Privacy Policy
Last updated: November 13, 2026
1. Who we are and how to contact us
This Privacy Policy explains how Outway Ltd. ("OUTWAY", "we", "us") collects, uses and shares your personal information when you visit outway.com, buy from us, or contact us. OUTWAY is the controller of your personal information.
- Email: hello@outway.com
- Mail: OUTWAY, PO Box 5101 Stn 9, Victoria, BC V8R 6N3, Canada
2. Personal information we collect
Information you give us
- Contact details: name, email, phone number, shipping and billing address.
- Order information: items bought, order value, payment confirmation. We do not see or store full card numbers; our payment processors handle them.
- Account information: login details, saved addresses, order history, loyalty points and gift card balances.
- Reviews and other content you post on our site.
- Customer support messages you send us, including photos of returns or defects.
Information collected automatically
- Device and usage data: IP address, browser and device type, pages viewed, items added to cart, and approximate location based on IP address. We collect this with cookies, pixels and similar tools (see Section 6).
- Email and text engagement: whether you open or click our marketing messages.
Information from third parties
- Payment processors confirm whether a payment succeeded and flag possible fraud.
- Shipping carriers send delivery and tracking updates.
- Advertising and social platforms may tell us how our ads perform, in aggregate or linked to your device.
You don't have to give us personal information, but we need your contact, shipping and payment details to fulfil an order.
3. How we use your information and our legal bases
UK and EEA law requires a legal basis for each use of your information. Here is ours:
| What we do | Legal basis (UK/EEA) |
|---|---|
| Process payments, fulfil and ship orders, handle returns, exchanges and warranty claims | Performance of our contract with you |
| Create and manage your account, loyalty points and gift cards | Performance of our contract with you |
| Answer customer support requests | Contract, or our legitimate interest in helping you |
| Send order and shipping notifications | Performance of our contract with you |
| Send marketing emails to past customers about similar products | Legitimate interests (you can opt out any time) |
| Send marketing emails to people who aren't customers, and marketing texts | Your consent |
| Show personalised ads using cookies and pixels | Your consent (given through our cookie banner) |
| Measure site performance with analytics | Legitimate interests in improving our store |
| Detect and prevent fraud and keep our site secure | Legitimate interests in protecting our business and customers |
| Keep tax, accounting and sales records | Legal obligation |
| Enforce our terms, or defend legal claims | Legitimate interests |
Where we rely on legitimate interests, we've weighed them against your rights. You can object at any time (see Section 9).
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Our payment processors use automated fraud screening; if an order is blocked, contact us and a person will review it.
4. Who we share your information with
We don't sell your personal information. We share it only with service providers who help us run our business, under contracts that limit how they can use it:
| Provider | What they do for us |
|---|---|
| Shopify | Hosts our online store and checkout |
| Shopify Payments / PayPal | Process payments and screen for fraud |
| GoBolt | Stores our inventory and packs and ships orders |
| UPS and other carriers | Deliver your order |
| Cin7 | Inventory and order management |
| Xero | Accounting and bookkeeping |
| Klaviyo | Sends our emails |
| Postscript | Sends our text messages (US and Canada only) |
| Okendo | Collect product reviews and run our loyalty program |
| Meta, Google | Measure and show our ads, only with your cookie consent |
We may also share information:
- with professional advisors such as accountants and lawyers;
- when the law requires it, or to protect our rights, customers or others;
- with a buyer or successor if our business is sold or merged.
Shopify's own use of your information is described in Shopify's Consumer Privacy Policy.
5. International transfers
OUTWAY is based in Canada. If you're in the UK or EEA, your information will be transferred to and processed in Canada and the United States, and possibly other countries where our service providers operate.
- Canada: the UK and the EU recognise Canada as providing adequate protection for commercial organisations, so transfers rely on those adequacy decisions.
- United States and other countries: we rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or on the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
Contact us for more detail on the safeguards for a specific transfer.
6. Cookies and similar technologies
We use cookies, pixels and similar tools in three groups:
| Type | What it does | Your choice |
|---|---|---|
| Strictly necessary | Runs the cart, checkout, login and security | Always on; the site can't work without them |
| Analytics | Counts visits and shows how the site is used, so we can improve it | On by default; you can switch them off in cookie settings |
| Marketing | Lets ad platforms such as Meta and Google measure and personalise our ads | Off until you accept them in our cookie banner |
You can change your choices any time through the "Cookie settings" link in our site footer. You can also block cookies in your browser, though parts of the site may stop working. Details of Shopify's cookies are at shopify.com/legal/cookies.
7. Marketing emails and text messages
- Emails: if you buy from us, we may email you about similar products unless you opt out at checkout or later. Anyone else receives marketing emails only after signing up. Every email has an unsubscribe link.
- Text messages: our text program is available in the US and Canada only and requires your consent. Reply STOP to any message to opt out. Our Messaging Privacy Policy explains how text data is handled.
If you opt out of marketing, we'll still send messages about your orders and account.
8. How long we keep your information
We keep personal information only as long as we need it for the purposes above:
| Information | How long we keep it |
|---|---|
| Orders, invoices and payment records | 6 years after the end of the tax year, as tax law requires |
| Customer account | Until you close it, plus 2 years for returns and warranty claims |
| Marketing lists | Until you unsubscribe, or 3 years without engagement |
| Customer support messages | 2 years after the issue is closed |
| Cookie and analytics data | Up to 13 months |
After that, we delete or anonymise it.
9. Your rights
Depending on where you live, you have some or all of these rights. UK and EEA residents have all of them.
- Access: get a copy of the personal information we hold about you.
- Correction: fix information that's wrong or incomplete.
- Deletion: ask us to delete your information.
- Restriction: ask us to limit how we use it.
- Objection: object to uses based on legitimate interests. You can always object to direct marketing, and we'll stop.
- Portability: receive your information in a common format, or have it sent to another company.
- Withdraw consent: where we rely on consent, withdraw it any time. This doesn't affect what we did before.
US state residents (including California) may also have the right to know what we collect and disclose, and to opt out of targeted advertising. We don't sell personal information or knowingly share information of anyone under 16.
To use any right, email hello@outway.com. We may need to verify your identity first. We'll respond within one month, or tell you if we need longer for a complex request. There's no charge in most cases. You won't be treated differently for using your rights.
10. Complaints
If you're unhappy with how we've handled your information, please tell us first at hello@outway.com. We'll acknowledge your complaint within 30 days and let you know the outcome.
You also have the right to complain to a data protection regulator:
- UK: the Information Commissioner's Office (ICO), ico.org.uk, 0303 123 1113.
- EEA: the data protection authority in your country.
- Canada: the Office of the Privacy Commissioner of Canada, priv.gc.ca.
11. Other things to know
Security. We use appropriate technical and organisational measures to protect your information, including encrypted checkout through Shopify. No system is perfectly secure, so please keep your account password private.
Children. Our site isn't intended for children under 16, and we don't knowingly collect their information. If you believe a child has given us information, contact us and we'll delete it.
Reviews. Reviews and other content you post on our site are public.
Third-party links. Our site may link to other websites. Their privacy practices are their own, so please read their policies.
Changes to this policy. We'll post any updates here and change the "Last updated" date. If a change is significant, we'll let you know by email or a notice on our site.