Privacy policy
Last updated: November 5, 2026
ONE Boardshop (“we,” “us” or “our”) respects your privacy. This policy explains how we handle personal information when you visit our website, shop online or in-store, contact us or participate in customer promotions. Personal information means information about an identifiable individual.
We handle personal information in accordance with applicable Canadian privacy laws, including British Columbia’s Personal Information Protection Act and the federal Personal Information Protection and Electronic Documents Act where applicable. Other provincial requirements may also apply. This policy covers customers and website visitors.
1. Information we collect
Depending on your interaction with us, we collect contact and account information, including your name, email address or telephone number, billing and shipping addresses, account details and preferences you choose to provide. You do not need to create an account to check out.
Purchase and service information includes products ordered, transaction amounts, payment status, delivery details, returns, exchanges, warranty requests and customer-service communications. If you authorize someone to act for you, we may collect information reasonably needed to verify that authorization.
Payment providers collect the credentials needed to process your payment. We receive transaction information and, depending on the provider, limited payment details such as payment type and masked card information. Do not email full payment-card details.
We collect reviews, photographs, contest entries, survey responses and other information you choose to submit. We explain additional collection or uses when you participate in activities that require them.
Our website and its supporting services collect technical and usage information, which may include IP address, browser and device information, cookie identifiers, pages and products viewed, referral information, approximate location inferred from technical information and shopping interactions.
Information comes from you, your use of our services and providers involved in payments, delivery, store operations and fraud prevention where permitted by law. Optional information unrelated to supplying your requested product or service is not required.
2. How we use information
We use personal information to process payments and orders; arrange delivery; handle returns, warranties and support; administer accounts; communicate about purchases; prevent fraud and security threats; maintain business records; improve our website and services; understand shopping activity; and meet legal obligations.
Subject to applicable consent requirements, we may also use information to administer promotions and surveys, measure advertising, personalize content and send marketing. We explain new purposes and obtain additional consent where required before using information for them.
3. Consent and choices
We obtain consent where required by law. Its form depends on the information, its sensitivity, the purpose and the circumstances. We obtain express consent where required. Browsing our website or accepting our Terms of Service does not provide blanket consent to optional tracking or unrelated uses. We may handle information without consent where the law permits or requires it.
You may withdraw consent, subject to legal or contractual restrictions and reasonable notice, by contacting us. We will explain relevant consequences. For example, we cannot deliver an order without the necessary delivery information. Refusing optional marketing does not prevent you from shopping with us.
4. Cookies, analytics and advertising
We use cookies and similar technologies for shopping carts, checkout, authentication, security and remembering preferences. Depending on the services and features enabled, optional technologies may also be used for analytics, advertising measurement or personalization, subject to applicable consent requirements.
Where a cookie banner or privacy preference control is displayed, you can use it to manage the choices offered. You can also manage cookies through your browser or contact us about privacy choices. Browser controls may not prevent every form of information sharing, including information sent directly between providers. Blocking essential cookies may affect checkout and other functions.
Where consent is legally required for optional technologies, we are responsible for obtaining it. Publication of this policy is not a substitute for consent. Contact us for information about analytics and advertising technologies used in connection with your interactions with our store.
5. Shopify and connected services
Our online store is hosted on Shopify. Shopify processes information about your device, interactions and purchases to support checkout, payments, security and store operations. Depending on the service, Shopify processes information on our behalf or for purposes described in its own privacy policy.
Where Shopify Network Intelligence is enabled, Shopify may use information from interactions with our store together with information from other merchants and Shopify to provide enhanced services, including personalization, advertising-related features and fraud protection. This processing is subject to applicable notice and consent requirements.
Read Shopify’s Consumer Privacy Policy for its practices and available privacy choices.
Our store has shipping and operational integrations, including ClickShip, ShipStation and Hyperspace. Information is made available to these providers as needed for the functions they perform for us, subject to their configured access and applicable law.
6. Sharing personal information
We disclose information for the purposes explained here, with required consent, or as otherwise permitted or required by law. Recipients may include Shopify, payment processors, financial institutions, carriers, fulfilment and operational providers, technology and customer-support providers, and professional advisers.
Where analytics or advertising services are used, sharing is subject to applicable notices and consent. Providers may have their own privacy practices for processing they undertake independently.
We limit service-provider disclosures to what is reasonably needed and use contractual or other appropriate safeguards. We may disclose information to public authorities or others where legally required or permitted, including to address fraud or legal claims.
Information may be disclosed or transferred in a proposed or completed business sale or similar transaction only as permitted by law, subject to appropriate confidentiality and use restrictions and required notice.
7. Processing outside Canada
Our Shopify store’s listed data-hosting location is the United States. Shopify and other providers may also process information in other countries where they operate, and outside your province or territory.
Information processed elsewhere may be subject to that jurisdiction’s laws and lawful access by courts, law enforcement or government authorities. We remain responsible for information under our control and use appropriate measures for provider arrangements. We conduct privacy assessments for transfers where required. Contact us for information about relevant providers and cross-border processing.
8. Marketing communications
We send promotional emails or text messages only with the consent or other lawful basis required by Canada’s anti-spam legislation. Our checkout offers an optional email-marketing signup that is not preselected.
You may unsubscribe using the mechanism in a marketing message or by contacting us. We act on requests within the legally required timeframe. Unsubscribing does not stop communications needed to complete an order, respond to you or provide important service information.
9. Retention
We retain information only as long as reasonably necessary for its purposes and applicable legal requirements. Order and payment records may be needed for tax and accounting requirements; service records for returns, warranties or disputes; and account information for account administration.
Some records may need to remain after account closure. When information is no longer required, we securely destroy, erase or, where legally permitted, anonymize it.
10. Safeguards and incidents
We use reasonable physical, organizational and technical safeguards appropriate to the information’s sensitivity, including access restrictions and measures protecting electronic transactions. No system guarantees absolute security. Protect your credentials and avoid sending unnecessary sensitive information.
We investigate suspected privacy incidents, take appropriate containment and response measures, and notify individuals and regulators and maintain records where required by law.
11. Access, correction and other rights
Subject to applicable law and limited exceptions, you may request access to your information, details about its use or disclosure, correction of inaccuracies, withdrawal of consent and deletion where the law provides that right. Where applicable, you may also request certain computerized information in a structured, commonly used technological format or its communication to an authorized recipient.
We may verify your identity using only information reasonably necessary for that purpose. We respond within applicable legal timeframes. If an exception prevents us from granting a request, we explain the reason and available recourse as required. We tell you beforehand if a legally permitted fee applies. Account closure does not necessarily require immediate deletion of every record.
12. Children and young people
Online purchases are intended to be placed by adults or a parent or legal guardian. When handling a young person’s information, we consider their ability to give meaningful consent and obtain parent or guardian consent where required. For children under 14 in Quebec, we obtain parent or guardian consent where applicable law requires it. Contact us if information may have been provided without required consent.
13. Automated decisions
Tools may assist us in identifying suspicious transactions. If a decision is based exclusively on automated processing, we provide notice, information and an opportunity to make observations to someone able to review the decision where required by law.
14. External links and policy updates
External websites have their own privacy practices. Review their policies before providing information.
We may update this policy and its date. We provide notice of material changes and obtain fresh consent where required. Posting an update does not authorize a new use requiring consent.
15. Privacy questions and complaints
Direct privacy inquiries, requests and complaints to the person responsible for privacy at ONE Boardshop:
Attention: Privacy Officer
ONE Boardshop
2330 Highway 97 North
Kelowna, BC V1X 4H8, Canada
Email: info@oneboardshop.com
Telephone: 250.763.1338
You may also contact the regulator with jurisdiction over your concern: the Office of the Information and Privacy Commissioner for British Columbia, the Office of the Privacy Commissioner of Canada, or the Commission d’accès à l’information du Québec.