Last updated 8 September 2026

Privacy policy

This page says what tejslab.com collects about you, why, who else sees it, and how to get it corrected or deleted. It is written to be read, not skimmed past. If anything here is unclear, email [email protected] and a person will answer.

Who we are What we collect Cookies Who else sees it How long we keep it Your rights Children Changes

Who we are

Tej’s Lab, trading as Tejslab, is a sole proprietorship in Canada. It sells the Layeraser glass polishing files and their add-ons through this site. For anything to do with your personal information, the contact is [email protected].

What we collect, and why

When you buy something: Your name, email address, shipping address and what you ordered. You enter these on a checkout page run by Stripe. Stripe collects your card details; this site never sees your full card number and does not store it. We use the order details to get the item to you, to answer questions about the order, and to keep the accounting and tax records Canadian law requires.
To deliver the order: Your name and shipping address, and a phone number if you gave one, are passed to the supplier who makes and posts the item, through the AliExpress fulfilment service. The supplier is in China. They receive only what a courier needs to deliver a parcel, and nothing about your payment.
When you join a notify list: The email address you type in, and the product you asked about. It is stored so we can tell you once, when that product is available. Nothing else is sent to it.
When you email us: Whatever you send, including photographs of a faulty item, and our replies. Kept so we can deal with the matter and any follow-up.
When you visit the site: Two analytics services run on the public pages. Google Analytics 4 records which pages are viewed, on what kind of device, from roughly where, and which buttons are used. Meta Pixel records page views, the start of a checkout, and a completed purchase with its amount, so that advertising on Facebook and Instagram can be measured. For a completed purchase, the server also sends Meta a scrambled (hashed) form of your email address, your IP address, your browser type and the Meta cookies on your device, so that the purchase is matched to the ad once and not counted twice. Neither service receives your card details or your address. Cloudflare hosts the site, keeps standard request logs for security, and uses your IP address to work out which country you are in so the shipping notes on the product page match where you are.

Cookies and similar things

There are no accounts on this site and no login cookies. The cookies that are set belong to the analytics services above: _ga and related cookies from Google, and _fbp and _fbc from Meta. The order confirmation page uses your browser’s session storage for a few minutes so that a page refresh does not report the same purchase twice; nothing is sent anywhere from it.

You can block or clear these in your browser settings, use Google’s opt-out add-on, and control how Meta uses data from other sites in your Facebook ad preferences. The site works normally with the cookies blocked. We do not currently respond to browser Do Not Track or Global Privacy Control signals.

Only the companies named above, each for its own job: Stripe for payment, the supplier through AliExpress for delivery, Google and Meta for analytics and advertising measurement, and Cloudflare for hosting. Stripe, Google, Meta and Cloudflare are based in the United States and process data there and elsewhere; the supplier is in China. Where data leaves Canada or the European Economic Area it does so under those providers’ standard contractual terms. We do not sell personal information and never have.

We will hand over information if the law requires it, for example to a court or a tax authority, and we will tell you if we are allowed to.

How long we keep it

Order and payment records: at least six years after the year of the sale, which is what the Canada Revenue Agency requires.
Notify list addresses: until we have sent the one email, or until you ask to be removed, whichever is first.
Support email: two years after the last message on the matter.
Analytics: for the retention period set in each service, at most 14 months for Google Analytics. Meta’s retention is set by Meta.
Cloudflare request logs: a matter of days.

Your rights

Wherever you are, you can ask what we hold about you, have it corrected, have it deleted where we are not required to keep it, and stop any marketing. Email [email protected]. We answer within 30 days and do not charge for it.

If you are in the European Economic Area or the United Kingdom, you also have the right to object to processing, to have your data moved to another provider, and to complain to your data protection authority. Our lawful bases are the contract with you for orders and delivery, our legitimate interest in understanding how the site is used and in measuring advertising, and legal obligation for the tax records.

If you are in Canada, this policy is written to meet the Personal Information Protection and Electronic Documents Act, and you may complain to the Office of the Privacy Commissioner of Canada.

If you are in California, we do not sell or share personal information for cross-context behavioural advertising in the sense of the CCPA, other than the Meta measurement described above, which you can opt out of through your Facebook ad preferences or by blocking the cookies.

Children

The site and what it sells are for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, email us and we will delete it.

Changes to this policy

When this page changes, the date at the top changes with it. If a change affects how we use information you have already given us, we will email you about it where we can.