Privacy
Privacy policy
Loftyn Furniture Inc. collects the information an order needs and very little else. This page says what we collect, why, who sees it, how long we keep it and how to ask us to change or delete it. It is written to meet PIPEDA and Québec’s Law 25, and it was last revised on 1 September 2026.
What we collect
We collect information in three ways: you give it to us, the site records it as you use it, or a partner passes it back to us about your order.
- Identity and contact
- Your name, email address, phone number and delivery address, given when you order, request swatches, apply to the trade programme or write to us.
- Order history
- What you bought, when, at what price, how it was delivered and any returns, claims or warranty work on it.
- Payment
- The public enquiry flow does not collect payment. When Stripe processes a payment for an order, the application receives and stores the verified payment event, including payment identifiers and the customer and order metadata contained in that event.
- Site use
- The information you submit in forms and searches, and the cart, saved items and draft details described below. The page URL determines the language. Server request and error logs support site operation; this application does not install an optional analytics cookie.
- Delivery and building details
- Measurements, access notes, elevator bookings and a contact at the building, given so the crew can complete a delivery.
- Financing
- Financing is not currently offered, and this website does not collect financing applications.
We do not collect information from children, and we do not buy information about you from data brokers.
Why we use it
Every use falls under one of these purposes, and we do not use information for a new purpose without telling you first:
- To take, confirm, build, deliver and support your order, including returns and warranty claims.
- To answer your questions and keep a record of what we told you.
- To send order emails, which you cannot opt out of while an order is open, and marketing emails, which you can stop at any time with the link in each one.
- To keep the site working, secure and fast, and to understand which pages help shoppers decide.
- To meet legal obligations: tax records, consumer protection, product safety and responding to lawful requests.
We do not sell your information, we do not rent our mailing list, and we do not make decisions about you by automated means alone.
Cookies
The application uses the cookies below for requested shopping functions and staff authentication. English or French is selected through the page URL, not a language cookie. This application does not install an analytics cookie or present an analytics consent choice.
Cart, saved-item and quote-draft cookies are signed, not encrypted. Their contents can be read from browser cookie storage. HttpOnly prevents page JavaScript from reading them.
| Cookie | Purpose | Lifetime | Type |
|---|---|---|---|
| Cart | Remembers what is in your cart, signed so it cannot be altered | 30 days | Essential |
| Saved items (loftyn_saved) | Product IDs in your saved list, signed against tampering | 90 days | Requested function |
| Quote draft (loftyn_checkout) | Submitted contact and address fields, plus validation errors, to restore an invalid quote form; signed, not encrypted | 1 hour | Requested function |
| Staff session | Keeps staff signed in; the normal session cookie is persistent and can renew | 7 days | Authentication |
| Staff two-factor challenge | Identifies a pending staff authentication challenge | 10 minutes | Authentication |
How long we keep it
We keep information for as long as the purpose it was collected for requires, and then delete or anonymise it. The main periods are:
| Information | Kept for | Why |
|---|---|---|
| Orders and invoices | 7 years after the order | Canada Revenue Agency record-keeping rules |
| Warranty records | 36 months after delivery, plus any open claim | The length of the warranty |
| Swatch and trade applications | 2 years after the last contact | To follow up, then forget |
| Marketing consent | Until you withdraw it | So we can prove we had it |
| Server logs | 90 days | Security and troubleshooting |
Your rights
Under PIPEDA and Québec’s Law 25, you can ask us at any time to:
- See the personal information we hold about you and how it has been used, in a portable format if you want it.
- Correct anything that is inaccurate or incomplete.
- Withdraw consent to marketing or any other optional use.
- Delete your information, except what we must keep by law, such as invoices, which we then keep only for that purpose.
- Know which service providers outside Canada have held your information.
We answer within 30 days, at no charge, and we may ask you to confirm your identity before we release anything. If we refuse a request, we tell you why and how to challenge it.
Contact and complaints
Our privacy officer is reachable at hello@loftyn.ca with “Privacy” in the subject line, or by post at Loftyn Furniture Inc., Toronto, Ontario.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or, in Québec, to the Commission d’accès à l’information.