Privacy policy

Last updated: 18 August 2026

This policy explains what personal information Roomlift collects when you use getroomlift.com, why we collect it, who else receives it, and what you can do about it.

1. Who we are

Roomlift, operating from Ontario, Canada. Privacy contact: support@getroomlift.com. We are the controller of the personal information described here.

2. What we collect

Information you give us

When you place an order, our checkout (operated by Shopify) collects your name, email address, shipping and billing address, phone number where you provide it or a carrier requires it, and your order contents.

Payment card details are entered directly into our payment providers' systems. We never see or store your full card number.

If you create an account, we also hold your email address, a password stored securely by Shopify, and your order history. If you email us, we keep the correspondence so we can answer you and refer back to it.

Information collected automatically

Pages visited, referring website, approximate location (city/country level), device and browser type
Cart contents and products viewed

Information from third parties

Advertising platforms (Meta, TikTok) tell us in aggregate that an ad led to a visit or a purchase. Payment providers confirm whether a payment succeeded and may return fraud-risk signals. We do not buy personal information from data brokers.

3. Why we use it

Process and deliver your order — performance of a contract
Send order and shipping notifications — performance of a contract
Answer support requests — legitimate interests
Handle returns and refunds — performance of a contract / legal obligation
Prevent fraud and abusive automated traffic — legitimate interests
Advertising and measurement — legitimate interests, subject to your right to opt out
Keep tax and accounting records — legal obligation

4. Cookies

Key	Set by	Purpose
cart, cart_currency	Shopify	Remembers your cart and currency (essential)
localization	Shopify	Country and language preference (essential)
shopify_client_id	Shopify	Session and store analytics (essential)
_fbp	Meta pixel	Ad measurement and targeting (marketing)
_ttp, ttcsid	TikTok pixel	Ad measurement and targeting (marketing)

Browser storage is also used for cartToken, viewedProducts and referral attribution keys, which keep your cart and tell us which site sent you.

Our advertising pixels run through Shopify's Customer Events framework. Meta and TikTok are configured in both web and server mode, which means some event data is sent from Shopify's servers directly to those platforms rather than from your browser.

You can block or delete cookies in your browser settings. Essential cookies cannot be switched off without breaking the cart and checkout. Advertising cookies load on all visits. If you are in a US state with opt-out rights, see section 9 — the "Your Privacy Choices" link in our footer is the route.

5. Who we share it with

We do not sell your personal information.

Shopify Inc. — all order and account data; hosting and checkout
HomeRoots (fulfilment) — your name, shipping address and order contents, to pick, pack and ship your order
PayPal — payment data you enter with them
Meta Platforms — browsing and conversion events, sent from your browser and from Shopify's servers, for advertising measurement
TikTok — browsing and conversion events, sent from your browser and from Shopify's servers, for advertising measurement
Tax and government authorities, where legally required

6. International transfers

We operate from Canada and sell to the United States. Shopify stores data primarily in the United States and Canada, and the vendors above are largely US-based.

7. How long we keep it

Order and transaction records: 7 years, to meet Canadian tax record-keeping requirements
Support correspondence: 3 years from last contact
Advertising data: per Meta's and TikTok's own retention settings

8. Security

TLS encryption on all traffic to and from the site
Payment card data never reaches our systems — it is handled by PCI-compliant processors
Customer account passwords are stored and hashed by Shopify; we never see them
Administrative access is limited to the owner, with two-factor authentication enabled

No system is perfectly secure. If you believe your data or account has been compromised, email us immediately.

9. Your rights

You may have the right to access the personal information we hold about you, correct anything inaccurate, delete it, opt out of targeted advertising and of the "sharing" of personal information, port your data to another provider, and complain to your regulator — in Canada, the Office of the Privacy Commissioner; in California, the CPPA.

US state privacy rights (including California CCPA/CPRA). You have the right to know what we collect, to delete it, to correct it, to opt out of "sale" or "sharing", and not to be discriminated against for exercising those rights. We do not sell personal information for money. We do share advertising identifiers and event data with Meta and TikTok for cross-context behavioural advertising. To opt out, use the "Your Privacy Choices" link in our footer. Authorised agents may submit requests with proof of authorisation.

To exercise any right, email support@getroomlift.com. We respond within 30 days.

10. Marketing

We send marketing email only if you opt in, and every email carries an unsubscribe link that takes effect immediately. Unsubscribing does not stop transactional messages about an order you have placed.

11. Children

Our products are for adult home use. We do not knowingly collect personal information from anyone under 16. If we discover that we have, we delete it.

12. Data breaches

If a breach occurs that is likely to create a risk to your rights, we will notify the relevant regulator within the timeframe the law requires and notify affected individuals without undue delay where the risk is high. Breach handling is managed through support@getroomlift.com.