Privacy policy
Last updated: March 11, 2026
Goodevas CA is operated by DAMY CORP., which manages this online store and website, including all associated information, content, features, tools, products and services (hereinafter the «Services»), with the aim of providing you with a carefully curated and personalized shopping experience. Our Services operate on the Shopify platform.
This Privacy Policy describes how we collect, use, process and disclose your personal information when you visit or use our Services, make a purchase or other transaction through our website, or communicate with us in any other way.
In the event of a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing and disclosure of your personal information.
Please read this Privacy Policy carefully. By accessing our Services, you confirm that you have read and understood its contents.
1. Identity of the Organization
The organization responsible for your personal information is:
Legal name: DAMY CORP. Operating as: Goodevas CA Address: 66 Sherwood Common Northwest, Calgary, Alberta T3R 1P8, Canada Phone: +1 302-266-1412 E-mail: info@goodevas.com
DAMY CORP. acts as the organization responsible for the collection, use and disclosure of your personal information in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA, S.C. 2000, c. 5) and the Alberta Personal Information Protection Act (PIPA, SA 2003, c P-6.5), which applies as substantially similar provincial legislation in Alberta.
2. Personal Information We Collect
By «personal information» we mean any information about an identifiable individual, other than business contact information used solely for business-to-business communications. Anonymized or aggregate information that cannot be used to identify an individual is not considered personal information.
Depending on how you use our Services, we may collect and process the following categories of personal information:
Contact information: first name, last name, mailing address, billing address, delivery address, phone number and e-mail address.
Financial and payment information: credit and debit card numbers, financial account data, transaction details, payment method, payment confirmation and purchase history.
Account information: username, password, security questions, preferences and account settings.
Transaction information: items you have viewed, added to your cart or wish list, purchased, returned, exchanged or cancelled, as well as previous transactions.
Communications with us: information you provide when contacting our customer service or sending inquiries.
Device information: device type, browser, operating system, network connection, IP address and other unique identifiers.
Usage information: information about how you navigate and use our Services, pages visited, time spent and interactions.
Inferences: conclusions drawn from the above data to build your preference and purchasing behaviour profile.
Sources of personal information
We may collect your personal information from the following sources:
Directly from you: when you create an account, place an order, communicate with us or otherwise interact with the Services.
Automatically through the Services: via cookies and similar technologies when you visit our website (see section 7).
From our service providers: when we engage them to provide certain technologies or services.
From business partners or other third parties.
3. Purposes for Collection and Use of Personal Information
Under PIPEDA and PIPA Alberta, we are required to identify the purposes for which personal information is collected at or before the time of collection, and to obtain your meaningful consent. We collect and use your personal information only for the following identified purposes:
Processing orders, payments and deliveries — Purpose: to fulfil your purchase contract, process payments, arrange shipping and handle returns and exchanges — Retention: duration of the transaction + 7 years (CRA requirements under the Income Tax Act)
Managing your user account — Purpose: to create and maintain your account, remember your preferences and provide a personalized experience — Retention: for as long as your account is active + 1 year after closure
Customer service and handling inquiries — Purpose: to respond to your questions, resolve disputes and maintain our business relationship — Retention: 3 years from last interaction
Sending commercial e-mails and marketing communications — Purpose: to send you promotional offers, newsletters and product recommendations — Legal basis: express or implied consent in accordance with Canada's Anti-Spam Legislation (CASL, S.C. 2010, c. 23) — Retention: until you withdraw consent or unsubscribe
Personalized advertising and retargeting — Purpose: to display relevant advertisements based on your browsing and purchase history — Legal basis: express consent — Retention: until consent is withdrawn
Website analytics and improvement — Purpose: to understand how visitors use our website and improve its performance — Legal basis: implied consent for aggregated analytics; express consent for individual tracking — Retention: 13 months
Fraud prevention and security — Purpose: to detect, investigate and prevent fraudulent, illegal or unsafe activity — Retention: 3 years from detection of the incident
Compliance with legal obligations — Purpose: to comply with applicable law, respond to lawful requests and enforce our terms — Retention: as required by applicable law (minimum 7 years under the Income Tax Act)
Management of returns and complaints — Purpose: to process product returns, exchanges and consumer complaints — Retention: 2 years (limitation period under the Alberta Limitation Act, SA 2000, c L-12)
We will not use your personal information for a new purpose without first identifying that purpose and obtaining your consent, or as otherwise permitted by law.
4. Consent
PIPEDA and PIPA Alberta are consent-based privacy laws. We rely on the following forms of consent:
Express consent: obtained when you actively agree to a specific use of your personal information, for example by checking a box to receive marketing communications or by accepting our cookie policy for non-essential cookies.
Implied consent: reasonably inferred from your actions or the context of the transaction, for example when you provide your shipping address to complete a purchase.
You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us at info@goodevas.com. We will inform you of the implications of withdrawing consent. Withdrawal of consent will not affect the lawfulness of processing that took place prior to withdrawal.
Note on CASL: for commercial electronic messages, we comply with Canada's Anti-Spam Legislation. You can unsubscribe from marketing e-mails at any time by using the unsubscribe link included in every commercial message. We will process unsubscribe requests within 10 business days as required by CASL.
5. Disclosure of Personal Information to Third Parties
We may disclose your personal information to third parties in the following circumstances, and only to the extent necessary for the identified purpose:
Shopify Inc.: our e-commerce platform processes your data to provide and improve the Services. For more information: privacy.shopify.com.
Technology, logistics, customer service and payment service providers, who act as service providers under our instructions and are contractually bound to protect your personal information and use it only for the purposes we specify.
Business and marketing partners for the provision of advertising and communication services. These partners process your information in accordance with their own privacy policies.
Companies within the Goodevas group.
Government authorities and regulatory bodies when required by applicable law, court order or law enforcement request.
Third parties in the context of a business transaction such as a merger, acquisition or restructuring, provided that the receiving party agrees to protect your personal information in a manner consistent with this Privacy Policy.
Third parties with your express consent.
We do not sell your personal information to third parties.
When we transfer personal information to third-party service providers located outside of Canada, we take steps to ensure that those providers protect your information in a manner consistent with PIPEDA and PIPA Alberta, including through contractual obligations.
6. Relationship with Shopify
Our Services are hosted on Shopify, which may collect and process your access and usage data to provide and improve the Services. Information you submit through the Services will be shared with Shopify and with third parties that may be located outside of Canada.
In addition, we use certain advanced Shopify features that incorporate data from your interactions with our store and other merchants on the platform. In these cases, Shopify acts as an independent data controller. You can exercise your rights in relation to these processing activities by visiting Shopify's Consumer Privacy Policy at privacy.shopify.com.
7. Third-Party Tools and Technologies
To analyse and improve the performance of our website and carry out marketing campaigns, we use the following third-party technologies, which may use cookies, pixels, scripts or other tracking technologies. These activities are conducted with your consent where required by applicable law.
Google Analytics — Analytics — Analysis of website traffic and user behaviour — policies.google.com/privacy
Google Tag Manager — Tag management — Centralized management of tracking scripts — policies.google.com/privacy
Google Ads Conversion Tracking — Advertising — Measurement of advertising conversions — policies.google.com/privacy
Meta Pixel (Facebook/Instagram) — Advertising — Retargeting and measurement of Meta campaigns — facebook.com/privacy/policy
TikTok Pixel — Advertising — Retargeting and measurement on TikTok — tiktok.com/legal/privacy-policy
Pinterest Pixel — Advertising — Retargeting and measurement on Pinterest — policy.pinterest.com/privacy-policy
Snapchat Pixel — Advertising — Retargeting and measurement on Snapchat — snap.com/privacy/privacy-policy
Klaviyo — E-mail marketing — Communication management and e-mail automation — klaviyo.com/legal/privacy
Hotjar — UX analysis — Heatmaps and session recordings — hotjar.com/legal/privacy
Lucky Orange — UX analysis — Analysis of user interactions — luckyorange.com/privacy
Yotpo — Reviews — Management of customer ratings and reviews — yotpo.com/privacy-policy
Zigpoll — Surveys — Collection of opinions and surveys — zigpoll.com/privacy
Ahrefs — SEO — Analysis of SEO performance — ahrefs.com/privacy
Triple Whale — Attribution — Marketing analysis and attribution — triplewhale.com/privacy
Gorgias — Customer service — Support and live chat management — gorgias.com/privacy-policy
Intelligems — Optimization — A/B testing and website optimization — intelligems.io/privacy
YouTube / Tolstoy — Video content — Integration of video and interactive content — policies.google.com/privacy
We have configured these tools to minimize the collection of sensitive information such as payment data or passwords.
8. Cookies and Similar Technologies
Our website uses cookies and similar technologies. You can manage your cookie preferences at any time through our consent management tool (cookie banner), available at the bottom of our website.
We use the following categories of cookies:
Strictly necessary / technical cookies: required for the basic functionality of the website (session, shopping cart, security). These cannot be disabled. Legal basis: implied consent as part of the transaction.
Analytics cookies: allow us to analyse how users interact with the website in order to improve its functionality (e.g. Google Analytics). Legal basis: express consent.
Marketing / advertising cookies: used to show you personalized advertisements on this and other websites (e.g. Meta Pixel, TikTok Pixel). Legal basis: express consent.
Preference cookies: remember your language, currency or other personalized settings. Legal basis: implied or express consent.
For more information about our use of cookies, please see our Cookie Policy available on the website.
9. Your Privacy Rights
Under PIPEDA and PIPA Alberta, you have the following rights with respect to your personal information:
Right of access: you have the right to request access to the personal information we hold about you, including information about how it has been used and to whom it has been disclosed, subject to limited exceptions under applicable law.
Right to correction: you have the right to request correction of inaccurate or incomplete personal information.
Right to withdrawal of consent: you have the right to withdraw consent to the collection, use or disclosure of your personal information at any time, subject to legal or contractual restrictions.
Right to file a complaint: you have the right to challenge our compliance with PIPEDA or PIPA Alberta by filing a complaint with the applicable privacy commissioner (see section 10).
Right to be informed of a privacy breach: under PIPEDA, you have the right to be notified if a breach of security safeguards involving your personal information creates a real risk of significant harm to you.
To exercise any of these rights, please contact our Privacy Officer at info@goodevas.com. We will respond to your request within 30 days of receipt, as required by PIPEDA and PIPA Alberta. In exceptional circumstances, we may extend this period by an additional 30 days with notice to you.
We may need to verify your identity before processing your request. We will not charge a fee for access requests unless the request is excessive or repetitive, in which case we will notify you of the fee in advance.
We will not retaliate against you for exercising any of these rights.
10. Privacy Complaints and Oversight
If you have a privacy concern or complaint about how we handle your personal information, we encourage you to contact us first so we can attempt to resolve the matter directly:
Privacy Officer: info@goodevas.com DAMY CORP., 66 Sherwood Common Northwest, Calgary, Alberta T3R 1P8, Canada Phone: +1 302-266-1412
If you are not satisfied with our response, you may file a complaint with the applicable privacy commissioner:
For matters under PIPEDA (federal): Office of the Privacy Commissioner of Canada (OPC) Website: priv.gc.ca Address: 30 Victoria Street, Gatineau, Quebec K1A 1H3, Canada Phone: 1-800-282-1376
For matters under PIPA Alberta (provincial): Office of the Information and Privacy Commissioner of Alberta (OIPC Alberta) Website: oipc.ab.ca Address: 410, 9925 – 109 Street NW, Edmonton, Alberta T5K 2J8, Canada Phone: +1 780-422-6860
11. Transfers of Personal Information Outside Canada
Your personal information may be transferred to, stored in or processed in countries other than Canada, including the United States and countries in the European Economic Area. When we transfer personal information outside of Canada, we take steps to ensure that the receiving organization provides a comparable level of protection, including through contractual obligations.
Please be aware that personal information transferred outside of Canada may be subject to access by foreign courts, law enforcement and national security authorities under the laws of the receiving country.
You may obtain information about our policies and practices with respect to service providers outside Canada by contacting us at info@goodevas.com.
12. Children's Privacy
Our Services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian of a child who has provided us with their personal information, you may request its deletion by contacting us at info@goodevas.com.
13. Security of Personal Information
We implement appropriate physical, technical and administrative safeguards to protect your personal information against unauthorized access, loss, destruction, disclosure or misuse, commensurate with the sensitivity of the information.
We recommend that you do not use unsecured channels to send us sensitive information. You are responsible for maintaining the confidentiality of your account credentials.
In the event of a security breach that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required under PIPEDA.
14. Third-Party Websites and Links
Our Services may contain links to websites or platforms operated by third parties. We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy policies before providing them with your information.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The revised version will be posted on this website with a new «Last updated» date. We will notify you of material changes in accordance with applicable law.
16. Contact and Privacy Officer
PIPEDA and PIPA Alberta require organizations to designate an individual who is accountable for the organization's compliance with applicable privacy law. For questions about this Privacy Policy, to exercise your rights, or for any other privacy-related matter, please contact our Privacy Officer:
E-mail: info@goodevas.com Phone: +1 302-266-1412 Mail: DAMY CORP. — Privacy Officer, 66 Sherwood Common Northwest, Calgary, Alberta T3R 1P8, Canada
We will respond to your inquiry within 30 days of receipt.
