Last updated: September 2026
This policy explains what personal information Medila collects when you visit or buy from this site, why we collect it, and what you can do about it. It is written to meet our obligations under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
- Order information — name, billing and shipping address, email address, phone number and the contents of your order.
- Payment information — handled entirely by our payment processor. We receive a confirmation and the last four digits of the card; we never see or store full card numbers.
- Account information — if you create an account, your email address and a hashed password.
- Device and usage information — IP address, browser type, pages viewed and referring site, collected automatically through cookies and server logs.
- Correspondence — anything you send us through the contact form or by email.
Why we collect it
- To process, fulfil and deliver your order, and to handle returns
- To communicate with you about your order or your questions
- To screen orders for fraud
- To keep the site secure and working properly
- To send marketing email, where you have opted in
Who we share it with
We share personal information only with service providers who need it to do their job for us: our hosting provider, our payment processor, and the shipping carriers who deliver your order. We do not sell your personal information. Some of these providers process data outside Canada, which means it may be subject to the laws of that jurisdiction.
We may also disclose information where we are legally required to, or to protect our rights.
Cookies
This site uses cookies that are necessary for it to function — keeping your cart contents and your session, for example — and, where you consent, cookies that help us understand how the site is used. You can refuse non-essential cookies through the banner shown on your first visit, and clear or block cookies in your browser settings at any time.
How long we keep it
Order records are retained for seven years to meet Canadian tax and record-keeping requirements. Marketing contacts are kept until you unsubscribe. Server logs are kept for a short period for security purposes.
Your rights
You may ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. You may withdraw consent for marketing at any time. Write to privacy@medila.ca and we will respond within 30 days.
If you are unhappy with our response you may complain to the Office of the Privacy Commissioner of Canada.
Children
This site is not directed at children and we do not knowingly collect personal information from anyone under 16.
Changes and contact
We will post any changes to this policy on this page with a revised date. Questions go to privacy@medila.ca.