Privacy Policy
Last updated: 6 October 2026
This policy explains what personal information we collect through sisupplies.ca, why we collect it, who we share it with and what choices you have. We have tried to keep it short and plain. If anything is unclear, ask us. Our contact details are at the end.
1. Who we are
This website is run by 1668702 Ontario Inc. operating as SISupplies (“SISupplies”, “we”, “us”).
- Address: 1565 Britannia Rd E, Unit 27, Mississauga, ON L4W 2V6
- Phone: 905-279-9689
- Email: info@sisupplies.ca
- Hours: Monday to Friday, 10:00 am to 6:00 pm
The person responsible for the protection of personal information at SISupplies is Talal Abdulazim, Privacy Officer. You can reach the Privacy Officer at info@sisupplies.ca or 905-279-9689.
2. We sell to businesses only
SISupplies sells to businesses, not to consumers. Most of what we collect is business information, such as a company name and a business address. Some of it is still personal information because it is about a person, for example your name, your work email or your phone number. This policy covers that information.
3. What we collect
| When | What we collect |
|---|---|
| You request an account | Your name, email address, password, company name, business address, phone number, website and type of business. |
| You place an order | Your name, company, billing and shipping addresses, phone number, email address, what you ordered and how it is delivered. Card payments are handled by Stripe. We never see or store your full card number. |
| You apply for credit terms | Business details, the names of the people allowed to buy on the account, and business and credit references. We may check these with banks, suppliers and credit agencies, as set out in our Terms & Conditions. |
| You send an enquiry | Your name, email address, phone number, postal code and your message. This applies to the contact form and the enquiry forms on product pages. |
| You sign up for our newsletter | Your email address and the date you signed up. |
| You write a product review | Your name, email address and the review. |
| You use the website | Technical information such as your IP address, browser and device type, the pages you view and how you reached us. We also keep a record of shopping carts, including carts that were not checked out. See sections 5 and 6. |
We collect this information from you directly, or from your use of the website. For credit applications we also collect information from the references you give us and from credit agencies.
4. Why we collect it
We use personal information only for the reasons below.
- To review account requests and confirm that you are a business.
- To show you your prices, take and deliver your orders, and send order and account emails.
- To issue invoices, keep account balances and collect payment.
- To review credit applications and manage credit accounts.
- To answer your questions and give customer service.
- To help our staff answer questions faster and more consistently, with the help of AI tools. See “AI assistance” in section 8.
- To send marketing emails, if you have agreed to them or the law otherwise allows it. See section 11.
- To understand how the website is used and to fix problems, if you have accepted cookies. See section 5.
- To keep the website secure and prevent fraud.
- To meet our legal, tax and accounting duties.
We do not sell personal information. We do not use it to make decisions about you by automated means alone.
5. Cookies and tracking
The website uses a small number of necessary cookies to keep you signed in, hold your cart and protect the site. These are always on.
Analytics and session recording are off until you choose “Accept Cookies” on our cookie notice. If you choose “Accept Necessary Cookies”, they stay off. You can change your choice at any time with the “Cookie settings” link further down in this section.
If you accept cookies, we use Google Analytics to count visits and see which pages are used.
When you place an order, WooCommerce order attribution cookies record how you reached our website, for example from a search engine or a link, and attach that to the order. These are set only if you accept cookies.
What cookies are
A cookie is a small text file that a website saves in your browser. It lets the website remember something between pages or between visits, such as the fact that you are signed in or what is in your cart. Some cookies are set by us. Others are set by companies whose services we use, such as Google or Microsoft. “Similar tools” means scripts that do the same kind of job without a cookie, such as a session recording script.
Your choice
The first time you visit, a cookie notice gives you two buttons.
- Accept Cookies: turns on analytics and session recording as well as the necessary cookies.
- Accept Necessary Cookies: only the necessary cookies are used. Analytics and session recording stay off.
Analytics and session recording do not run until you choose “Accept Cookies”.
How to change your choice
- Select Cookie settings here. The notice opens again and you can choose differently.
- You can also delete or block cookies in your browser settings. If you block the necessary cookies, you will not be able to sign in, see your prices or check out.
We remember your choice for one year. After that we ask again.
The cookies we use
Necessary (always on)
The website cannot work without these. They do not need consent.
| Name | Set by | Purpose | How long it lasts |
|---|---|---|---|
| wp_woocommerce_session_* | SISupplies (WooCommerce) | Keeps your cart and your session as you move between pages. | 2 days |
| woocommerce_cart_hash, woocommerce_items_in_cart | SISupplies (WooCommerce) | Tell the website when your cart has changed. Set once you add something to the cart. | Session (until you close your browser) |
| wordpress_logged_in_*, wordpress_sec_* | SISupplies (WordPress) | Keep you signed in to your account so you can see your prices and orders. | Until you close your browser or sign out; a sign-in ends by itself after 2 days |
| wordpress_test_cookie | SISupplies (WordPress) | Checks that your browser accepts cookies, on the sign-in page. | Session |
| sis_cookie_consent | SISupplies | Remembers the choice you made on the cookie notice. | 1 year |
| sis_cookie_snooze | SISupplies | Hides the cookie notice for a short time if you close it without choosing. | 5 minutes |
| __cf_bm | Cloudflare | Tells real visitors from automated traffic, to protect the website. | 30 minutes |
| __stripe_mid, __stripe_sid | Stripe | Fraud prevention for card payments. Set on the cart and checkout pages only. | __stripe_mid: up to 1 year. __stripe_sid: 30 minutes |
Analytics (only if you choose “Accept Cookies”)
| Name | Set by | Purpose | How long it lasts |
|---|---|---|---|
| _ga | Google Analytics | Tells one visitor from another so we can count visits. | Up to 13 months |
| _ga_* | Google Analytics | Keeps track of a visit, so we can see which pages are used. | Up to 13 months |
| _clck | Microsoft Clarity | Recognizes a returning browser so visits can be linked for session recording and heatmaps. | Up to 1 year |
| _clsk | Microsoft Clarity | Joins the pages you view in one visit into a single recording. | 1 day |
| Other Microsoft cookies such as CLID and MUID | Microsoft (clarity.ms, bing.com) | Microsoft may set these on its own addresses when Clarity runs. | Up to 13 months |
Microsoft Clarity records clicks, scrolling, mouse movement and the pages viewed, and can replay a visit. It may also run the shopping assistant chat. See section 6 of our Privacy Policy.
Order source
These are set only if you choose “Accept Cookies”.
| Name | Set by | Purpose | How long it lasts |
|---|---|---|---|
| sbjs_* (seven cookies, for example sbjs_first, sbjs_current, sbjs_session, sbjs_udata) | SISupplies (WooCommerce order attribution) | Remember how you reached our website, for example from a search engine, an advertisement or a link, and the first page you saw. If you place an order, this is saved with the order so we know which sources bring in business. They are not needed for the website to work. | Until you close your browser (sbjs_session: 30 minutes) |
Other content from outside companies
The map on our contact page comes from Google Maps. When you open that page, Google receives your IP address and may set its own cookies. A few page scripts are loaded from outside hosts, which also see your IP address when the page loads.
If we add or remove a tool, we will update this section and the date at the top.
6. Session recording and the shopping assistant
If you accept cookies, we use Microsoft Clarity to see how visitors use our website. It records clicks, scrolling, mouse movement and the pages viewed. It can replay a visit so we can find and fix problems. Text you type into forms on our website, other than passwords and card details, may be visible to us in these recordings.
Microsoft Clarity may also run the shopping assistant chat on our website. To answer questions it can read our product catalogue and, for signed-in customers, cart and order details. It cannot see prices. What you type into the chat is processed by Microsoft.
Microsoft handles this information on our behalf and may store it outside Canada. See Microsoft’s privacy statement at microsoft.com/privacy.
7. Carts
We keep a record of shopping carts, including unfinished ones, to help with orders and customer support. If you type your email address at checkout, it may be saved with the cart before the order is placed. We may email you a reminder about an unfinished cart.
8. Who we share it with
We share personal information with the service providers that help us run the business. Each one gets only what it needs to do its job.
| Provider | What it does for us | What it receives |
|---|---|---|
| Stripe | Card payments | Card details, name, billing address, order amount. If you save a card, Stripe keeps it, not us. |
| Intuit QuickBooks Online | Invoices, account and credit balances | Customer, order and invoice records |
| ClickShip, WooCommerce Shipping and the carriers | Shipping rates, labels and delivery | Name, company, delivery address, phone number |
| Google (Analytics, Maps) | Website statistics, and the map on our contact page | Usage data and IP address. Analytics only if you accept cookies. |
| Microsoft (Clarity) | Session recording, heatmaps and the shopping assistant | See section 6. Only if you accept cookies. |
| EmailOctopus | Sending marketing emails | Email address and sign-up date |
| Namecheap Private Email | Sending order and account emails | Email address and the content of the email |
| Cloudflare | Website security and speed | All traffic to the website passes through it, including IP addresses |
| Anthropic (Claude) | AI assistance for our staff: suggested answers and draft replies | The text of emails and messages you send us and our replies |
| Google (Firebase) | Hosting for the internal tools our staff use | Customer contact details, the text of emails, and the knowledge base described below |
| Cloudways | Website hosting | The website database, including accounts and orders |
AI assistance. We use AI tools to help our staff answer questions. The tools read the emails and messages you send us and the replies we sent, and build an internal knowledge base of product advice and answers to common questions. That knowledge base does not hold customer names, email addresses or phone numbers, and it does not hold prices. The AI may suggest an answer or draft a reply; a member of our staff always reads it and decides what to send. The AI does not send messages to you by itself and does not make decisions about your account.
If you apply for credit terms, we share your business details with the banks, suppliers and credit agencies we ask for references.
We may also share information when the law requires it, to collect a debt, or as part of a sale or merger of the business. In that last case the buyer must keep protecting the information as this policy describes.
9. Information stored outside Canada and Quebec
Some of these providers store or process information outside Quebec and outside Canada, mainly in the United States. Our website and its database are hosted on a server in Toronto, Ontario. While it is there, it is subject to the laws of that place, and courts or authorities there may be able to access it. We use well-known providers and share only what each one needs.
10. How long we keep it
- Account and order records: for as long as your account is open, and after that for as long as tax and accounting law requires. This is generally seven years.
- Credit applications and references: with your account records, on the same terms.
- Enquiries: until you ask us to remove them.
- Newsletter sign-ups: until you unsubscribe or ask us to remove you.
- Analytics and session recordings: for the periods set by Google and Microsoft. Our section 5, Cookies and tracking gives the cookie lifetimes.
When we no longer need information, we delete it or make it anonymous.
11. Marketing emails
We send marketing emails only to people who have agreed to receive them, or where Canada’s anti-spam law (CASL) otherwise allows it, for example to existing customers. We send them through EmailOctopus. Every marketing email says who we are, gives our address and has an unsubscribe link. You can unsubscribe at any time. We act on it within 10 business days.
Order and account emails, such as order confirmations and invoices, are not marketing. We send them because they are part of serving your account.
12. How we protect it
- The website uses an encrypted connection (HTTPS).
- Passwords are stored in a scrambled form that we cannot read.
- Card payments go straight to Stripe. Full card numbers never reach our server.
- Prices and account details are shown only to signed-in, approved accounts.
- Only staff who need customer information for their work can see it.
No system is perfectly secure. If a security incident involving your personal information creates a real risk of serious harm, we will tell you and the privacy regulators, as the law requires.
13. Your rights
You can ask us to:
- show you the personal information we hold about you;
- correct information that is wrong or out of date;
- delete information we no longer need to keep by law;
- stop using your information for marketing, or withdraw any other consent you gave us;
- give you a copy of the information you provided to us in a common electronic format.
To make a request, contact our Privacy Officer using the details in section 16. We may need to confirm who you are first. We answer within 30 days. There is no charge.
If you withdraw consent, or ask us to delete information, we may no longer be able to serve your account. We must keep some records, such as invoices, for as long as the law requires.
If you are not satisfied with our answer, you can complain to:
- the Office of the Privacy Commissioner of Canada, priv.gc.ca;
- in Quebec, the Commission d’accès à l’information du Québec, cai.gouv.qc.ca.
14. Links to other websites
Our website has links to other websites, such as manufacturers. We are not responsible for how those websites handle your information. Please read their policies.
15. Changes to this policy
We may update this policy when our practices or the law change. We will post the new version on this page and change the “Last updated” date at the top. If a change is important, we will also tell customers by email or with a notice on the website.
16. Contact
Questions, requests and complaints about privacy go to:
Talal Abdulazim, Privacy Officer
1668702 Ontario Inc. operating as SISupplies
1565 Britannia Rd E, Unit 27, Mississauga, ON L4W 2V6
Phone: 905-279-9689
Email: info@sisupplies.ca
Monday to Friday, 10:00 am to 6:00 pm