Privacy Policy
How we collect, use, and protect your information
takes your privacy seriously. This policy explains what information we collect when you use chinatownheritagepost.com or our in-store services, why we collect it, and what we do with it.
What We Collect
When you rent a mailbox — your name, address, phone number, email, and a copy of government-issued photo ID. This is required by Canada Post regulations for all mailbox agreements.
When you make a purchase — your name, email, billing and shipping address, and payment details. We need this to process your order.
When you contact us — your name, email, and whatever you include in your message.
When you browse the site — standard analytics data including IP address, browser type, pages visited, and time on site. We use this to understand traffic and improve the site.
When you use our chat assistant — your messages are processed to provide support. Conversations may be reviewed to improve service quality.
How We Use Your Information
We use what we collect to process orders, manage mailbox rentals, respond to inquiries, send service-related communications, detect fraud, improve the site, and meet legal obligations. We do not sell, rent, or trade your personal information.
Who We Share It With
We share your information only when necessary: with Canada Post (for mailbox agreements and postal services), payment processors (for transactions), our email platform (for service communications), and analytics providers (anonymized data). All providers are bound by data processing agreements.
Cookies
We use essential cookies (login, cart, checkout), analytics cookies (traffic patterns), and preference cookies (light/dark mode). Most browsers let you control cookies through settings. Blocking essential cookies will break parts of the site.
Data Retention
Mailbox rental records are kept for the duration of the rental plus seven years for legal and tax purposes. Order data is retained for seven years. Account data is kept as long as your account is active. Analytics data is retained in aggregated form.
Your Rights
You may have the right to access, correct, delete, or restrict your personal data. To exercise these rights, email . We respond within 30 days.
Security
We use SSL/TLS encryption on every page. Payment processing is handled by PCI-compliant providers. Mailbox rental ID documents are stored securely with restricted access. We do not store full credit card numbers.
Children
This site is not directed at anyone under 16. We do not knowingly collect information from children.
Changes
We may update this policy as our business or the law changes. Updates take effect when posted.
Contact
Questions?
If anything here doesn't make sense, ask us — we'll explain it plainly.