LFPO4, operated by CuprBot Labs (“we,” “us,” or “our”), respects your privacy and is committed to protecting personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable US state privacy laws. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit lfpo4.com, place an order, contact us, or otherwise interact with us.
1. Who We Are
LFPO4 — CuprBot Labs
Prince George, British Columbia, Canada
Privacy Contact: support@lfpo4.com
Phone: (778) 347-0999
2. What Personal Information We Collect
Depending on how you interact with us, we may collect:
- Identity and contact information: name, email address, phone number, billing address, shipping address
- Order and account information: order history, products purchased, cart contents, returns, refund history, customer service records
- Payment information: payment method type, billing details, transaction identifiers, and fraud/risk signals. Credit card details are processed by Stripe and are not stored by us directly
- Form submissions: messages you send through contact forms, email signup forms, and any information you include in those submissions
- Device and usage information: IP address, browser type, device type, operating system, pages viewed, referral URLs, timestamps, and site usage events
- Cookie data: cookie IDs, session identifiers, analytics identifiers, and advertising identifiers
- Security information: login attempts, abuse prevention logs, firewall events, and bot detection data
We do not knowingly collect personal information from children under 13.
3. How We Collect Information
- Directly from you: when you place an order, fill out a form, subscribe to emails, or contact us
- Automatically: through cookies, server logs, analytics tools, and security tools when you browse our site
- From service providers: payment processors, fraud-prevention tools, and shipping partners involved in fulfilling your order
4. Why We Use Your Information
- To process orders, payments, shipping, returns, and customer support
- To operate our website, maintain your cart, and provide checkout functionality
- To detect and prevent fraud, abuse, and unauthorized activity
- To communicate about your orders, account, and service-related matters
- To send marketing emails where you have consented
- To understand how visitors use our site and improve performance
- To measure advertising effectiveness, subject to your cookie choices
- To comply with legal obligations (tax, recordkeeping, law enforcement)
5. Services and Third Parties
We use the following third-party services to operate our store:
| Service | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing, fraud prevention | Billing info, transaction details, payment method, device/network data |
| Cloudflare | CDN, security, DDoS protection | IP addresses, request metadata, security logs |
| PostHog (self-hosted proxy) | Site analytics, performance monitoring | Page views, events, device/browser info, session identifiers |
| Meta Pixel (cookie-only) | Ad measurement, attribution | Cookie identifiers, page visit events, conversion data (subject to cookie consent) |
| Fluent Forms | Contact forms, email signup | Name, email, phone, message content as submitted |
| Resend (via FluentSMTP) | Transactional email delivery | Email addresses, email content for order confirmations and support |
| WooCommerce | Store platform, order management | Account, order, and interaction data |
6. Cookies
We use cookies and similar technologies categorized as follows:
- Strictly necessary: cart management, checkout, login, session continuity, security (Cloudflare). These cannot be disabled.
- Analytics: PostHog — used to understand site usage, traffic patterns, and performance. Optional.
- Advertising: Meta Pixel — used to measure ad campaigns and attribution. Optional.
You can manage cookie preferences through your browser settings. Non-essential cookies will not be activated without your consent where required by law.
7. Cross-Border Processing
Our service providers may store or process personal information outside your province or outside Canada, including in the United States. When personal information is processed in another jurisdiction, it may be accessible to courts, law enforcement, or regulatory authorities in accordance with local laws.
8. How Long We Keep Information
We retain personal information only as long as reasonably necessary:
- Order, transaction, and tax records: as required by law (typically 7 years)
- Customer service communications: for support and dispute resolution
- Analytics data: according to configured retention settings
If you withdraw consent or request deletion, we will delete or de-identify information unless we need to retain it for legal, security, or contractual reasons.
9. Security
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including:
- SSL/TLS encryption for all data in transit
- PCI-DSS compliant payment processing through Stripe
- Access controls and role-based permissions
- Cloudflare Web Application Firewall
- Security monitoring and logging
No system is 100% secure. If a breach creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.
10. Your Privacy Rights (Canada)
Under PIPEDA, you have the right to:
- Access personal information we hold about you and learn how it has been used
- Correct inaccurate or incomplete information
- Withdraw consent for optional processing at any time
- Complain to our privacy contact or the Office of the Privacy Commissioner of Canada
To exercise these rights, contact support@lfpo4.com. We will respond within 30 days. We may need to verify your identity before processing your request.
11. Your Privacy Rights (US Residents)
If you reside in a US state with applicable privacy laws (including California, Colorado, Virginia, and others), you may have rights including:
- Right to know what personal data we collect about you
- Right to correct inaccurate data
- Right to delete personal data (subject to exceptions)
- Right to data portability
- Right to opt out of targeted advertising or data sale
- Right not to be discriminated against for exercising privacy rights
We do not sell personal information for money. Some privacy laws define “sale” or “targeted advertising” broadly — our use of advertising cookies may fall within those definitions. You can manage cookie-based preferences through your browser settings or contact us at support@lfpo4.com.
12. Marketing Communications
If you subscribe to our email list, we may send promotional messages about products and offers. You can unsubscribe at any time using the link in our emails. Transactional messages (order confirmations, shipping updates) will still be sent regardless of marketing preferences.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal obligations. Significant changes will be posted on this page with an updated date. Where required by law, we will provide additional notice or obtain consent.
14. Contact Us
For privacy questions, requests, or complaints:
- Email: support@lfpo4.com
- Phone: (778) 347-0999
- Hours: Monday–Friday, 9 AM – 5 PM PST
If your concern is not resolved, you may contact the Office of the Privacy Commissioner of Canada.
Last updated: June 2, 2026