Privacy Policy
This policy explains what ATH Supplies Inc. does with your personal information. It describes how the site actually works, not a general statement of intent.
What we collect
When you place an order: your name, company, email address, delivery address, and a phone number if you give one. If you order on account, any purchase order reference you supply. When you simply browse: a cart identifier stored in a cookie, plus the technical details every web server records — IP address, browser type and pages requested.
Card details never reach us
Payment happens on Square's own secure page. ATH Supplies never sees, receives or stores your card number, expiry or security code. We are told only that a payment succeeded, for how much, and the delivery address you gave Square.
Why we hold it
To take your order, deliver it, invoice you, handle returns, and meet the record-keeping obligations that apply to a Canadian business. We do not sell your information, and we do not share it for anyone else's marketing.
Who else is involved
Three companies process data on our behalf, and only what each needs:
- Square — takes the payment and holds the card details.
- Resend — delivers our emails to you.
- DigitalOcean — hosts this website, in Toronto, Canada.
Your order details are also passed to the supplier who ships your goods, so that they can deliver to you. They receive the delivery address and the items only.
Where it is stored
Order records are held on servers in Canada. Our suppliers may process limited data outside Canada, where foreign law could in principle permit access by authorities there.
Marketing email
We only send promotional email to people who asked for it. Using the order lookup or placing an order does not subscribe you to anything. Every marketing email carries an unsubscribe link, and you can also just email us to be removed.
Cookies
One cookie, to remember your shopping cart between pages. It holds a random identifier, nothing about you. No advertising or tracking cookies are set.
How long we keep it
Order records are kept for seven years, as tax and business records generally must be. Enquiries that do not become orders are deleted once resolved.
Your rights
Under PIPEDA you may ask what personal information we hold about you, request a correction, or ask us to delete anything we are not legally required to keep. Email info@athsupplies.com and we will respond within 30 days. If you are not satisfied with our answer you can complain to the Office of the Privacy Commissioner of Canada.
Changes
If we change this policy we will update this page. Last updated 2026-09-04.