Privacy Policy

Who we are

Bonk Nutrition Inc. (BONK, we, us, or our) operates this website and the BONK online store. Our store checkout is powered by Shopify.

Our privacy contact can be reached at hello@dontbonk.ca.

Information we collect

• Contact and order information, such as your name, email, phone number, shipping and billing addresses, purchases, returns, and transaction details.
• Payment information processed by Shopify and its payment providers. BONK does not receive your complete payment-card number.
• Information you provide through email signup, athlete surveys, product feedback, customer support, or other communications.
• Device and usage information, such as IP address, browser, device identifiers, pages viewed, interactions, cart activity, and error information.
• Information stored on your device, including a Shopify cart identifier and interface preferences.

How we use information

• Provide the website, process orders and payments, arrange delivery, and support returns or customer requests.
• Operate carts, remember preferences, maintain security, prevent fraud, troubleshoot errors, and improve our services.
• Store and analyze athlete survey responses for product research and development.
• Send BONK marketing emails when you consent or when otherwise permitted by law. You may unsubscribe at any time.
• Measure website, signup, tool, product, cart, and checkout usage.
• Comply with legal obligations, enforce our terms, and protect BONK, our customers, and others.

Service providers and disclosures

We disclose information only as reasonably necessary for the purposes above, including to:

• Shopify and payment providers for storefront, checkout, payment, fraud prevention, and order services.
• Brevo for consented email subscriptions and marketing-list management.
• Google services for storage of athlete survey responses.
• PostHog for product and website analytics. BONK uses anonymous or randomly generated analytics identifiers and does not intentionally send subscriber email addresses to PostHog.
• Vercel for website hosting, delivery, and aggregate analytics.
• Shipping, fulfilment, professional, security, and technical service providers.
• Authorities or other parties where required by law, needed to protect rights or safety, or connected with a business transaction.

These providers may process information in Canada, the United States, or other countries where they or their subprocessors operate. Information processed elsewhere may be subject to the laws of that jurisdiction.

Analytics, cookies, and local storage

We and our providers use cookies, similar technologies, and browser storage to operate checkout and carts, remember preferences, maintain security, understand site use, and diagnose errors. Browser settings may let you block or delete these technologies, but parts of the store may stop working correctly.

Consent and marketing choices

Where consent is required, we request it at or before collection. You may withdraw consent, subject to legal or contractual restrictions, by contacting us. Marketing emails include an unsubscribe method. Withdrawal does not affect processing already lawfully completed, and we may retain limited suppression records to honour an unsubscribe request.

Retention and safeguards

We retain information only as long as reasonably needed for the purposes described here, including order fulfilment, legal and tax requirements, consent records, dispute resolution, safety, and fraud prevention. Retention periods differ by record type and provider.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information. No transmission or storage system can be guaranteed completely secure.

Your rights

Depending on applicable law, you may request access to or correction of your personal information, ask about its use and disclosure, withdraw consent, or challenge our compliance. We may need to verify your identity and may retain information where permitted or required by law.

Contact the privacy contact identified above. You may also contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada where applicable.

Children

Our services are not directed to children under the age of majority in their jurisdiction, and we do not knowingly collect their personal information without appropriate authorization. A parent or guardian may contact us about deletion of information submitted by a child.

Changes

We may update this policy to reflect changes to our practices, providers, or legal obligations. We will post the revised policy here and update the date above.