in accordance with PIPEDA

Last updated: April 1, 2026

This Privacy Policy describes how Numa (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from numababy.ca (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services").

This Privacy Policy is designed to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act, and outlines how we collect, use, disclose, and safeguard your personal information.

For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully.

Accountability

We are responsible for personal information under our control and have implemented policies and practices to ensure compliance with applicable privacy laws.

We designate a Privacy Officer who is responsible for overseeing compliance with this Privacy Policy and applicable data protection regulations.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to:

• communicate with you
• provide or improve the Services
• process transactions and fulfill orders
• comply with applicable legal obligations
• enforce applicable terms of service
• detect and prevent fraud or misuse
• protect the Services, our rights, and the rights of our users or others
  

We collect and use personal information only for purposes that a reasonable person would consider appropriate in the circumstances.

Consent

By using our Services or providing personal information to us, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

Where required by law, we may obtain express consent before collecting or using certain types of personal information.

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice.

What Personal Information We Collect

The types of personal information we obtain about you depend on how you interact with our Site and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes, or can reasonably be associated with you.

Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

• Contact details including your name, address, phone number, and email
• Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number
• Account information including your username, password, security questions and other information used for account security purposes
• Customer support information including the information you choose to include in communications with us
  

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using certain features.

Information We Collect About Your Usage

We may automatically collect certain information about your interaction with the Services ("Usage Data"). This may include:

• IP address
• device type and operating system
• browser type and version
• pages viewed and time spent on the Site
• referring URLs and interaction data
  

We may collect this data using cookies, pixels, and other tracking technologies.

Information We Obtain From Third Parties

We may obtain information about you from third parties, including vendors and service providers who may collect information on our behalf, such as:

• companies who support our Site and Services (e.g., Shopify)
• payment processors who collect payment information to process transactions
• marketing or analytics providers
• advertising partners
  

Any information we obtain from third parties will be treated in accordance with this Privacy Policy.

Limiting Collection

We limit the collection of personal information to what is necessary for the purposes identified in this Privacy Policy.

How We Use Your Personal Information

Providing Products and Services
We use your personal information to provide the Services in order to perform our contract with you, including:

• processing payments
  
• fulfilling orders
• managing accounts
• arranging shipping
• handling returns and exchanges
  

Marketing and Advertising
We may use your personal information to send promotional communications and display advertising related to our products and services.

Security and Fraud Prevention
We use personal information to detect, investigate, and prevent fraudulent or malicious activity.

Communicating with You and Service Improvement
We may use your personal information to provide customer support and improve our Services.

Cookies

Like many websites, we use Cookies on our Site to:

• remember user preferences
• analyze website traffic
• improve the user experience
• personalize content and advertising
  

Most browsers automatically accept cookies by default, but you can modify your browser settings to remove or reject cookies.

How We Disclose Personal Information

We may disclose your personal information to third parties in certain circumstances, including:

• service providers who assist with operations
• payment processors
• fulfillment and shipping providers
• analytics providers
• marketing partners
• legal authorities when required by law
  

We may also disclose personal information in connection with a business transaction such as a merger, acquisition, or bankruptcy.

User Generated Content

The Services may enable you to post reviews or other content. Any content you submit in public areas of the Site may be visible to other users.

We are not responsible for how others use information that you voluntarily disclose in public areas.

Third Party Websites and Links

Our Site may contain links to websites operated by third parties. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

Children's Data

The Services are not intended for children under the age of 16, and we do not knowingly collect personal information from children.

Parents or guardians who believe their child has provided personal information may contact us to request deletion.

Security Safeguards

We implement appropriate technical, administrative, and organizational safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction.

However, no method of transmission over the internet or electronic storage is completely secure.

Retention of Personal Information

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, resolve disputes, and enforce our agreements.

Your Rights

Depending on your location, you may have rights regarding your personal information, including the right to:

• access personal information we hold about you
• request correction of inaccurate information
• request deletion where applicable
• withdraw consent to certain processing
• request information about how your data is used
  
  

To exercise these rights, please contact us using the contact information below.

Access to Personal Information

Upon written request, we will provide individuals with access to their personal information and information about how it has been used or disclosed, subject to legal limitations.

Complaints

If you have concerns about our handling of personal information, you may contact us using the contact details below.

If you are not satisfied with our response, you may have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

International Users

Please note that we may transfer, store, and process your personal information outside the country in which you reside. Personal information may be processed by staff and service providers located in other jurisdictions.

Contact

If you have questions about this Privacy Policy or would like to exercise your privacy rights, please contact us:

Privacy Officer
Email: support@numababy.ca
Address: Toronto, Ontario, Canada

For the purposes of applicable data protection laws, we are the data controller of your personal information.