Home  /  Privacy Policy

Privacy Policy

How Home Living Dream collects, uses, stores, and protects personal information.

Last updated: November 2025

Home Living Dream (operated by 7601662 Canada Inc.) is committed to protecting the privacy and security of personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. This policy describes how we collect, use, store, share, and dispose of personal information including data received through marketplace integrations.

1. Who We Are

2. What Information We Collect

We collect personal information only as necessary to fulfill orders and comply with legal obligations. This includes:

  • Order details — items purchased, order amounts, and order status
  • Email address — for order communication where provided through marketplace systems
  • Tax-related information — required for GST/HST invoice generation and tax remittance to the Canada Revenue Agency

We do not collect payment card numbers, banking information, or any financial credentials from customers.

3. How We Collect Information

Customer information is received programmatically through the Amazon Selling Partner API (SP-API) directly into our internal order management system (HLD Manager). We do not collect information through web forms, cookies, or third-party tracking tools on this website.

4. How We Use Information

Personal information collected is used exclusively for the following purposes:

  • Purchasing shipping labels and dispatching FBM orders to customers
  • Generating GST/HST tax invoices for individual orders
  • Filing accurate Canadian sales tax returns with the Canada Revenue Agency
  • Internal order tracking and customer service follow-up where required
  • Financial reconciliation and accounting

We do not use customer personal information for marketing, advertising, profiling, or any purpose beyond order fulfillment and tax compliance.

5. How We Store and Protect Information

All customer data is stored in a DigitalOcean Managed MySQL database with the following protections in place:

  • Data is encrypted at rest using AES-256 encryption managed by DigitalOcean's infrastructure
  • All data transmitted between our application and database is encrypted in transit using SSL/TLS
  • Database access is restricted to our internal application server only and is not publicly accessible
  • Our web application is hosted on DigitalOcean App Platform behind HTTPS
  • Access to customer data within our internal system is restricted to authorized staff only, based on job role and business need
  • API credentials and access keys are stored as encrypted environment variables and never in source code

6. Who We Share Information With

We do not sell, rent, trade, or share customer personal information with any third parties for commercial purposes.

Information may be disclosed only in the following limited circumstances:

  • To shipping carriers (Canada Post, courier services) for order fulfillment
  • To the Canada Revenue Agency for legally required tax filings
  • To Amazon as part of marketplace order processing
  • Where required by law, court order, or government investigation

No Amazon customer data is shared with any marketing, analytics, advertising, or data brokerage services.

7. How Long We Retain Information

We retain personal information only as long as necessary for the purposes for which it was collected, or as required by Canadian tax law (typically 6 years for tax records). After the applicable retention period, personal data is permanently deleted from our systems.

8. Your Privacy Rights

Under PIPEDA you have the right to:

  • Access your personal information held by us
  • Correct inaccurate or incomplete information
  • Request deletion of personal information (subject to legal retention requirements)
  • Withdraw consent for non-essential data processing
  • File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact us at admin@homelivingdream.com.

9. Security Incident Response

In the event of a data breach or unauthorized access to personal information, we will:

  • Investigate and contain the incident immediately
  • Notify the Office of the Privacy Commissioner of Canada where required by law
  • Notify affected individuals and partner platforms (such as Amazon) within applicable regulatory timeframes
  • Take corrective actions to prevent recurrence

10. Amazon Data Specifically

As a participant in the Amazon Selling Partner API program, we handle Amazon customer data in compliance with Amazon's Data Protection Policy and Acceptable Use Policy. Amazon customer PII (name, address) is:

  • Used only for shipping and tax reporting
  • Never used for marketing, advertising, or shared with third-party services
  • Stored encrypted with strict access controls
  • Deleted or anonymized when no longer needed for the original purpose

11. Changes to This Policy

We may update this Privacy Policy periodically. The most current version will always be published at this URL with the updated date shown at the top.

12. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please reach out: