Privacy Policy

Last updated: June 29, 2025

ShopCanal, Inc. takes data privacy seriously. This Privacy Policy explains who we are, how we collect, share and use Personal Information, and how you can exercise your privacy rights.

We recommend that you read this privacy policy in full to ensure you are fully informed. If you have any questions or concerns about our use of your Personal Information, then please contact us using the contact information provided in Section 11.

‍

1. THE BASICS

a. About Us

ShopCanal, Inc. is headquartered in the State of California in the United States (“we,” “us,” “our,” and “ShopCanal”) and operates a variety of Websites and online services and applications, including the “Canal for Suppliers” application, the “Canal” application, and ShopCanal’s “Services”.

ShopCanal is passionate about connecting Brands with their customers. Our Applications and Services enable Brands to connect with each other and sell in their products in new channels.

b. Key Terms

In this privacy policy, these terms have the following meanings:

“Brand” means any person or entity that is registered with us to use ShopCanal’s Applications as a Supplier or Retailer.

“Personal Information” means any information that reasonably identifies a natural person. Examples of Personal Information include, but are not limited to, first and last name, date of birth, email address, and physical address.

“Website(s)” means any website(s) we own and operate (such as www.shopcanal.com) or any web pages, interactive features, applications, widgets, blogs, social networks, social network “tabs,” or other online, mobile, or wireless offerings that post a link to this Privacy Policy.

“Visitor” means any natural person who visits any of our Websites.

“You” and “your” means, depending on the context, either a Brand or a Visitor.

‍

2. YOUR PERSONAL INFORMATION

This section applies to the Personal Information we collect and process from you when you visit our Websites or use our Services.

a. Information We Collect

The Personal Information that we may collect broadly falls into the following categories:

Information You Give Us. You may give us information about you. Personal Information is often, but not exclusively, provided to us when you sign up for and use the Services, consult with our customer service team, send us an email, integrate the Services with another website or service (for example, when you choose to connect your ecommerce account with our Applications, Canal for Suppliers or Canal), or communicate with us in any other way. The categories of information include:

• Identifiers such as real name, address, email address, phone number, employer, job title, username, and password for account registration and administration. All passwords are encrypted using secure cryptographic keys that exist only in the possession and under the control of our Brands. We have no way of accessing or providing decrypted passwords.
• Commercial information such as your billing address, shipping address, transactions and purchases of the Services. We do not store or process payment information, such as your credit or debit card number or your bank account number.
• Internet or other electronic network activity information, such as interactions with our Applications, interactions with our APIs, and communications and responses through our Services.

Information We Automatically Collect. When you visit our Websites or use our Services, we use cookies and other tracking technologies to collect certain information automatically from your device.

The categories of information include:

• Device and Connection Information: We collect information about the device and applications you use to access our Services, such as your IP address, operating system, browser ID, and other system and connection information.
• Log and Usage Data: Our servers keep log files that record data each time a device accesses them. These log files contain data about the nature of each access, including originating IP addresses, your browsing activities (such as which parts of the Services you use), and timestamps.
• Information from Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your interaction with our Websites and Services. This information helps us operate our site, analyze performance, provide a better user experience, and serve targeted advertisements. The cookies on our site fall into the following categories:

• Essential Cookies: These are strictly necessary to provide you with services available through our Websites and to use some of its features, such as access to secure areas.
• Performance and Functionality Cookies: These are used to enhance the performance and functionality of our Websites but are non-essential to their use.
• Analytics and Customization Cookies: These cookies collect information that is used to help us understand how our Website is being used or how effective our marketing campaigns are, or to help us customize our Websites for you.
• Advertising Cookies: These cookies are used to make advertising messages more relevant to you and your interests.
• Social Media Cookies: These cookies are used to enable you to share pages and content that you find interesting on our Websites through third-party social networking and other websites.

We use a number of third-party services to provide these functions, including Google Analytics, Microsoft Clarity, HubSpot, Segment, LinkedIn Ads, and others. These third parties may collect information about your online activities over time and across different websites when you use our Websites.

Information We Collect From Third Parties. From time to time, we may obtain information about you from third-party sources, such as public databases, and third-party data providers. We take steps to ensure that such third parties are legally and/or contractually permitted to disclose such information to us.

‍

b. How We Use the Personal Information

We may use the Personal Information we collect through the Services or other sources for a range of reasons. Some analytics and performance data are collected in aggregate, but we also process individual customer and order information to fulfill our Services. These reasons include:

• To provide core product functions and analytics.
• To provide you with the Applications and Services on our Websites.
• To communicate with you about your account and provide customer support.
• To bill and collect money owed to us by you.
• To market our products and/or services to you.
• To analyze Website usage and improve the services offered.
• For market research, project planning, troubleshooting problems.
• For detecting and protecting against error, fraud or other criminal activity.
• To enforce compliance with our Terms and applicable law, and to protect the rights and safety of our Brands and third parties, as well as our own.

‍

c. How We Share the Personal Information

Affiliates and Service Providers. We share your information with our third-party service providers and any subcontractors as required to offer you our products and services. For example, we use third-party credit card processors to process billing and payments. These service providers are under a duty of confidentiality.

Analytics and Advertising Partners. We partner with third-party analytics and advertising companies to help us understand how our users interact with our Websites, and to serve you with advertising on and off our Websites. These partners, such as Google, Microsoft, and LinkedIn, may use cookies and similar technologies to collect information about your browsing activities over time and across different websites. This information is used to analyze trends, and deliver more relevant advertisements.

Third Party Links and Websites. Our website may contain links to and from the websites of third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any data to these websites.

Social Media. Our website may include social media buttons or widgets (“social media elements”). These social media elements may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media elements are governed by the privacy policy of the social media company providing the feature and/or widget.

Disclosures Required by Law. We may be required to disclose your data in response to lawful requests by public authorities, including to meet law enforcement requirements. We may be under a duty to disclose or share your personal data in order to comply with any legal obligation, to enforce or apply our Terms and other agreements, to protect our rights, property, or safety, or to protect the rights, property, or safety of others. This includes exchanging information with other companies and organizations for the purposes of fraud protection.

‍

d. Legal Bases for Processing (EEA Individuals)

If you are from the European Economic Area, our legal bases for collecting and using your Personal Information is as follows:

• The performance of your contract or to enter into the contract and to take action on your requests. For example, the processing of your ShopCanal account registration, providing information on your interactions with our ShopCanal Apps, providing communications with your Contacts on the ShopCanal App.
• Our legitimate business interests. For example, fraud prevention, maintaining the security of our network and services, direct marketing to you, and improvement of our services.
• Compliance with a mandatory legal obligation. For example, accounting and tax requirements, which are subject to mandatory retention periods. We may also collect your Personal Information to record your requests to exercise your rights and to verify your identity for such requests.
• Consent you provide where we do not rely on another legal basis. Consent may be withdrawn at any time.
• In some limited cases, we may also have a legal obligation to collect Personal Information from you, in response to lawful requests by public authorities, including to meet law enforcement requirements, as described above in “How We Share the Personal Information?”

Canal does not engage in automated decision-making or profiling of individuals in connection with its Services.

If you have questions about or need further information concerning the legal bases on which we collect and use your Personal Information, please contact us using the contact details provided in the “Contact Information” section below.

‍

3. YOUR PRIVACY CHOICES

a. General

Marketing Opt-Out From ShopCanal Communications: If you have opted-in to ShopCanal directly, we may use your Personal Information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe instructions provided in any email we send. You will still continue to receive service-related messages concerning our Services.

Cookie Preferences: You can manage your cookie preferences for our Website at any time through our cookie consent banner by clicking “Preferences.” Please note that disabling certain cookies may affect the functionality of our Websites.

Exercising Your Privacy Rights: If you wish to access, correct, or delete your personal information, you may submit a request by emailing support@shopcanal.com. If you are a customer of a Shopify-powered store using Canal, you may also submit a request through Shopify’s own privacy process. Verified erasure requests received from Shopify will result in the deletion of your customer record and the redaction of personal information (such as shipping/billing addresses and email) from related orders in our systems. This process is automated and takes place promptly after we receive a valid request from Shopify. For data originating from other platforms or submitted directly to Canal (for example, through other e-commerce integrations), we handle erasure, access, and correction requests on a manual basis. We will review your request and process it in accordance with applicable law.

‍

b. California Residents

Third Party Marketing. California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your Personal Information to third parties for the third parties’ direct marketing purposes. To make such a request, please contact us at the Contact Information below.

California Consumer Privacy Act. If you are a California consumer, you have the following rights beginning on January 1, 2020:

• The right to know what Personal Information is being collected about you.
• The right to know whether your Personal Information is sold or disclosed and to whom.
• The right to say no to the sale of Personal Information.
• The right to access your Personal Information.
• The right, in certain circumstances, to delete the information you have provided to us.
• The right to equal service and price, even if you exercise your privacy rights, unless the difference in service and/or price is reasonably related to the value provided to the you by your Personal Information.

Requests for Deletion and Information. In certain circumstances, California consumers have the right to request that we delete their information. In addition, California consumers have the right to request, up to twice in a 12-month period, that a business that collects Personal Information about the consumer disclose to the consumer the information listed below for the preceding 12 months. We have the right to request verification of your identity for all requests for information.

1. The categories of Personal Information it has collected about that consumer.
2. The categories of sources from which the Personal Information is collected.
3. The business or commercial purpose for collecting or selling Personal Information.
4. The categories of third parties with whom the business shares Personal Information.
5. The categories of Personal Information that the business sold about the consumer and the categories of third parties to whom the Personal Information was sold, by category or categories of Personal Information for each third party to whom the Personal Information was sold.
6. The categories of Personal Information that the business disclosed about the consumer for a business purpose.
7. The specific pieces of Personal Information it has collected about that consumer.

To make such a request, please contact us at the contact information below.

Do Not Sell My Personal Information. We are not data brokers and we do not sell your data on the open market. However, under California’s new privacy law, the California Consumer Privacy Act, some of the ways we share information with Brands as a necessary function of our Services may constitute a “sale.” To exercise your right to opt out of the sale of personal information, email support@shopcanal.com.

‍

c. EEA Residents

EEA Privacy Rights. If you are from the European Economic Area, you have the right, under certain circumstances, to:

• Access your Personal Information;
• Correct inaccurate Personal Information;
• Request erasure of your Personal Information without undue delay;
• Request the restricted processing of your Personal Information;
• Request portability of the Personal Information that you have given us.

If you are from the European Economic Area, you also have the right to lodge a complaint with a supervisory authority, under certain circumstances.

You may contact us at support@shopcanal.com for more information, or to exercise your rights.

‍

4. INTERNATIONAL TRANSFERS

Any data that you provide to us may be accessed, shared or processed by our offices, located in the United States, and service providers located in the United States and abroad, if such data transfer is necessary for the specific purpose for which you submitted your data (such as the provision of goods or services under a written contract). This may entail a transfer of your Personal Information across international borders, including, but not limited to, transfers from within the European Economic Area (the “EEA”) to the United States. The data protections standards may differ and be lower than the standards enforced in your jurisdiction. We maintain appropriate safeguards as required by applicable law for any Personal Information transferred internationally, and as required by applicable law, will seek your consent prior to such transfers.

‍

5. CHILDREN’S PRIVACY

This website is not directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with Personal Information, please contact us at the Contact Information below. If we become aware that a child under 16 has provided us with Personal Information, we will take steps to delete such information.

Brands are also required to implement age-gating techniques appropriate to the products and services they provide. If you become aware that an individual or Brand has provided us with Personal Information in violation of these Terms (e.g. Personal Information from individuals under 18 for tobacco products or adult services), please contact us at the Contact Information below.

‍

6. DO NOT TRACK

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. DNT is a way for users to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or online services. We do not recognize or respond to browser-initiated DNT signals, as the Internet industry is currently still working toward defining exactly what DNT means, what it means to comply with DNT, and a common approach to responding to DNT.

‍

7. CHANGE OF CONTROL

Personal information may be transferred to a third party as a result of a sale, acquisition, merger, reorganization or other change in control. If we sell, merge or transfer any part of the business, part of the sale may include your Personal Information.

‍

8. DATA RETENTION

Our retention periods will vary depending on the type of data involved, but, generally, we’ll refer to these criteria in order to determine the appropriate retention period:

• Whether we have a legal or contractual need to retain the data.
• Whether the data is necessary to provide our Services.
• Whether our Brands would reasonably expect that we would retain the data until they remove it or until their ShopCanal accounts are closed or terminated.

When we have no ongoing lawful basis to process your Personal Information, we will take reasonable steps to delete or anonymize it. We also automatically delete old customer and order data as part of a periodic cleanup process. If deletion or anonymization is not immediately possible (for example, because your Personal Information has been stored in backup archives), we will securely store your Personal Information and isolate it from any further processing until deletion is possible. Please note that some data may be retained for legal or regulatory compliance, or for legitimate business purposes.

‍

9. SECURITY PROTECTIONS

We take appropriate and reasonable technical and organizational measures to protect Personal Information from loss, misuse, unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in the processing and the nature of the Personal Information.

Data Segregation. To further protect your information, our platform is designed with a multi-tenant architecture that isolates and segregates data. Each Brand operates within a distinct “team” environment. We enforce strict, team-based access controls at the application level for every request to ensure that users can only access data belonging to their own team. This architecture prevents data leakage between different Brand accounts.

ShopCanal accounts require a username and password, or social media authentication, to log in. Account holders must keep their username and password secure, and never disclose it to a third party in accordance with our Terms.

‍

10. POLICY CHANGES

We may change this privacy policy at any time and from time to time. The most recent version of the privacy policy is reflected by the date located at the top of this privacy policy. All updates and amendments are effective immediately upon notice, which we may give by any means, including, but not limited to, by posting a revised version of this privacy policy or other notice on the Websites. We encourage you to review this privacy policy often to stay informed of changes that may affect you. Our electronically or otherwise properly stored copies of this privacy policy are each deemed to be the true, complete, valid, authentic, and enforceable copy of the version of this privacy policy that was in effect on each respective date you visited the Websites.

‍

11. CONTACT INFORMATION

If you have any questions or comments, or if you have a concern about the way in which we have handled any privacy matter, please contact us by postal mail or email at:

support@shopcanal.com

For inquiries related to your data rights or GDPR requests, please include “Privacy Inquiry” in the subject line.

ShopCanal, Inc.
655 Montgomery St, Suite 1720
San Francisco, CA 94111