Privacy policy
Last updated: September 8, 2026
MuscleWrap is operated by Ashleigh Neal ("MuscleWrap," "we," "us," or "our"). We operate this online store and its related content, features, products, and services (collectively, the "Services"). Our store is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit or use the Services, make a purchase, or otherwise communicate with us. If this Privacy Policy conflicts with our Terms of Service regarding the collection, use, or disclosure of personal information, this Privacy Policy will control.
Personal Information We Collect
"Personal information" means information about an identifiable individual. It does not include information that has been anonymized so that it can no longer reasonably be linked to an individual.
Depending on how you interact with the Services and the features we have enabled, we may collect:
-
Contact and delivery information: Such as your name, email address, phone number, billing address, and shipping address.
-
Order and transaction information: Such as the products you view, place in your cart, purchase, return, or cancel, along with order history, payment status, and transaction identifiers.
-
Payment-related information: Payments are processed securely by Shopify and our payment providers. We generally do not directly receive or store complete payment-card numbers. We may receive limited billing and transaction information, such as the payment method, payment status, billing address, and transaction identifier.
-
Account information: If customer accounts are enabled, such as your login details, preferences, and account settings.
-
Communications: Including information you provide when you contact us, submit a support request, or communicate about an order.
-
Device and technical information: Such as your IP address, browser type, device type, network connection, and online identifiers.
-
Usage information: Such as how and when you browse or interact with our store, products, emails, advertisements, and Services.
-
Marketing preferences: Including whether you have agreed to receive promotional communications and whether you later unsubscribe.
Please do not provide personal information that we do not reasonably need to assist you.
How We Collect Personal Information
We may collect personal information through the following methods:
-
Directly from you: Such as when you place an order, create an account, subscribe to marketing, or contact us.
-
Automatically: Through cookies and similar technologies when you use the Services.
-
From service providers: Such as Shopify, payment processors, analytics providers, fraud-prevention providers, suppliers, fulfilment partners, and shipping carriers.
-
From advertising or business partners: Where permitted by law and according to your privacy choices.
How We Use Personal Information
We may use personal information to:
-
Operate and provide the Services;
-
Process payments and complete transactions;
-
Fulfil, package, ship, track, return, or cancel orders;
-
Communicate with you about your orders, account, support requests, or the Services;
-
Maintain customer accounts and remember customer preferences, where those features are enabled;
-
Personalize and improve our store, products, advertising, and customer experience;
-
Send promotional emails or other marketing communications where we have the consent or other legal authority required to do so;
-
Measure store performance and understand how customers use the Services;
-
Detect, investigate, and prevent fraud, security incidents, unlawful conduct, or misuse of the Services;
-
Enforce our terms and protect our customers, business, and legal rights; and
-
Comply with legal, tax, accounting, regulatory, and recordkeeping obligations.
We limit our collection, use, and disclosure of personal information to purposes that a reasonable person would consider appropriate in the circumstances.
Cookies, Analytics, and Advertising
We and our service providers may use cookies, pixels, tags, and similar technologies to operate the store, remember preferences, maintain shopping-cart and checkout functions, understand store performance, prevent fraud, and—where permitted—provide or measure advertising.
Some cookies are necessary for the store to function. Other cookies, including certain analytics or advertising cookies, may be controlled through the cookie banner or privacy-preferences tool displayed on the Services where required. You may also adjust your browser settings to block or delete cookies, although doing so may cause parts of the Services to function incorrectly.
If we use advertising platforms or analytics tools, those providers may collect information about your activity on the Services according to their own privacy policies and your applicable privacy choices.
How We Disclose Personal Information
We may disclose personal information when reasonably necessary for the purposes described in this policy, including:
-
Shopify: Which hosts our store and provides ecommerce, checkout, analytics, security, and related services.
-
Payment providers: To securely process transactions and prevent fraud.
-
Suppliers and fulfilment partners: Including HyperSKU and any other suppliers or fulfilment partners we use to prepare and fulfil orders.
-
Shipping carriers and logistics providers: To deliver and track orders.
-
Technology and service providers: Such as providers of website hosting, cloud storage, customer support, email delivery, analytics, security, and fraud prevention.
-
Advertising and marketing providers: Where we use those services and the disclosure is permitted by law and consistent with your choices.
-
Professional advisers and authorities: Where reasonably necessary to obtain professional advice, comply with law or valid legal process, investigate unlawful activity, enforce our agreements, or protect legal rights and safety.
-
A purchaser or successor organization: In connection with a proposed or completed sale, merger, financing, reorganization, or transfer of all or part of the business, subject to applicable legal requirements.
We do not sell customer personal information for money. We do not disclose personal information to unrelated third parties for their own independent purposes unless you direct us to do so, consent to it, or the disclosure is otherwise permitted or required by law.
Order Fulfilment and International Processing
To fulfil and deliver your order, we work with global suppliers, fulfilment partners (such as HyperSKU), and international logistics providers. We provide them with only the information reasonably required for fulfilment and delivery, such as your name, shipping address, phone number, email address, ordered items, and order number.
Your order may be fulfilled and shipped from warehouses located outside Canada, including in the United States, China, or other countries. Information processed in another country is subject to that country's laws and may be accessible to its courts, law-enforcement bodies, or government authorities.
We remain responsible for personal information transferred to service providers for processing and use contractual or other appropriate measures to require a level of protection comparable to that required under applicable Canadian privacy law.
For more information about processing outside Canada or the service providers involved in an order, contact our Privacy Officer using the information below.
Relationship With Shopify
The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services to provide and improve its services. Information submitted through the Services may be transmitted to Shopify and other service providers located outside your province, territory, or country.
If Shopify Network Intelligence or other enhanced Shopify features are enabled, Shopify may use information from your interactions with our store, other merchants, and Shopify to provide enhanced services. For certain processing, Shopify may be responsible for responding to requests concerning its use of personal information.
You can learn more in the Shopify Consumer Privacy Policy and manage certain Shopify privacy choices through the Shopify Privacy Portal.
Consent and Marketing Communications
Where consent is required, we seek consent before or at the time personal information is collected, unless otherwise permitted by law. You may withdraw consent, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may limit our ability to provide a requested product or service.
We send promotional electronic messages only where permitted by applicable law. You may unsubscribe from promotional emails by using the unsubscribe link in the message or by contacting us. Even if you unsubscribe from marketing, we may still send non-promotional communications relating to transactions, orders, security, or customer service.
Security
We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the personal information in our care. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Please do not send payment-card details, passwords, or other sensitive information through unsecured channels such as ordinary email or social-media messages.
Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including order fulfilment, customer service, returns, disputes, fraud prevention, and legal, tax, accounting, and recordkeeping obligations. Retention periods vary according to the type of information and the reason it was collected. When information is no longer required, we delete, destroy, or anonymize it in accordance with our practices and applicable law.
Your Privacy Rights and Choices
Depending on applicable law, you may request to:
-
Access the personal information we hold about you;
-
Receive information about how we have used or disclosed it;
-
Correct inaccurate or incomplete personal information;
-
Withdraw consent to certain uses or disclosures; or
-
Have information deleted where applicable law requires or permits deletion.
To submit a request, contact our Privacy Officer using the information below. We may need to verify your identity before completing a request. We will respond within the period required by applicable law. Some rights are subject to legal exceptions, and we may retain information where required or permitted by law.
We will not treat you unfairly for exercising an applicable privacy right.
Children's Privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or legal guardian and believe a child under 13 has provided personal information to us, please contact our Privacy Officer so we can review the matter and, where appropriate, delete the information.
Customers who have not reached the age of majority in their province, territory, or country should use the Services and make purchases only with the involvement and permission of a parent or legal guardian.
Third-Party Websites
The Services may contain links to websites or platforms operated by third parties. We do not control those third parties and are not responsible for their privacy, security, or content. Review their privacy policies before providing them with personal information. A link from our Services does not by itself mean that we endorse the third party.
Privacy Complaints
If you have a question or complaint about our handling of personal information, contact our Privacy Officer first. We will review and respond to the concern within a reasonable time.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. Depending on where you live, you may also have the right to contact another applicable provincial, territorial, or international privacy regulator.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our practices, technology, Services, or legal obligations. We will post the revised policy on the Services, update the "Last updated" date, and provide any additional notice required by law.
Contact Our Privacy Officer
For questions, privacy requests, complaints, or information about our service providers and international processing, contact:
-
Privacy Officer: Ashleigh Neal
-
Business: MuscleWrap
-
Email: support@musclewrap.ca
-
Mailing address: 6-2160 Highway 7, Suite 266, Vaughan, Ontario L4K 1W6, Canada