Effective date: January 2026
Last updated: January 2026
Version: 2.0
1. Data Controller and Statutory Framework
Buudy respects consumer privacy and processes personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial private-sector privacy legislation (including the Alberta Personal Information Protection Act, the British Columbia Personal Information Protection Act, and Quebec's Act Respecting the Protection of Personal Information in the Private Sector — Law 25), overseen by the Office of the Privacy Commissioner of Canada (OPC).
This Privacy Policy explains how personal information is collected, managed, used, and safeguarded when you visit or make a purchase from ca.buudy.com and complete orders through our checkout platform hosted on Whop.
2. Personal Information Collected
We collect and process the following categories of information:
- Identity & Contact Details: Full legal name, billing address, Canadian physical delivery address, email address, and mobile telephone number.
- Payment Telemetry: Whop Inc. processes and encrypts payment card credentials under Level 1 PCI-DSS compliance standards. Buudy retains transaction IDs, payment method metadata, and risk ratings, but never stores raw payment card numbers.
- Order Logistics: International airway bills, dispatch records, Canadian domestic carrier tracking numbers (Canada Post Tracked or Purolator), and proof of delivery confirmations.
- Technical Footprint: IP address, geolocation tags, browser user-agents, device telemetry, and checkout timestamps collected for fraud monitoring, security, and dispute resolution.
- Customer Service Records: Inquiries, correspondence, photographs, or video documentation submitted to our support desk or the Whop Resolution Center.
3. Purposes and Principles of Processing
In accordance with the 10 Fair Information Principles of PIPEDA, personal data is processed solely for specified, legitimate commercial purposes with meaningful consent:
- Contractual Fulfilment: Fulfilling customer orders, arranging international air freight and customs clearance, providing domestic courier tracking, and servicing warranty requests.
- Legal & Tax Compliance: Satisfying Canada Revenue Agency (CRA) record-keeping rules, customs declarations with the Canada Border Services Agency (CBSA), and mandatory tax reporting.
- Legitimate Business Interests & Fraud Prevention: Protecting against fraudulent transactions, securing web infrastructure, and defending against unwarranted payment disputes.
- Consent & Marketing: Sending promotional communications or skincare routine guidance only where explicit opt-in consent is provided, in strict compliance with Canada's Anti-Spam Legislation (CASL), with an easy one-click unsubscribe mechanism.
4. Cross-Border Data Transfers
To fulfil customer purchases, delivery data (name, shipping address, contact phone) is transferred outside of Canada to our specialized international warehousing and logistics partners in China, as well as to Whop Inc. systems in the United States. All cross-border transfers are conducted under robust contractual safeguards ensuring a comparable level of protection for personal information as required under Canadian privacy legislation.
5. Data Retention and Accuracy
Order records, communications, and invoice data are retained for up to six (6) years following transaction completion to satisfy statutory tax obligations under the Income Tax Act and resolve potential contractual or warranty claims. Data is maintained accurately and securely destroyed or anonymized once retention periods expire.
6. Consumer Privacy Rights
Under PIPEDA and applicable provincial privacy laws, Canadian consumers have the right to:
- Request access to personal information held about them.
- Request correction of inaccurate, incomplete, or outdated personal information.
- Withdraw consent for secondary processing activities or marketing communications at any time.
- Lodge an inquiry or complaint with the Office of the Privacy Commissioner of Canada (OPC) or the relevant provincial privacy commissioner.
Privacy inquiries and requests may be submitted directly to support@buudy.co.uk.
7. Administrative Contact
For questions regarding our privacy practices or data governance, contact:
Buudy Operations / xPage Drop LLC
131 Continental Dr Suite 305, Newark, DE 19713, United States
Email: support@buudy.co.uk
Contact form: Contact Us
Customer service hours: Monday to Friday, 9:00 AM to 5:00 PM EST
Please note: This is a corporate administrative address only. It is not a warehouse, fulfilment center, or return depot.