Effective: October 13, 2026
LOUD BREAKS is operated by Philip Marsh, sole proprietor, operating Cedarsmith under the LOUD BREAKS brand, in Ottawa, Ontario, Canada. Our mailing address is 411 Country Glen Way, Kanata, Ontario, K2T 0H9, Canada. For privacy questions or requests, contact office@cedarsmith.com.
This policy explains information handled through our public website, direct customer communications and WordPress/WooCommerce store. The store is currently being prepared for launch. The purchasing practices below apply when those features are available; publishing this policy does not open the store or activate optional services.
1. Information we use and why
When you contact us, create an account or place an order, we use the information you provide to respond, manage your account, fulfil purchases and maintain business records. This can include your name, email, contact details, billing and shipping addresses, order number, selected breaks and lucky spots or teams, amounts, payment status, transaction references and support correspondence.
We use selection and order records to associate purchases with the correct break, protect inventory, allocate cards and resolve order questions. Payment verification and shipping records support fulfilment and accounting.
Website services may process technical information, such as IP addresses, browser information and security logs, to deliver pages and protect the service. Cookies support functions such as sign-in and keeping a shopping cart. The store also loads WooCommerce order-attribution components that can associate referral/source information with purchases, and Hostinger service components. Links to third-party sites are distinct from purchases made directly with LOUD BREAKS.
2. Payments and service providers
Our WordPress/WooCommerce website is hosted by Hostinger. Hostinger and WooCommerce process website information as needed to provide hosting and store functions.
PayPal processes PayPal payments under its own privacy practices. Manual Interac e-Transfers are initiated by you through your bank; we use transfer information to match and verify your payment. We do not ask you to enter your banking password on our website or send it to us.
Order and contact information is shared with service providers as necessary to operate these functions, including Google for email and shipping providers for delivery. Services you visit through links, including YouTube and Whatnot, have their own privacy policies. Information may be processed outside Canada by our providers and be subject to the laws of those locations.
3. Gmail, Google API access and FluentSMTP
LOUD BREAKS Email is our owner-authorized application for sending store email through Gmail using the FluentSMTP WordPress plugin. Only the store owner connects the sending mailbox. Customers do not need a Google account or Google sign-in to buy from us or receive email.
This integration is used for transactional and service messages: order acknowledgements, payment-status messages, account messages, customer support and administrator order alerts. Messages may contain recipient addresses, names, order and break identifiers, selected lucky spots or teams, totals, shipping details, payment status and instructions relevant to the message. Google processes the recipient, message and attachment information needed to send these emails and returns delivery/API results to the website.
The current integration code requests Gmail’s send-email permission (gmail.send). It does not implement inbox-reading or mailbox-deletion functions. OAuth authorization credentials are stored in the site’s protected configuration/database so the owner-authorized connection can continue sending without storing the owner’s Google password. FluentSMTP’s existing authorization flow uses its hosted callback to return the connection to our WordPress administrator. OAuth credentials are not customer-facing content.
FluentSMTP stores delivery records on our hosting, which can include sender and recipient addresses, subject, message body, timestamp, delivery status and provider response. Its current log-retention setting is 14 days. Copies in Gmail, business/order records, notification-recovery records and backups have separate retention; the 14-day setting does not delete those copies.
We limit Google API information to providing and supporting this email function. We do not sell it, use it for advertising or profiling, or transfer it for unrelated purposes. Access is limited to the authorized owner and support personnel where needed for this function, security or legal obligations, consistent with Google’s applicable access rules. LOUD BREAKS’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
The owner can revoke the application’s access in Google Account security settings. Revocation stops future authorized Gmail access; it does not erase orders, previously sent messages or existing records. Contact us for requests concerning your personal information.
4. Retention and information requests
We retain information only as long as needed to fulfil and support purchases, maintain required accounting records, resolve disputes, protect the service and meet legal obligations. Retention differs between order records, accounts, email, logs and backups. We do not promise that deleting an account immediately removes every legally required record or backup copy.
You can contact office@cedarsmith.com to request access to, correction of or deletion of your personal information, or to ask about retention. We may need to verify your identity before acting. Some records may need to be retained for legal or legitimate business purposes; we will explain relevant limits when responding.
5. Marketing and optional services
Buying a break or creating an account does not automatically sign you up for promotional email. Any future email club will have a separate optional signup and an unsubscribe option. Promotional sending and LOUD LOOT HOLD are not currently active; this policy does not activate them. Relevant privacy information will be provided before those services are offered.
6. Protecting information and policy updates
We use access controls and protected connections to help safeguard information. No online service can guarantee absolute security. Please keep your account credentials private and never email banking passwords.
We will update this policy when our practices change and show the effective date above. Changes to Google API access or use will be disclosed and any required renewed authorization obtained before the changed use begins.
Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy
Google Privacy Policy: https://policies.google.com/privacy
Terms & Conditions