Last updated: September 27, 2026

Virginia & Rook takes privacy seriously. This Privacy Policy explains how Virginia & Rook (“we,” “us,” or “our”), a customer-facing business operated by Vishnu Incorporated, collects, uses, discloses, and protects personal information when you visit www.virginiarook.com, shop with us online, order by phone, subscribe to our newsletter, use Concierge or site search, or contact us.

Privacy requests are handled by Virginia & Rook. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, other Canadian privacy laws such as Quebec’s Act respecting the protection of personal information in the private sector (as amended by Law 25).

Who is responsible for your privacy

Virginia & Rook is accountable for privacy requests about this store. Vishnu Incorporated operates Virginia & Rook.

If you have a privacy question, access request, correction request, or complaint, email contact@virginiarook.com and mark your message as a privacy request so we can respond promptly.

Information we collect

Depending on how you interact with us, we may collect:

• Identity and contact details, such as name, email address, phone number, and billing or shipping address
• Order and account details, such as products purchased, order history, account login information, and customer-service communications
• Payment-related transaction details needed to complete a purchase. Card, wallet, and financing payments are processed by Stripe or PayPal. We do not store full credit or debit card numbers on our servers
• Interac e-Transfer details, such as your order number and confirmation that payment was received, when you pay by Interac
• Shipping and delivery details, such as your delivery address and tracking information
• Newsletter signup information, such as the email address you submit
• Concierge and search text, when you use Concierge or tell us what you are looking for
• Technical and device information, such as IP address, browser type, device type, operating system, referring pages, and general site-usage data
• Cookie and similar technology data, described below

You may browse parts of the Site without providing personal information. If you choose not to provide information needed for an order, account, or support request, we may not be able to complete that activity.

How we collect information

We collect information:

• Directly from you, when you place an order, create an account, subscribe to the newsletter, use Concierge or search, fill out a form, call us, email us, or contact us through the Site
• Automatically, when you visit the Site, through cookies, logs, similar technologies, and site analytics
• From service providers that help us operate the store, such as payment processors, shipping carriers, and hosting or ecommerce platforms, to the extent needed to fulfill your order or support the Site

How we use your information

We use personal information to:

• Process, fulfill, and deliver orders, including shipping, returns, and payment confirmation
• Provide customer service and respond to questions or requests
• Create and manage customer accounts
• Recommend relevant products, including using signed-in purchase history internally when you are signed in
• Improve Concierge and search matching
• Analyze how the Site is used
• Send transactional messages about your order, account, or support request
• Send promotional marketing emails when you subscribe, in line with Canada’s anti-spam law (CASL)
• Protect the security and integrity of the Site, prevent fraud or misuse, and enforce our Terms of Use
• Meet legal, tax, accounting, and regulatory obligations

We do not sell your personal information.

Concierge and product recommendations

Concierge helps you find products from our catalogue. Some Concierge or search text may be processed by an AI service provider so we can match your question to products more usefully. That processing is used to support search and recommendation, not to make medical, legal, or other high-impact decisions.

Not every Concierge question is sent to an external AI provider. When that processing is used, the text of your question may be included, and related product names or on-page context for that search may also be included. Signed-in purchase history used to personalize recommendations is processed internally on our systems. We do not send your full order history to the AI provider.

If you are signed in, we may use your purchase history and prior interactions with the store internally to suggest relevant products. This is ordinary merchandising, not detailed profiling of your private life.

Payment processing

Card, wallet, and financing payments are processed by Stripe. PayPal payments are processed by PayPal. Available methods at checkout may include Visa, Mastercard, American Express, Discover, PayPal, Interac e-Transfer, Apple Pay, Google Pay, Klarna, Affirm, and Afterpay. Availability can vary by device, location, order, eligibility, and checkout configuration.

These payment providers process payment information on our behalf or as independent controllers of their own services. Their privacy practices apply to the information they collect directly. On card and PayPal statements, charges typically appear as Virginia & Rook. For some PayPal payments, the receiving account may show as Vishnu Incorporated (VINC), our parent company.

How we share information

We share personal information only as needed to operate the store, process payments, fulfil orders, provide functionality, analyze site use, or meet legal obligations, including with:

• Stripe and PayPal, to complete checkout and help prevent payment fraud
• Shipping and tracking partners: Canada Post, UPS, Purolator, FedEx, and AfterShip
• Google Analytics, to understand how the Site is used
• An AI service provider (OpenAI), when Concierge or search text is processed to improve product matching, as described above
• Email and communications providers, to send order updates or newsletter emails
• Hosting and ecommerce platforms, including Hostinger, that host the Site, store order data, or support store operations
• Professional advisors, such as accountants or lawyers, when reasonably required
• Authorities, when required by law, court order, or to protect rights, safety, or security

We may also share aggregated or de-identified information that does not identify you personally.

Service providers are expected to use personal information only to perform services for us or as otherwise permitted by law. We do not sell your personal information.

Cookies and similar technologies

The Site uses cookies and similar technologies to:

• Keep the Site secure and functioning (for example, cart, checkout, and signed-in account sessions)
• Remember preferences
• Measure Site traffic and performance with Google Analytics

You can control cookies through your browser settings. Blocking some cookies may affect Site features such as cart, checkout, or signed-in account pages.

Google Analytics may collect information about how you use this Site according to Google’s policies. We do not use this storefront to run a separate advertising-cookie banner, and we do not inventory every cookie name or retention period here.

Marketing communications

Promotional marketing from Virginia & Rook is currently email only. If you submit your email to the newsletter form, you are subscribed immediately. A welcome newsletter email follows. This is not a confirmation-required signup.

You can unsubscribe at any time through Virginia & Rook’s internal unsubscribe handling, including any unsubscribe link in those emails, or by emailing contact@virginiarook.com.

Transactional emails about orders, payments, shipping, or support are not marketing messages and may still be sent as needed to complete your purchase or request.

Where your information is stored and transferred

Virginia & Rook is based in London, Ontario. Some service providers that help us operate the Site, process payments, host data, send email, analyze Site use, or support Concierge may store or process information on servers outside Canada, including in the United States or other countries.

When information is transferred outside Canada, it may be subject to the laws of those jurisdictions. We take reasonable steps appropriate to the sensitivity of the information and the nature of the transfer.

If you are in Quebec, personal information may be communicated outside Quebec in connection with the service providers described above. You may contact us with questions about these transfers.

How long we keep information

We keep personal information only as long as needed for the purposes described in this policy, including:

• Completing orders and providing customer service
• Maintaining accounts you choose to keep open
• Meeting legal, tax, accounting, and dispute-resolution requirements
• Maintaining security and fraud-prevention records where appropriate

When information is no longer required, we take reasonable steps to delete, destroy, or de-identify it.

How we protect your information

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including secure transmission (HTTPS/SSL) for sensitive exchanges on the Site and limiting access to personal information to people and providers who need it for their role.

No method of transmission or storage is completely secure. If you believe your account or personal information has been compromised, please contact us right away.

Your privacy rights

Subject to applicable law, you may ask us to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete personal information
• Delete or withdraw consent for certain uses of your personal information, subject to legal or transactional limits (for example, records we must keep for tax or completed orders)
• Opt out of marketing emails
• Ask questions about how we handle your information

To make a request, email contact@virginiarook.com or Contact Us and identify your request as a privacy request. We may need enough information to confirm your identity before responding. We aim to respond within the timelines required by applicable law.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. Residents of Quebec may also contact the Commission d’accès à l’information du Québec.

Children’s privacy

Virginia & Rook is a general retail store for all ages. The Site is not directed at children. Some products, including smoking-related merchandise, may be age-restricted.

We do not knowingly collect personal information from children for accounts, newsletter signup, or marketing. If you believe a child has provided personal information to us, email contact@virginiarook.com so we can delete it where we are not required to keep it.

Rules about children’s information can vary by jurisdiction. Additional consent or parental involvement may be required in some places.

Privacy incidents

If a privacy breach creates a real risk of significant harm, we will report and notify as required by applicable Canadian privacy law, and we will take reasonable steps to reduce the risk of harm.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For material changes to how we collect, use, or disclose personal information, we will provide an appropriate notice on the Site or by email when that is reasonable, and we will seek additional consent where applicable law requires it.

Please review this page periodically. A later version applies to later visits and later collection. It does not automatically authorize every new collection, use, or disclosure, and it does not rewrite completed purchases.

How to contact us

If you have any questions about this Privacy Policy, our privacy practices, or your dealings with this Site, please contact us at:

Related pages: Terms of Use · Payment Methods · Shipping & Returns