Effective Date: July 23, 2026
Last Updated: July 23, 2026

This Policy is intended to reflect applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and applicable provincial privacy legislation. It does not apply to websites or services operated independently by third parties, even when linked from our Services.

1. Scope and Accountability

This Policy applies to personal information collected through www.magniflex.ca and through related customer-service, order, marketing, warranty, review, and promotional interactions associated with the Canadian business.

Magniflex is responsible for personal information under its control, including information processed on its behalf by service providers. We have designated a Privacy Officer to oversee our privacy practices and respond to questions, access requests, corrections, withdrawals of consent, and complaints.

2. Personal Information We Collect

Information You Provide

Depending on how you interact with us, we may collect:

• name, billing and shipping address, email address, and telephone number;
• account credentials and profile information;
• order, transaction, delivery, return, exchange, warranty, and customer-service information;
• product preferences, reviews, photographs, feedback, survey responses, and contest or promotional entries;
• communications you send to us, including requests and complaints; and
• information you choose to provide when using Google, Facebook, or another supported social-login service.

Payment Information

Payments are processed by Shopify and the payment methods displayed at checkout, which may include Shop Pay, PayPal, Google Pay, major credit cards, and other authorized payment providers. Magniflex generally does not directly store complete payment-card numbers. Payment providers process information under their own terms and privacy notices.

Information Collected Automatically

When you use the Services, we and our service providers may automatically collect information through cookies, pixels, tags, log files, and similar technologies, including:

• IP address, browser and device type, operating system, and device identifiers;
• pages viewed, links clicked, search terms, referring and exit pages, and dates and times of visits;
• approximate location derived from IP address;
• shopping-cart activity, products viewed, and interactions with website features; and
• interactions with advertisements and marketing communications.

Information from Other Sources

We may receive personal information from Shopify, payment providers, delivery and logistics providers, advertising and analytics platforms, email-marketing providers, fraud-prevention services, social-login providers, authorized retailers, and other business partners, where permitted by law.

3. How We Use Personal Information

We use personal information only for identified and appropriate purposes, including to:

• process payments, fulfil orders, arrange delivery, and provide order updates;
• create and manage customer accounts and authenticate users;
• administer returns, refunds, exchanges, warranties, gift cards, promotions, and customer support;
• respond to inquiries, complaints, and privacy requests;
• send transactional and service communications;
• send newsletters and promotional communications where we have the consent required by law;
• personalize content, offers, and advertising;
• measure website traffic, advertising performance, and customer engagement;
• improve our website, products, services, security, and customer experience;
• detect and prevent fraud, misuse, security incidents, and unauthorized transactions;
• comply with legal, tax, accounting, regulatory, and contractual obligations; and
• establish, exercise, or defend legal claims and protect the rights, property, and safety of Magniflex, our customers, and others.

4. Consent and Your Choices

Where consent is required, we seek consent that is meaningful and appropriate to the sensitivity of the information and the circumstances. Consent may be express or implied where permitted by law. We will not require consent to collect, use, or disclose information beyond what is reasonably necessary to provide a product or service, unless you are given a genuine choice.

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal may affect our ability to provide certain products, services, or account features. We may also collect, use, or disclose information without consent where permitted or required by law.

Marketing Communications

We send commercial electronic messages in accordance with Canada’s Anti-Spam Legislation (“CASL”). Where required, we obtain express consent before sending promotional emails. You may unsubscribe at any time by using the unsubscribe link in the message or by contacting us. Unsubscribing from marketing does not prevent us from sending transactional or service-related communications, such as order, delivery, account, warranty, or security messages.

5. Cookies, Analytics, and Advertising

We use cookies and similar technologies to operate the Services, remember preferences, understand website use, protect transactions, measure campaigns, and provide more relevant advertising. These technologies may include:

• essential cookies required for website operation, security, checkout, and account functionality;
• functional cookies that remember settings and preferences;
• analytics technologies, including Google Analytics, that help us understand website performance and usage; and
• advertising technologies, including Google Ads and Meta Pixel, used for campaign measurement, audience creation, and interest-based advertising.

Where required, our website will provide a cookie banner or preference tool through which you can manage non-essential cookies. You may also adjust browser settings, although disabling certain cookies may affect functionality. Your choices apply to the browser and device on which they are made and may need to be renewed if cookies are cleared.

6. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients, only as reasonably necessary for the stated purposes:

• Shopify and other website, hosting, and e-commerce providers;
• payment processors and payment methods selected at checkout;
• shipping, delivery, warehousing, and logistics providers;
• email-marketing, analytics, and advertising providers, including Klaviyo, Google, and Meta;
• social-login and identity providers, such as Google and Facebook;
• customer-service, IT, cybersecurity, fraud-prevention, and professional advisers;
• authorized Magniflex retailers, distributors, affiliates, and business partners where necessary to fulfil a request or provide support;
• government, regulatory, law-enforcement, or legal authorities where required or permitted by law; and
• a purchaser, successor, or adviser in connection with a proposed or completed merger, reorganization, financing, sale of assets, or similar business transaction.

We do not disclose personal information to third parties for their own direct marketing without the consent required by law.

7. Service Providers and Transfers Outside Canada

Some service providers, affiliates, or systems used to support the Services may be located outside Canada, including in the United States or Italy. As a result, personal information may be processed or stored in another jurisdiction and may be accessible to courts, law-enforcement authorities, or regulators under the laws of that jurisdiction.

Magniflex remains accountable for personal information transferred to service providers for processing and uses contractual or other safeguards appropriate to the circumstances. To ask about our use of service providers outside Canada, contact the Privacy Officer using the details below.

8. Retention, Accuracy, and Security

Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to complete transactions, provide customer support, administer warranties, maintain business records, comply with legal obligations, resolve disputes, and prevent fraud. When information is no longer required, we may securely delete, destroy, or anonymize it, subject to applicable law.

Accuracy

We take reasonable steps to keep personal information as accurate, complete, and up to date as necessary for the purposes for which it is used. You may ask us to correct inaccurate or incomplete information.

Security

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information. These may include access controls, authentication, secure service providers, staff procedures, monitoring, and incident-response practices. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Privacy Rights

Subject to applicable law and limited exceptions, you may request to:

• access the personal information we hold about you and receive information about its use and disclosure;
• correct inaccurate or incomplete personal information;
• withdraw consent where processing is based on consent;
• challenge our compliance with applicable privacy laws;
• receive information about our privacy practices and service providers; and
• exercise any additional rights available under the privacy law of your province or territory.

We may need to verify your identity before responding. We will respond within the period required by applicable law and may refuse or limit access only where legally permitted, for example where disclosure would reveal another person’s information, privileged information, confidential commercial information, or information that cannot lawfully be disclosed. If we refuse a request, we will explain the reason and available recourse, where required.

Additional Rights for Québec Residents

Where Québec privacy law applies, residents may have additional rights, including rights concerning the use of personal information in certain automated decisions, withdrawal of consent, correction, portability in a structured and commonly used technological format where applicable, and requests to cease dissemination or de-index certain information in circumstances established by law. Requests may be submitted to the Privacy Officer.

10. Children’s Privacy

The Services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from a child under 13 without appropriate consent. If you believe a child has provided personal information to us, please contact the Privacy Officer so that we can review and address the matter.

11. Third-Party Websites and Services

The Services may contain links to third-party websites, social networks, payment services, or other services that we do not operate. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing personal information.

12. Changes to This Privacy Policy

We may update this Policy to reflect changes in our practices, technology, legal requirements, or Services. The updated version will be posted on www.magniflex.ca with a revised “Last Updated” date. Where required, we will provide additional notice or seek renewed consent for material changes.

13. Contact Us and Privacy Complaints

Questions, requests, and complaints concerning this Policy or our handling of personal information should be directed to:

We will investigate privacy complaints and respond in accordance with applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator.