Home / Privacy policy
Last updated 22 October 2026
We collect the minimum needed to test your sample and send you the result. No accounts, nothing sold to anyone, and one click to stop hearing from us.
This page says what we collect, where it goes, how long we keep it, and what you can ask us to do with it.
What it comes down to
We hold your email address and what you told us about your sample. We never sell it or hand it to anyone for their own marketing, and your name never appears next to a vendor's name in anything we publish. We may email you about offers; every one of those unsubscribes in one click.
| What | Why |
|---|---|
| Email address | To send your order number, posting instructions and certificate. It is also how we check whether a first-order discount applies, and how we tell you about offers if you want them. |
| What the label claims | The analysis needs a claim to test against. |
| Stated amount, lot number | Optional. They tie the certificate to a specific batch. |
| Vendor name | Optional, and never published against your name. See below. |
| Order and payment records | Required for accounting and tax. |
We never see your card details. Payment happens on Stripe's own page. Card numbers do not pass through veriphase.ca and we could not retrieve them if we wanted to.
We do not ask who you are. No account, no real name, no address unless you volunteer one. An email address and a parcel is the whole relationship.
Two kinds, and they are not the same thing.
Order emails — your order number, where to post the sample, and your certificate — are part of the service. While an order is open we have to be able to reach you about it.
Offers are optional. If you have ordered from us, we may email you about discounts and new tests. Every one of those carries an unsubscribe link that works in one click, and we act on it straight away. Unsubscribing from offers never affects the order emails for a test you have already paid for.
We do not sell, rent or share your address with anyone else for their own marketing, and we do not buy lists.
If you tell us where you bought a sample, that is used in two ways: to notice patterns across many samples, and potentially to publish aggregate findings. Any such publication reports the vendor and the measurements, never the customer. Your identity is not attached to a vendor's name in anything we release, ever.
Running this service means using other companies, and some of them are outside Canada. Under Canadian privacy law we have to tell you that, because information held in another country is subject to that country's laws, including lawful access by its authorities.
| Who | What they handle | Where |
|---|---|---|
| Stripe | Payment processing | United States |
| Resend / AWS | Sending order and results email | United States |
| Cloudflare | Website hosting and the order database | Global network |
| The laboratory | Your sample and what the label claims | Canada |
The laboratory receives your order number and the label claim. It does not receive your email address, and it has no way to contact you.
Order records are kept for seven years, which is what Canadian tax rules require. Certificates stay verifiable for the same period, so a vendor can still confirm one years later. Physical samples are disposed of within 90 days of analysis unless you ask us to return one.
Veriphase Inc., an Ontario corporation (Ontario Corporation Number 1001727726), registered office 80 Barbados Boulevard, Unit 20, Scarborough, Ontario M1J 1K9. Privacy questions go to hello@veriphase.ca.
Under PIPEDA you can ask what we hold about you, ask us to correct it, and complain about how we handle it. Email hello@veriphase.ca and we will respond within 30 days.
You can ask us to delete your information. We will, except where tax law requires us to keep a record of the transaction — in which case we keep the invoice and remove everything else.
If you are not satisfied with how we respond, you can complain to the Office of the Privacy Commissioner of Canada.
We use Google Analytics to understand, in aggregate, how people find and use this site — which pages get read, roughly where visitors arrive from, and which searches brought them here. It sets cookies and sends usage data, including your IP address and the pages you view, to Google.
We never send Google your name, your email address, your order details, or anything about what you submit for testing. Analytics sees an anonymous visitor reading pages; your order exists only in our own systems.
We also advertise on Google. If you arrive by clicking one of our Google ads and then place an order, the same Google tag tells Google Ads that the ad led to an order, so we can see which ads are worth paying for. That report carries the address of your order page, which contains your order number, and nothing else about you or the order: not your name, not your email address, and nothing about your sample. We have switched off ad personalization in our Google tag and do not use remarketing, customer lists or "enhanced conversions": we do not ask Google to show you ads because you visited, and we never give Google your contact details.
If you would rather not be counted, block it freely: decline cookies in your browser, use a content blocker, or install Google's own opt-out add-on. Every part of this site works identically without it.
Stripe sets its own cookies during checkout; those are necessary for payment and fraud prevention.