Last updated: June 19, 2026
Health Harbor (“Health Harbor,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect through healthharbor.ca and related subdomains (including ecom.healthharbor.ca) (collectively, the “Site”), how we use and disclose it, and the choices and rights you have.
This policy is designed to comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws. By using our Site, creating an account, making a purchase, or subscribing to our communications, you consent to the practices described in this policy.
1. Who we are
Health Harbor is a wellness and yoga retailer based in Ontario, Canada. We sell yoga and wellness products and offer related content and services through our Site.
Contact: Health Harbor 15 Wellesley St W, Unit 201 Toronto, Ontario M4Y 1E8 Canada Email: info@healthharbor.ca
2. Information we collect
We collect personal information that you provide directly, information collected automatically as you use the Site, and information from third parties.
2.1 Information you provide to us
- Account information: name, username, email address, and password when you register an account.
- Order and transaction information: billing and shipping address, telephone number, products purchased, and order history when you make a purchase.
- Payment information: payment card or other payment details. Payments are processed by our third-party payment providers; we do not store full payment card numbers on our own servers.
- Communications: information you provide when you contact us, request support, leave a product review, or otherwise correspond with us.
- Marketing preferences: your email address and preferences when you subscribe to our newsletter.
- Wellness / platform information: if you use any interactive or AI-powered yoga or wellness features, we may collect the preferences and inputs you provide to personalize your experience.
2.2 Information we collect automatically
When you visit the Site, we and our service providers may automatically collect:
- Device and usage data: IP address, browser type, operating system, referring URLs, pages viewed, links clicked, and the dates/times of your visits.
- Cookies and similar technologies: see Section 6 below.
2.3 Information from third parties
We may receive information from service providers (for example, analytics, payment, and shipping providers) and from social media platforms if you interact with us there.
3. How we use your information
We use personal information for the following purposes:
- To create and manage your account.
- To process, fulfill, and ship your orders, and to handle returns and exchanges.
- To process payments and prevent fraud.
- To provide customer support and respond to your inquiries.
- To send you transactional messages (such as order confirmations and shipping updates).
- To send you marketing communications, newsletters, and promotions where you have consented (see Section 7).
- To personalize your experience, including any AI-powered or interactive wellness features.
- To operate, maintain, analyze, and improve the Site and our products and services.
- To comply with legal and regulatory obligations and enforce our terms.
We will not use your personal information for a new purpose that is materially different from those listed above without obtaining your consent, unless permitted or required by law.
4. Consent
Under PIPEDA, we collect, use, and disclose your personal information with your consent, except where otherwise permitted or required by law. Depending on the sensitivity of the information, your consent may be express (for example, opting in to our newsletter) or implied (for example, providing your shipping address to complete a purchase).
You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may mean we can no longer provide certain products or services. To withdraw consent, contact us using the details in Section 13.
5. How we share and disclose information
We do not sell your personal information. We share it only as described below:
- Service providers: we share information with third parties that perform services on our behalf, such as payment processing, order fulfillment and shipping, website hosting, email and newsletter delivery, analytics, and customer support. These providers are authorized to use your information only as necessary to provide services to us.
- Legal and safety reasons: we may disclose information where required to comply with applicable law, a subpoena, a court order, or a lawful request by a government or regulatory authority, or to protect our rights, property, or safety, or that of others.
- Business transfers: if Health Harbor is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.
6. Cookies and tracking technologies
We use cookies and similar technologies to operate the Site, remember your preferences and cart, keep you logged in, understand how the Site is used, and support marketing.
- Essential cookies are necessary for the Site to function (for example, shopping cart and login).
- Analytics cookies help us understand how visitors interact with the Site.
- Marketing cookies may be used to deliver and measure advertising.
You can control cookies through your browser settings and, where offered, through any cookie banner or preference tool on the Site. Disabling certain cookies may affect Site functionality.
Note for the site owner: list the specific tools you use here — for example, Google Analytics, Meta Pixel, or any advertising/retargeting tools — and add or link a cookie-consent banner if you serve visitors in regions that require one.
7. Marketing communications (CASL)
If you have subscribed to our newsletter or otherwise consented to receive promotional messages, we may send you commercial electronic messages in accordance with Canada’s Anti-Spam Legislation (CASL).
Every marketing email includes an unsubscribe link, and you can opt out at any time. You may also contact us directly to be removed from our marketing lists. Even if you opt out of marketing, we may still send you non-promotional messages related to your account or transactions.
8. Data storage and cross-border transfers
Your personal information may be stored and processed in Canada and in other countries where we or our service providers operate, including the United States. As a result, your information may be subject to the laws of those jurisdictions and accessible to courts, law enforcement, and national security authorities there.
We take reasonable steps to ensure that service providers protect your information with safeguards comparable to those required under Canadian law.
9. Data retention
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, including to provide our products and services, maintain records of transactions, resolve disputes, and meet legal, accounting, or regulatory requirements. When information is no longer needed, we take reasonable steps to securely delete or anonymize it.
10. How we protect your information
We maintain administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification. These measures include encryption of payment transactions, access controls, and secure hosting. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.
11. Your privacy rights
Subject to applicable law, you have the right to:
- Access the personal information we hold about you and request information about how it has been used and disclosed.
- Correct inaccurate or incomplete information.
- Withdraw consent to our collection, use, or disclosure of your information (subject to legal or contractual limits).
- Unsubscribe from marketing communications.
You can access and update much of your account information by logging into your account. To exercise any of these rights, contact us using the details in Section 13. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law.
If you are a resident of Quebec, you may have additional rights under Quebec’s Law 25, including rights relating to automated decision-making and data portability. If you are located in the European Economic Area or the United Kingdom, you may have additional rights under the GDPR or UK GDPR. Contact us to exercise any such rights.
12. Children’s privacy
The Site is intended for adults. We do not knowingly collect personal information from children without appropriate parental or guardian consent. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
13. Contact us and how to make a complaint
If you have questions, requests, or concerns about this Privacy Policy or our handling of your personal information, please contact our Privacy Officer:
Privacy Officer Health Harbor 15 Wellesley St W, Unit 201 Toronto, Ontario M4Y 1E8 Canada Email: info@healthharbor.ca
If you are not satisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca. Residents of Quebec, British Columbia, and Alberta may also contact their provincial privacy regulator.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be posted on this page and, where appropriate, communicated to you. Your continued use of the Site after changes take effect constitutes acceptance of the revised policy.