We are a small business, and we collect only what we need to send you your order. This page says exactly what that is, who else touches it, and how to get it changed or deleted.
Tiki Shop and Tiki Massage are one business. We keep a single client record covering both, so if you are already a massage client your details may already be on file, and an online order may be added to that same record. It is one business keeping one customer list — your information is not being passed to anyone else.
That shared record holds contact details only: name, address, email and phone. Health information from massage treatment is not part of it, and is not stored anywhere the shop can reach.
When you place an order, you give us:
We also record what you ordered, what you paid, the date, any discount code used, and the delivery status.
We never receive your card number. Payment happens on Square's own checkout page. We are told only that the payment succeeded, along with the card brand and last digits shown on your receipt. Your full card details never reach this website and are not stored by us in any form.
Worth saying plainly, because it is unusual:
We do not sell your information, rent it, or trade it. Ever.
We use a small number of established services to run the shop. Each gets only what it needs, and none may use your information for their own purposes:
| Service | What it does | What it sees |
|---|---|---|
| Square | Payment processing | Your card details, name, email, order contents |
| Brevo | Sends your receipt and order emails | Your name, email, order details |
| Microsoft 365 | Our mailbox and order records | Your contact and delivery details, order history |
| Netlify | Hosts this website | Technical request logs, including your IP address |
| Courier | Delivers your parcel | Your name, address and phone number |
Some of these are outside Canada. Square and Netlify are United States companies, Brevo is French, and Microsoft may store data in facilities outside Canada. While your information is in another country it is subject to that country's laws, including lawful access by its authorities. We use these services because they are the practical options for a business this size, and we tell you so you can decide with that in mind.
We will also disclose information where the law requires it, or where we need to in order to establish or defend a legal claim — for example a chargeback dispute.
You can tell us to stop marketing email at any time by replying to any message or emailing shop@tikishop.shop.
The shop collects no health information at all. Nothing on this website asks for it, and there is nowhere in an order for it to go.
If you are also a massage client, the health details you give us for treatment are collected only for that purpose and are kept entirely separately — not in the order records, and not in the Microsoft account the shop's order system runs on. The software that takes your order, writes it down and emails your receipt has no access to them whatsoever.
They are never used to decide what to sell you, never used to target an offer, and never part of shop email.
Order records are held in our Microsoft 365 business account, reachable only through the owner's account with multi-factor authentication. The website is served over HTTPS throughout. Card details are handled entirely by Square and never touch our systems.
No system is perfect. If a breach ever put you at real risk of significant harm, we will tell you and the relevant privacy regulator, as the law requires.
You can ask us to:
Email shop@tikishop.shop and we'll respond within 30 days. There's no charge. We may need to confirm who you are first, so that we're not handing your information to someone else.
If you aren't satisfied with how we've handled a privacy concern, you can complain to the Office of the Information and Privacy Commissioner of Alberta, or to the Privacy Commissioner of Canada.
This shop is intended for adults. We don't knowingly collect information from children. If you believe a child has given us their details, tell us and we'll delete them.
If we change how we handle your information, we'll update this page and the date below. Material changes to how we use what we already hold will be notified to you directly.
Questions about this policy, or about your own information:
shop@tikishop.shop · (403) 237-0203
Tiki Shop · Calgary, Alberta
Last updated 25 September 2026. See also our returns and refunds policy and terms of sale.
