Your privacy, protected.
How U Shoppe collects, uses, and protects your personal information under PIPEDA and Ontario PHIPA.
U Shoppe is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal and health information.
Last Updated: 4 June 2026 Effective Date: 4 June 2026
1. Introduction
U Shoppe is the online store operated by Uptown Eye Specialists Inc., part of the U Vision Group family of clinician-owned eye care centres in Ontario. We respect your privacy and comply with applicable Canadian privacy law — principally the Personal Information Protection and Electronic Documents Act (PIPEDA), which governs personal information collected in the course of commercial activity.
This policy applies to: – Personal information collected on ushoppe.ca – Health information you voluntarily provide (e.g., product recommendations for specific conditions) – Information collected through orders and customer service interactions
This policy does not cover your clinical record. If you are also a patient of a U Vision Group clinic, that record is held separately by the clinic under Ontario’s Personal Health Information Protection Act (PHIPA), and is governed by that clinic’s privacy policy. Shopping with U Shoppe does not add anything to it.
2. Information We Collect
A. Personal Information
When you shop at U Shoppe, we collect:
- Name and Contact Details: Name, email address, phone number
- Delivery Address: Street address, city, province, postal code
- Payment Information: Credit card details (processed securely via Square; not stored on our servers)
- Account Information: Username, password (if you create an account)
- Communication Preferences: Email, SMS, newsletter subscriptions
- Customer Service Interactions: Inquiries, product questions, feedback, returns/exchanges
B. Health Information (Voluntary)
You may voluntarily provide health-related information, such as:
- Product recommendations (e.g., “I’m recovering from UltraView FREEDOM surgery”)
- Questions about specific conditions (e.g., “Which dry eye products are best for me?”)
- Allergy or sensitivity information (e.g., “I’m sensitive to preservatives”)
This health information is optional and used only to assist with product selection and customer service.
C. Automatic Collection
When you visit ushoppe.ca, we automatically collect:
- IP Address: Your internet protocol address
- Browser and Device Information: Browser type, device type, operating system
- Cookies and Tracking Data: Site usage patterns, pages viewed, products browsed
- Analytics: Google Analytics data (pages visited, time on site, referral sources)
This information helps us improve our website and understand customer behaviour (no identifying details).
3. How We Use Your Information
A. Order Fulfillment
- Processing your purchase
- Calculating shipping costs and applying taxes
- Contacting you with order confirmations and tracking information
- Arranging delivery and handling returns/exchanges
B. Product Recommendations
- Responding to your product questions
- Providing guidance based on your health condition (if you share it)
- Ensuring you receive products safe for your specific needs
C. Customer Service
- Responding to inquiries via email or contact form
- Resolving order issues or complaints
- Following up on product feedback or damage claims
D. Marketing and Communications
- Sending you newsletters (only if you opt in)
- Announcing new products or promotions
- Inviting you to product launches or customer surveys
You can unsubscribe from marketing emails anytime by clicking the unsubscribe link in the email.
E. Legal Compliance
- Complying with Canadian tax and regulatory requirements (HST reporting, privacy and consumer-protection obligations)
- Protecting against fraud or illegal activity
- Responding to lawful requests from government agencies
F. Website Improvement
- Analyzing website traffic and usage patterns
- Testing new features and optimizing user experience
- Preventing technical issues or security breaches
4. Who We Share Your Information With
A. Service Providers
We share information with trusted vendors who support our operations:
- Payment Processor: Square (credit card processing only; no card storage on our servers)
- Shipping Carrier: Canada Post, Purolator, or other carriers (delivery address only)
- Email Service Provider: Newsletter and transactional email delivery
- Analytics Provider: Google Analytics (anonymized usage data)
- Website Hosting: WPCloud.ca (secure Canadian hosting)
All service providers are bound by confidentiality agreements and comply with Canadian privacy laws.
B. U Vision Group (Parent Organization)
As part of UVG, we may share anonymized usage data (not personal information) with UVG leadership to understand product demand and customer preferences.
C. Legal Requirements
We may disclose personal information if required by law (e.g., court order, government investigation). We will notify you of such requests unless prohibited by law.
D. What We Do NOT Share
- We do NOT sell your personal information to third parties
- We do NOT share your health information with external marketers
- We do NOT disclose customer lists or email addresses to external companies
- We do NOT use your data for purposes beyond those stated in this policy
5. Health Information You Choose to Share
If you tell us something about your health (e.g., post-surgical status, dry eye condition) so we can help you choose a product, that information is:
- Collected voluntarily — You choose to share it with us
- Treated as sensitive — Handled under PIPEDA with the care its sensitivity warrants, and kept apart from any clinical record
- Used only for customer service — To help recommend appropriate products
- Never shared without consent — Except as required by law
- Securely stored — On Canadian servers with encryption and access controls
- Retained briefly — Only as long as necessary to serve your inquiry (typically 30–90 days)
If you wish to access, correct, or delete this information, contact us.
6. Data Security
A. Encryption
- Payment processing: All credit card data is encrypted via Square’s PCI-compliant servers
- Website traffic: HTTPS/SSL encryption protects data in transit
- Database storage: Customer data is encrypted at rest on WPCloud.ca servers
B. Access Controls
- Personal and health information is accessible only to U Shoppe staff with a legitimate business need
- Staff are trained on privacy and confidentiality
- Passwords are hashed; payment card details are never stored
C. Security Limitations
While we employ industry-standard security measures, no system is 100% secure. We cannot guarantee absolute security of data transmitted over the internet. If you believe your information has been compromised, contact us immediately.
7. Your Rights
A. Access Your Information
You have the right to request a copy of the personal information we hold about you. Contact us with your request.
B. Correct Inaccuracies
If any of your information is inaccurate or incomplete, we’ll correct it upon request.
C. Delete Your Information
You can request deletion of your personal information (subject to legal retention requirements). Note: We may retain order data for tax and accounting purposes.
D. Withdraw Consent
If you’ve consented to marketing emails or data processing, you can withdraw consent anytime by: – Clicking “Unsubscribe” in any marketing email – Contacting us to opt out of all communications
E. Data Portability
Upon request, we’ll provide your information in a portable format (e.g., CSV file).
8. Cookies and Tracking
A. What Are Cookies?
Cookies are small text files stored on your device that remember your preferences and shopping behaviour.
B. Types of Cookies We Use
- Essential Cookies: Required for checkout and account login (cannot be disabled)
- Analytics Cookies: Google Analytics tracks website usage (anonymized)
- Marketing Cookies: Remember items you’ve browsed (enables personalized recommendations)
C. Disabling Cookies
You can disable non-essential cookies in your browser settings. This may limit functionality (e.g., cart persistence).
D. Third-Party Cookies
We do not use third-party advertising networks. However, your browser may transmit data to Google based on your Google account settings.
9. Third-Party Links
U Shoppe may link to external websites (e.g., UVG clinical sites, product manufacturer pages). This privacy policy does not apply to those sites. We’re not responsible for their privacy practices. Review their policies before providing information.
10. Children’s Privacy
U Shoppe is not intended for children under 13. We do not knowingly collect information from children. If we become aware of it, we’ll delete such information immediately.
11. Marketing and Promotional Communications
A. Opt-In Model
We use an opt-in approach for marketing emails. You’ll only receive newsletters and promotions if you explicitly consent.
B. CASL Compliance
U Shoppe complies with Canada’s Anti-Spam Legislation (CASL). All marketing emails include: – Clear sender identification – Unsubscribe link – Contact information
C. Unsubscribing
Click “Unsubscribe” in any marketing email or contact us to opt out.
12. Data Retention
We retain personal information for as long as necessary to: – Fulfill your orders and respond to inquiries – Comply with tax and legal requirements (typically 6 years) – Provide customer service and support returns
Once you delete your account or request information deletion, we securely delete data within 30 days (except where legally required to retain it).
13. International Transfers
U Shoppe operates entirely within Canada. Your data is stored on Canadian servers (WPCloud.ca). We do not transfer personal information outside Canada without explicit consent (except to Square for payment processing, which complies with Canadian privacy laws).
14. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We’ll notify you of material changes by: – Posting the updated policy on this page – Sending an email notification (for significant changes)
Your continued use of U Shoppe after changes indicates your acceptance of the updated policy.
15. Contact Us
For privacy inquiries, data access requests, or complaints:
Email: privacy@ushoppe.ca
Mailing Address: U Shoppe / U Vision Group 2180 Steeles Avenue West, Unit #221, Concord, ON L4K 2Z5 Ontario, Canada
Response Time: We respond to all privacy requests within 30 days.
Escalation: If you’re not satisfied with our response, you can file a complaint with the Information and Privacy Commissioner of Ontario (IPC) at www.ipc.on.ca.
16. Which Privacy Law Applies
U Shoppe is a retailer. When you shop with us, the law that governs your information is PIPEDA — Canada’s federal private-sector privacy law — not Ontario’s Personal Health Information Protection Act. U Shoppe is not a health information custodian, and we do not hold clinical records.
Uptown Eye Specialists Inc., which operates U Shoppe, is a health information custodian under PHIPA in its clinical capacity — as the operator of its eye care practices. Those two roles are kept separate. Your shopping history is not added to your clinical record, and your clinical record is not used to market to you.
Whichever applies, you have the right to know what we hold, to see it, to correct it, and to ask us to delete it. If you are not satisfied with how we have handled a request, you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or — for anything concerning a clinical record — to the Information and Privacy Commissioner of Ontario at ipc.on.ca.
