Privacy Policy

UKRINCA BEAUTY EXPERT INC.
Last updated: September 25, 2026

UKRINCA BEAUTY EXPERT INC. (referred to in this Privacy Policy as “ORising Canada”, “we”, “us” or “our”) is responsible for the personal information described in this Policy. We operate the Site at orising.ca (the “Site”) and offer professional hair and scalp care products in Canada.

This Privacy Policy explains what personal information we collect, how and why we use it, when we disclose it, how long we keep it, and the choices and rights available to you. It applies when you visit the Site, create or use an account, place an order, subscribe to communications, submit content, contact us, or otherwise interact with ORising Canada.

1. Accountability and Contact Information

ORising Canada is accountable for personal information under its control. Questions, access or correction requests, and privacy complaints should be directed to our Privacy Officer using the details below.

Privacy Officer
UKRINCA BEAUTY EXPERT INC.
1170 Sheppard Ave W, Unit 55
North York, Ontario M3K 2A3, Canada
Email: info@orising.ca
Phone: +1 437 777 5594

2. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

Identity and contact information: first and last name, username, email address, telephone number, and other contact details.
Account information: password hash, account type, profile information, social sign-in identifiers, favourites, and recently viewed products.
Billing and shipping information: recipient name, street address, city, province or territory, postal code, country, telephone number, and delivery notes.
Order and transaction information: products, quantities, prices, discounts, taxes, shipping method and cost, order status, payment method, payment status, payment-provider references, refunds, and transaction history.
Payment information: when you pay by card or a supported digital wallet, your payment details are submitted directly to the payment processor. We receive transaction identifiers and status information, but do not store the complete payment-card number. Other available methods may include PayPal, Interac e-Transfer, and Cash, as shown at checkout.
Communications and preferences: messages sent through our contact forms or by email, customer-service correspondence, newsletter subscription status, and marketing preferences.
User content: reviews, ratings, photographs, and other information you choose to submit for publication on the Site.
Technical and usage information: IP address, browser and device information, language, pages and products viewed, interactions with the Site, session information, cookie and similar identifiers, and security or error data.

Please do not provide personal information that we do not request or need to provide the requested service.

3. How We Collect Personal Information

We collect personal information:

directly from you when you register, update your profile or addresses, place an order, select a payment or delivery method, subscribe, submit a review, or contact us;
automatically when you use the Site, through server logs, cookies, pixels, and similar technologies; and
from service providers when you use social sign-in, make a payment, or interact with a delivery, analytics, advertising, fraud-prevention, or security service.

4. How We Use Personal Information

We use personal information to:

create, authenticate, maintain, and support customer accounts;
process orders, calculate discounts and taxes, accept or confirm payments, provide pickup or delivery, issue refunds, and send service messages;
maintain shopping carts, favourites, recently viewed products, reviews, and account preferences;
respond to questions, requests, complaints, and warranty or customer-service matters;
operate, troubleshoot, secure, measure, and improve the Site, our products, and our services;
detect and prevent fraud, abuse, security incidents, and violations of our terms;
understand Site usage and, where permitted, measure or deliver advertising;
send newsletters or promotional communications with consent or as otherwise permitted by law; and
meet accounting, tax, recordkeeping, legal, regulatory, dispute-resolution, and enforcement obligations.

5. Consent and Your Choices

When we ask for consent, the appropriate form of consent depends on the sensitivity of the information and the circumstances. Applicable law may also permit or require personal information to be handled without consent in limited circumstances.

You may withdraw consent for a particular use at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal does not affect prior permitted processing. It may also mean that we can no longer provide a feature or service that requires the information. To withdraw consent, contact our Privacy Officer using the details above.

6. Cookies and Similar Technologies

We use cookies and similar technologies required for session management, account login, shopping cart, checkout, language preferences, and website security. The Site also uses third-party technologies configured by us, including Google Tag Manager and Meta Pixel, and Google reCAPTCHA when that service is enabled. Services configured through Google Tag Manager may include analytics or advertising technologies. These providers may receive technical and usage information, including IP address, browser and device information, page URLs, interactions, and identifiers.

Except for technologies that are necessary to operate and secure the Site, optional analytics and marketing technologies are disabled unless you consent to them. You can accept or reject optional technologies, choose categories, or withdraw your consent at any time through the cookie banner or the “Cookie settings” link in the Site footer. Necessary cookies cannot be disabled through this tool because they support functions such as security, sign-in, language selection, the shopping cart, and checkout. You may also restrict or delete cookies through your browser or device settings, but doing so may affect Site functions.

7. Marketing Communications

We send commercial electronic messages when we have the consent required by Canada's anti-spam legislation or another lawful basis to do so. Each commercial electronic message includes an unsubscribe mechanism. You can withdraw from marketing emails by using that mechanism or by contacting info@orising.ca. We may still send non-promotional messages needed to administer your account, fulfil an order, provide customer service, or meet legal obligations.

8. When We Disclose Personal Information

We may disclose personal information to organizations that help us operate the business and provide the requested services, including:

payment providers and financial institutions, including Stripe and PayPal, to authorize, process, reconcile, or refund transactions;
order and inventory systems, including Zoho Inventory, to create and administer customer and sales-order records;
shipping and logistics providers, including Canada Post and FedEx, to fulfil and deliver shipped orders;
hosting, cloud, communications, security, and technical providers that support the Site and our operations;
analytics and advertising providers, including services provided by Google and Meta, to understand Site use and measure or deliver advertising;
social sign-in providers, such as Google, Facebook, or Apple, when you choose to use their authentication service; and
professional advisers, regulators, law enforcement, courts, and other parties when disclosure is required or permitted by law, needed to protect rights or safety, or connected with an actual or proposed financing, sale, reorganization, or transfer of the business.

We seek to limit disclosures to information reasonably necessary for the relevant service. Providers process information under their own terms and privacy practices or their arrangements with us. We may also disclose information with your direction or consent.

9. Processing Outside Your Province or Canada

Some service providers may process or store personal information outside your province or outside Canada, including in the United States and other countries where they or their subcontractors operate. Information in another jurisdiction may be subject to that jurisdiction's laws and may be accessible to its courts, law-enforcement, or national-security authorities. Contact our Privacy Officer if you would like more information about relevant service-provider practices.

10. Retention of Personal Information

Retention periods vary according to the type of record and the purpose for which it was collected. In determining retention, we consider the customer or account relationship, order fulfilment, accounting and tax obligations, payment records, dispute resolution, fraud prevention, security requirements, and applicable backup cycles.

Closing an account does not necessarily remove all related records or files, including order, payment, invoice, tax, security, profile-image, or previously submitted review records. Review text and images may remain public after account closure unless removed following a valid request. Withdrawal from marketing communications is handled separately from account closure. Copies of information may remain temporarily in system logs or backups. You may contact us to request deletion, subject to applicable legal and business retention requirements.

11. Security

We use safeguards designed to reduce the risk of loss, theft, unauthorized access, use, alteration, or disclosure. Measures implemented on the Site include HTTPS transmission, password hashing, authenticated access, and role-based restrictions for administrative functions.

No method of transmission or storage is completely secure. Please use a unique password, keep your sign-in information confidential, and contact us promptly if you believe your account or personal information has been compromised.

If a breach of security safeguards involving personal information occurs, we will assess the circumstances and the risk of significant harm. We will report the breach to the appropriate privacy regulator and notify affected individuals when required by applicable law, keep the records required by law, and take reasonable steps to contain, investigate, and reduce the risk of further harm.

12. Automated Security and Fraud Checks

The Site and its service providers may use automated signals to identify bots, suspicious activity, payment risk, fraud, or abuse. For example, Google reCAPTCHA may analyze technical and interaction data when enabled, and payment providers may assess transaction risk. These checks may affect registration or payment processing. Contact us if you believe a legitimate action was blocked or incorrectly assessed.

13. Access, Correction, and Other Privacy Rights

Subject to applicable law, you may request access to personal information we hold about you and ask us to correct information that is inaccurate or incomplete. Depending on where you live and the circumstances, you may also have rights to withdraw consent, request deletion, obtain information about the use and disclosure of your information, receive computerized information in a structured, commonly used technological format, or request that dissemination cease or a hyperlink be de-indexed.

Submit a request to our Privacy Officer. We may need to verify your identity before responding. We generally respond within 30 days after receiving a complete request, subject to any extension permitted by applicable law. Legal exceptions may limit what we can provide or delete, and we will explain an applicable refusal as required by law.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. Depending on where you live, you may also contact the Commission d'accès à l'information du Québec, the Office of the Information and Privacy Commissioner of Alberta, or the Office of the Information and Privacy Commissioner for British Columbia.

14. Children's Privacy

The Site and its shopping services are intended for adults. Minors should use the Site and make purchases only with the involvement and consent of a parent or guardian where required. We do not knowingly collect personal information from children under 14 without consent from a parent or guardian where required. If you believe a child has provided personal information contrary to this Policy, please contact our Privacy Officer.

15. Third-Party Sites and Services

The Site may contain links to, or features provided by, third parties. Their privacy policies and terms govern their services. We encourage you to review those policies before providing personal information to a third party.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, services, or legal obligations. We will post the revised Policy on this page and change the “Last updated” date. If a change is material, we may provide an additional notice when appropriate or required.