Privacy Policy

Last updated: October 15, 2026

This Privacy Policy describes how Hoshi Inc. (“Hoshi,” “we,” “us,” or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from tryhoshi.co (the “Site”) or otherwise communicate with us regarding the Site (collectively, the “Services”).

For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, subscriber, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully.

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last updated” date, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources, as described below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses described below, we may use information we collect about you to communicate with you, provide, operate, maintain, improve, or personalize the Services, process and fulfill orders and subscriptions, comply with applicable legal obligations, enforce our Terms of Service and other policies, and protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain about you depend on how you interact with our Site and use our Services.

When we use the term “personal information,” we mean information that identifies, relates to, describes, or can reasonably be associated with you or an identifiable individual, subject to applicable law.

Information You Provide Directly to Us

Information that you directly submit to us through our Services may include:

• Contact details, including your name, address, phone number, and email address.
• Order information, including your name, billing address, shipping address, payment confirmation, email address, phone number, products purchased, and order details.
• Account information, including your username, password, authentication information, saved addresses, and other information used for account security or account management.
• Shopping information, including products you view, add to your cart, save, purchase, review, or otherwise interact with.
• Subscription information, including products in your subscription, billing frequency, shipment frequency, renewal timing, subscription status, and actions such as skipping, pausing, or cancelling recurring orders.
• Customer support information, including information you choose to include in communications with us, such as when you send us a message, submit a support request, or provide photos or other files.
• Reviews, surveys, testimonials, and other content that you choose to submit to us.
• Marketing preferences, including information you provide when signing up for email or text communications.

Some features of the Services may require you to directly provide certain information about yourself. You may choose not to provide this information, but doing so may prevent you from using or accessing certain features.

Information We Collect About Your Usage

We may automatically collect certain information about your interaction with the Services (“Usage Data”).

To do this, we may use cookies, pixels, tags, web beacons, software development kits, third-party libraries, APIs, and similar technologies (“Cookies”).

Usage Data may include:

• Device information.
• Browser information.
• Operating system.
• Network connection information.
• IP address.
• Approximate location derived from your IP address.
• Referral information.
• Pages and products viewed.
• Search activity.
• Cart activity.
• Purchases.
• Interactions with advertisements.
• Email opens and clicks.
• Other information regarding your interaction with the Services.

Information We Obtain From Third Parties

We may obtain information about you from third parties, including vendors and service providers that collect or process information on our behalf.

These may include:

• Shopify, which supports our Site, checkout, customer accounts, ecommerce infrastructure, and related Services.
• Payment processors and payment services, which collect and process payment information to complete transactions.
• Kaching Subscriptions, which may process information necessary to administer recurring orders and customer subscription management.
• Klaviyo, which may process information for email marketing, customer segmentation, automations, communications, and related analytics.
• Google Analytics and Google Ads, which may help us understand Site usage, measure advertising performance, and provide advertising.
• Meta and the Meta Pixel, which may help us measure advertising, understand interactions with our Site, and provide relevant advertising.
• TikTok and the TikTok Pixel, which may help us measure advertising, understand interactions with our Site, and provide relevant advertising.
• Shipping, fulfillment, logistics, fraud-prevention, customer-support, security, and other service providers that help us operate the Services.
• SMS or messaging providers, if and when text-message functionality is enabled.
• Product review or ratings providers, if and when such functionality is enabled.

When you visit our Site, open or click on emails we send you, interact with the Services, add products to your cart, make purchases, or interact with advertisements, we or third parties we work with may automatically collect certain information using online tracking technologies.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy, subject to any applicable third party’s own privacy notice and legal obligations.

How We Use Your Personal Information

Providing Products and Services

We use your personal information to provide the Services and perform our contract with you, including to:

• Process payments.
• Fulfill orders.
• Send notifications relating to your account, purchases, subscriptions, returns, refunds, exchanges, or other transactions.
• Create and maintain your customer account.
• Arrange shipping and delivery.
• Administer recurring orders and subscriptions.
• Facilitate returns and exchanges.
• Provide customer support.
• Provide other functionality relating to your account or purchases.

We may also enhance your shopping experience by enabling Shopify to connect your account with other Shopify services you choose to use. In those cases, Shopify will process your information according to its applicable privacy policies.

Marketing and Advertising

We may use your personal information for marketing and promotional purposes, including to:

• Send marketing and promotional emails.
• Send abandoned-cart or checkout reminders.
• Send product recommendations.
• Send promotional text messages where you have provided appropriate consent.
• Show advertisements for Hoshi products on other websites and platforms.
• Measure advertising effectiveness.
• Understand customer interactions with our advertisements.
• Create or reach advertising audiences.
• Personalize marketing and advertising where permitted by law.

Our marketing and advertising tools may include:

• Klaviyo.
• Google Analytics.
• Google Ads.
• Meta.
• TikTok.

If you are in the EEA or UK, the legal basis for these processing activities may include your consent, performance of a contract, compliance with legal obligations, or our legitimate interests, depending on the specific activity.

Security and Fraud Prevention

We use personal information to detect, investigate, prevent, or take action regarding possible:

• Fraudulent activity.
• Illegal activity.
• Malicious activity.
• Abuse.
• Security incidents.
• Unauthorized transactions.

If you create an account, you are responsible for keeping your account credentials secure. We recommend that you do not share your password or other access information with anyone.

If you believe your account has been compromised, please contact us immediately.

Communicating With You and Improving Our Services

We may use personal information to:

• Provide customer support.
• Respond to questions.
• Communicate about purchases and subscriptions.
• Understand customer needs.
• Improve our products and Services.
• Maintain our business relationship with you.

Cookies

Like many websites, we use Cookies and similar technologies on our Site.

For information about Cookies used in connection with Shopify, please visit:

https://www.shopify.com/legal/cookies

We may use Cookies to:

• Power and operate our Site.
• Maintain shopping carts and sessions.
• Support checkout functionality.
• Remember your preferences.
• Support customer accounts.
• Prevent fraud.
• Run analytics.
• Understand how people interact with our Services.
• Measure advertising performance.
• Personalize marketing or advertising where permitted.

We may permit third parties and service providers, including Shopify, Google, Meta, TikTok, Klaviyo, and other providers we use from time to time, to use Cookies or similar technologies on our Site for functionality, analytics, measurement, personalization, or advertising.

Most browsers automatically accept Cookies by default, but you can choose to remove or reject Cookies through your browser settings.

Please keep in mind that removing or blocking Cookies may negatively affect your experience and may cause certain features or functionality to work incorrectly or become unavailable.

Where required by applicable law, we will provide cookie consent, opt-out, or privacy preference controls for non-essential Cookies.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for contract fulfillment, business operations, marketing, legal compliance, and other legitimate purposes.

Such circumstances may include:

• With vendors or third parties that perform services on our behalf, such as Shopify, payment processors, Kaching Subscriptions, Klaviyo, IT providers, hosting providers, analytics providers, fraud-prevention providers, customer-support providers, fulfillment partners, and shipping carriers.
• With business and marketing partners, including Google, Meta, TikTok, and other advertising or analytics partners, subject to applicable law and your privacy choices.
• When you direct, request, or consent to our disclosure of information to a third party.
• With affiliates or companies within our corporate group, where applicable.
• In connection with a merger, financing, acquisition, restructuring, sale of assets, insolvency, bankruptcy, or similar business transaction.
• To comply with applicable laws, regulations, court orders, subpoenas, search warrants, or other lawful requests.
• To enforce our Terms of Service or other policies.
• To protect or defend Hoshi, our Services, our customers, our users, or others.

Categories of Personal Information We May Disclose

Depending on how you interact with Hoshi, we may disclose:

• Identifiers, such as your name, email address, phone number, shipping address, billing address, IP address, and account information.
• Commercial information, such as order information, purchase history, subscription information, cart activity, shopping information, customer-support information, and reviews.
• Internet or electronic network activity, such as Usage Data, browser information, device information, product views, Site interactions, and advertising interactions.
• Approximate geolocation data, such as location inferred from your IP address.
• Customer communications and content, such as support messages, survey responses, reviews, testimonials, photos, or files you choose to provide.

Recipients may include:

• Vendors and service providers.
• Payment processors.
• Subscription providers.
• Fulfillment and shipping partners.
• Customer-support providers.
• Marketing platforms.
• Analytics providers.
• Business and advertising partners.
• Affiliates, if applicable.
• Government authorities where required by law.
• Parties involved in an actual or proposed corporate transaction.

We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you except as permitted by law.

Targeted Advertising, Sale, and Sharing

Hoshi does not sell personal information for money.

However, certain privacy laws define “sale,” “sharing,” or “targeted advertising” broadly.

As a result, certain disclosures involving advertising or analytics technologies — such as Meta, Google, TikTok, or similar services — may be considered a “sale,” “sharing,” or targeted advertising under applicable law even where no money is exchanged.

Where applicable law gives you a right to opt out of those activities, we will provide an appropriate method to exercise that right.

Third-Party Websites and Links

Our Site may contain links to websites or online platforms operated by third parties.

If you follow a link to a website that is not affiliated with or controlled by Hoshi, you should review that website’s privacy and security policies and terms.

We are not responsible for the privacy, security, accuracy, completeness, or reliability of third-party websites or platforms.

Information you provide through public or semi-public areas, including social-media platforms, may be visible to other users and may be used by those third parties according to their own policies.

The inclusion of a link on our Site does not necessarily imply endorsement of the third-party website, platform, owner, operator, or content.

Children’s Privacy

The Services are not intended for use by children, and we do not knowingly collect personal information directly from children under the age of 13.

If you are the parent or guardian of a child who has provided personal information to us without appropriate authorization, please contact us using the details below so we can review and, where appropriate, delete the information.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” personal information, as those terms may be defined under applicable U.S. state privacy laws, of individuals under 16 years of age.

Security

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee absolute or “perfect” security.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, loss, or destruction.

Information transmitted over the internet may not be secure while in transit.

We recommend that you do not use insecure channels to send sensitive or confidential information to us.

Data Retention

How long we retain personal information depends on several factors, including whether we need the information to:

• Maintain your account.
• Provide the Services.
• Fulfill orders or subscriptions.
• Maintain transaction records.
• Comply with legal, tax, accounting, or regulatory obligations.
• Prevent fraud.
• Resolve disputes.
• Process returns, refunds, or guarantee claims.
• Enforce applicable agreements and policies.

When personal information is no longer reasonably required, we may delete, destroy, or anonymize it, subject to applicable law and legitimate retention requirements.

Your Privacy Rights

Depending on where you live, you may have some or all of the following rights in relation to your personal information.

These rights are not absolute and may apply only in certain circumstances.

• Right to Access / Know: You may have a right to request access to personal information that we hold about you, including information about how we use and disclose it.
• Right to Delete: You may have a right to request that we delete personal information we maintain about you, subject to legal exceptions.
• Right to Correct: You may have a right to request that we correct inaccurate or incomplete personal information.
• Right of Portability: You may have a right to receive a copy of certain personal information or request that it be transferred to a third party.
• Right to Opt Out of Sale, Sharing, or Targeted Advertising: You may have a right to direct us not to “sell” or “share” personal information or use it for targeted advertising under applicable law.
• Restriction of Processing: You may have a right to ask us to stop or restrict certain processing activities.
• Withdrawal of Consent: Where we rely on consent to process personal information, you may have a right to withdraw that consent, subject to legal or contractual restrictions.
• Appeal: Where applicable law provides an appeal right, you may have a right to appeal a decision regarding a privacy request.
• Managing Communication Preferences: You may opt out of promotional emails using the unsubscribe link provided in our emails. If SMS marketing is enabled, applicable text messages will include appropriate opt-out instructions.

If you opt out of marketing communications, we may still send non-promotional communications relating to:

• Your account.
• Orders.
• Subscriptions.
• Security.
• Returns.
• Refunds.
• Customer-support requests.
• Other transactions.

Canadian Privacy Rights

Because Hoshi Inc. is based in Ontario, Canada, Canadian residents may have rights under applicable Canadian privacy laws.

These may include rights to:

• Request access to personal information under our control.
• Request correction of inaccurate or incomplete personal information.
• Withdraw consent in appropriate circumstances.
• Ask questions about how personal information is collected, used, or disclosed.
• Make a complaint regarding our privacy practices.

To exercise any applicable privacy right, contact us at:

support@tryhoshi.co

We may need to verify your identity before completing your request.

U.S. Privacy Rights

Residents of certain U.S. states may have additional rights under applicable state privacy laws.

These may include:

• Right to access or know.
• Right to delete.
• Right to correct.
• Right to data portability.
• Right to opt out of targeted advertising.
• Right to opt out of certain sales or sharing of personal information.
• Right not to receive unlawful discriminatory treatment for exercising privacy rights.

Where required, a recognized opt-out preference signal such as Global Privacy Control (GPC) may be treated as an opt-out request for the browser or device from which the signal is sent.

Depending on applicable law, you may also be permitted to designate an authorized agent to submit a request on your behalf.

European Privacy Rights

If you are located in the European Economic Area, United Kingdom, or another jurisdiction where similar privacy laws apply, you may have rights including:

• Access.
• Correction.
• Deletion.
• Restriction of processing.
• Objection to certain processing.
• Data portability.
• Withdrawal of consent.

Depending on the processing activity, our legal bases may include:

• Performance of a contract.
• Consent.
• Compliance with legal obligations.
• Legitimate interests.

You may also have the right to lodge a complaint with the applicable data-protection authority.

Exercising Your Rights

You may exercise applicable privacy rights where indicated on our Site or by contacting us at:

support@tryhoshi.co

We will not discriminate against you for exercising a privacy right available to you under applicable law.

We may need to collect information from you to verify your identity before responding to a request.

Where applicable, an authorized agent may submit a request on your behalf. We may require proof that the agent has authority to act for you and may require you to verify your identity directly with us.

We will respond within the time required by applicable law.

Complaints

If you have a complaint about how we process your personal information, please contact us at:

support@tryhoshi.co

If you are not satisfied with our response, you may have the right to contact the privacy or data-protection authority responsible for your jurisdiction.

For Canadian privacy matters, information about the Office of the Privacy Commissioner of Canada is available at:

https://www.priv.gc.ca

For individuals in the EEA, information about data-protection supervisory authorities is available through the European Data Protection Board.

International Transfers

We may transfer, store, and process personal information outside the country or province where you live.

Hoshi Inc. is based in Ontario, Canada, but our service providers may process information in:

• Canada.
• The United States.
• Europe.
• Other jurisdictions where our service providers operate.

These providers may include Shopify and other ecommerce, payment, marketing, analytics, subscription, fulfillment, shipping, and technology providers.

When personal information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies, or government authorities in accordance with applicable law.

Where specific safeguards are legally required for international transfers, we will use an appropriate lawful transfer mechanism.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• Our privacy practices.
• Our products or Services.
• Technologies we use.
• Service providers.
• Legal or regulatory requirements.
• Other operational needs.

When we update this Privacy Policy, we will revise the “Last updated” date at the top of this page.

Where required by law, we will provide additional notice of material changes.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any privacy rights available to you, please contact:

Hoshi Inc.
Email: support@tryhoshi.co
Website: tryhoshi.co