Login

Country

Cart

Your cart is currently empty

Cookie policy

We use cookies and similar technologies to provide the best experience on our website. Refer to our Privacy Policy for more information.

Privacy policy

PRIVACY POLICY

The Book of Exodus Website Privacy Notice

Effective Date: April 2026

The Exodus Clothing Company ("The Book of Exodus," "we," or "us") is based in Toronto, Ontario, Canada, and respects your concerns about privacy.

We are committed to respecting your privacy and complying with applicable laws and regulations to ensure that the personal information you give us is kept appropriately secure and processed fairly and lawfully. This Website Privacy Notice describes the types of information we collect about individuals on thyexodus.com (the "Site"), how we use the information, with whom we share it, and the choices available regarding our use of the information. It also describes the measures we take to safeguard personal information, how long we retain it, and how you can contact us about our privacy practices and to exercise your rights.

INFORMATION WE OBTAIN

Information You Provide

We may collect and store personal information (such as name, delivery details, payment information, and contact information) that you choose to provide to us through the Site or when you contact us. "Personal Information" is information that identifies you as an individual or relates to an identifiable individual. The types of personal information we collect include:

CONTACT INFORMATION AND OTHER IDENTIFYING INFORMATION: your name, postal address, phone number, and email address. You acknowledge that we may also obtain information about you as a result of authentication or identity checks (for example, in connection with our standard fraud checks when you make a purchase on our Site). We use this information to identify you as a customer, process your order, deliver products, process payments, update our records, and generally manage your account with us under our terms with you. Providing us with certain personal information is voluntary, but we may not be able to process your order or send you the required order confirmation and shipping notifications if you do not provide certain requested information.

We may also use your contact information to send you marketing communications about upcoming drops, collections, and events, and to contact you in relation to service matters, including order support or styling assistance. We will only use your contact information where permitted to do so under applicable law or where we have your consent.

PAYMENT INFORMATION: information related to your credit card, debit card, or other payment method, used to process payments in connection with your order. Payment is processed by Shopify Payments and Stripe, our payment processing partners; we do not store your full card details on our own servers.

OTHER ACCOUNT AND TRANSACTIONAL INFORMATION: if you have a customer account, we may collect information about the products you browse or purchase, the collection or drop you purchased from, and other information relevant to your relationship with The Book of Exodus. We use this information for internal insight into our customer base and to personalise your experience — for example, surfacing relevant pieces from BASILEIA, ENDTIME, or EX·ESS based on your past purchases and preferences.

DEMOGRAPHIC INFORMATION: we may ask for your gender, size preferences, and birthday. You may also share lifestyle or style preferences with us directly. We use this information for internal demographic insight and to personalise your experience with The Book of Exodus, including identifying relevant products, drops, and events.

INFERENCES: we may create inferences from the categories of personal information above to build a profile reflecting your preferences and behaviour. We use this information to personalise and improve our services and to better understand our customer base.

Automated Collection of Data

When you use the Site, we obtain certain information by automated means, such as browser cookies, beacons, device identifiers, server logs, and similar technologies. This information may include your:

  • Device IP address
  • Domain name
  • Identifiers associated with your devices
  • Device and operating system type and characteristics
  • Web browser characteristics
  • Language preferences
  • Your interactions with the Site (pages visited, links clicked, features used)
  • The page that referred you to the Site
  • Dates and times of access, and
  • Other information about your use of the Site

Sources of Personal Information

We collect personal information from you directly. We may also collect it indirectly, including through your use of the Site and through inferences we draw as described above.

Third-Party Web Analytics Services

We use third-party analytics services, such as Google Analytics, to help us understand how the Site is used. These providers use cookies and similar technologies to collect and analyse usage data and diagnose technical issues. To learn more about Google's practices, visit policies.google.com/technologies/partner-sites, and you may opt out using the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.

COMMUNICATIONS WITH THE BOOK OF EXODUS

If you contact us from the Site, by email, or by any other channel, we will collect your personal information and use it to identify you as a customer, respond to your query, process your order, deliver products, process payments, update our records, and generally manage your account with us.

HOW WE USE PERSONAL INFORMATION

We use the personal information we obtain on the Site for legitimate business purposes, including to:

  • Provide our services to you, process and respond to your requests, and send administrative information such as changes to our policies. We do this to manage our contractual relationship with you and/or to comply with a legal obligation.
  • Market our collections and drops to you, with your consent or where we have a legitimate interest in doing so.
  • Operate, evaluate, and improve our business, including developing new products, enhancing our services, performing analytics, and conducting internal accounting and auditing.
  • Protect against, identify, and prevent fraud, security breaches, and other criminal activity, to comply with legal obligations and/or because we have a legitimate interest in doing so.
  • Comply with and enforce applicable legal requirements, industry standards, and our own policies, including this Notice and our Terms & Conditions.
  • Aggregate and/or anonymise personal information so it is no longer considered personal information, which we may then use and disclose for any purpose.

PERSONAL INFORMATION SHARING

We may share information about you with companies that handle our order dispatch and delivery, and with other companies that provide support services to us, including website hosting providers, IT service providers, and fraud-management solution providers. We may also share limited information with companies who assist us with marketing, analytics, or customer insight in order to better understand and serve our customers. In each case, we provide only the information those companies need to carry out their services, and they are not permitted to use it for other purposes.

Order Dispatch and Delivery Partners

Where your order is delivered by one of our third-party delivery or dispatch partners, only the information necessary for delivery is shared with them. That partner's own privacy policy may also apply where it processes your personal data as an independent data controller. Please refer to the privacy policy of the relevant carrier for more information.

Financial Institutions, Payment Processing Partners & Fraud Management Solution Providers

Payments made on the Site are processed through Shopify Payments and Stripe. In each case, you provide your card information directly to these providers, who process payment details on our behalf. Our service providers who perform services on our behalf, such as hosting the Site or performing data analytics, are not authorised to use or disclose your information except as necessary to perform those services or to comply with legal requirements.

We also disclose information about you (1) if required to do so by law or legal process, including laws outside your country of residence; (2) in response to requests by, or to cooperate with, government or law enforcement agencies; (3) to establish, exercise, or defend our legal rights; (4) where we believe disclosure is necessary to protect our rights, privacy, safety, or property, or that of others; (5) in connection with an investigation of suspected illegal activity; (6) in connection with the sale or transfer of all or part of our business or assets; or (7) otherwise with your consent.

We do not, and will not, sell your personal information to any third party — including your name, address, email address, or payment information.

CROSS-BORDER TRANSFER

Your personal information may be processed and stored in any country where we or our service providers operate. By using the Site, you understand that your information may be transferred to countries outside your country of residence — including Canada, the United States, and other jurisdictions where our technology and hosting partners (including Shopify) maintain infrastructure — which may have data-protection rules different from those of your own country. In certain circumstances, courts, law enforcement, or regulatory authorities in those countries may be entitled to access your personal information.

Additional Information for the European Economic Area ("EEA") and United Kingdom

Some non-EEA and non-UK countries are recognised as providing an adequate level of data protection. For transfers from the EEA or UK to countries not deemed adequate, we rely on appropriate safeguards, such as the Standard Contractual Clauses adopted by the European Commission and the UK's International Data Transfer Addendum, to protect your personal information.

Wherever your personal information is processed, we take steps to ensure it receives the level of protection required under this Notice and applicable data-protection law, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the EU General Data Protection Regulation (GDPR), the UK GDPR, and applicable US state privacy laws.

YOUR RIGHTS AND CHOICES

Depending on where you live, you may have the right to ask us to:

  • Provide details of the personal information we hold and process about you, including how it is shared;
  • Provide a copy of your personal information;
  • Correct your personal information where it is inaccurate, or complete it where it is incomplete;
  • Limit or restrict our use of your personal information in certain cases;
  • Delete your personal information in certain cases;
  • Provide your personal information in a structured, commonly used, machine-readable format, and transmit that data to another controller (data portability), in certain cases; and
  • Opt out of the sale or sharing of your personal information — though, as noted above, we do not sell your personal information.

You may also withdraw any consent you have given us at any time, and you may have the right to object to our use of your personal information for our legitimate purposes. If you withdraw consent, this will not affect the lawfulness of any processing carried out before that withdrawal.

To exercise any of these rights, or to change your marketing preferences, please contact us at thexoduscollection@gmail.com. We may ask you to verify your identity before processing your request, and you may designate an authorised third party to act on your behalf where permitted by law.

If you ask us to delete your personal information, we may retain certain information where necessary to complete a transaction, comply with a legal obligation, detect or prevent fraud or security incidents, or exercise or defend a legal claim.

If you remain unsatisfied with our response, you may have the right to lodge a complaint with your local data-protection authority — including, where applicable, the Office of the Privacy Commissioner of Canada, the UK Information Commissioner's Office, or your EU member state's supervisory authority.

You can unsubscribe from our marketing emails at any time using the "unsubscribe" link included in every marketing email, or by contacting us directly. Even if you opt out of marketing, we may continue to send non-marketing communications, such as order confirmations and account-related emails.

OTHER ONLINE SERVICES AND THIRD-PARTY FEATURES

The Site may link to other online services and websites for your convenience, and may include third-party features such as apps, tools, widgets, and plug-ins. These services operate independently of us, and their own privacy practices apply. We are not responsible for the practices of any third-party service or website not owned or controlled by us.

RETENTION OF PERSONAL INFORMATION

We retain personal information for as long as needed for the purposes for which it was obtained and consistent with applicable law. We generally keep your information for as long as you remain an active customer, and for a reasonable period afterward as required for our business operations or by law. Factors we consider include:

  • The length of our ongoing relationship with you;
  • Whether we are subject to a legal obligation to retain the information; and
  • Whether retention is advisable in light of our legal position, including applicable limitation periods, litigation, or regulatory matters.

HOW WE PROTECT PERSONAL INFORMATION

We use reasonable administrative, technical, and physical safeguards designed to protect personal information within our organisation, and we hold our team accountable for complying with our policies and procedures regarding the protection and confidentiality of personal information.

Personal information provided through the Site, including online transactions, is transmitted through a secure server using SSL encryption technology. When "http" in the URL changes to "https," this indicates you are in a secure area; your browser may also display a padlock icon. SSL encrypts information such as your name, address, and payment details during transmission. Please note that email is not encrypted and should not be considered a secure means of sending payment information.

Unfortunately, no transmission over the internet is completely secure, and while we take reasonable steps to protect your personal information, we cannot guarantee its absolute security. If you have reason to believe your interaction with us is no longer secure, please notify us immediately using the contact details below.

CHILDREN'S PERSONAL INFORMATION

The Site is designed for a general audience and is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16 through the Site. If you believe a child under 16 may have provided us with personal information, please contact us using the details below.

EMAIL & MARKETING PLATFORM

We use Klaviyo as our email marketing platform. This means that when you sign up for our mailing list or place an order, we may share your contact and order details with Klaviyo in order for it to deliver marketing communications and manage your subscription preferences on our behalf. Your personal data is processed by Klaviyo in accordance with its own privacy policy.

UPDATES TO THIS PRIVACY NOTICE

This Website Privacy Notice may be updated periodically to reflect changes in our personal information practices. We will indicate at the top of the Notice when it was most recently updated. Any changes become effective once the revised Notice is posted on the Site.

HOW TO CONTACT US

If you wish to exercise any of your privacy rights, or have any question about this Privacy Notice or our use of your personal information, please contact us at:

The Exodus Clothing Company Toronto, Ontario, Canada Email: contact@thyexodus.com

If you are located in the EU or UK, you have the right to lodge a complaint with your local data-protection supervisory authority if you believe an infringement of applicable data-protection law has occurred.

Walk in your calling.