Policy · Last updated April 2026

Privacy policy

Cloud Pharmacy (“we”, “us”) operates shop.cloudpharmacy.ca. We’re based in Toronto and regulated under Canadian privacy law (PIPEDA) and Ontario personal health information law (PHIPA) for pharmacy-related data.

What we collect

• Order information: your name, email, phone, shipping and billing addresses, the products you buy.
• Payment: processed by Stripe. We never see or store full card numbers — only the last four digits and brand.
• Device & usage: anonymized analytics via PostHog (page views, click events) and error diagnostics via Sentry when something breaks.

How we use it

• To fulfill your order, deliver it, and provide customer support.
• To send order-related email or SMS (confirmation, shipping, delivery, refunds).
• To detect fraud and comply with tax, health, and accounting regulations.
• For marketing only when you explicitly opt in. We will never sell your data.

Who we share with

• Stripe — payment processing.
• Resend — transactional email.
• Twilio — SMS notifications when applicable.
• Canada Post, Uber Direct, DoorDash — to deliver your order.
• Regulatory or law-enforcement bodies when required by Canadian law.

Retention

We keep order and transaction records for the minimum period required by CRA (generally 6 years). Analytics data is retained for up to 12 months. You can request deletion of your account and identifiable data at any time, subject to tax-retention law.

Your rights

You have the right to access, correct, or request deletion of your personal information. Email orders@cloudpharmacy.ca with “Privacy request” in the subject.

Cookies

We use a small number of functional cookies (cart state, admin sessions) and analytics cookies (PostHog). No third-party advertising cookies are set.

Questions? Reach our Privacy Officer at orders@cloudpharmacy.ca.

See also: Terms · Refund policy · Shipping