Privacy Policy
Clear guidelines detailing our practices regarding customer data collection, order processing, secure payment handling, and third-party delivery dispatch.
1. Operational Scope and Regulatory Framework
This Privacy Policy governs the collection, processing, management, and safeguarding of personal information by Cargos Pack across our online retail storefront, digital checkout gateways, customer care interactions, and dispatch communication networks. Our practices operate in accordance with applicable consumer privacy legislation, statutory fair information principles, and regulatory guidelines governing electronic commerce, personal data stewardship, and commercial transactions within Canada.
By accessing our catalog, placing purchase orders, or communicating with our support channels, you acknowledge the terms outlined herein. If you do not concur with our data handling standards, please refrain from initiating commercial orders or submitting personal credentials through our digital infrastructure.
2. Information Categories Subject to Processing
To execute retail orders, issue invoices, coordinate physical dispatches, and maintain ongoing service integrity, Cargos Pack collects and processes discrete categories of information based on user engagement:
- Customer Identification & Contact Records: Full legal name, billing recipient name, consignee delivery name, operational contact telephone number (14034023014), and validated electronic mail address (hello@cargospack.com).
- Physical Delivery Coordinates: Detailed destination postal address, province, postal code, apartment or suite numbering, commercial loading dock indicators, and specialized freight drop-off instructions.
- Order Specifications & Commercial Records: Specific product SKUs, backpack models, utility gear variants, quantities, transaction timestamps, payment confirmation references, return documentation, and warranty claims.
- Payment Verification Tokens: Encrypted payment verification tokens, card-issuing network identifiers, and billing validation signatures provided by certified clearing gateways (raw credit card numbers, expiry dates, and CVV security codes are handled exclusively by certified payment processors and are never stored on Cargos Pack servers).
- Technical & Telemetry Data: IP addresses, browser client identifiers, device hardware attributes, referring URLs, access logs, session tokens, and security challenge responses recorded to detect fraudulent transactions and preserve network integrity.
3. Lawful Grounds and Specific Processing Purposes
Every processing operation conducted by Cargos Pack is anchored to legitimate commercial purposes and clear contractual obligations:
- Contract Execution: Validating checkout cart selections, generating sales orders, producing tax invoices, and fulfilling our binding merchant commitments to deliver purchased merchandise.
- Logistics Coordination: Routing package consignments through postal authorities and freight partners to ensure precise, traceable transit to the specified delivery location.
- Risk Mitigation & Fraud Prevention: Evaluating transaction signals to thwart automated card-testing scripts, identity impersonation, and fraudulent payment disputes before item dispatch.
- Customer Service Management: Facilitating product replacement queries, delivery schedule amendments, parcel return tracking, and post-purchase customer satisfaction requests.
- Statutory and Fiscal Accountability: Retaining immutable commercial records to satisfy accounting standards, audit inspections, and corporate reporting mandates.
4. Payment Gateways and Financial Processing Standards
Financial transactions conducted on the Cargos Pack online store are processed using certified Level 1 PCI-DSS (Payment Card Industry Data Security Standard) compliant third-party payment service providers. When you submit payment information at checkout, these sensitive credentials are encrypted using Transport Layer Security (TLS 1.3) and transmitted directly from your client browser to the acquiring financial gateway.
Cargos Pack maintains zero storage of raw primary account numbers (PAN), security authentication codes, or magnetic stripe equivalent data. Our systems only receive, process, and record tokenized transaction identifiers, authorization codes, and merchant settlement logs necessary for billing verification, order correlation, tax reporting, and processing future returns or authorized refunds.
5. Third-Party Logistics, Carrier Services, and Data Sharing
To successfully deliver your purchased gear, Cargos Pack transmits necessary fulfillment details to vetted logistics carriers, regional courier operators, and third-party parcel dispatch services (including Canada Post, regional freight partners, and international express couriers). Data provided to these carriers is strictly confined to what is indispensable for transportation:
- Consignee recipient name and physical destination address.
- Direct customer telephone number (14034023014) for delivery notification, carrier access verification, and parcel collection alerts.
- Consignment reference number, parcel dimensional weight, and applicable customs declaration information for cross-border freight.
Our logistical service providers are bound by strict non-disclosure obligations and are legally prohibited from using customer information for secondary commercial promotions, unrequested marketing, or independent dissemination.
We do not sell, rent, monetize, or barter consumer personal information to third-party data brokers or marketing intermediaries under any circumstance. Aside from essential fulfillment and payment processors, data is disclosed only when required by lawful subpoenas, search warrants, court directives, or applicable statutory mandates.
6. Technical Safeguards and Data Architecture Security
Cargos Pack enforces rigorous physical, administrative, and technological security controls to defend customer records against unauthorized interception, unauthorized modification, exfiltration, or loss. Our technical protective architecture incorporates:
- End-to-end TLS encryption across all digital storefront pages, administrative panels, and checkout forms.
- Strict role-based access management, multi-factor authentication protocols, and comprehensive access logging for authorized staff members.
- Continuous vulnerability monitoring, perimeter network firewalls, and scheduled security posture evaluations.
- Segregated database environments maintaining encrypted backups with limited geographic access to prevent catastrophic loss.
7. Data Retention Cycles and Secure Disposal
Personal data is retained only for the timeframe necessary to accomplish the operational purposes for which it was originally collected, including the resolution of warranty claims, delivery reconciliation, and fulfillment of statutory commercial retention periods:
- Active Order Records: Maintained throughout the active lifespan of the purchase, warranty duration, and return window to support consumer post-sale assistance.
- Accounting & Tax Records: Preserved for seven (7) years following transaction completion in strict adherence to corporate fiscal retention obligations and auditing requirements.
- Automated Telemetry Logs: Network traffic logs, security logs, and connection traces are systematically overwritten or expunged within ninety (90) days, unless retained for ongoing fraud forensic audits.
Upon the expiration of applicable legal retention cycles, physical records are permanently shredded, and digital data sets are cryptographically scrubbed or irreversibly anonymized using industry-standard disposal procedures.
8. Consumer Rights, Access Inquiries, and Revocation of Consent
Under applicable personal information protection legislation, customers maintain explicit rights concerning their personal data retained by Cargos Pack:
- Right of Access: You may request formal disclosure of all personal records maintained under your profile, alongside documentation of how such data has been processed or transferred.
- Right of Rectification: If any recorded contact details, delivery addresses, or personal parameters are inaccurate, incomplete, or outdated, you have the right to request prompt correction.
- Right to Withdraw Consent: You may withdraw your consent for optional data processing operations (such as marketing communications or optional preference cookies) at any time without impacting past lawful transactions.
- Right of Erasure: You may request the deletion of non-statutory records when the data is no longer necessary for ongoing contract fulfillment or statutory regulatory maintenance.
To submit a verified data access or rectification request, contact our Privacy Compliance Officer using the dedicated communication channels detailed below. We respond to all formal inquiries within thirty (30) calendar days following identity verification.
9. Cookies and Automated Browser Technologies
The Cargos Pack website uses essential and functional web cookies to preserve persistent shopping cart contents across browsing intervals, ensure secure customer authentication tokens, and preserve site responsiveness. Analytical tags may measure anonymous storefront usage patterns to diagnose technical friction during checkout.
Users can regulate, restrict, or disable non-essential cookies via their browser configuration settings. Please note that disabling technical session cookies may compromise checkout functionality, preventing items from remaining in your digital cart during purchase finalization.
10. Regulatory Officer Inquiries and Contact Information
For questions regarding our privacy standards, data management methodologies, carrier transmission procedures, or to submit formal consumer rights requests, please contact our Privacy Compliance Office:
Cargos Pack — Privacy Compliance Department
Postal Address: 5626, Avenue Woodbury, Montréal, H3T 1S7, Canada
Telephone: 14034023014
Electronic Mail: hello@cargospack.com
If you consider our response insufficient after direct consultation with our data protection team, you maintain the statutory right to register a formal inquiry with the relevant federal or provincial Privacy Commissioner.