Privacy policy

Last updated August 25, 2026.

This policy is drafted against the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL).

Who we are

Charged Earth Inc. is an Ontario corporation operating from Eden Mills, Ontario, Canada. It is the organization responsible for the personal information described in this policy. This website (chargedearth.ca) and our Cloudflare Worker API are the two systems that handle personal data.

What we collect

When you place an order through Stripe Checkout:

Your name, email, phone number, billing address, and shipping address.
Your payment card details — handled directly by Stripe. We do not see, store, or transmit card numbers.
The items you purchased.

When you contact us:

Name, email, and the content of your message.

When you subscribe to our newsletter:

Email address and your consent record.

When you browse the site:

Standard server logs (IP address, timestamp, user agent, referrer).
A local-only cart cookie/localStorage entry — stored on your device, not sent to us until you check out.
Meta Pixel data. We run the Meta (Facebook) Pixel on every page. It reports the pages you view on this site to Meta, along with your IP address, browser and device information, and Meta cookie identifiers that may link the visit to your Facebook or Instagram account if you have one.

How we use it

Process and fulfil your orders
Send transactional emails (order confirmation, shipping notification, returns correspondence)
Answer questions you send us
Send marketing emails only if you explicitly opt in, with an unsubscribe link in every message (CASL)
Comply with records-retention obligations under Canadian fertilizer and consumer-protection law

Stripe — payment processing, and the order record (name, email, phone, billing and shipping address).
Stallion Express — our shipping broker. Receives your name, address, phone number, and parcel details to produce the shipping label, and passes them to the delivery carrier it assigns for your destination — usually Precision Ground or Fleet Optics Ground.
Trexity — local same-day and next-day delivery around Guelph and Kitchener–Waterloo. Receives your name, address, and phone number.
Canada Post — used only for remote destinations our regular carriers do not serve.
Cloudflare — DNS, CDN, and the Worker runtime for our API endpoints. Your order record, including name, email, phone number, and shipping address, is stored in Cloudflare KV. Cloudflare Email Routing also forwards mail sent to our @chargedearth.ca addresses.
Google — our mailbox provider. Messages you send through the contact, wholesale, or newsletter forms open in your own email application and arrive in a Gmail-hosted inbox.
Meta Platforms — receives the page-view data described above through the Meta Pixel, and uses it to measure our advertising and to show you our ads on Facebook and Instagram. Meta’s handling of that data is governed by its own privacy policy.

We do not sell personal information. Apart from the Meta Pixel described above, we do not share it with advertising networks. We disclose information to law enforcement or regulators only when compelled by valid Canadian legal process.

Where it is stored

Order records are stored with Stripe (primarily US data centres with Canadian data-residency options) and in our Cloudflare Worker’s KV storage (global edge, with Canadian POP preference). Backup exports are kept on encrypted drives at our Eden Mills location.

How long we keep it

Order and customer records: 7 years (Canada Revenue Agency retention requirement).
Marketing opt-in records: for as long as you remain subscribed plus 2 years after unsubscribe.
General contact-form correspondence: 2 years.

Your rights under PIPEDA

Request access to the personal information we hold about you.
Request correction of inaccurate information.
Request deletion, subject to retention requirements above.
Withdraw consent for marketing communications at any time.
Make a complaint to the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, use the contact form. We respond within 30 days as required by PIPEDA.

Cookies & local storage

This site uses:

Essential local storage for the shopping cart. No data leaves your device until you proceed to checkout.
Stripe cookies on the Checkout page for fraud-prevention. These are set by Stripe directly.
Meta Pixel cookies (_fbp, and _fbc if you arrive from one of our ads) on every page, used for advertising measurement and audience building.

You can opt out of Meta’s ad targeting in your Facebook ad settings, and browser-level tracking protection or an ad blocker will stop the pixel from loading at all. We do not use analytics cookies beyond this.

Security

All connections use TLS. The site is hosted on Cloudflare Workers. Payment card data never touches our infrastructure — Stripe is PCI-DSS Level 1 compliant. Our Worker APIs enforce origin-allowlist CORS and signed-webhook verification.

Children

This site is not directed at children under 13. We do not knowingly collect personal information from children.

Changes to this policy

Material changes will be announced on this page with a revised “Last updated” date. Historical versions are kept in our repository for five years.

Contact

Privacy questions, access requests, and complaints: contact form. Mark the subject as “Compliance / regulatory.”