Privacy policy

This policy applies to tirestok.ca and to the orders we ship from Toronto, ON. It is written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and Québec's Law 25 where it applies to residents of Québec.

You can browse the entire catalogue, decode a tire size and build a cart without giving us a single piece of personal information. We only start collecting when you contact us or check out.

Only what an order actually needs to arrive at the right door:

• Contact details — your name and email address, and a phone number if you give one so the freight carrier can call ahead.
• Delivery address — street, city, province and postal code, plus any delivery note you write (buzzer code, where to leave the pallet).
• Order history — what you bought, what you paid, the shipping zone and taxes applied, and the tracking number.
• Support messages — anything you type into the contact or warranty claim form, including the order number you reference.
• Basic technical data — our server logs record IP address, browser user agent and the pages requested. Standard web-server records, kept for security and debugging.

We do not ask for and have no use for your date of birth, SIN, driver's licence, vehicle registration or credit history. We do not build advertising profiles, and we do not buy personal information about you from anyone else.

Card numbers never reach our servers. Card, Apple Pay and Google Pay payments are processed by Stripe; PayPal payments are processed by PayPal. You enter your card details in their systems, and they return a payment confirmation plus the last four digits and card brand for your receipt. That confirmation is all we store.

If you pay by Interac e-Transfer, we see the sender name and the email address the transfer came from — that's what the bank shows us. We never see your banking credentials.

This site uses two small mechanisms, both functional:

• A `locale` cookie that remembers whether you chose English or French, so we don't send you back to the wrong language on every visit.
• Your cart, stored in your browser's localStorage on your own device. It never leaves your browser until you check out, and clearing your browser data deletes it.

We have not installed an analytics package, an advertising pixel or a session recorder on this site. If that changes — and for a store this size it eventually might — we will name the tool in this policy before it goes live, not after.

Only the parties who have to touch an order to complete it, and only the part they need:

• The freight carrier delivering your set — name, address, phone and the pallet contents.
• Our distributor, when an order ships directly from their warehouse to your address.
• Stripe or PayPal, to take the payment and to process a refund back to the original method.
• A tire manufacturer, when you file a warranty claim and we open the file on your behalf — that means your name, the order details and what you told us happened.
• Government authorities, when a law or a valid court order requires it.

We have never sold, rented or traded customer lists, and this policy commits us not to. If Tirestok is ever sold or merged, customer records could transfer to the buyer as part of the business — you would be told before that happened, and this policy would follow the data.

Our site and databases run on cloud infrastructure that may store or process data in Canada or the United States. Our payment processors operate internationally. That means your information may be processed outside Canada and can be subject to lawful access requests in those countries. If you would rather not have your data leave Canada, email us before ordering and we'll tell you honestly whether we can accommodate that.

Order records — including the invoice, taxes and eco fees — are kept for seven years, which is the retention period the Canada Revenue Agency expects for business records. Support and warranty correspondence is kept for two years so we can honour a claim on a set you bought last season. Server logs roll off within 90 days. Your cart lives on your device until you clear it.

Under PIPEDA — and under Law 25 if you live in Québec — you can:

• Ask what personal information we hold about you and get a copy of it.
• Have anything inaccurate corrected.
• Withdraw consent for anything that isn't required to complete an order you've already placed.
• Ask us to delete what we aren't legally required to keep.
• Complain to the Office of the Privacy Commissioner of Canada, or to the Commission d'accès à l'information du Québec, if we handle it badly.

Email sales@tirestok.ca with the subject line "Privacy request". We will confirm your identity — usually by matching the email address on an order — and answer within 30 days, which is the PIPEDA deadline. There is no fee.

The whole site is served over HTTPS, payment pages are hosted by the processors themselves, and access to order records is limited to the people who fill and support orders. No system is perfectly secure, and we won't pretend otherwise. If a breach ever affects your information in a way that creates a real risk of significant harm, we will notify you and the Privacy Commissioner, as PIPEDA requires.

This is a store for people who own vehicles. It isn't directed at children, and we don't knowingly collect information from anyone under 16.

When this policy changes, the date at the top of the page changes with it, and material changes will be announced on the site. Questions, requests or complaints go to sales@tirestok.ca.