Privacy policy

This Privacy Policy describes how midnineteeneightynine.com (the “Site,” “we,” “us,” or “our”) collects, uses and discloses personal information when you visit or use the Site, make a purchase, communicate with us, or otherwise interact with our services.

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site and information necessary to process purchases and provide our services. We may also collect additional information when you contact us or otherwise interact with us.

In this Privacy Policy, “Personal Information” means information that identifies, relates to, describes or can reasonably be linked to an individual.

Device and usage information

  • Examples of Personal Information collected: IP address, browser and device information, time zone, cookie or similar identifiers, pages and products viewed, search terms, referral information and information about how you interact with the Site.
  • Purpose of collection: To operate and secure the Site, maintain functionality, understand how the Site is used, improve our services and, where permitted, support analytics and advertising.
  • Source of collection: Collected automatically when you access the Site through cookies, log files, pixels, tags, web beacons and similar technologies.
  • Disclosure: May be shared with Shopify and service providers that support the operation, security, analytics, marketing and improvement of the Site.

Order information

  • Examples of Personal Information collected: Name, billing address, shipping address, payment and transaction information, email address, phone number and order details.
  • Purpose of collection: To process payments, fulfil and ship orders, provide invoices or order confirmations, communicate with you, provide customer service, prevent fraud and, where permitted or with your consent, provide information or marketing relating to our products and services.
  • Source of collection: Collected directly from you or generated in connection with your transaction.
  • Disclosure: May be shared with Shopify and service providers involved in payment processing, order management, shipping, fraud prevention, customer support, marketing and store operations.

Customer support and communications

  • Examples of Personal Information collected: Name, email address, phone number, order information, billing or shipping address and any other information you choose to provide when contacting us.
  • Purpose of collection: To respond to enquiries, provide customer and order support, resolve issues and maintain records of our communications where reasonably necessary.
  • Source of collection: Collected directly from you.
  • Disclosure: May be shared with Shopify and service providers used to manage customer communications and store operations where necessary.

Marketing information

If you subscribe to our email marketing or otherwise consent to receive marketing communications, we may use your name, email address and information about your interactions with our communications to send you news, product information, offers and other marketing.

You can unsubscribe from marketing emails at any time using the unsubscribe link included in those communications. Unsubscribing from marketing does not prevent us from sending transactional or service-related messages concerning your orders or account.

Minors

The Site is not directed to children, and we do not knowingly collect Personal Information from children in circumstances where parental or guardian consent is required by applicable law.

If you are a parent or guardian and believe that a child has provided us with Personal Information inappropriately, please contact us using the information below.

How We Share Personal Information

We may disclose Personal Information to service providers and other third parties where reasonably necessary to operate our business, provide the Site and services, fulfil orders, process payments, communicate with customers, prevent fraud, conduct analytics or marketing, or comply with legal obligations.

For example:

  • We use Shopify to power our online store. Information about Shopify’s handling of consumer personal information is available through Shopify’s privacy materials.
  • We may disclose Personal Information to payment processors, shipping carriers, fraud-prevention providers, analytics providers, marketing and advertising platforms, communications providers and other companies that support our operations.
  • We may disclose Personal Information in connection with a business transaction such as a merger, acquisition, financing, reorganization or sale of all or part of our business, subject to applicable law.
  • We may disclose Personal Information when required or permitted by law, including in response to lawful requests, court orders or regulatory requirements, or where reasonably necessary to protect our rights, customers or others.

More information about Shopify’s privacy practices is available at shopify.com/legal/privacy.

Advertising and Analytics

Where permitted, we may use Personal Information and information about your activity on the Site to measure advertising, understand customer interactions and provide advertising or marketing communications that may be relevant to you.

Advertising and analytics providers may collect information through cookies, pixels and similar technologies. Depending on the law that applies to you, certain disclosures of information to advertising or analytics providers may be considered “sharing,” “sale,” targeted advertising or cross-context behavioural advertising.

Where required by law, we provide controls that allow you to manage or opt out of certain advertising, analytics or data-sharing activities. You may also manage cookies through your browser and through any privacy or cookie controls made available on the Site.

You may manage certain advertising preferences directly through advertising platforms, including:

Canadian users can also learn more about interest-based advertising choices through the Digital Advertising Alliance of Canada at youradchoices.ca.

How We Use Personal Information

We may use Personal Information to:

  • Provide, operate and improve the Site and our services;
  • Offer and sell products;
  • Process payments and transactions;
  • Fulfil and ship orders;
  • Provide studio pickup and related services;
  • Communicate with you about orders, enquiries and customer service;
  • Maintain the security and integrity of the Site;
  • Detect and prevent fraud or misuse;
  • Conduct analytics and understand how customers use the Site;
  • Provide marketing and advertising where permitted; and
  • Comply with legal, regulatory, tax, accounting and other obligations.

Legal Bases for Processing

Where applicable law requires us to identify a legal basis for processing Personal Information, including in the European Economic Area (“EEA”) and United Kingdom, we may rely on one or more of the following:

  • Your consent;
  • Performance of a contract with you or steps taken at your request before entering into a contract;
  • Compliance with a legal obligation; and
  • Our legitimate interests or those of a third party, provided those interests are not overridden by your applicable rights and freedoms.

Retention

We retain Personal Information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide our services, maintain transaction and business records, comply with legal, tax, accounting and reporting obligations, resolve disputes and enforce our agreements.

Retention periods may vary depending on the type of information and the reason it was collected.

We may retain certain information after a deletion request where retention is required or permitted by applicable law.

Automated Processing and Fraud Prevention

We and our service providers may use automated tools to identify potentially fraudulent or unauthorized transactions, protect the Site and assist with security and risk management.

We do not knowingly make decisions based solely on automated processing that produce legal or similarly significant effects about customers, except where permitted by applicable law and subject to any rights that may apply.

Your Privacy Rights

Depending on where you live and the law that applies to you, you may have rights concerning your Personal Information, including the right to:

  • Request access to Personal Information we hold about you;
  • Request correction of inaccurate or incomplete Personal Information;
  • Request deletion of certain Personal Information;
  • Withdraw consent where processing is based on consent;
  • Object to or restrict certain processing;
  • Request a portable copy of certain Personal Information;
  • Opt out of certain targeted advertising, sale or sharing where applicable; and
  • Make a complaint to an appropriate privacy or data-protection authority.

These rights are subject to exceptions and limitations under applicable law. To exercise a privacy right, contact us using the information provided below. We may need to verify your identity before completing your request.

EEA and United Kingdom residents

If you are located in the EEA or United Kingdom, applicable data-protection law may give you rights to access, correct, erase, restrict or object to processing of your Personal Information and to request portability of certain Personal Information.

Personal Information may be transferred outside your country, including to Canada, the United States and other locations where Shopify or our other service providers operate. Where required by law, appropriate safeguards are used in connection with international transfers.

More information about Shopify’s privacy practices and international processing is available at privacy.shopify.com.

United States residents

Residents of certain U.S. states may have additional rights under applicable state privacy laws, including rights to access, correct or delete Personal Information and, where applicable, opt out of certain sales, sharing or targeted advertising.

Where permitted by law, you may designate an authorized agent to submit a privacy request on your behalf. We may request information necessary to verify your identity, your request or the agent’s authority.

Cookies and Similar Technologies

A cookie is a small amount of information stored on your computer or device when you visit the Site. We use cookies and similar technologies for functions including website operation, security, shopping-cart functionality, checkout, customer preferences, analytics, advertising and other Site features.

Cookies help the Site remember actions and preferences and help us understand how visitors interact with the Site.

Cookies used by the Site may include cookies set by Shopify and other service providers. The specific cookies used may change as Shopify, our theme, installed applications and connected services are updated.

You can learn more about cookies used by Shopify-powered stores at shopify.com/legal/cookies.

The length of time a cookie remains on your device depends on whether it is a session or persistent cookie. Session cookies generally expire when you stop browsing. Persistent cookies remain until they expire or are deleted.

You can manage cookies through your browser settings and, where available, through the Site’s cookie or privacy-preference controls. Blocking or removing certain cookies may affect Site functionality or your browsing experience.

Browser Privacy Signals

Some browsers and devices provide privacy preference signals, including “Do Not Track” or other opt-out mechanisms. Because standards and legal requirements differ, we respond to browser-based privacy signals where required by applicable law.

Data Deletion Requests

If you would like to request deletion of Personal Information associated with your interactions with midnineteeneightynine, email hello@midnineteeneightynine.com with the subject line “Data Deletion Request.”

We will respond to verified requests within the period required by applicable law. Certain information may be retained where necessary or permitted to comply with legal obligations, maintain transaction records, prevent fraud, resolve disputes or enforce our agreements.

Security

We use reasonable administrative, technical and organizational measures designed to protect Personal Information. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, services or legal and regulatory requirements. The revised policy will be published on the Site with an updated revision date.

Contact

For more information about our privacy practices, to exercise a privacy right, ask a question or raise a concern, contact us at:

midnineteeneightynine
1 Wiltshire Ave, Unit T
Toronto, Ontario M6N 2V7
Canada

Email: hello@midnineteeneightynine.com
Phone: 416-838-6989

Last updated: October 7, 2026

If you are not satisfied with our response to a privacy concern, you may have the right to contact the privacy or data-protection authority responsible for your jurisdiction.

In Canada, the Office of the Privacy Commissioner of Canada provides information about privacy rights and its complaint process at priv.gc.ca.