Another development for my story.
Since I have been banned, I told him that I didn't want my personal data on his site/database anymore.
He replied that my account is blocked and therefore he doesn't need to do anything.
I told him that A) my account is still active on the old website, and B) that I asked to destroy/erase my data, not to block my account (2 completely different things).
As per the
Personal Information Protection and Electronic Documents Act (PIPEDA) principle 5: "personal information that is no longer required to fulfil the identified purposes should be destroyed, erased, or made anonymous"
The "identified purposes" for my consent to the handling of my personal data was to make orders on the store. Since I am banned (and I don't intend to ever buy from NMC ever), that purpose ceases to exists.
But he is so delusional that he thinks I want my data to be removed so I can bypass the ban!!!
I told him that I reached out to him as a courtesy and to follow the Office of the Privacy Commissioner of Canada guidelines, before filing an official complaint.
His reply included "Your email has been blocked. I'm done with this shit from you. I will be reporting you to the authorities for harassment." ...except for him to send another message including:
"I'll be adding a stipulation to the privacy policy to cover lunatics like you that think they circumvent the ban by crying "privacy" concern.
If you wanted to shop here so badly you shouldn't have treated us like shit." (treating like shit => ask my CC company to do a chargeback)
At this point is not even funny, he really needs help...