Privacy policy
Privacy Policy
Last updated: July 16, 2026
Who We Are And Scope
This Privacy Policy explains how TonnoMonster Inc., operating as TonnoMonster (“TonnoMonster”, “we”, “us” or “our”), collects, uses, discloses, retains and protects personal information when you visit or use https://tonnomonster.com, purchase or return a product, contact us, submit a review, request fitment or warranty assistance, or otherwise interact with us (collectively, the “Services”).
Our online store is hosted by Shopify. Shopify provides the e-commerce platform that allows us to offer products and services to you.
This Privacy Policy should be read together with our Terms of Service, Shipping Policy and Refund Policy. If a provision of those policies conflicts with this Privacy Policy concerning the handling of personal information, this Privacy Policy will govern to the extent of the conflict.
“Personal information” means information about an identifiable individual, or information that can reasonably be linked to an identifiable individual. It does not include information that has been irreversibly anonymized so that it can no longer reasonably identify an individual.
Privacy Officer
TonnoMonster has designated a Privacy Officer who is responsible for overseeing our privacy practices and responding to privacy questions, requests and complaints.
Privacy Officer
TonnoMonster Inc.
1450 Victoria St E, Unit 3
Whitby, Ontario L1N 0N7
Canada
Email: info@tonnomonster.com
Phone: (416) 828-4647
Please use the subject line “Privacy Request” when contacting us by email.
Personal Information We Collect
The information we collect depends on how you interact with the Services. It may include:
- Contact and identity information, such as your name, email address, telephone number, billing address, shipping address and account username.
- Order and transaction information, such as products viewed or purchased, selected variants, order history, returns, exchanges, refunds, discounts, delivery details and transaction records.
- Payment information. Payment information is generally collected and processed directly by Shopify Payments or another authorized payment provider. We ordinarily receive limited payment-related information, such as payment status, payment method type, billing details and transaction identifiers, rather than complete payment-card numbers or security codes.
- Account information, such as login credentials, account preferences and saved addresses.
- Vehicle, fitment and warranty information that you choose to provide, such as vehicle year, make, model, trim, cab configuration, bed length, photographs, installation details, serial numbers, part numbers or a vehicle identification number where reasonably required to assess compatibility or a claim.
- Communications and customer-service information, such as messages, emails, telephone inquiries, chat transcripts, photographs, documents and information submitted in connection with an order, return, warranty request, wholesale inquiry or other support matter.
- Reviews and user-submitted content, such as ratings, comments, photographs or other material you choose to submit.
- Device and technical information, such as Internet Protocol address, browser type, operating system, device identifiers, language, referring pages, network information and approximate location derived from an IP address.
- Website activity and preference information, such as pages viewed, searches, clicks, shopping-cart activity, session information, cookie identifiers, marketing preferences and interactions with emails or advertisements.
- Other information you voluntarily provide to us.
We seek to limit collection to information that is reasonably necessary for the purposes described in this Privacy Policy or otherwise identified to you at or before the time of collection.
How We Collect Personal Information
We may collect personal information:
- directly from you, including when you place an order, create an account, subscribe to communications, request assistance, submit a return or warranty request, participate in a promotion or communicate with us;
- automatically when you use the Services, through cookies, pixels, local storage, log files and similar technologies;
- from Shopify and service providers that support our store, payments, fraud prevention, hosting, analytics, communications, shipping, reviews, advertising and customer support;
- from carriers or delivery partners in connection with shipment tracking, delivery and claims;
- from business or marketing partners where you have provided consent or where collection is otherwise permitted by law; and
- from publicly available sources where permitted by law.
How We Use Personal Information
We may use personal information to:
- process, confirm, fulfill, deliver and administer orders;
- process payments, refunds, returns, exchanges, cancellations and warranty claims;
- verify product compatibility and provide fitment, installation and product support;
- create and manage customer accounts and remember customer preferences;
- communicate about orders, deliveries, product notices, customer-service matters, policy changes and other service-related issues;
- operate, maintain, troubleshoot, secure and improve the Services;
- detect, investigate and prevent fraud, unauthorized transactions, security incidents, abuse and other unlawful or harmful activity;
- analyze website use, store performance and customer experience;
- personalize website content and product recommendations;
- send marketing communications where we have the consent or other lawful authority required to do so;
- measure and improve advertising and, where permitted and subject to your choices, display advertising based on interactions with our Services;
- establish, exercise or defend legal claims, enforce our agreements and protect our rights, customers, employees and property;
- comply with tax, accounting, product-safety, consumer-protection, privacy, law-enforcement and other legal obligations; and
- carry out any other purpose identified to you at or before collection, or for which you provide consent.
Consent And Your Choices
We obtain consent where required by applicable law. The form of consent may depend on the sensitivity of the information and the reasonable expectations of the individual.
Some uses of information are necessary to provide a product or service that you request, such as processing payment, delivering an order, responding to a warranty claim or preventing fraud. If you do not provide information reasonably required for those purposes, we may be unable to complete the requested transaction or service.
You may withdraw consent to optional uses of personal information, subject to reasonable notice and any legal or contractual restrictions. Withdrawal will not affect processing that occurred before the withdrawal or processing that is otherwise permitted or required by law.
You can withdraw consent for promotional email or text messages as described in Section 14. You may also manage available cookie and privacy choices as described in Section 7.
Cookies, Analytics And Advertising Technologies
We and our service providers may use cookies, pixels, software development kits, local storage and similar technologies to operate the Services and understand how they are used.
These technologies may include:
- Essential technologies, which are required for functions such as shopping-cart operation, checkout, account access, payment security, fraud prevention, load balancing and privacy settings.
- Functional technologies, which remember choices such as language, location, login status or other preferences.
- Analytics technologies, which help us understand traffic, website performance, navigation patterns and the effectiveness of store features.
- Advertising technologies, which may help measure campaigns, limit repeated advertisements and, where permitted, support advertising based on browsing activity or interests.
Where required by law, we seek consent before using non-essential analytics or advertising technologies. You may be able to manage these technologies through a cookie banner, privacy-settings link or other preference tool displayed on the Services. You can also adjust browser settings to block or delete cookies, although doing so may affect website functionality.
Some advertising or analytics providers may collect information about activity across different websites or services. We do not sell personal information for monetary consideration. Depending on the advertising features enabled on the Services and your consent choices, limited identifiers and website-activity information may be disclosed to advertising or analytics providers for measurement or personalized advertising.
Our actual use of cookies and similar technologies depends on the Shopify settings, applications and integrations that are enabled from time to time. We update this Privacy Policy when material changes to those practices require notice.
When We Disclose Personal Information
We may disclose personal information to:
- Shopify, which hosts and supports our online store;
- payment processors, banks and fraud-prevention providers;
- shipping carriers, fulfillment providers and delivery partners;
- providers of cloud hosting, website functionality, cybersecurity, data storage, technical support and business systems;
- providers of customer support, chat, email, reviews, analytics and marketing services;
- professional advisers, insurers, auditors and financial institutions;
- government, law-enforcement, regulatory or judicial authorities where disclosure is required or permitted by law;
- a purchaser, investor, lender or adviser in connection with a proposed or completed merger, financing, reorganization, sale of assets or other business transaction, subject to appropriate confidentiality protections; and
- another person where you direct us to disclose the information or provide consent.
Service providers are authorized to process personal information only for the services they provide to us or as otherwise permitted by law. We use contractual and other reasonable measures to require appropriate protection of personal information.
We do not disclose personal information to third parties for their own unrelated marketing purposes without the consent required by law.
Shopify
The Services are hosted by Shopify. Shopify processes personal information to provide the store platform, checkout, payments, security, fraud detection and other commerce services.
In some circumstances, Shopify processes information on our behalf. In other circumstances, including when you use Shopify consumer services such as Shop or Shop Pay, Shopify may process information for its own purposes under its own privacy terms.
You can learn more through:
Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers
Shopify Privacy Portal:
International And Cross-Border Processing
TonnoMonster is based in Canada. Shopify and some of our service providers may process or store personal information in Canada, the United States or other jurisdictions.
Information processed outside your province, territory or country may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies or other authorities in accordance with those laws.
Where personal information is transferred to a service provider for processing, we remain accountable for the information under our control and use contractual, organizational and technical measures appropriate to the nature and sensitivity of the information.
You may contact our Privacy Officer for additional information about our use of service providers outside Canada.
Retention And Destruction
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to complete transactions, provide support, administer warranties, maintain appropriate business records, prevent fraud, resolve disputes and comply with tax, accounting, product-safety and other legal obligations.
Retention periods vary depending on the nature of the information, its sensitivity, the reason it was collected and applicable legal requirements.
When information is no longer required, we take reasonable steps to securely delete, destroy or irreversibly anonymize it, subject to legal and technical limitations.
Security
We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the personal information under our control. These may include access controls, authentication, encryption in transit where supported, secure payment processing, employee or contractor confidentiality obligations, monitoring and service-provider controls.
No security system or method of transmission is completely secure. We cannot guarantee absolute security. Please do not send payment-card numbers, passwords or other highly sensitive information through ordinary email or unsecured communication channels.
If you believe your account or personal information may have been compromised, contact us promptly.
Children
The Services are intended for adults and are not directed to children under the age of majority in their province, territory, state or country of residence.
We do not knowingly collect personal information from children without the consent or authorization required by law. If you are a parent or legal guardian and believe that a child has provided personal information to us, contact our Privacy Officer so that we can review and, where appropriate, delete it.
Marketing Communications
We may send promotional email or text messages only where we have the consent or other lawful authority required by applicable law.
You can unsubscribe from promotional emails by using the unsubscribe link included in the message. You may withdraw consent for text messages by following the instructions in the message or contacting us.
We will process unsubscribe requests within the time required by applicable law. Unsubscribing from marketing will not prevent us from sending non-promotional communications that are necessary for an order, account, warranty request, security matter or other existing business relationship.
Your Privacy Rights
Depending on where you reside and the law that applies, you may have rights to:
- request access to personal information that we hold about you;
- request correction of inaccurate or incomplete personal information;
- withdraw consent, subject to legal and contractual restrictions;
- request deletion or de-indexing in circumstances provided by law;
- request information about the use and disclosure of your personal information;
- request a copy of certain computerized personal information in a structured, commonly used technological format where the applicable law provides a portability right; and
- complain about our handling of personal information.
Privacy rights are not absolute. We may need to verify your identity and may refuse or limit a request where permitted or required by law. We will explain any refusal as required by applicable law.
To submit a request, email info@tonnomonster.com with the subject line “Privacy Request” or write to the Privacy Officer at the address in Section 2. Please do not send unnecessary copies of identity documents. If identity verification is required, we will request only the information reasonably necessary for that purpose.
We will respond within the period required by applicable law.
Automated Tools
We and our service providers may use automated tools to assist with fraud detection, security, analytics, product recommendations and advertising measurement.
We do not intend to make decisions that produce legal or similarly significant effects on an individual solely through automated processing, except where permitted by law and accompanied by any notice and rights required by applicable law.
Third-Party Websites And Services
The Services may contain links to third-party websites, applications, social-media services or other platforms that we do not control.
This Privacy Policy does not apply to the independent privacy practices of those third parties. Review their privacy policies before providing personal information. A link does not mean that we endorse the third party or accept responsibility for its privacy or security practices.
Complaints And Regulatory Authorities
Please direct privacy concerns to our Privacy Officer first so that we have an opportunity to investigate and respond.
If you are not satisfied with our response, you may have the right to contact the privacy regulator with jurisdiction over the matter, including:
Office of the Privacy Commissioner of Canada:
Commission d’accès à l’information du Québec, where Quebec law applies:
A provincial privacy regulator may apply in another province depending on the circumstances.
Changes To This Privacy Policy
We may update this Privacy Policy to reflect changes to our practices, technologies, service providers or legal obligations.
We will post the revised version on the Services and update the “Last updated” date. Where required by law, we will provide additional notice or obtain consent before a material change takes effect.
Contact Us
For privacy questions, requests or complaints, contact:
Privacy Officer
TonnoMonster Inc.
1450 Victoria St E, Unit 3
Whitby, Ontario L1N 0N7
Canada
Email: info@tonnomonster.com
Phone: (416) 828-4647