1. Accountability
Rockway is responsible for personal information under its control, including information processed for Rockway by service providers. The legal supplier details and privacy contact appear at the end of this Policy. Questions, access or correction requests, withdrawal of consent, and privacy complaints may be sent through the contact form or the listed privacy email.
2. Information Rockway collects
- Contact and inquiry information: name, email, answers, message content, interests, household or dog information you choose to provide, and related communications.
- Checkout and delivery information: name, email, telephone number where provided, delivery address, address-selection details, and order contact information.
- Order information: products, variants, quantities, prices, discounts, tax, shipping, order and return status, tracking information, and assistance or refund-request records.
- Payment status: payment confirmation, limited transaction identifiers, amount, and refund status. Complete card details are entered in secure hosted fields and are not received or stored by Rockway.
- Technical and security information: IP address or a protected derivative, browser and device information, request and security logs, checkout-attempt identifiers, and necessary cookies or browser storage.
- Preferences: communication choices and any separate marketing consent that may be offered in the future.
3. Why information is used
Rockway uses personal information to answer inquiries; manage waitlist, puppy, training, and guardian-program communications; provide site features; validate addresses; process, authenticate, and support orders and payments; calculate tax; arrange delivery; send transactional updates; review refunds, returns, safety concerns, and customer-assistance requests; prevent fraud and misuse; maintain business, accounting, audit, and legal records; and comply with law. Rockway will identify any materially new purpose and obtain consent where required before using information for that purpose.
4. Consent and choices
Consent is sought in a form appropriate to the sensitivity of the information and the circumstances. Certain information is necessary to answer a request or complete and support an order; without it, Rockway may be unable to provide that service. Consent may be withdrawn subject to legal or contractual restrictions and reasonable notice. Withdrawal does not invalidate earlier lawful processing. A privacy-policy acknowledgement is notice, not a waiver of privacy rights. Promotional email consent, if offered, is separate, optional, and unchecked; it is never required to purchase.
5. Service providers and disclosures
Rockway provides only reasonably necessary information to providers supporting hosting and security, database and media storage, address validation, payment processing, Canadian tax calculation, delivery and tracking, transactional email, customer support, accounting, and professional legal or technical services. Delivery providers and carriers receive the recipient and address details needed to deliver an order. Rockway may disclose information when permitted or required by law, to investigate fraud or security incidents, or in a business transaction subject to appropriate safeguards. Rockway does not sell customer personal information and does not currently use advertising or cross-site tracking tools.
6. Address suggestions
When address suggestions are used, partial address text and provider-generated address identifiers are sent to an address-validation provider so suggestions can be returned and the selected Canadian address can be completed. That provider may retain operational request data for up to 30 days. You may enter the address manually instead, but Rockway still needs a complete delivery address to fulfill an order.
7. Processing outside Canada
Some service providers may process personal information outside Canada. Rockway remains accountable for information handled by a provider on its behalf and uses contractual or other measures intended to provide a comparable level of protection. Information processed in another country may be accessible to courts, law-enforcement, or national-security authorities under that country’s laws.
8. Retention
Personal information is retained only as long as reasonably necessary for the stated purposes and applicable legal, accounting, tax, fraud-prevention, safety, access-request, and dispute requirements. Different records have different minimum and maximum periods. Order and financial records are normally kept longer than an abandoned browser session or draft inquiry. When information is no longer required, Rockway securely destroys, erases, or effectively anonymizes it. Safeguards-breach records are kept for at least the period required by law.
9. Safeguards
Rockway uses administrative, technical, and physical safeguards appropriate to the sensitivity, amount, format, storage, and distribution of information. Measures include managed hosting, protected service connections, limited staff permissions, audit records, server-side secrets, rate limits, provider-hosted card collection, and incident-response processes. No internet or storage system can be guaranteed completely secure.
10. Access and correction
You may make a written request to learn whether Rockway holds personal information about you, obtain access to it, learn how it has been used or disclosed, and request correction of factual inaccuracies. Rockway may verify identity before disclosure. Rockway will respond with due diligence and normally within 30 calendar days, at minimal or no cost, subject to lawful exceptions or extensions. If access is refused, Rockway will explain the lawful reason and available recourse.
11. Cookies and browser storage
The site uses necessary browser storage for the shopping bag, inquiry drafts, Ask Rockway conversation state, checkout continuity, order access, staff authentication, and security. The current site does not activate non-essential advertising or analytics tracking. See the Cookies and Site Storage Policy for the current list and durations.
12. Complaints and policy changes
Contact Rockway’s privacy contact first so the concern can be investigated. If unresolved, you may contact the Office of the Privacy Commissioner of Canada. Rockway will identify the effective date and version of changes, highlight material changes where appropriate, and seek new consent where required for a significant new use or disclosure. A later version does not change the version recorded with an earlier order.