PRIVACY POLICY
Effective Date: June 17, 2025
Mouthy Primate Incorporated, doing business as The Dragon Bookstore (“we,” “us,” or “our”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal and non-personal information when you visit our website, www.thedragonbookstore.com (the “Site”). By using the Site, you consent to the practices described in this Privacy Policy. Please also review our Terms of Service, which govern your use of the Site.
If you have any questions about this Privacy Policy, please contact our Privacy Officer at:
Email: jokesmalone@me.com
Mailing Address: Mouthy Primate Incorporated, 901 Prospect Rd. Berwick, Nova Scotia, CanadaSummary
We collect personal information (e.g., your name, email, and payment details) to process orders, improve our services, and communicate with you. We use cookies and similar technologies to enhance your experience. Your data is protected with industry-standard security measures and shared only with trusted partners for specific purposes, such as order fulfillment. You have rights to access, correct, or delete your information, and we comply with applicable laws, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). For details, please read the full policy below.
1. Information We Collect
1.1 Personal Information
Personal information is data that can identify you as an individual, such as:
Name
Mailing address
Email address
Telephone number
Payment information (e.g., credit card details)
Account login credentials
We collect personal information when you:
Create an account or register on the Site
Place an order or complete a transaction
Fill out forms (e.g., contact or subscription forms)
Participate in surveys, promotions, or reviews
Contact us for support or inquiries
1.2 Non-Personal Information
Non-personal information cannot identify you and may include:
Browser type
IP address
Pages visited and time spent on the Site
Device information (e.g., operating system)
We collect non-personal information automatically through your use of the Site, often via cookies and similar technologies (see Section 3).
2. How We Use Your Information
We use your personal information to:
Process and fulfill orders, including billing and shipping
Provide customer support and respond to your inquiries
Send you updates, newsletters, or promotional materials (with your consent, where required)
Improve our Site, products, and services through analytics
Protect our legal rights, comply with laws, or prevent fraud
Personalize your experience, such as remembering your preferences
Non-personal information is used to analyze trends, track Site usage, and improve our services. We may combine non-personal information with personal information to enhance your experience, but we will de-identify personal information before using it in aggregated form.
3. Cookies and Tracking Technologies
3.1 What Are Cookies?
Cookies are small text files stored on your device by a website to remember your preferences or track activity. We use cookies and similar technologies (e.g., web beacons) to:
Recognize returning visitors
Facilitate account logins and transactions
Analyze Site performance and user behavior
Deliver relevant advertisements
Web beacons are small images embedded in web pages or emails to track views or interactions.
3.2 Third-Party Cookies
We may allow third-party vendors (e.g., Google Analytics, payment processors) to use cookies on our Site to collect anonymous usage data. These third parties may use this data to improve our Site or deliver targeted ads. We do not control third-party cookies, and their use is governed by their respective privacy policies.
3.3 Managing Cookies
You can manage cookies through our cookie consent tool (if applicable) or your browser settings. Most browsers accept cookies by default, but you can decline them or delete existing cookies. Note that disabling cookies may limit your ability to use certain Site features. For more information, visit www.allaboutcookies.org.
4. How We Share Your Information
We do not sell, trade, or share your personal information with unrelated third parties without your consent, except as described below:
Service Providers: We share personal information with trusted third parties (e.g., payment processors like Stripe, shipping companies, or analytics providers) to perform services on our behalf. These providers are contractually obligated to protect your data and use it only for the specified purpose.
Business Transfers: In the event of a merger, acquisition, or sale, your personal information may be transferred as part of the transaction.
Legal Obligations: We may disclose your information to comply with laws, court orders, or government requests, or to protect our rights, property, or the safety of others.
Aggregated Data: We may share non-personal, aggregated data (e.g., Site usage statistics) with third parties for marketing or research purposes.
If you submit a review via our Site (e.g., through a Facebook Fan Review Application), we may share your name and email with the reviewed party with your consent.
5. International Data Transfers
As a Canadian company, we primarily process and store your data in Canada. However, some of our service providers may operate in other countries, such as the United States. When your personal information is transferred outside Canada, we ensure it is protected through contracts or safeguards compliant with applicable laws, such as PIPEDA or GDPR (for EU residents).
6. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, such as completing transactions or complying with legal obligations. For example:
Transaction data is retained for [insert period, e.g., 7 years] to meet tax and accounting requirements.
Account information is retained until you request deletion or your account becomes inactive.
When personal information is no longer needed, we securely delete or anonymize it.
7. Your Rights
Under PIPEDA and other applicable laws (e.g., GDPR, CCPA), you may have the following rights regarding your personal information:
Access: Request a copy of the personal information we hold about you.
Correction: Update or correct inaccurate information.
Deletion: Request deletion of your personal information, subject to legal obligations.
Opt-Out: Unsubscribe from marketing communications or opt out of data sharing (e.g., for CCPA-covered users).
Data Portability: Request your data in a structured, machine-readable format (GDPR-specific).
To exercise these rights, contact our Privacy Officer at help@thedragonbookstore.com. We will respond within 30 days, as required by law. Please note that some requests may be subject to verification or legal limitations.
If you are a California resident, you have the right to opt out of the sale of your personal information. We do not sell personal information, but you can submit an opt-out request for clarity at help@thedragonbookstore.com.
8. Data Security
We use industry-standard technical and organizational measures to protect your personal information from loss, misuse, or unauthorized access. These include encryption, secure servers, and restricted access to data. Only authorized personnel and trusted third-party vendors have access to your information, and they are bound by confidentiality obligations.
Despite these measures, no online system is 100% secure. If we detect a data breach that poses a risk of harm, we will notify affected users and relevant authorities (e.g., the Office of the Privacy Commissioner of Canada) as required by law.
9. Children’s Privacy
We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will promptly delete it. If you believe we have collected data from a child under 13, please contact us at help@thedragonbookstore.com.
10. Third-Party Links
Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of these sites. We encourage you to review their privacy policies before providing personal information.
11. Public Forums
Our Site may include public forums (e.g., reviews, discussion boards). Information you post in these forums is public and may be collected or used by others. We are not responsible for third-party actions related to such information. Please avoid sharing sensitive information in public forums.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. If we make material changes, we will notify you via email (if you have an account) or a prominent notice on our Site’s homepage for at least 30 days. The updated policy will be posted here with a revised effective date.
13. Compliance with Laws
We comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws. If you are located in the European Union or California, we also adhere to GDPR and CCPA requirements, respectively, as outlined in this policy.
14. Contact Us
For questions, concerns, or to exercise your privacy rights, please contact our Privacy Officer:
Email: jokesmalone@me.com
Mailing Address: Mouthy Primate Incorporated, 901 Prospect Rd. Berwick, Nova Scotia, Canada
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.
Key Improvements Made
Compliance with PIPEDA:
Added explicit reference to PIPEDA and a Privacy Officer contact, as required by Canadian law.
Included a data retention policy and data breach notification process, aligning with PIPEDA requirements.
International Considerations:
Addressed GDPR and CCPA by outlining user rights (e.g., data portability, opt-out) and international data transfers with safeguards.
Added a note for California residents about opting out of data sales, even if you don’t sell data, to comply with CCPA.
Clarity and User-Friendliness:
Included a plain-language summary at the top to improve accessibility.
Simplified language in key sections (e.g., cookies, data sharing) to make the policy easier to understand.
Data Retention:
Added a section specifying how long data is retained and how it’s deleted, addressing a key PIPEDA requirement.
Third-Party Data Sharing:
Clarified the types of third parties (e.g., payment processors, analytics providers) and their obligations to protect data.
Noted international data transfers and safeguards for clarity.
Cookie Consent:
Referenced a cookie consent tool (if applicable) and provided guidance on managing cookies via browser settings.
Data Breach Notification:
Added a commitment to notify users and authorities in case of a data breach, as required by PIPEDA.
User Rights:
Detailed user rights under PIPEDA, GDPR, and CCPA, including access, correction, deletion, and opt-out options.