Canada
United States
Last updated: September 2, 2026
1. Who we are
This policy explains how REDAVID Salon Products Inc. (“REDAVID”, “we”, “us”) collects, uses, shares and protects personal information when you visit redavid.ca, buy from us, subscribe to our messages, or contact us.
REDAVID has created clean and natural haircare since 2012. Our head office is in Burnaby, British Columbia. Our products are made and shipped from Ontario, Canada.
REDAVID Salon Products Inc.
Burnaby, British Columbia, Canada
Telephone: 1.604.428.0077
Our Privacy Officer
Ken Vigue, Privacy Officer
Email: ken@redavidhair.com
Telephone: 1.604.428.0077
You may contact the Privacy Officer about anything in this policy, to exercise any of the rights in Section 10, or to make a complaint.
2. The short version
- We collect what we need to sell you haircare and to run our website: your account and order details, your messages to us, and technical information about your visit.
- We do not sell your personal information.
- We use cookies and similar technologies, including for advertising and analytics, and we name every one of those providers in Section 6.
- We share hashed contact details with Google and Meta so we can show you relevant offers and, importantly, so we can stop showing ads to people who have already bought. Section 6.3 explains this and how to opt out.
- You can ask us what we hold about you, correct it, delete it, or take it elsewhere. Section 10 explains how.
3. What we collect
You give us:
- Account: name, email address, password, and any preferences you set.
- Orders: billing and shipping address, telephone number, order contents and history.
- Payment: processed by our payment providers. We do not receive or store your full card number. We receive a confirmation, the last digits and the card type.
- Communications: what you write to us by email, contact form, social media or telephone, and your marketing preferences.
- Reviews: what you submit through our reviews provider.
- Professional and salon accounts: business name, professional credentials and trade pricing eligibility, where you apply for one.
We collect automatically when you use the site:
- IP address, approximate location derived from it, browser and device type, operating system, and language.
- Pages viewed, products viewed, items added to cart, searches, referring site, and the campaign or link that brought you.
- Cookie and device identifiers.
- Session activity, including mouse movement, scrolling and clicks, through our behavioural analytics provider. See Section 6.2.
We do not intentionally collect government identifiers, financial account numbers, health information, or any special category of personal information. Please do not send these to us.
4. Why we use it, and our legal basis
| Purpose | Examples | Basis |
|---|---|---|
| Fulfil your order | Payment, shipping, confirmations, returns | Necessary to perform our contract with you |
| Operate your account | Login, order history, saved addresses | Contract |
| Customer service | Answering questions, resolving problems | Contract and legitimate interest |
| Site security and fraud prevention | Blocking abuse, detecting errors | Legitimate interest |
| Understand and improve the site | Which pages work, where people abandon | Consent, where the law requires it; otherwise legitimate interest |
| Marketing email and SMS | Newsletters, offers, back-in-stock alerts | Your express consent. Withdraw any time |
| Advertising and measurement | Showing relevant offers, excluding recent buyers, measuring what works | Your consent where required, including in Quebec |
| Legal and tax obligations | Records retention, responding to lawful requests | Legal obligation |
We do not use your personal information to make automated decisions that produce legal or similarly significant effects about you.
5. Cookies, trackers and your choices
Cookies are small files stored on your device. Some are strictly necessary to make the site work at all: keeping you logged in, remembering your cart, and processing payment. The site cannot function without those.
Everything else, meaning analytics, behavioural recording, and advertising, is optional.
You can control cookies through your browser settings, and you can opt out of personalised advertising directly with the providers using the links in Section 6.3. You can also ask our Privacy Officer to remove you from our advertising lists entirely, and we will do so and keep you out of future uploads.
We are in the process of adding a cookie consent banner that will switch optional cookies off by default and let you change your choice at any time. Until it is in place, the controls above are how you exercise choice, and you are welcome to contact our Privacy Officer for help doing so.
6. Who we share it with
We do not sell your personal information, and we never have.
We share it with the providers below, only for the purposes described, and only to the extent each one needs.
6.1 Running the store
| Provider | What it does | What it receives |
|---|---|---|
| Kinsta | Website hosting | Everything you submit to the site |
| WooCommerce / Automattic | Store platform | Account and order data |
| Stripe | Payment processing | Payment and billing details, directly |
| PayPal | Payment processing | Payment and billing details, directly |
| Amazon Web Services | Image and file hosting | Technical request data |
| Sentry | Error monitoring (United States) | Technical error data, which can include IP address |
| Shipping carriers | Delivery, including Canada Post | Name, address, telephone |
6.2 Understanding how the site is used
| Provider | What it does | What it receives |
|---|---|---|
| Google Analytics 4 | Site analytics, through our own server-side endpoint | Pages viewed, events, device and approximate location, cookie identifiers |
| Microsoft Clarity | Session recording and heatmaps. Records how visitors move through pages, to help us find and fix problems | Mouse movement, scrolling, clicks, pages viewed, device and browser |
6.3 Advertising
We advertise on Google and Meta. This is the part most people want to understand, so we have spelled it out.
Tracking on the site. Google and Meta tags run on redavid.ca and tell those platforms which pages and products you looked at, and whether you bought. Some of this is sent from your browser and some from our own server. Both routes send the same kind of information.
Customer lists. We upload lists of our customers to Google Ads and Meta so that we can show relevant offers, build audiences of similar people, and exclude people who have recently bought so we stop advertising to them. Before anything leaves our systems, the contact details in those lists are irreversibly hashed, meaning converted into a fixed code that cannot be turned back into your email address or telephone number. The platforms match those codes against their own hashed records. We upload hashed email addresses, telephone numbers, names, country and postal code. We do not upload what you bought or what you spent.
| Provider | What it does | Opt out |
|---|---|---|
| Google (Ads, Customer Match, Merchant Center) | Advertising, measurement, shopping listings | myadcenter.google.com and the Google Analytics opt-out |
| Meta (Facebook, Instagram) | Advertising, measurement, catalogue ads | Your Facebook or Instagram Ad Preferences |
To be removed from our advertising lists entirely, email our Privacy Officer and we will remove you and keep you out of future uploads.
6.4 Email, SMS and reviews
| Provider | What it does | What it receives |
|---|---|---|
| Omnisend | Marketing email and SMS, and on-site signup forms | Email, telephone, name, and on-site browsing tied to your contact record |
| Mailchimp | Marketing email | Email, name, subscription status |
| Reviews.io | Collecting and displaying reviews | Email, name, order reference |
6.5 Social and embedded content
Our pages include buttons and embedded content from X (Twitter), Facebook, Instagram, YouTube, Pinterest, TikTok, LinkedIn, Threads and Tumblr. Where these load content, the provider learns that you visited the page, even if you do not click.
6.6 Other disclosures
We may disclose personal information where required by law, to enforce our terms, to protect our rights or someone’s safety, or as part of a sale or reorganisation of the business, in which case we will tell you.
7. Marketing messages
We send marketing email and SMS only with your express consent, given when you subscribe or at checkout. Every message contains an unsubscribe link, and SMS messages accept STOP. You can also email the Privacy Officer. Withdrawal is free and takes effect promptly. We will still send you transactional messages about orders you have placed.
8. How long we keep it
| Category | Retention |
|---|---|
| Order and transaction records | 7 years, to meet Canadian tax and business record requirements |
| Account information | While your account is open, and for 7 years afterwards where it forms part of an order record |
| Marketing contact details | Until you unsubscribe, then removed at the next list maintenance |
| Website analytics | Up to 14 months |
| Session recordings | Up to 30 days; aggregated heatmap data up to 13 months |
| Advertising audience lists | Refreshed periodically; you can be removed on request at any time |
| Contact and support messages | 2 years |
When a retention period ends we delete the information or irreversibly anonymise it.
9. Where your information goes
REDAVID is based in Canada and our data is primarily held in Canada. Several providers named in Section 6 are based in, or store data in, the United States and the European Union, including Google, Meta, Microsoft, Stripe, PayPal, Sentry, Omnisend, Mailchimp and Amazon Web Services. This means your personal information may be stored or processed outside Quebec and outside Canada, and may be accessible to authorities in those countries under their laws.
Before transferring personal information outside Quebec we assess whether it will receive adequate protection, as Quebec’s Law 25 requires, and we rely on contractual protections with each provider.
If you would like more information about a specific transfer, contact our Privacy Officer.
10. Your rights
Wherever you live in Canada, you may ask us to:
- Access the personal information we hold about you;
- Correct anything inaccurate or incomplete;
- Delete your information, where we are not required to keep it;
- Withdraw consent to marketing or to optional cookies, at any time;
- Receive a copy of the information you gave us, in a structured, commonly used electronic format, or have us send it directly to another organisation (data portability);
- Know the reasons behind any decision made about you using automated processing;
- Ask us to stop disseminating information about you, or to de-index a link, where it causes you serious injury.
Contact our Privacy Officer at ken@redavidhair.com. We will respond within 30 days. We may need to verify your identity first, and we will not charge you.
If you are not satisfied, you may complain to the regulator:
- Quebec residents: Commission d’accès à l’information du Québec, cai.gouv.qc.ca
- Elsewhere in Canada: Office of the Privacy Commissioner of Canada, priv.gc.ca
11. Keeping it safe
We protect personal information with encryption in transit, access controls, and by restricting access to those who need it. Payment card details are handled by our payment providers and are never stored on our systems. No system is perfectly secure, but if a breach occurs that presents a risk of serious injury we will notify affected individuals and the appropriate regulator without delay, and we maintain a register of such incidents as the law requires.
12. Children
Our site is intended for adults. We do not knowingly collect personal information from children. If you believe a child has given us information, contact our Privacy Officer and we will delete it.
13. Changes
We will post any change to this policy on this page and update the date at the top. If a change is significant we will tell you directly.