Privacy Policy
This policy explains what 6ixmerchandise collects when you visit 6ixmerchandise.ca or buy from us, why we collect it, who else sees it, and what you can ask us to do about it.
Who we are
6ixmerchandise (“we”, “us”) sells graphic apparel from Toronto, Canada. We are the controller of the personal information described here.
- Address 87 Thirty Eighth Street, Etobicoke, Toronto, ON M8W 3M2, Canada
- Email [email protected]
- Phone (437) 676-0292
Our store runs on WordPress and WooCommerce, on our own hosting. We are not a marketplace; nothing you give us is sold on.
What we collect
When you place an order
Your name, email address, shipping address, billing address and phone number, the items ordered, and the order total. Payment card details are entered directly into our payment provider’s fields and are never stored on our servers — we receive only a transaction reference, the card brand and the last four digits.
When you create an account
Your name, email address and a password (stored only as a one-way hash), plus your saved addresses and order history.
When you contact us or subscribe
Your email address and whatever you choose to put in the message. If you subscribe to marketing email, we record that consent and the date it was given.
When you simply browse
Your IP address, approximate location derived from it, browser and device type, the pages you view, the products you look at, and the site or ad that sent you here — including advertising click identifiers such as gclid, gbraid, wbraid, fbclid and ttclid when a link carries one.
Why we collect it
| Purpose | Lawful basis (UK/EU GDPR) |
|---|---|
| Taking payment, fulfilling and delivering your order, handling returns | Performance of a contract |
| Order confirmations, shipping notices, and replies to your questions | Performance of a contract |
| Bookkeeping, tax and fraud prevention | Legal obligation / legitimate interests |
| Understanding which pages and products work, and measuring advertising | Consent, where required, otherwise legitimate interests |
| Marketing email | Consent — withdraw it any time from any email |
Who we share it with
We share only what each partner needs to do its job.
| Recipient | What they get | Why |
|---|---|---|
| Stripe | Payment details, billing address, order total | Card, Apple Pay, Google Pay and Link payments |
| PayPal | Email, billing address, order total | PayPal payments |
| Afterpay, Sezzle | Name, email, billing address, order total | Buy-now-pay-later payments, when you choose one |
| Our fulfilment partner and shipping carriers | Name, shipping address, phone, items ordered | Printing, packing and delivering the order |
| Zoho Mail | Email correspondence | Our mailboxes |
| Omnisend | Email address, name, purchase history | Order emails and, with consent, marketing email |
| Google (Analytics, Ads, Merchant Center) | Pseudonymous usage and conversion data; hashed email and address for enhanced conversions | Measurement and advertising |
| Meta, TikTok, Snapchat | Pseudonymous event data; hashed contact details for conversion matching | Advertising measurement |
| Judge.me | Email address, order contents | Inviting you to review what you bought |
| Our host and CDN | Server logs, including IP address | Serving and securing the site |
We also disclose information where the law requires it, and to professional advisers where necessary.
Cookies and similar technologies
Cookies are small files a site stores in your browser. Ours fall into three groups.
Strictly necessary — the store cannot work without these
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
woocommerce_cart_hash |
WooCommerce | Tells the page when the cart has changed | Session |
woocommerce_items_in_cart |
WooCommerce | Tells the page the cart is not empty | Session |
wp_woocommerce_session_* |
WooCommerce | Links your browser to your cart and checkout session | 2 days |
woocommerce_recently_viewed |
WooCommerce | Powers the “recently viewed” row | Session |
wordpress_logged_in_*, wordpress_sec_* |
WordPress | Keeps you signed in to your account | Session, or 14 days if you choose “remember me” |
wp-settings-*, wp-settings-time-* |
WordPress | Remembers interface preferences for signed-in users | 1 year |
yay_currency_widget |
YayCurrency | Remembers the currency you chose | 30 days |
Measurement and advertising — set only with your consent where consent is required
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
_ga, _ga_* |
Google Analytics 4 | Distinguishes visitors and sessions | Up to 2 years |
_gcl_au |
Google Ads | Attributes a conversion to an ad click | 90 days |
| Google Tag Manager container | Loads the tags listed on this page; sets no cookie of its own | — | |
_fbp, _fbc |
Meta | Attributes a conversion to a Facebook or Instagram ad | 90 days |
_ttp |
TikTok | Attributes a conversion to a TikTok ad | 13 months |
_scid |
Snapchat | Attributes a conversion to a Snapchat ad | 13 months |
sixm_attr |
6ixmerchandise | Stores the click identifier and referrer that brought you here, so a purchase can be credited to the right ad without a third party tracking you across other sites | 90 days |
sixm_evt |
6ixmerchandise | De-duplicates browser and server copies of the same event | Session |
You can clear or block cookies in your browser settings. Blocking the strictly necessary ones will break the cart and checkout. You can opt out of Google Analytics entirely with Google’s browser add-on.
Advertising and measurement in more detail
When you buy, we send the advertising platforms above a record of the purchase so they can tell which ad worked. Where that record includes your email address, phone number or address, it is hashed with SHA-256 before it leaves our server — the platform can match it against an account it already has, but cannot read it. We do not send them the contents of your cart in a form that identifies you personally.
Where your information goes
We are in Canada. Our hosting, payment, email and advertising partners operate in Canada, the United States and the European Union, so your information is transferred outside your own country. For transfers out of the UK and EEA we rely on the European Commission’s Standard Contractual Clauses, or on an adequacy decision where one covers the destination.
How long we keep it
- Orders and invoices — seven years, as Canadian tax law requires.
- Account details — until you ask us to delete the account.
- Marketing subscriptions — until you unsubscribe, then a suppression record so we do not email you again by mistake.
- Analytics data — up to 14 months in Google Analytics, then it is deleted automatically.
- Support email — three years.
Your rights
Wherever you live, you can email [email protected] and ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete your account and personal information, except records we must keep for tax;
- stop using your information for marketing;
- stop using it for anything else, where we rely on legitimate interests.
We answer within 30 days. If you are in Canada and are unhappy with our answer, you can complain to the Office of the Privacy Commissioner of Canada. In the UK, the Information Commissioner’s Office; in the EEA, your national supervisory authority.
We do not sell personal information, and we do not share it for cross-context behavioural advertising in the sense California’s CCPA/CPRA uses those terms.
Security
The whole site is served over HTTPS. Passwords are stored as one-way hashes. Card numbers never reach our servers. Administrative access is limited to the people who need it.
Children
This store is not aimed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us personal information, email us and we will delete it.
Changes
When this policy changes we update the date at the top. Material changes are announced on the site.
Contact
Privacy questions: [email protected], or 6ixmerchandise, 87 Thirty Eighth Street, Etobicoke, Toronto, ON M8W 3M2, Canada.