Privacy policy
How we collect, use, disclose and protect personal information across the PolyKye store, services and Access Program.
Effective date: September 14, 2026
Responsible organization: Canurta Naturals USA Inc. (PolyKye)
Plain-language overview
This overview highlights several important practices. The complete policy below controls.
| Store operations | We use personal information to run the Shopify store, fulfill orders, manage subscriptions and returns, provide support, secure the Services and comply with law. |
| Your choices | You may control marketing, cookies and certain advertising uses, and may have rights to access, correct, delete or obtain a copy of your information. |
| Access Program | Program marketing consent is optional. Supporting eligibility documents are not used for targeted advertising or sold and are ordinarily deleted within 30 days after a final decision. |
1. Scope and who we are
This Privacy Policy explains how Canurta Naturals USA Inc., doing business as PolyKye (collectively, “PolyKye,” “we,” “us” or “our”), collects, uses, discloses, retains and protects personal information when you visit polykye.com, buy or review products, create an account, subscribe, communicate with us, participate in a promotion or program, or otherwise use our websites and related services (the “Services”).
PolyKye is the organization responsible for the personal information described in this Policy. Our online store is hosted on Shopify. Some features may be provided by Shopify, its affiliates, or other service providers under their own privacy notices.
A specific notice presented when information is collected may supplement this Policy. For information submitted through the PolyKye Access Program, the PolyKye Access Program Privacy Notice supplements this Policy and applies if it addresses the same Program information differently, to the extent permitted by law.
2. Personal information we collect
“Personal information” means information that identifies, relates to, describes or can reasonably be linked with an individual or household. It does not include information that applicable law excludes, such as properly deidentified or aggregated information.
Contact and account information. Name, email address, telephone number, billing and shipping addresses, login credentials, account settings and communication preferences.
Order and transaction information. Products viewed or purchased, cart activity, order history, discounts, subscriptions, returns, refunds, delivery information and related customer-service records.
Payment information. Payment method and transaction details. Shopify and payment providers process payment-card and other payment credentials; we generally receive transaction status and limited payment details rather than complete card numbers.
Communications and content. Messages, survey responses, product reviews, photographs or other content you submit, and records of our communications with you.
Device and usage information. Internet Protocol address, browser, device identifiers, operating system, referral pages, pages viewed, searches, interactions, approximate location derived from IP address, cookie identifiers, log data and similar activity information.
Marketing and preference information. Email or text-message preferences, campaign interactions, interests, product preferences and information used to personalize content or advertising.
Security and compliance information. Fraud signals, authentication information, records needed to investigate misuse, and information necessary to meet legal or regulatory obligations.
Program and application information. Information described in Section 8 when you apply for an eligibility-based program, including the PolyKye Access Program.
Please do not send medical records, Social Security numbers, financial account numbers or other sensitive information unless we expressly request it through a designated secure process. Product questions may incidentally reveal health-related information; provide only what is necessary and do not use ordinary customer-service channels for Access Program documents.
3. How we collect personal information
-
Directly from you, including when you browse, order, register, subscribe, contact us, post a review, complete a form or apply to a program.
-
Automatically from your browser or device through cookies, pixels, software development kits, server logs and similar technologies.
-
From Shopify and other providers that support payments, fulfillment, shipping, subscriptions, fraud prevention, customer support, analytics, advertising and store operations.
-
From advertising or referral partners, social media platforms, publicly available sources, or another person acting at your direction, as permitted by law.
4. How we use personal information
-
Provide the Services; display products; create and manage accounts; process payments, orders, subscriptions, deliveries, returns and refunds; and keep transaction records.
-
Respond to questions, provide customer support, send service messages and communicate about orders, subscriptions, programs, policies or account activity.
-
Improve and troubleshoot our products, website, content, customer experience and business operations; measure performance; and conduct analytics and research.
-
Personalize the Services and, subject to your choices and applicable law, deliver or measure marketing and advertising.
-
Manage reviews, promotions, loyalty features and eligibility-based programs.
-
Authenticate users, detect and prevent fraud or misuse, protect accounts and systems, enforce our terms, resolve disputes and maintain safety and security.
-
Comply with law, respond to lawful requests, exercise or defend legal claims, conduct audits and accounting, and support a business transaction.
Where applicable law requires consent for a particular activity, we rely on that consent and you may withdraw it as allowed by law. Withdrawal does not affect processing that occurred before withdrawal or processing supported by another lawful basis.
5. Shopify and ecommerce services
Our store is hosted by Shopify, which processes personal information so that we can provide the Services, accept payments, prevent fraud, operate checkout and customer accounts, and use other Shopify features. If you use Shop Pay, Shop, or another Shopify customer-facing service, Shopify may process information under its own terms and privacy notice.
Learn more about Shopify’s handling of customer personal information in the Shopify Consumer Privacy Policy and use Shopify’s privacy portal to exercise rights directly with Shopify where available.
Where Shopify Network Intelligence or another Enhanced Service is enabled, Shopify may use information from your interactions with our store together with information from interactions with Shopify and other merchants to provide services such as fraud protection, performance insights, personalization and advertising. Your cookie choices, recognized opt-out signals and requests submitted through our Privacy Choices page may limit eligible uses as described in Sections 6 and 11.
Shopify and other providers may process information in countries other than where you live. Their roles and obligations can differ by service and law; this Policy does not replace their own notices.
6. Cookies, pixels and similar technologies
We and our partners, including Shopify, use cookies and similar technologies to operate the store, remember settings, protect checkout, understand site use, improve performance, personalize experiences, and deliver or measure advertising. These technologies may collect device and usage information over time and across services.
You can use the cookie-preferences control made available on our site to accept, reject or change choices for non-essential technologies where offered. You can also adjust browser settings, but blocking essential technologies may prevent parts of the Services from working. Our Cookie Policy provides additional details about categories, purposes and controls.
Where required, we treat a recognized opt-out preference signal, such as Global Privacy Control, as a request to opt out of sale, sharing or targeted advertising for the browser and device sending the signal. You may also use our Privacy Choices page. You may need to repeat choices on other browsers or devices.
7. How we disclose personal information
We may disclose the categories of personal information described above to the following recipients for the purposes in this Policy:
-
Shopify and store providers, including providers of hosting, checkout, payments, subscriptions, customer accounts, analytics and ecommerce applications.
-
Operational providers, including fulfillment, carriers, warehousing, customer support, email and text messaging, cloud storage, security, fraud prevention and IT support.
-
Advertising, analytics and social-media partners that help us measure campaigns, understand audiences or deliver advertising, subject to your choices and applicable law.
-
Professional advisers, auditors, insurers and financing, tax, legal or accounting providers.
-
Government authorities, courts, law enforcement or other parties when we believe disclosure is required or permitted by law or needed to protect rights, safety, security or the integrity of the Services.
-
Parties to a proposed or completed merger, financing, reorganization, sale, bankruptcy or transfer of all or part of our business or assets.
-
Other recipients at your direction, with your authorization, or as otherwise disclosed when information is collected.
We do not sell personal information for money. Depending on the technologies and law involved, our disclosure of identifiers, commercial information, and internet or other electronic activity to advertising or analytics partners may be considered a “sale,” “sharing,” or processing for “targeted advertising.” You can opt out as described in Section 11. We do not knowingly sell or share the personal information of consumers under 16.
8. PolyKye Access Program and other eligibility programs
When you apply for a PolyKye assistance, access, discount or other eligibility-based program, we may collect contact information, eligibility category, declarations, supporting documentation, application and decision status, approval and expiration dates, access or discount details, and records of acknowledgments or consent.
We use this information to receive and evaluate applications, confirm eligibility, communicate with applicants, administer approved participation, support renewal, maintain program security and integrity, prevent misuse, resolve disputes, enforce applicable program terms, and comply with legal obligations.
The PolyKye Access Program Privacy Notice provides additional information about the information collected, purposes of use, disclosures, security, retention and privacy choices. Review it before applying. Do not send supporting documents by email, mail, chat or ordinary customer-service channels; use only the designated secure application form.
ACCESS PROGRAM COMMITMENTS
Applying or participating does not require marketing consent. Supporting eligibility documents are not used for targeted advertising and are not sold. They are ordinarily deleted within 30 days after a final application decision. We retain a limited administrative record only as reasonably needed to operate the Program, manage access and renewal, address misuse or disputes, meet accounting or legal obligations, and enforce Program Terms.
9. Marketing communications
Marketing consent is optional and is not required to make a purchase or apply for or participate in an eligibility-based program. You may unsubscribe from marketing emails using the link in a message and opt out of marketing text messages by replying STOP or following the instructions provided. We may still send non-marketing messages about orders, subscriptions, accounts, applications, security or other transactions.
If you interact with advertising on another platform, that platform’s settings and privacy terms also apply. Opting out of targeted advertising does not necessarily reduce the number of ads you see; the ads may be less personalized.
10. Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining accounts and transactions, meeting tax, accounting or legal requirements, preventing fraud, resolving disputes and enforcing agreements. Retention periods vary based on the type and sensitivity of information, our operational needs, legal limitation periods, and whether deletion is technically and legally permitted.
Access Program supporting documents are ordinarily deleted within 30 days after a final application decision. Limited Program administration records may be retained longer as described in Section 8 and the Access Program Privacy Notice. Deletion from active systems may be followed by deletion from backups under routine cycles, unless continued retention is required or permitted by law.
11. U.S. privacy rights and choices
Depending on where you live and subject to legal exceptions, you may have the right to:
-
Confirm whether we process your personal information and access it.
-
Correct inaccuracies or request deletion.
-
Obtain a portable copy of certain information you provided.
-
Opt out of sale, sharing, targeted advertising, or certain profiling that produces legal or similarly significant effects.
-
Limit certain uses or disclosures of sensitive personal information, where that right applies.
-
Appeal a decision we make about a privacy request.
To make an access, correction, deletion, portability or appeal request, use the Privacy Request or Contact Us link on polykye.com and clearly identify the request. To opt out of sale, sharing or targeted advertising, use the Privacy Choices link in the site footer. You may also send a recognized opt-out preference signal as described in Section 6.
We will verify requests to a degree appropriate to the request and may ask for information already associated with your account or transactions. Authorized agents may submit requests where permitted by law; we may require proof of authority and direct verification with you. We will not discriminate against you for exercising applicable privacy rights. Some information and requests may be exempt, and we may retain information as permitted or required by law.
12. State-specific disclosures
For residents of states whose privacy laws apply to us, the list below summarizes the categories of personal information we may have collected and disclosed during the preceding 12 months. We collect these categories from the sources in Section 3 and use them for the purposes in Section 4.
|
Category |
Examples |
Typical recipients |
|
Identifiers |
Name, contact details, account and device identifiers, IP address |
Shopify; operational, security, analytics and advertising providers |
|
Commercial information |
Purchases, carts, subscriptions, returns and product interests |
Shopify; payment, fulfillment, support, analytics and advertising providers |
|
Internet activity |
Browsing, searches, interactions, referral and cookie data |
Shopify; hosting, security, analytics and advertising providers |
|
Geolocation |
Approximate location derived from IP address; shipping location |
Shopify; security, payment, fulfillment and shipping providers |
|
Communications/content |
Support messages, reviews, survey responses and submitted content |
Support, review, communications and professional-service providers |
|
Inferences/preferences |
Likely interests and product or marketing preferences |
Shopify; analytics and advertising providers |
|
Sensitive information |
Account credentials; payment data handled by payment providers; eligibility evidence submitted to the Access Program |
Authentication/payment providers; designated Access Program providers and reviewers |
We do not use or disclose sensitive personal information to infer characteristics about an individual beyond purposes permitted without a right to limit. We do not offer financial incentives or price differences in exchange for personal information. Discounts based on eligibility, promotions or subscriptions are governed by their own terms and are not offered in exchange for personal information.
If we deny a privacy request, you may appeal by responding through the same request channel with the words “Privacy Appeal.” If an appeal is denied, we will provide any further complaint information required by applicable state law.
13. Security
We use reasonable administrative, technical and organizational safeguards designed to protect personal information. Access is limited according to operational need. However, no security method is perfect, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should contact us if you believe an account or communication has been compromised.
14. Processing locations
PolyKye and its providers may process personal information in the United States, Canada and other countries where we or our providers operate. Privacy laws in those locations may differ from those where you live. Where required, we use legally recognized safeguards for cross-border transfers.
15. Children
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. The Access Program is limited to applicants who are at least 18. If you believe a child has provided personal information in violation of this section, contact us so we can investigate and take appropriate action.
16. Third-party services and links
The Services may link to or integrate third-party websites, applications, social networks or services. Their privacy practices are governed by their own notices. We are not responsible for third-party services that we do not control, and we encourage you to review their privacy terms before providing information.
17. Changes to this Policy
We may update this Policy to reflect changes in our Services, information practices, legal requirements or operations. The revised Policy will identify its effective date. We will provide additional notice of material changes when required by law. We encourage you to review this Policy periodically.
18. Contact us
For privacy questions or requests, use the Privacy Request or Contact Us link on polykye.com. Please do not send payment credentials, Access Program supporting documents, medical information or other sensitive records through ordinary contact channels.
Canurta Naturals USA Inc.
Attn: PolyKye Privacy
33739 S Meridian Road
Woodburn, Oregon 97071
United States
If you contact us about a privacy right, identify the state where you live and the right you wish to exercise. We may need to verify your identity before completing the request.