Privacy policy

Privacy Policy

Last Updated: August 26, 2026

Octopied Mind Inc. cares about privacy and believes transparency matters. This Privacy Policy explains what personal information we collect, why we collect it, how we use and disclose it, how long we retain it, and the rights available to you.

By using our website or services, you acknowledge that you have read this Privacy Policy. Where consent is legally required, we request it separately at or before the time of collection.

1. Purpose and Scope

This Privacy Policy applies to personal information collected through octopiedmind.com, purchases, emails, SMS messages, customer support, surveys, reviews, loyalty and referral programs, social media interactions, and related services.

We handle personal information in accordance with privacy and data-protection laws applicable to our activities, including Canadian privacy laws, Quebec’s private-sector privacy law, the EU and UK GDPR, and applicable United States state privacy laws.

2. Personal Information We Collect

Information you provide

We may collect:

  • Your name, email address and telephone number

  • Shipping and billing addresses

  • Order, payment-status and transaction information

  • Account and login information

  • Communications sent through email, SMS, chat, surveys, reviews or customer support

  • Product preferences, survey responses and marketing preferences

  • Loyalty, referral and affiliate information

  • Return, exchange and warranty information

  • Any other information you voluntarily provide

Payment details are processed by payment providers such as Shopify Payments, Shop Pay, PayPal, Klarna and Sezzle. We generally do not receive or store complete payment-card numbers.

Information collected automatically

When you use our website, we may automatically collect:

  • IP address

  • Browser type, operating system and device information

  • Time zone and approximate location inferred from your IP address

  • Pages viewed, links clicked, referring websites and search terms

  • Cart activity, purchase activity and interactions with our website

  • Email and SMS delivery and engagement information

  • Cookie identifiers, advertising identifiers and analytics data

Information received from other sources

We may receive information from platforms and service providers involved in operating our business, including Shopify, payment processors, fulfillment providers, customer-support platforms, advertising platforms, analytics providers, loyalty providers, survey tools and social media platforms.

3. How We Use Personal Information

We may use personal information to:

  • Process and fulfill purchases, returns and exchanges

  • Provide customer service and respond to inquiries

  • Create and manage customer accounts

  • Communicate about orders, deliveries and support requests

  • Send marketing messages where permitted

  • Provide early access, waitlists, promotions and product notifications

  • Personalize shopping experiences and recommend products

  • Operate loyalty, referral, survey and affiliate programs

  • Detect and prevent fraud, abuse and security incidents

  • Maintain and improve our website, products and services

  • Measure website, advertising and campaign performance

  • Meet legal, tax, accounting and regulatory obligations

  • Establish, exercise or defend legal claims

4. Legal Bases for Processing

Where the EU or UK GDPR applies, we rely on one or more of the following legal bases:

  • Contract: To process orders, deliver products, manage returns and provide requested customer support.

  • Consent: To send marketing communications, use non-essential cookies, operate targeted advertising and process information for other purposes where consent is required.

  • Legitimate interests: To operate and improve our business, secure our services, prevent fraud, understand performance and respond to inquiries, provided those interests are not overridden by your rights.

  • Legal obligations: To comply with tax, accounting, consumer-protection and other applicable legal requirements.

  • Legal claims: To establish, exercise or defend our legal rights.

Where processing depends on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

5. Email Marketing

We send marketing emails only where you have consented or where sending is otherwise permitted by law.

Marketing emails may include product launches, early access, promotions, restock notifications, recommendations, surveys and company updates.

You may unsubscribe at any time using the unsubscribe link in an email or by contacting support@octopiedmind.com. We may retain a limited suppression record to ensure that your unsubscribe request continues to be respected.

6. SMS and Mobile Messaging

When you opt in to receive text messages from Octopied Mind Inc., we may collect your telephone number, consent status, opt-in and opt-out dates, message interactions, delivery information, device or carrier information, and information you provide through SMS.

We use this information to operate our SMS program and send recurring messages such as:

  • Product launches and early access

  • Promotions and special offers

  • Restock and availability notifications

  • Cart reminders

  • Order-related communications

  • Customer-support messages

Consent to receive marketing text messages is not a condition of purchase. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe or HELP for assistance.

Our website uses cookies and similar technologies to remember products placed in a shopping cart and determine when a cart has been abandoned. If you have consented to receive marketing text messages, this information may be used to send cart reminders by SMS.

We do not sell or share SMS opt-in information or consent status with third parties or affiliates for their own marketing or for purposes unrelated to operating our messaging program. We may disclose this information to service providers that help us operate and deliver text messages, including Klaviyo, telecommunications carriers and messaging vendors, only as necessary to provide the program and as permitted by law.

We do not collect precise geolocation through our SMS program. We may infer an approximate location from an IP address or device information for fraud prevention, analytics, regional content and legal compliance.

7. Sharing and Disclosure

We do not sell personal information for money. We may disclose limited personal information to trusted service providers that help us operate our business.

These providers include:

  • Shopify for storefront, checkout, analytics and fraud prevention

  • Shopify Payments, Shop Pay, PayPal, Klarna and Sezzle for payment processing

  • NRI 3PL and Chit Chats for fulfillment and shipping

  • Gorgias and Tidio for customer support

  • Klaviyo for email and SMS marketing

  • Meta, TikTok and Google for advertising and campaign measurement

  • Loop Returns for returns and exchanges

  • Smile.io and UpPromote for loyalty, referrals and affiliates

  • Loox for customer reviews

  • Survey and form providers

  • QuickBooks Online and Datma Reports for accounting and analytics

These providers may only process information as necessary to perform services for us or as otherwise disclosed in their own privacy notices.

Shopify may process personal information in connection with providing and improving its services. More information is available in the Shopify Consumer Privacy Policy.

We may also disclose information:

  • When required by law, court order or legal process

  • To protect our customers, employees, business or legal rights

  • To investigate fraud, abuse or security incidents

  • In connection with a merger, financing, restructuring, acquisition or sale of all or part of our business, subject to applicable privacy requirements

Certain advertising and analytics activities may be considered a “sale,” “sharing” or use for targeted advertising under some United States privacy laws, even when no money is exchanged. You may opt out as described below.

8. Cookies, Analytics and Targeted Advertising

We use cookies, pixels and similar technologies to:

  • Operate essential website functions

  • Remember cart contents and preferences

  • Understand website traffic and performance

  • Measure marketing and advertising campaigns

  • Personalize content and product recommendations

  • Display advertising that may be relevant to you

  • Detect fraud and protect our website

Where required, we obtain consent before using non-essential cookies or similar technologies.

You may manage your preferences through our Cookie Settings or your browser. Blocking cookies may affect website functionality.

We use advertising and analytics services provided by companies such as Meta, TikTok, Google, Shopify and Klaviyo. These services may receive identifiers, device information, website activity, purchase activity and approximate location.

We do not collect precise GPS location through our website. We may infer approximate location from an IP address for fraud prevention, analytics, legal compliance and regional content.

For more information, see our Cookie Policy and Do Not Sell or Share My Personal Information page.

We honor Global Privacy Control signals where legally required and technically supported.

9. Financial Incentives and Loyalty Programs

We may offer discounts, rewards, early access or other benefits through SMS, loyalty, referral, affiliate or promotional programs.

Participation is voluntary. The material terms of an offer will be presented when you join. The value of an incentive is reasonably related to the value of the information and customer relationship associated with the program, based on factors such as anticipated purchases, participation, program costs and customer engagement.

You may withdraw from a program at any time by unsubscribing, leaving the program or contacting us. Withdrawal may end your eligibility for future program benefits.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, accounting, security and dispute-resolution requirements.

Our general retention periods include:

  • Orders, invoices and tax records: seven years

  • Active marketing profiles: until unsubscribed or after 24 months of inactivity

  • Unsubscribe and suppression records: as long as reasonably necessary to honor opt-out requests

  • Customer-support records: generally 24 months after a matter is closed

  • Advertising identifiers and analytics data: generally up to 13 months

  • Loyalty, referral, affiliate and return information: generally up to three years after the last relevant activity

We may retain information longer where required by law, necessary to resolve disputes or needed to protect our legal rights.

After the applicable retention period, information is deleted, anonymized or securely destroyed.

11. Security

We maintain administrative, technical and physical safeguards designed to protect personal information from unauthorized access, use, loss, alteration or disclosure.

These safeguards include:

  • Multi-factor authentication on major systems

  • Role-based access controls

  • Encryption in transit and, where supported, at rest

  • Vendor and access reviews

  • Staff confidentiality requirements

  • Incident-response procedures

No system is completely secure. If a privacy or security incident occurs, we will investigate and provide notifications where required by law.

12. International Transfers

Personal information may be stored or processed in Canada, the United States and other countries where our service providers operate.

Those countries may have privacy laws that differ from the laws where you live. Where required, we use safeguards such as contractual protections, data-processing agreements and Standard Contractual Clauses.

EU GDPR Representative

Octopied Mind Inc. has appointed the European Data Protection Office as its representative in the European Union under Article 27 of the GDPR.

European Data Protection Office
Avenue Huart Hamoir 71
1030 Brussels, Belgium
Email: info@edpo.com

EU Representation Certificate

UK GDPR Representative

Octopied Mind Inc. has appointed EDPO UK Ltd as its representative in the United Kingdom under Article 27 of the UK GDPR.

You may contact EDPO UK regarding UK GDPR matters or complaints under section 164A of the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025.

EDPO UK Ltd
Unit 33, Waterside
Schooner Court
44–48 Wharf Road
London N1 7UX
United Kingdom
Email: info@edpo.com

You may also use EDPO’s UK data-request and complaint form.

UK Representation Certificate

13. Your Privacy Rights

Depending on where you live, you may have the right to:

  • Access personal information we hold about you

  • Correct inaccurate or incomplete information

  • Request deletion of personal information

  • Withdraw consent

  • Restrict certain processing

  • Object to certain processing

  • Request a portable copy of eligible information

  • Opt out of targeted advertising, sale or sharing

  • Request information about how your information has been used or disclosed

  • Request cessation of dissemination, de-indexing or re-indexing where applicable

  • Appeal certain decisions concerning a privacy request

  • Lodge a complaint with an applicable privacy or data-protection authority

  • Receive equal service without unlawful discrimination for exercising your rights

To submit a request, email support@octopiedmind.com. Please describe the request and identify the email address associated with your account.

We may request information reasonably necessary to verify your identity and authority to make the request. We will not request more information than reasonably required for verification.

You may use an authorized agent where permitted by law. We may require evidence that the agent is authorized to act for you.

We will respond within the period required by applicable law. If we deny a request, we will explain the reason and provide information about any available appeal process.

14. Do Not Sell or Share My Personal Information

We do not sell personal information for money.

Certain uses of analytics, advertising cookies or pixels may be considered “selling,” “sharing” or targeted advertising under some United States privacy laws.

You may opt out through the Do Not Sell or Share My Personal Information link in our website footer or by visiting:

octopiedmind.com/pages/ccpa-opt-out

We also honor applicable Global Privacy Control signals.

SMS opt-in information and consent status are not sold or shared for third-party marketing.

15. Children

Our store and services are intended for adults. We do not knowingly collect personal information from anyone under 18.

If you believe that a minor has provided personal information to us, contact support@octopiedmind.com so we can investigate and delete it where appropriate.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, services or legal obligations.

The “Last Updated” date will show when the most recent version took effect. Where required, we will provide additional notice before material changes take effect.

17. Privacy Officer and Contact Information

Octopied Mind Inc. has designated a Privacy Officer who is responsible for overseeing our privacy practices and responding to privacy questions, requests and complaints.

Privacy Officer
Octopied Mind Inc.
9195A Torbram Road
Brampton, Ontario L6S 6H2
Canada
Email: support@octopiedmind.com