Privacy policy

Last updated: 6-Sep-26

CrackerJack Stadium ("we," "us," or "our") operates the online store at crackerjackstadium.com and our physical retail location (collectively, the "Services"). Our store is powered by Shopify. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website, make a purchase, or otherwise interact with us.

We are committed to protecting your privacy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL). By using our Services, you acknowledge that you have read and understood this Privacy Policy.

Accountability and Privacy Contact

CrackerJack Stadium is responsible for the personal information under our control. Our designated privacy contact person is:

If you have questions about our privacy practices, wish to exercise any of your rights, or want to make a complaint, please contact us using the information above.

Personal Information We Collect

We collect personal information that is necessary to provide you with our products and services. The types of personal information we may collect include:

• Contact information — your name, email address, phone number, billing address, and shipping address.
• Payment information — credit card or debit card details, and transaction information. Payment processing is handled by Shopify Payments and third-party payment processors. We do not store your full credit card number on our systems.
• Account information — if you create an account, your username, password, and account preferences.
• Order and transaction information — the products you view, add to your cart, purchase, return, or exchange, and your order history.
• Communications — information you provide when you contact us for customer support, submit a product inquiry, or otherwise communicate with us.
• Device and usage information — your IP address, browser type, operating system, referring URLs, and information about how you navigate and interact with our website. This information is collected automatically through cookies and similar technologies.

How We Collect Personal Information

We collect personal information from the following sources:

• Directly from you — when you create an account, place an order, contact us, sign up for our mailing list, or visit our store in person.
• Automatically — through cookies, web beacons, and similar technologies when you visit our website. See the Cookies and Tracking Technologies section below for details.
• From our service providers — including Shopify, payment processors, and shipping carriers, when they process information on our behalf.

How We Use Your Personal Information

We use your personal information only for the purposes for which it was collected or for purposes that are consistent with those purposes. Specifically, we use your personal information to:

• Fulfill orders and process transactions — including processing payments, arranging shipping, managing returns and exchanges, and sending order confirmations and updates.
• Manage your account — including maintaining your account information, order history, and preferences.
• Provide customer support — including responding to your inquiries, resolving issues, and communicating with you about your orders.
• Improve our Services — including analyzing how our website is used, identifying trends, and improving the shopping experience.
• Send marketing communications — with your express consent, we may send you promotional emails about new products, sales, and events. You may withdraw your consent at any time (see Consent and Your Choices below).
• Prevent fraud and ensure security — including detecting and preventing fraudulent transactions, monitoring for suspicious activity, and protecting the security of our website and systems.
• Comply with legal obligations — including responding to lawful requests from law enforcement or government agencies, and meeting our obligations under applicable law.

Consent and Your Choices

We obtain your consent before collecting, using, or disclosing your personal information, except where permitted or required by law. Consent may be express (for example, when you opt in to our mailing list) or implied (for example, when you provide your shipping address to complete a purchase).

Marketing communications. We only send you promotional emails or text messages if you have given us your express consent, such as by checking an opt-in box at checkout or signing up through our website. You can withdraw your consent at any time by clicking the "Unsubscribe" link in any marketing email, or by contacting us at service@crackerjackstadium.com. We will process your withdrawal promptly. Even after you withdraw consent for marketing communications, we may still send you transactional messages related to your orders, account, or customer service inquiries.

Other uses. You may withdraw your consent for other uses of your personal information at any time by contacting us, subject to legal or contractual restrictions. We will inform you of the implications of withdrawing consent (for example, if you withdraw consent for us to use your shipping address, we will be unable to ship orders to you).

Disclosure of Personal Information

We may share your personal information with third parties only in the following circumstances:

• Service providers — we share information with companies that perform services on our behalf, including Shopify (our ecommerce platform), payment processors, shipping carriers, and email service providers. These service providers are only permitted to use your information to perform services for us and are required to protect your information.
• Legal requirements — we may disclose your information if required to do so by law, in response to a valid legal process (such as a court order or subpoena), or to protect our rights, property, or safety, or the rights, property, or safety of others.
• Business transfers — if CrackerJack Stadium is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
• With your consent — we may share your information with third parties when you direct us to do so or give your consent.

We do not sell your personal information.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to provide and improve the Services. Cookies are small data files stored on your device when you visit a website.

• Essential cookies — these are necessary for the website to function and cannot be disabled. They enable core features like shopping cart functionality, account authentication, and secure checkout.
• Analytics cookies — these help us understand how visitors use our website, which pages are most popular, and how visitors navigate the site. We use this information to improve the website experience. These cookies are placed by Shopify and may include third-party analytics services.
• Marketing cookies — if you have consented to receive marketing communications, we may use cookies to deliver relevant advertising and measure the effectiveness of our marketing campaigns.

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when a cookie is being sent. Please note that disabling essential cookies may prevent you from using certain features of our website, such as the shopping cart and checkout.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by law. In general:

• Order and transaction records are retained for a minimum of seven years to comply with Canadian tax and business record-keeping requirements.
• Account information is retained for as long as your account is active. If you request account deletion, we will delete your personal information within a reasonable timeframe, subject to our legal obligations.
• Marketing consent records are retained for as long as you remain subscribed, plus a reasonable period afterward to demonstrate compliance with CASL.
• Customer support communications are retained for up to three years after the issue is resolved.

When personal information is no longer needed, we will securely delete or anonymize it.

Security

We take reasonable steps to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption of payment information during transmission, secure access controls on our systems, and use of Shopify's security infrastructure.

However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, and we encourage you to take steps to protect your own information, such as using strong passwords and keeping your account credentials confidential.

Breach Notification

In the event of a breach of security safeguards involving your personal information that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as soon as feasible, in accordance with PIPEDA. We will also notify any other organization or government institution that may be able to reduce the risk of harm. We maintain records of all breaches of security safeguards as required by law.

Your Rights Under PIPEDA

Under PIPEDA, you have the following rights with respect to your personal information:

• Right to access — you may request access to the personal information we hold about you. We will respond to your request within 30 days.
• Right to correction — you may request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to withdraw consent — you may withdraw your consent for us to collect, use, or disclose your personal information at any time, subject to legal or contractual restrictions.
• Right to complain — if you are not satisfied with our response to your request or have concerns about our privacy practices, you may file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

To exercise any of these rights, please contact us using the contact information provided above. We may need to verify your identity before processing your request.

Relationship with Shopify

Our store is hosted on Shopify, which collects and processes personal information about your use of our website in order to provide and improve its platform services. Information you submit through our website is transmitted to and processed by Shopify, which may store data on servers located outside of Canada, including in the United States.

For information about how Shopify handles your personal information, please visit Shopify's privacy policy. You may also exercise certain rights with respect to information processed by Shopify at privacy.shopify.com.

International Data Transfers

Your personal information may be transferred to and processed in countries other than Canada, including the United States, where Shopify and our service providers maintain servers. When your information is transferred outside of Canada, it may be subject to the laws of those jurisdictions, which may differ from Canadian law. We take steps to ensure that your information receives an adequate level of protection in accordance with PIPEDA, regardless of where it is processed.

Third-Party Links

Our website may contain links to third-party websites that are not operated by us. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party websites you visit.

Children

Our Services are not directed to children under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on our website and update the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, or if you wish to exercise any of your rights, please contact us:

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada:
Website: www.priv.gc.ca
Phone: 1-800-282-1376