Your privacy matters.

Who this policy covers

The One & Only, operating through TheOneAndOnly.ca, sells prank mail, gag gifts, novelty stickers and related products. This policy explains how we handle personal information when you browse, order, contact us, subscribe to messages or receive a product purchased by someone else.

For privacy questions, requests or complaints, email support@theoneandonly.ca and mark your message “Privacy.” This is the contact point for the person responsible for privacy matters.

Information we collect & where it comes from

• Contact and order details: Names, email addresses, telephone numbers where provided, billing and delivery addresses, order contents, delivery instructions and order history. Buyers may provide information about a different recipient.
• Custom content and communications: Personal messages, names, images or other material submitted for an order, customer service correspondence, reviews submitted to us and information supplied in complaints or abuse reports.
• Payment and transaction details: Payment status, transaction references and information needed to process or verify a payment or refund. Payment providers process payment credentials under their own privacy notices.
• Website activity: IP address, browser and device information, pages viewed, referring links, shopping activity and cookie or similar identifiers. Some information is collected automatically through website, security, analytics or advertising tools.
• Subscriptions: Email or mobile subscription details, communication preferences, consent records and interactions with messages, where the relevant service collects them.

Information comes from you, a purchaser sending you an item, your device, and providers involved in payment, delivery, communications or website operation. Please do not submit unrelated sensitive information, identification documents or full payment card details through ordinary email or order notes.

How we use personal information

• Process payments, prepare and deliver orders, provide tracking where available, and handle returns, refunds and support.
• Communicate about orders, accounts and requests, and send marketing communications where we have the required consent or another lawful basis.
• Operate and secure the website, troubleshoot problems, understand shopping activity and measure or improve our products and marketing.
• Review potentially abusive orders, investigate reports, prevent fraud, resolve disputes, maintain required records and meet legal obligations.

We seek consent where required and use applicable legal exceptions only where permitted. Browsing the site or receiving an item does not, by itself, mean you have agreed to receive marketing. If a new use requires additional notice or consent, we will provide it before using information for that purpose.

Recipient information & anonymous delivery

When you order for someone else, provide only the information needed to fulfil the order and ensure you have a lawful basis to provide it. Do not include unnecessary medical, financial, identity or other sensitive details in custom messages.

We use recipient information to fulfil and support the delivery and address related safety, fraud or legal concerns. Providing someone’s details for delivery does not subscribe them to marketing. Recipients can contact us about their own information or an unwanted delivery.

We do not routinely disclose a purchaser’s identity to a recipient. We assess requests under applicable law, including privacy and access obligations. Disclosure may occur where legally required or otherwise lawfully permitted. Neither a purchase nor an abuse report automatically gives someone access to another person’s private information.

Cookies, analytics & advertising

Cookies and similar technologies can support the cart, checkout, account access, preferences and security. Analytics and advertising technologies can collect activity and identifiers to measure traffic, understand purchases, measure campaigns or show relevant advertising.

You can block or delete cookies through your browser and use the advertising controls offered by relevant providers. If the site presents a cookie preference control, use it to manage the options it offers. Blocking cookies may affect shopping features. Browser settings may not control every pixel, server-side data transfer or other tracking method.

Where consent or an opt-out is legally required for a particular use, that requirement applies in addition to this notice. Contact us if you cannot find a relevant privacy control or want to ask about advertising-related processing.

Some privacy laws define “sale” or “sharing” broadly enough to include certain advertising disclosures, even without a cash payment. Any applicable rights depend on the processing involved and the law’s coverage. This policy does not treat the absence of a cash sale as proof that those rules do not apply.

Who may receive information

We disclose information for the purposes described in this policy, subject to applicable law. The information involved depends on the service or request.

• Service providers: Payment processors, delivery carriers, fulfilment services, hosting and website providers, communications platforms, security services, and analytics or advertising providers.
• Professional and legal support: Advisers, insurers and others where reasonably necessary for a legitimate business or legal purpose and permitted by law.
• Authorities or other parties: Where required by valid legal process or otherwise lawfully permitted, including an appropriate response to fraud, abuse or a serious safety concern.

Some providers process information for us; others, such as payment providers or advertising platforms, may also handle information under their own privacy notices. External websites and services have their own practices. Contact us if you need information about providers relevant to your order or privacy request.

Where information may be processed

Information may be stored or processed in Canada, the United States or other countries used by our service providers. Privacy laws and access rights in those countries may differ from those where you live, and information may be accessible to courts, law enforcement or other authorities under local law.

Using a provider outside Canada does not remove our responsibilities under applicable Canadian privacy law. Contact us with questions about cross-border processing or the safeguards applicable to your information.

How long we keep information & how we protect it

Retention depends on why the information was collected, the status of an order or dispute, accounting and tax requirements, fraud prevention, consent records and other legal obligations. Information should not be kept longer than reasonably necessary for those purposes.

A deletion request may not result in immediate removal of every record. Some information may need to be retained for a legal obligation, an active dispute, a legitimate abuse investigation or to honour an opt-out. Backup copies may remain until their normal replacement or deletion cycle, subject to applicable law.

We are responsible for using safeguards appropriate to the sensitivity of the information. No website, transmission or storage system can be guaranteed completely secure. Use a strong, unique account password and contact us if you suspect unauthorised use of your account or information.

Access, correction, deletion & complaints

You may contact us to request access to your personal information, ask how it has been used or disclosed, correct inaccurate information, withdraw consent or request deletion. The rights available, any exceptions and response deadlines depend on applicable law.

We may request information reasonably needed to verify your identity or an authorised representative’s authority. We will not ask for more information than reasonably necessary for that verification. Access may be limited where required to protect another person’s information or another lawful exception applies.

We will respond within applicable legal time limits and explain a refusal or extension where required. Withdrawing consent may affect services that need the information, but it does not remove obligations concerning existing orders or required records.

Depending on your location and the law’s applicability, additional rights may include obtaining a portable copy, opting out of certain advertising, sale or sharing, or appealing a decision. Contact us to exercise applicable rights. We will not unlawfully discriminate against you for doing so.

Marketing preferences

Use the unsubscribe link in a marketing email to stop promotional emails. For marketing texts, follow the opt-out instructions in the message or reply STOP to the number that sent it. You can also contact support for help.

An order, support request or delivery address does not automatically give permission for unrelated marketing. Unsubscribing from promotions does not prevent necessary order, service, legal or security communications where permitted. We may retain a limited record of your opt-out to help honour it.

Mobile message terms

These terms apply if you enrol in a text-message programme offered by The One & Only through TheOneAndOnly.ca. The signup notice identifies the programme and message types you are choosing to receive.

• Your choice: Marketing text consent is voluntary and is not a condition of purchasing. Providing a number for delivery or customer service does not, by itself, enrol you in promotional texts.
• Messages: Depending on your subscription, texts may include offers, cart reminders or service updates. Recurring messages may be sent using automated technology. Message frequency varies, and your carrier’s message and data rates may apply.
• Stopping messages: Reply STOP to the sending number or use the unsubscribe method in the message. A confirmation text may follow. If you cannot opt out that way, email support@theoneandonly.ca with the affected number and your request.
• Help and number changes: Follow the help instructions in the message or email support@theoneandonly.ca. Use a number you own or are authorised to use, and notify us or unsubscribe before giving it up.

Delivery depends on your carrier and network availability and may be delayed or unsuccessful. These messages are not an emergency service. Nothing in these terms excludes rights or responsibilities that cannot lawfully be excluded.

Mobile numbers, subscription records and related activity are handled as described in this policy, including by providers that help deliver messages.

Children’s information

This store and its marketing are intended for adults, not directed to children. Please do not submit children’s personal information unless it is necessary for a lawful, appropriate order and you have the required authority.

If you believe a child has provided information without appropriate permission, or that a child’s information has been used improperly in an order, contact us. We will review the concern and take steps required by applicable law, which may include deleting information or restricting its use.

Changes to this policy

We may revise this policy to reflect changes in our services, practices or legal obligations. The date above identifies the latest revision. Where required, we will provide additional notice or obtain consent before a material change takes effect. Posting a revised policy does not override rights that apply to information already collected.

Contact us about privacy

For privacy requests, complaints, recipient concerns or help with marketing preferences, email support@theoneandonly.ca. Please identify the issue clearly and avoid including unrelated sensitive information.