Strayas Own (“we”, “our”, or “us”) is committed to protecting your personal information, safeguarding transactional integrity, and maintaining strict compliance with Canadian privacy regulations.
Effective Date: January 1, 2026 • Last Reviewed & Updated: October 26, 2026
1. Scope & Canadian Compliance (PIPEDA)
Strayas Own (“strayasown.com”) is an independent discovery platform and maker directory. This Privacy Policy details how we collect, process, protect, and handle data when you browse our catalog, use search tools, or subscribe to the Canadian Maker Portal.
We strictly comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada, the applicable provincial privacy statutes (including the British Columbia PIPA, Alberta PIPA, and Quebec Law 25), and international data protection standards.
2. Information We Collect
We practice strict data minimization. Depending on how you interact with Strayas Own, we collect:
General Consumer Shoppers: Anonymous telemetry, search query phrases, and optional email addresses if you subscribe to our Canadian product newsletter.
Registered Brand Partners & Makers: When registering for the Maker Portal, we collect company name, representative name, business email address, brand domain, business registration details, and administrative login credentials.
Technical Data: Browser user-agent strings, IP address (for region/province matching and fraud prevention), and referring URLs.
Stripe Financial Protection & PCI-DSS Compliance
3. Payment Security & Stripe Processing
All paid transactions, subscriptions, and recurring billing for the Canadian Maker Portal are processed through our payment partner, Stripe, Inc.
Payment Data Protections:
Zero Raw Card Storage: Strayas Own does not receive, view, process, or store your credit card numbers, expiration dates, or CVV/CVC security codes. Payment card credentials are transmitted directly from your browser to Stripe over 256-bit TLS encrypted tunnels.
PCI-DSS Level 1 Certification: Stripe is certified to the highest industry security standard (Payment Card Industry Data Security Standard Level 1).
Tokenized Reference: Strayas Own only retains non-sensitive tokenized references provided by Stripe (such as Stripe Customer ID, Stripe Subscription ID, and card brand with last 4 digits for your billing identification).
Stripe Privacy Practices: Stripe collects and processes payment information according to its own privacy policy, available at stripe.com/ca/privacy.
4. Maker Portal & Corporate Invoicing Data
For paying Maker subscribers, we maintain billing contact details, company Canadian incorporation numbers (where provided), postal billing codes, and historical invoice PDFs generated by Stripe.
This data is used solely to provide Maker Portal services, calculate applicable provincial sales taxes (GST/HST/PST), manage recurring billing, and maintain statutory financial accounting records. We will never sell, lease, or rent commercial subscriber records to third-party data brokers.
5. Affiliate Tracking & Outbound Referrals
When a user clicks on an outbound retail link to a Canadian manufacturer, artisan storefront, or affiliate network (such as Amazon.ca or eBay.ca), a tracking cookie or referral parameter may be passed to the external merchant.
This tracking parameter informs the merchant that the shopper arrived via Strayas Own so that publisher commissions can be properly credited. Once you navigate away from Strayas Own, your interaction is governed by the destination site’s privacy terms.
6. Cookies & Telemetry
We use essential cookies and lightweight performance telemetry to:
Maintain secure user login sessions in the Maker Portal (`auth-token` HTTP-only cookies).
Prevent Cross-Site Request Forgery (CSRF) and authenticate payment sessions.
Measure aggregate catalog search trends to improve directory coverage of Canadian products.
You may disable non-essential cookies through your browser settings at any time.
7. Data Retention & CRA Tax Standards
We retain personal and corporate information only as long as necessary to fulfill the purposes for which it was gathered.
Canada Revenue Agency (CRA) Compliance: In accordance with the *Income Tax Act* (Canada) and the *Excise Tax Act*, all billing statements, tax receipts, and payment ledger records are securely archived for a mandatory statutory retention period of six (6) years from the end of the relevant tax year.
8. Your Rights (Access, Correction & Erasure)
Under PIPEDA and applicable Canadian privacy legislation, you have the right to:
Request access to personal information Strayas Own holds about you or your brand.
Request prompt correction of inaccurate or incomplete corporate data.
Withdraw consent or request account deletion (subject to statutory tax retention obligations).
9. Contact Privacy & Data Officer
If you have questions, complaints, or requests regarding this Privacy Policy or your personal information, please contact our designated Privacy Officer: