Legal
Privacy policy
This policy describes exactly what GPScents does with your information — nothing more, nothing implied. If something isn't listed here, we don't do it.
Last updated 12 August 2026
Who we are
GPScents is a small-batch artisan perfume maison operating from 561 Sherbourne Street, Toronto, ON M4X 0A1. We are responsible for the personal information handled through gpscents.com. For anything to do with your information, write to support@gpscents.com or call (613) 801-2597.
What we collect, and why
| Information | Purpose | When |
|---|---|---|
| Account email address and sign-in session | Signs you in and lets you view your own orders. | Only if you create an account or sign in. |
| Order details — name, email, shipping address, items ordered, and your shipping or same-day pickup choice | Takes payment, fulfils and ships your order, and sends your receipt. | When you place an order. |
| Card details | Payment is taken on Stripe's own checkout pages. We never see, receive or store card numbers. | Entered by you at Stripe checkout. |
| Cart and Discovery Kit selections | Remembers your basket between page loads. | Stored in your own browser until you check out. |
| Signature Scent brief — name, contact details and the preferences you describe | Lets us compose and quote your custom perfume and reply to you. | When you submit a commission request. |
| Contact form enquiries — name, email, message and the page you enquired from | Answers your enquiry with the context of what you were reading. | When you send the contact form. |
| Newsletter email address and your cookie choice | Sends the maison newsletter and remembers what storage you allowed. | When you subscribe or set cookie preferences. |
| Customer record — the above consolidated into one contact with an activity history and an interest score | Lets us follow up on orders and enquiries properly instead of losing them. | Created from your order, enquiry or subscription. |
| Publicly listed business contact details (e.g. a shop's public email) | Business-to-business outreach about stocking GPScents. Every outbound email carries an unsubscribe link. | Gathered from public listings — not from visitors to this site. |
We don't ask for information we have no use for, and we never sell or rent personal information to anyone.
Who else touches your information
We use a short list of service providers to run the shop. They may only use your information to deliver their service to us:
- Stripe — Payment processing and checkout. Handles your card data directly.
- Resend — Sends order confirmations, replies and newsletter email.
- Cloud / Supabase — Hosting and database for the site.
- Google Gemini AI — Content generation — customer data is not used for this.
- Firecrawl — Public business-listing lookups for wholesale outreach.
- Meta — Only when a social post is published from the admin studio.
- Canada Post / carriers — Receive the delivery address needed to bring your parcel to you.
Cookies and browser storage
Strictly necessary storage keeps sign-in, your cart and checkout working. Everything else stays off until you allow it. The full item-by-item table lives in our cookie notice, and you can change your choice at any time.
How long we keep it
- Order and receipt records are kept for as long as Canadian tax and business record requirements oblige us to keep them.
- Enquiry, commission and customer records are kept while the relationship is active, and deleted on request unless attached to an order we must retain.
- Newsletter records are kept until you unsubscribe, then removed from our sending list.
- Business outreach records are removed on request or when a contact unsubscribes, apart from a minimal note that they asked not to be contacted again.
Your rights
Under Canadian privacy law (PIPEDA), you may ask us to confirm what we hold about you, get a copy of it, correct anything inaccurate, delete it where we're not required to keep it, or withdraw a consent you previously gave. Every marketing email also carries a one-click unsubscribe link. Email support@gpscents.com and we'll respond as promptly as we can.
How we protect it
- The whole site is served over encrypted HTTPS connections.
- Our database enforces row-level access rules, so your account only ever reads your own records.
- Order, enquiry and customer records are reachable only by the maison's admin account.
- Card data never reaches our systems — Stripe handles it end to end.
Children
Our shop is intended for adults and is not directed at children under 13. We don't knowingly collect their information; if you believe we have, write to us and we'll remove it.
Changes to this policy
When our practices change we update this page and the date at the top. Material changes to how we use your information will be announced on the site.