Last Updated: June 12, 2026

At Melrose Supply (melrose-supply.com), protecting the privacy and digital security of our customers is a fundamental building block of our business operations. This Privacy Policy describes how we collect, process, use, and secure your personal information when you visit our website, utilize our Services, execute purchases, or otherwise communicate with us. Our data handling frameworks comply fully with Canadian federal privacy regulations under the Personal Information Protection and Electronic Documents Act (PIPEDA), relevant provincial legislation (including Quebec's Law 25), and transparent e-commerce verification standards.

1. Personal Information We Collect or Process

Depending on how you interact with our Services, we may collect and process specific categories of data that can reasonably link back to your identity:

• Contact Details: First and last name, postal shipping address, billing address, phone number, and email address.
• Financial and Transactional Data: Encrypted payment tokens, credit/debit card details (processed securely via PCI-DSS compliant Shopify infrastructure), transaction histories, cart items, wishlists, and return or cancellation records.
• Account Specifics: Username, password hashes, security configurations, and customized boutique settings.
• Technical and Device Information: IP addresses, unique device identifiers, network connection speeds, browser configurations, and automated site navigation analytics gathered via cookies or pixels.

2. How We Use Your Personal Information

Your personal information is leveraged strictly for legitimate commercial, operational, and legal purposes:

• Fulfillment of Services: Processing financial payments, managing account updates, generating invoices, coordinating shipments, and managing product returns or exchanges.
• Security & Fraud Mitigation: Monitoring site traffic to detect malicious activity, authenticating user accounts, evaluating transaction risk levels, and guaranteeing a safe checkout process.
• Store Communication: Providing interactive customer care, tracking delivery paths, responding to sizing inquiries, and issuing legal notices.
• Marketing Optimization: Customizing product recommendations, displaying relevant digital advertisements across third-party websites, and distributing optional promotional updates in strict accordance with Canada's Anti-Spam Legislation (CASL).

3. Data Sharing & International Logistics Operations

Melrose Supply is powered and hosted by Shopify. Your data is stored on secured servers managed by Shopify and is shared with select sub-processors to execute specialized technical tasks (such as cloud storage, data analytics, and payment processing).

Direct-to-Consumer Fulfillment: To eliminate costly local distribution markups and secure competitive factory-direct pricing for our Canadian customer base, we operate a direct-to-consumer cloud-fulfillment start-up model. When you complete an order, your required shipping parameters (name, delivery address, phone number) are securely transmitted to our trusted international manufacturing and logistics partners. These international partners use this data solely to bundle, address, customs-clear, and ship your apparel directly from our global hubs to your door. Personal data processed during cross-border transit may be accessible to foreign law enforcement under local jurisdictions.

4. Security Protocols & Fixed Retention Window

We enforce industry-standard administrative, physical, and electronic protection systems to prevent unauthorized data leaks or misuse. However, no data transmission across the open internet is fully impenetrable. We strongly advise against sending confidential payment details through unencrypted channels.

5. Protection of Minors

Our Services are intended exclusively for use by adult consumers and we do not knowingly collect personal details from minors under the age of 14 without explicitly verified parental consent, in compliance with provincial regulations such as Quebec's Law 25. If you believe a minor has transmitted personal data to our servers, please contact us immediately to have it permanently removed.

6. Your Legal Privacy Rights & Canadian Choices

Under PIPEDA and applicable provincial privacy laws, Canadian residents hold comprehensive rights regarding the storage and management of their personal information:

• Right to Access: Request a structured summary detailing the personal categories we hold regarding your profile and how it is being processed.
• Right to Correction: Request that our data desk immediately update inaccurate, incomplete, or outdated contact info.
• Right to Withdraw Consent: Withdraw your consent to data processing or request the elimination of your profile, provided it does not conflict with our mandatory 7-year CRA tax ledger obligations.
• Right to De-indexing / Portability: Where applicable by provincial law (such as Quebec), request the cessation of dissemination or obtain a copy of your structured data in a technological format.

7. Privacy Officer Identification & Contacts

Melrose Supply serves as the official data controller for your personal information. If you wish to exercise your data choices, file an operational privacy complaint, or submit an administrative inquiry, please connect directly with our Privacy Compliance Officer via email:

Privacy Compliance Desk Email: info@melrose-supply.com