.
Person responsible for the protection of personal information
Ketan Patel, VP of Growth, Vasanti Cosmetics, Attn: Privacy, 32 Cranfield Road, Unit 1306, Toronto, Ontario M4B 3H3, Canada, privacy@vasanticosmetics.com
2. Information we collect
We collect only what we need for the purposes in section 3.
| Type | Examples | How we get it |
|---|---|---|
| Contact and account information | Name, email, phone number, shipping and billing address, account login | You provide it when you order, create an account, or sign up for emails or texts |
| Order information | Products bought, order value, discount or gift card codes used, returns | Created when you place an order |
| Payment information | Payment card details | Processed directly by Shopify Payments and other payment providers; we do not store full card numbers |
| Communications | Messages you send us, reviews you post, quiz answers (e.g. shade-matching) | You provide it |
| Device and usage information ("Log Data") | IP address, browser and device type, pages visited, time and date of visit, time spent on pages, referring site, approximate location | Collected automatically through cookies and similar technologies (section 4) |
| Marketing preferences | Email and SMS opt-ins and opt-outs, and the timestamp of your consent | You provide it; recorded automatically |
We do not knowingly collect sensitive personal information, such as health information.
3. How we use your information and our basis for doing so
We use personal information to:
Process and deliver your orders, handle returns and exchanges, and provide customer service.
Create and manage your account and any rewards or loyalty benefits.
Run promotions and redeem gift cards and discount codes, including partner programs.
Send order and shipping updates.
Send marketing emails and text messages, only if you have opted in (section 5).
Remind you about items left in your cart, by email or SMS where you have opted in.
Understand how our website is used and improve it, our products and our service.
Show relevant ads on other sites and measure how well our ads work (section 4).
Protect the Service, prevent fraud and bot activity, and meet legal, tax and accounting obligations.
We rely on your consent for these purposes. Depending on the situation, that consent is express (for example, ticking a box to receive texts, or accepting cookies where required) or implied (for example, using your address to ship an order you placed). We will ask for your consent again before using your information for a new purpose.
4. Cookies and similar technologies
Cookies are small files that a website stores in your browser. We and our partners use cookies, pixels and similar technologies to run the store, remember your choices, understand how the site is used, and show and measure ads.
Categories we use
| Category | What it does | Providers (examples) |
|---|---|---|
| Necessary | Runs the store: cart, checkout, security, bot protection, remembering your cookie choice. Always on. | Shopify, Shop Pay, Consentmo |
| Statistics | Shows us how visitors use the site, including session recordings of how people move through our pages, so we can improve it. | Shopify Analytics, Google Analytics, Hotjar, Hue (using Mixpanel and Statsig) |
| Marketing | Shows you relevant ads on other sites, measures ad results, and powers email and SMS cart reminders. | Meta (Facebook and Instagram), Google Ads and Google Merchant Center, Pinterest, Klaviyo |
| Preferences | Remembers settings such as your region, currency and language, and products you have viewed so we can recommend others. | Shopify, Rebuy |
Your choices
When you first visit, a cookie banner lets you accept, reject or choose categories. You can change your choice at any time using the Cookie preferences link in the footer of every page. Necessary cookies cannot be turned off because the store does not work without them.
Quebec: Statistics, Marketing and Preferences cookies stay off until you choose to allow them.
Rest of Canada: these cookies are on by default, and you can turn them off through the banner or the Cookie preferences link.
You can also block or delete cookies in your browser settings, though parts of the store, such as the cart, may then stop working.
We also use cookies to keep track of items in your cart, including when a cart is left behind. If you have opted in to texts or emails, we use this to send cart reminders.
5. Email and text message marketing
We send marketing emails and text messages only to people who have opted in, as required by Canada's Anti-Spam Legislation (CASL). We record when and how you gave consent.
Email: sent through Klaviyo. Unsubscribe anytime with the link at the bottom of any email.
Text messages (SMS): sent through Klaviyo. Reply STOP to any message to opt out. Message and data rates may apply, and message frequency varies.
Your text messaging opt-in data and consent will not be shared with any third parties for their own marketing purposes.
Opting out of marketing does not stop order, shipping or account messages, which we need to send to complete your purchase.
6. Who we share information with
We do not sell your personal information for money. We share it only with service providers who help us run the Service, for the purposes in this policy, and with others where the law requires it.
Our service providers fall into these groups:
E-commerce platform and payments: Shopify (store, checkout, Shop Pay, payments).
Shipping and fulfillment: carriers and logistics partners that deliver your order.
Email and SMS: Klaviyo.
Analytics and reporting: Google Analytics, Hotjar, Lifetimely, Hue (using Mixpanel and Statsig), and others listed in section 4.
Advertising: Meta, Google, Pinterest and Shopify Collabs (creator partnerships).
Reviews, rewards and customer service: Okendo, Smile.io.
Product recommendations: Rebuy, which uses your browsing and cart activity on our site to suggest products.
Shade matching and video reviews: Hue, which powers our Find My Shade quiz and product video reviews, and receives your quiz answers and activity on those features.
Security and consent management: Consentmo.
These providers may access your personal information only to perform tasks on our behalf. They are bound by contract to protect it and not to use or disclose it for any other purpose. Advertising partners such as Meta, Google and Pinterest may also use information collected through our site for their own purposes, under their own privacy policies.
We may also disclose information to comply with the law or a valid legal request, to protect our rights or the safety of others, or as part of a sale or reorganization of our business.
Processing outside Quebec and Canada
Many of our providers are based in, or store data in, the United States and other countries. Your information may therefore be processed outside Quebec and outside Canada, where it may be accessible to local courts, law enforcement and national security authorities under those countries' laws. We use contracts with our service providers to require that your information is protected, wherever it is processed.
7. Retention, security and links to other sites
How long we keep information
We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires. For example:
Order and payment records: 7 years, for tax and accounting.
Account information: until you close your account or ask us to delete it, except for order records we must keep for legal, tax or accounting reasons.
Marketing consent records: kept in our email and SMS platforms for as long as you are subscribed, and after you unsubscribe until we remove inactive profiles as part of routine data clean-up or you ask us to delete your information. We keep a record of your opt-out so we do not contact you again.
Analytics and advertising data: according to each provider's retention settings. For Google Analytics, detailed event data is kept for 2 months and user-level data for 14 months.
When we no longer need information, we delete it or make it anonymous.
Security
We use reasonable administrative, technical and physical safeguards to protect personal information, including encrypted (HTTPS) connections and access limited to staff and providers who need it. No method of transmission over the internet or electronic storage is 100% secure, so we cannot guarantee absolute security. If a breach creates a real risk of significant harm, we will notify you and the relevant privacy regulator as the law requires.
Links to other sites
Our Service may link to other websites, such as social media pages. Those sites are not operated by us and have their own privacy policies, so please review them. We are not responsible for the content or practices of third-party sites.
8. Your rights
You can ask us to:
Access the personal information we hold about you and learn how we have used and shared it.
Correct information that is inaccurate or incomplete.
Withdraw consent to our collection, use or sharing of your information, subject to legal or contractual limits. For cookies, use the Cookie preferences link in the footer; for marketing, use the unsubscribe link or reply STOP. Withdrawing consent may mean we can no longer provide some services, such as order delivery.
Delete your account and personal information, unless we must keep it by law.
Additional rights for Quebec residents
You may also ask us to:
Provide your personal information in a structured, commonly used technology format, or transfer it to another organization.
Stop disseminating your personal information, or de-index any link attached to your name, where the law allows.
We do not make decisions about you based solely on automated processing.
How to make a request
Use our Canadian Privacy Rights page to request a copy of your data, a correction or deletion, or to update your privacy settings. You can also email privacy@vasanticosmetics.com or write to the address in section 1. We may need to verify your identity before acting. We will respond within 30 days, or tell you if we need more time as the law allows.
Complaints
Please contact us first so we can try to resolve your concern. You also have the right to complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information du Québec.
9. Children, changes to this policy, and contact
Children's privacy
Our Service is not directed to anyone under the age of 14. We do not knowingly collect personal information from children under that age. If we learn that a child has given us personal information, we will delete it promptly. If you are a parent or guardian and believe your child has given us personal information, please contact us so we can take the necessary steps.
Changes to this policy
We may update this policy from time to time. We will post the new version on this page and update the "Last updated" date at the top. If we make significant changes to how we use your information, we will tell you more prominently, for example by email or a notice on the site, and ask for your consent where the law requires.
Contact us
For questions, requests or concerns about this policy or your personal information, contact our privacy contact:
Ketan Patel, VP of Growth, Vasanti Cosmetics, Attn: Privacy, 32 Cranfield Road, Unit 1306, Toronto, Ontario M4B 3H3, Canada, privacy@vasanticosmetics.com