We comply with the privacy and data protection laws that apply to our operations, including:

Canada: PIPEDA (Personal Information Protection and Electronic Documents Act) and CASL (Canada’s Anti-Spam Legislation).

United States: CCPA/CPRA (California Consumer Privacy Act/California Privacy Rights Act) and similar state privacy laws (such as Virginia, Colorado, Connecticut, and Utah).

Other jurisdictions: If we expand into new regions, we will comply with applicable privacy and data protection laws in those jurisdictions.

We may collect the following categories of personal information:

Contact Information: such as your name, email address, phone number, and shipping/billing address.

Order & Payment Information: details about the products you purchase and payment information processed securely by our payment providers. We do not store your full credit card details.

Account Information (optional): You do not need to create an account to purchase from our store. Checkout is available as a guest. If you choose to create an account, we will collect and store your login credentials and basic profile details to make repeat purchases easier. You may request deletion of your account at any time by contacting us at team@mysillo.com.

Device & Browsing Information: such as IP address, browser type, device identifiers, pages visited, and interactions with our site.

Marketing Preferences & Communications (optional): If you sign up for our community emails (such as newsletters, promotions, or updates), we collect the information you provide (like your email address and preferences). You can unsubscribe at any time by clicking the link in our emails or contacting us at team@mysillo.com.

We use personal information to:

• Process and fulfill orders, payments, and deliveries
  
• Provide customer support and respond to inquiries
  
• Send marketing communications where you have consented (with opt-out available)
  
• Improve our website, products, and services through analytics
  
• Detect, investigate, and prevent fraud or security incidents
  
• Comply with legal, accounting, and tax obligations

We share personal information only as needed to operate our business and provide services to you:

Service Providers: We use trusted providers such as Shopify (store platform), payment processors, shipping and logistics providers, IT providers, and marketing platforms like Klaviyo. These providers are only given the information needed to perform their services.

Advertising & Analytics Partners: We may share limited identifiers (such as cookies, device IDs, or hashed emails) with advertising and analytics partners (for example, Google or Meta) to deliver personalized ads, measure performance, and manage communications.

Legal Obligations: We may disclose information when required to comply with applicable laws, regulations, legal processes, or governmental requests, or to protect our rights, safety, or property.

We do not sell personal information for money. Some of the sharing described above may qualify as a “sale” or “sharing” of personal information under U.S. state laws (such as the California Consumer Privacy Act). You can opt out of this type of sharing at any time by contacting us at team@mysillo.com.

We may use advertising and analytics tools (for example, from Google, Meta, TikTok, or Klaviyo) to deliver personalized ads, measure performance, and run retargeting campaigns. These tools may use cookies, device identifiers, or hashed emails to help us reach people who may be interested in our products.

Your Choices:

You can opt out of targeted advertising by:

• Adjusting your browser or device settings to limit cookies or ad tracking
  
• Using platform tools (e.g., Google Ads Settings, Meta Ad Preferences, TikTok Ad Settings)
  
• Unsubscribing from our marketing emails at any time (for Klaviyo campaigns)
  
• Contacting us directly at team@mysillo.com
  

Some of this activity may be considered “sharing” of personal information under U.S. state privacy laws (such as the California Consumer Privacy Act). We do not sell personal information for money.

We use cookies, pixels, and similar technologies to:

• Enable site functionality (such as shopping cart and checkout)
  
• Understand how visitors use our site and improve performance
  
• Deliver personalized content and advertising (see Section 5 on Targeted Advertising)
  

Your Choices:

• You can manage cookies through your browser or device settings.
  
• You may opt out of certain tracking through tools like Google Ads Settings, Meta Ad Preferences, or TikTok Ad Settings.
  

We also honor Global Privacy Control (GPC) signals as valid opt-out requests where required by law..

We retain personal information only for as long as necessary to:

• Fulfill the purposes described in this Privacy Policy (such as completing purchases, providing customer service, and sending communications you’ve consented to)
  
• Comply with our legal, tax, and accounting obligations
  
• Resolve disputes and enforce our agreements
  

When personal information is no longer needed, we will securely delete or anonymize it in accordance with applicable laws and our internal policies.

We do not use automated decision-making or profiling that has legal or significant effects on our customers. All purchases and communications are based on your choices and interactions with our store.

For Canadian Customers (PIPEDA & CASL):

If you are located in Canada, you have the right to:

• Access: Request a copy of the personal information we hold about you.
  
• Correction: Ask us to correct or update inaccurate or incomplete information.
  
• Withdraw Consent: Withdraw your consent for optional uses of your information, such as marketing emails.
  
• Unsubscribe: Opt out of marketing communications at any time by using the “unsubscribe” link in our emails or by contacting us.
  

For U.S. Customers (CCPA/CPRA and other state laws):

If you are located in certain U.S. states (such as California), you may have the right to:

• Access & Portability: Request a copy of the personal information we hold about you and how we use it.
  
• Correction: Ask us to correct inaccurate or incomplete information.
  
• Deletion: Request deletion of your personal information, subject to legal and contractual obligations.
  
• Opt Out of Targeted Ads: Request that we do not “share” your personal information for targeted advertising (see Section 5).
  
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
  

How to Exercise Your Rights

To exercise any of these rights, please contact us at team@mysillo.com. We may need to verify your identity before processing certain requests.

We may transfer your personal information between Canada, the United States, and other countries where our trusted service providers operate. These transfers occur because we use platforms and tools (such as Shopify, payment processors, and marketing or analytics services) that rely on international infrastructure.

When we transfer information across borders, we take reasonable steps to ensure it is protected in accordance with applicable privacy laws. This includes working with service providers that use industry-standard safeguards and contractual commitments.

Please note that privacy laws in other jurisdictions may differ from those in your home country, and your information may be subject to lawful access requests from government authorities in those jurisdictions.

We take reasonable steps to protect the personal information we handle. This includes working with secure service providers such as Shopify and our payment processors, who use industry-standard safeguards such as encryption and access controls.

Despite these measures, no method of transmission over the internet or electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

In the event of a data breach involving your personal information, we will provide notifications as required by applicable law, which may include notifying you and relevant regulatory authorities.

Our site and products are not directed to children under the age of 13, and we do not knowingly collect, use, or disclose personal information from anyone under 13.

If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will:

• Delete the information promptly, or
  
• Where legally permitted, seek consent from a parent or legal guardian.
  

For Canadian users, we recognize that children under 13 cannot meaningfully consent to the collection of their personal information. We therefore do not knowingly process such data without parental involvement.

If you believe that a child under 13 has provided us with personal information, please contact us immediately at team@mysillo.com so we can take appropriate action.

We send marketing emails only with your express consent. Every message clearly identifies Sillo and includes a working unsubscribe link.

We process unsubscribe requests promptly (within 10 business days as required by law) and maintain records of consent and opt-outs.

You may withdraw consent to marketing emails at any time by using the unsubscribe link in our emails or by contacting us at team@mysillo.com (please include your name and the email address you want removed).

If we begin offering SMS marketing in the future, we will comply with all legal requirements, including obtaining express consent and providing simple opt-out instructions (such as replying “STOP”).

Residents of California, Virginia, Colorado, Connecticut, Utah, and other U.S. states with privacy laws may have the following rights:

• Right to Know & Access: Request the categories and specific pieces of personal information we collect, use, and disclose.
  
• Right to Delete: Request deletion of personal information, subject to legal exceptions.
  
• Right to Correct: Request correction of inaccurate personal information.
  
• Right to Opt Out of “Sale” or “Sharing”: We do not sell personal information for money. We may “share” certain identifiers (such as cookies or device IDs) with advertising or analytics partners for cross-context behavioral advertising. You can opt out of this sharing by emailing team@mysillo.com with the subject line “Do Not Sell or Share.”
  
• Sensitive Personal Information: We do not collect or use sensitive personal information as defined under applicable state privacy laws.
  
• Response Time & Verification: We respond to privacy rights requests within the timelines required by law (generally 30–45 days) and may need to verify your identity. Authorized agents may submit requests on your behalf if they provide proof of authorization.
  
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
  
• Global Privacy Control (GPC): Where technically supported, we treat a valid GPC signal as a request to opt out of sale/sharing for the browser sending the signal.
  

How to Exercise Your Rights

You may exercise your rights by emailing us at team@mysillo.com.

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the “Effective Date” at the top of this page.
  
• Post the revised policy on this page.
  
• For material changes (such as new categories of personal information collected, new purposes of use, or new sharing practices), provide additional notice, such as by email (if we have your contact information) or by displaying a prominent notice on our site.
  
• Maintain an internal record of policy versions and changes. A summary of material changes may also be made available upon request.

We take reasonable steps to protect the personal information we handle, including working with secure service providers such as Shopify and our payment processors. These providers use safeguards such as encryption and access controls to protect data.

That said, no method of transmission over the internet or electronic storage is completely secure. To the fullest extent permitted by law, we are not responsible for unauthorized access, disclosure, or use of personal information that occurs despite these protections, or for events beyond our reasonable control.

This section does not remove or limit any rights you may have under applicable privacy or consumer protection laws.

13656535 Canada Inc. (Sillo)

55 Village Centre Place

Mississauga, ON L4Z 1V9

Canada

Privacy Officer: Sillo Privacy Team

Email: team@mysillo.com