FanniPak™ Privacy Policy

Effective Date: February 24, 2025

​

Welcome to FanniPak™ ("we," "us," or "our"). This Privacy Policy explains how we collect, use, share, and protect the personal information of our website visitors and customers on "fannipak.com," where we sell luxury oversized fanny packs worldwide, including Canada, the US, Europe, and beyond. We are committed to safeguarding your privacy and complying with applicable privacy laws, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA), and other global regulations. By using "fannipak.com," you consent to the practices described in this policy.

​

1. Who We Are

​

FanniPak™ is a Canadian-based e-commerce business located in Ontario, Canada, operating "fannipak.com." We specialize in premium, waterproof, and adjustable fanny packs designed for travel, festivals, adventure, sports, and parenting (e.g., hands-free baby bags for new moms and dads). Our products cater to a global audience with unisex designs. Contact us at support@fannipak.com for questions about this Privacy Policy or your personal data.

​

2. What Personal Information We Collect

​

We collect personal information to operate "fannipak.com," fulfill orders, improve our services, and communicate with you. This includes:

• Information You Provide Directly:

  • Name, email address, shipping address, phone number, and payment details (e.g., credit card information) when you register, purchase a luxury fanny pack, or subscribe to our newsletter.

• Information We Collect Automatically:

  • IP address, browser type, device information, and cookies when you visit "fannipak.com" to analyze traffic, optimize user experience, and personalize content (e.g., using Google Analytics or similar tools).

  • Location data (derived from IP addresses) to determine shipping costs and comply with regional privacy laws.

• Information from Third Parties:

  • Data from our supplier (e.g., order fulfillment details) or payment processors (e.g., Stripe, PayPal) to process transactions for waterproof fanny packs.

  • Social media or advertising platforms (e.g., Facebook, Instagram) for marketing, if you interact with our ads or pages, subject to your consent.

• Data from Minors: We do not knowingly collect personal information from children under 13 (or 16 in the EU under GDPR) without parental consent, per Canada’s PIPEDA, US COPPA, and EU GDPR. If we discover such data, we’ll delete it promptly and notify parents. Please contact us at support@fannipak.com if you believe a minor has provided information.

• ​

3. How We Use Your Personal Information

​

We use your personal information for the following purposes, in compliance with privacy laws:

• To process and fulfill orders for luxury oversized fanny packs (e.g., shipping via supplier, managing returns).

• To improve "fannipak.com," including website functionality, user experience, and customer support for travel, festival, and adventure uses.

• To send marketing communications (e.g., newsletters, promotions for trendy fanny packs), which you can opt out of at any time via unsubscribe links or our contact form.

• To analyze website traffic and behavior using cookies and analytics tools, ensuring compliance with GDPR, CCPA, and PIPEDA.

• To comply with legal obligations, protect our rights, or respond to legal requests (e.g., court orders, subpoenas) for waterproof fanny packs or related data.​

 

4. Legal Basis for Processing (GDPR, PIPEDA, CCPA)

​

• Canada (PIPEDA): We process personal information with your consent (express or implied) or as necessary for contractual obligations (e.g., fulfilling orders) or legal requirements. You can withdraw consent or request access/correction of your data by contacting us.

• EU (GDPR): We process data based on:

  • Consent (e.g., for cookies, marketing emails), which you can revoke via our cookie consent banner or contact form.

  • Contractual necessity (e.g., delivering luxury fanny packs).

  • Legitimate interests (e.g., website analytics, fraud prevention), balanced with your rights.

  • Legal obligations (e.g., tax reporting, data retention for Canadian and EU laws).

• US (CCPA/CPRA): We collect data with your consent or as necessary for business purposes. California residents have rights to opt-out of data sales, access, delete, or limit use, which we detail below.

 

5. Sharing Your Personal Information

​

We do not sell or rent your personal information. We may share it with:

• Print partner for production and shipping of luxury fanny packs worldwide, under strict confidentiality agreements.

• Payment Processors: Companies like Stripe or PayPal to process transactions, subject to their privacy policies.

• Marketing Partners: Third parties (e.g., Google, Facebook) for analytics or remarketing, with your consent, which you can manage via our cookie settings.

• Legal Authorities: If required by law, to protect FanniPak™, our customers, or others (e.g., court orders in Canada, US, or EU).

• Service Providers: Logistics (e.g., shipping carriers), IT support, or customer service providers, under contracts ensuring data security.

• ​

We do not transfer data outside Canada, the US, or the EU without ensuring compliance with local laws (e.g., GDPR’s Standard Contractual Clauses for EU-to-non-EU transfers) and your consent.

​

6. Cookies and Tracking Technologies

​

"fannipak.com" uses cookies and similar technologies to enhance your experience, analyze traffic, and deliver personalized ads. We comply with cookie consent requirements for European countries (GDPR, ePrivacy Directive), the US (CCPA/CPRA), and Canada (PIPEDA).

• Types of Cookies:

  • Strictly Necessary Cookies: Enable core functions (e.g., shopping cart, login), requiring no consent under EU laws.

  • Performance Cookies: Track site usage (e.g., Google Analytics), requiring consent in the EU, US, and Canada.

  • Functional Cookies: Remember preferences (e.g., language, design choices), requiring consent.

  • Marketing Cookies: Deliver ads (e.g., Facebook, Google AdSense), requiring consent globally.

• Cookie Consent:

  • We use a cookie consent banner (via a CMP like CookieScript or CookieYes) to obtain your explicit, informed consent before setting non-essential cookies, per GDPR, ePrivacy Directive, and CCPA. You can manage or withdraw consent via the banner or our Cookie Policy (linked below).

  • For EU/EEA users, we block non-essential cookies until consent is given, per GDPR and ePrivacy Directive guidelines, and store consent records for proof of compliance.

  • For US users (e.g., California under CCPA/CPRA), you can opt out of data sales or tracking via our settings or Do Not Track requests, per CalOPPA.

  • For Canadian users (PIPEDA), we provide implied or express consent options for cookies, with an opt-out process detailed in our Cookie Policy.

• Cookie Policy: View our detailed Cookie Policy [link to fannipak.com/cookie-policy] for information on cookie types, purposes, and third-party partners (e.g., Google, Facebook), accessible from our homepage footer and cookie banner.

• How to Manage Cookies:

  • You can disable cookies via your browser settings (e.g., Chrome, Safari) or our consent management tool. Note that disabling necessary cookies may impact "fannipak.com" functionality (e.g., shopping cart).

  • ​

7. Data Storage and Security

​

• We store personal information on secure servers in Canada, the US, and the EU, complying with PIPEDA, GDPR, and CCPA requirements. Data is encrypted during transmission (TLS) and storage, with technical and organizational measures (e.g., firewalls, access controls) to prevent unauthorized access, loss, or alteration.

• We retain data only as long as necessary for our purposes (e.g., order fulfillment, legal compliance) or as required by law (e.g., 7 years for tax records in Canada, 6 years in the EU under GDPR). We delete or anonymize data afterward, per PIPEDA and GDPR retention policies.

• ​

8. International Data Transfers

​

• As a Canadian business delivering worldwide, we may transfer personal data to the US, Europe, or other regions for order fulfillment (e.g., Supplier operations, shipping carriers). We ensure compliance with:

  • GDPR (EU): Using Standard Contractual Clauses (SCCs) or other approved mechanisms for transfers outside the EU/EEA, with your consent.

  • PIPEDA (Canada): Ensuring transfers meet Canadian standards for consent and security, with safeguards for non-Canadian recipients.

  • CCPA/CPRA (US): Limiting transfers to service providers under contracts ensuring data protection, with opt-out rights for California residents.

• You can request details of international transfers or object to them by contacting support@fannipak.com.

 

9. Your Rights

​

Depending on your location, you have rights regarding your personal information:

• Canada (PIPEDA):

  • Access, correct, or withdraw consent for your data by contacting us.

  • Request details of how we use your information or opt out of marketing (e.g., emails for luxury fanny packs).

• EU (GDPR):

  • Access, rectify, erase, restrict, or object to processing your data.

  • Data portability (receive your data in a structured format).

  • Withdraw cookie consent or opt out of marketing via our banner or contact form.

  • Lodge complaints with your local Data Protection Authority (e.g., CNIL in France, ICO in the UK).

• US (CCPA/CPRA, California):

  • Know what personal information is collected, sold, or shared.

  • Opt out of data sales or sharing for advertising (via our settings or Do Not Track).

  • Access, delete, or correct your data, or limit use of sensitive information.

  • Contact us at support@fannipak.com to exercise these rights.

  • ​

To exercise any rights, email support@fannipak.com or use our online form on "fannipak.com." We’ll respond within 30 days (or 45 days for complex requests, per GDPR and CCPA).

​

10. Do Not Track (DNT)

​

"fannipak.com" does not currently respond to Do Not Track signals from browsers, per CalOPPA requirements. However, you can manage tracking preferences via our cookie consent banner or by disabling cookies in your browser, per PIPEDA, GDPR, and CCPA guidance.

​

11. Children’s Privacy

​

We do not knowingly collect personal information from children under 13 (US COPPA) or 16 (EU GDPR) without parental consent. If you believe a minor has provided data, contact support@fannipak.com, and we’ll delete it promptly, per PIPEDA, GDPR, and COPPA.

​

12. Third-Party Links and Services

​

"fannipak.com" may link to third-party sites (e.g., supplier, social media, payment processors). We’re not responsible for their privacy practices. Review their policies (e.g., Supplier Privacy Policy, Google’s Privacy Policy) before providing data. We use third-party cookies (e.g., Google Analytics, Facebook) with your consent, per our Cookie Policy.

​

13. Changes to This Privacy Policy

​

We may update this Privacy Policy to reflect changes in laws or our practices. The “Effective Date” at the top indicates the latest version. We’ll notify you via email or a notice on "fannipak.com" before significant changes. Continued use of our site after updates constitutes acceptance.

​

14. Contact Us

​

For privacy questions or to exercise rights, contact us:

• Email: support@fannipak.com​

For EU residents, our EU representative is [insert representative name or TBD, e.g., FanniPak EU Representative, contactable at support@fannipak.com], per GDPR Article 27.

​

15. Cookie Consent for European Countries and Worldwide

​

To comply with GDPR, ePrivacy Directive, CCPA/CPRA, and other global laws (e.g., PIPEDA, LGPD, POPIA), we use a cookie consent banner on "fannipak.com" to obtain your explicit, informed consent for non-essential cookies. Here’s how we handle cookie consent:

• Cookie Banner: Upon visiting "fannipak.com," you’ll see a banner requesting consent for cookies (e.g., performance, functional, marketing). You can accept all, reject non-essential, or customize preferences via granular options, per GDPR and ePrivacy Directive.

• Strictly Necessary Cookies: These (e.g., for shopping cart, login) don’t require consent but are essential for site functionality, per EU laws.

• Non-Essential Cookies: Require consent for performance (e.g., Google Analytics), functional (e.g., preferences), and marketing (e.g., Facebook, Google Ads) cookies, per GDPR, CCPA, and PIPEDA. We block these until consent is given, per GDPR script-blocking requirements.

• Consent Management: You can withdraw consent anytime via the banner, our Cookie Settings (linked in the footer), or our Cookie Policy [link to fannipak.com/cookie-policy]. Consent is stored securely for compliance proof, per GDPR and ePrivacy Directive.

• EU/EEA, UK, and Worldwide: For EU/EEA users, we comply with GDPR and ePrivacy Directive; for UK users, PECR; for US users (e.g., California), CCPA/CPRA opt-out options; for Canadian users, PIPEDA implied/express consent with opt-out processes.

• Third-Party Cookies: We disclose third-party cookies (e.g., Google, Facebook) in our Cookie Policy, linking to their privacy policies for transparency, per GDPR and CCPA.

Our cookie consent banner is customizable, user-friendly, and available in multiple languages (e.g., English, French, German), ensuring compliance across Europe and worldwide, per CookieYes, CookieScript, and CookieBot insights.