Privacy

What we collect

When you place an order we collect your name, phone number, email address, and delivery address (if applicable), along with the details of your order. This information is stored securely in our database and used solely to fulfill your order and send you order-related emails (receipt, payment confirmation, ready notice).

We use Stripe to process card payments. Stripe handles your card details directly and we never see or store them. Stripe's privacy policy applies to information you share with them during checkout.

Analytics

We use Google Analytics to understand how visitors use the site (pages viewed, items added to a box, whether an order is started) so we can improve it. This is aggregate, non-identifying usage data. We do not send your name, email, phone number, address, or full postal code to any analytics service; delivery-area checks record only the first three characters of a postal code (a broad region) and whether it fell inside our zones.

If your browser sends a “Do Not Track” or Global Privacy Control signal, we do not record any analytics for your visit. You can also block analytics with most ad/tracker-blocking extensions.

Marketing emails (CASL)

We only send you marketing or promotional emails if you explicitly checked the opt-in box at checkout. We do not add you to any mailing list automatically. If you opted in and no longer wish to receive updates, you can withdraw consent at any time by emailing us or using the unsubscribe link in any marketing email we send.

Order-related emails (receipts, payment confirmations, pickup notices) are transactional and are not affected by your marketing preference.

Data retention

We keep order records for seven years to meet our bookkeeping obligations under Canadian tax law. Other personal information is kept only as long as necessary to fulfill your order and respond to any related inquiries.

Your rights (PIPEDA)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to access, correct, and request deletion of your personal information. To exercise any of these rights, complete the form below or email us directly. We will respond within 30 days.