Privacy Policy

Last Updated: March 2026

Our Commitment to Your Privacy

Your privacy is not a checkbox for us — it's a foundation of trust. This Privacy Policy explains exactly what personal information we collect when you shop with us, why we collect it, how we protect it, and the rights you have over it.

By using our website and placing an order, you agree to the practices described in this policy. If you have questions at any point, our team is here to help.

1. Who We Are

Forged in Mud ("we," "our," or "us") is the data controller responsible for your personal information. We operate the e-commerce store at https://www.forgedinmud.ca/.

2. What Information We Collect

We collect information in three ways: directly from you, automatically through your browsing, and occasionally from trusted third parties.

2.1 Information You Provide Directly

Account & Profile Data

Full name and display name
Email address and password (encrypted)
Billing and shipping addresses
Phone number (if provided)
Order history, wish lists, and saved preferences
Communications you send us (support tickets, reviews, feedback)

Payment & Billing Information

Credit/debit card details (processed securely via Wix payment, Google Pay or Apple Pay) — we do not store raw card numbers on our servers.
Billing address associated with your payment method
Transaction IDs and order confirmation records

2.2 Information Collected Automatically

Cookies & Analytics Data

IP address and approximate geographic location
Browser type, operating system, and device identifiers
Pages visited, products viewed, and time spent on site
Referral source (how you found us)
Cart activity and checkout behavior
Session data and clickstream information

This data is collected via cookies, web beacons, and analytics tools including [Google Analytics / Meta Pixel / Google Tag Manager]. See Section 6 for full cookie details and how to opt out.

3. Why We Collect Your Information

We use your data only for legitimate purposes tied to running our store and serving you well.

Processing and fulfilling your orders — We use your name, address, and payment information to complete transactions and get your purchases to you. (Legal basis: Contract performance)
Creating and managing your account — We use your email and profile data to maintain your account, order history, and saved preferences. (Legal basis: Contract performance)
Sending order confirmations and shipping updates — We use your email and order data to keep you informed at every step. (Legal basis: Contract performance)
Providing customer support — We use your name, email, and order history to resolve issues quickly and effectively. (Legal basis: Legitimate interest)
Personalizing your shopping experience — We use your account data and browsing behaviour to show relevant products and recommendations. (Legal basis: Legitimate interest / Consent)
Sending marketing emails (if opted in) — We use your name and email to share promotions, new arrivals, and exclusive offers. You can opt out at any time. (Legal basis: Consent)
Fraud prevention and security — We use payment data and IP addresses to detect and prevent unauthorized activity. (Legal basis: Legal obligation / Legitimate interest)
Improving our website and product catalogue — We use aggregated analytics data to understand what's working and where we can do better. (Legal basis: Legitimate interest)
Complying with legal and tax obligations — We retain billing records and transaction data as required by law. (Legal basis: Legal obligation)

We do not sell your personal information. We never have, and we never will.

4. How We Share Your Information

We only share your data with parties who help us operate our store or as required by law. We do not sell or rent your data to third parties for their own marketing.

Service Providers & Processors We share necessary data with trusted vendors who act on our behalf:

Payment processors Visa, Master Card, Amex, Discover Card, Apple Pay, Google Pay to handle transactions securely
Shipping carriers Canada Post, UPS, Fed Ex to deliver your orders
Email platforms Google to send order and marketing communications
Analytics providers Google Analytics to understand site performance
Customer support tools Google to manage your inquiries
Hosting & infrastructure providers to keep our store online and secure

All service providers are contractually bound to protect your data and use it only for the purposes we specify.

Legal Disclosures We may disclose your information if required by law, subpoena, court order, or to protect the rights, safety, or property of our business, customers, or the public.

Business Transfers In the event of a merger, acquisition, or sale of our business, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your data becomes subject to a different privacy policy.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

Account data: Retained for the life of your account, plus [30–90] days after deletion
Order & transaction records: Retained for [7] years for tax and legal compliance
Marketing data: Retained until you unsubscribe or request deletion
Analytics data: Aggregated and anonymized after [26] months
Support communications: Retained for [2] years

When data is no longer needed, we securely delete or anonymize it.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to make our store work, understand how you use it, and show you relevant content and ads.

Types of Cookies We Use

Essential Cookies: These are required for the store to function. They enable your cart, secure checkout, and account login. These cannot be disabled.

Analytics Cookies: These help us understand how visitors interact with our site — which pages are popular, where people drop off, and how to improve the experience. Providers include Google Analytics.

Marketing & Advertising Cookies: These allow us to show you personalized ads on platforms like Meta (Facebook/Instagram) and Google. They track your visit to help us measure ad performance. Providers include Meta Pixel and Google Ads.

Preference Cookies: These remember your choices, such as your currency, language, or previously viewed items.

Managing Your Cookie Preferences

You can manage or withdraw cookie consent at any time by:

Clicking "Cookie Preferences" in the footer of our website
Adjusting settings in your browser (see your browser's help documentation)
Opting out of Google Analytics at tools.google.com/dlpage/gaoptout
Opting out of personalized Meta ads in your Facebook Ad Preferences

Note: Disabling certain cookies may affect your shopping experience.

7. Your Privacy Rights

Depending on where you live, you have meaningful rights over your personal data. We honor these rights regardless of your location.

For All Customers

Right to Know — Request a copy of the personal information we hold about you
Right to Correct — Request corrections to inaccurate or incomplete data
Right to Delete — Request that we delete your personal information (subject to legal retention obligations)
Right to Opt Out of Marketing — Unsubscribe from marketing emails at any time via the link in any email or by contacting us directly
Right to Data Portability — Request your data in a structured, machine-readable format

8. How We Protect Your Information

We take security seriously and use industry-standard measures to protect your data:

SSL/TLS encryption on all pages of our website
PCI-DSS compliant payment processing — we never store raw credit card numbers
Password hashing using bcrypt or an equivalent one-way encryption
Access controls — only authorized personnel can access customer data
Regular security audits and monitoring for suspicious activity
Secure data backups with restricted access

Despite our best efforts, no method of transmission over the internet is 100% secure. If you believe your account has been compromised, please contact us immediately at customerservice@forgedinmud.ca

9. Children's Privacy

Our store is intended for users aged 13 or older (or 16 in the EU/UK). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information, please contact us, and we will promptly delete it.

10. Links to Third-Party Websites

Our website may contain links to third-party websites (such as brand partners, review platforms, or social media). We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external site you visit.

11. International Data Transfers

Our store is operated from Canada. If you are located outside of this country, your information will be transferred to and processed in Canada, which may have different data protection laws than your jurisdiction.

For transfers from the EU/UK, we rely on Standard Contractual Clauses (SCCs) or other legally approved transfer mechanisms to ensure your data is protected.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

Update the "Last Updated" date at the top of this page
Notify you by email (for significant changes)
Post a notice on our website homepage

Your continued use of our store after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:

We aim to respond to all privacy inquiries within 5 business days.

This Privacy Policy was last reviewed and updated on March 2026. It applies to all personal information collected through https://www.forgedinmud.ca/ and any associated mobile applications or services.

Forged In Mud Apparel