Privacy Policy
Scope and applicable privacy law
This Privacy Policy explains how we handle personal information in connection with our website, orders and customer service. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies, together with applicable provincial privacy law.
Because this store is based in Ontario, PIPEDA and any other applicable federal or provincial privacy requirements govern our handling of personal information.
Information we collect
We may collect names, billing and delivery addresses, email addresses, telephone numbers, account details, order and return information, payment outcome and limited transaction records, customer-service communications, device and browser data, approximate location derived from an IP address, website activity, cookie choices, marketing preferences, and information used to prevent fraud and keep the website secure.
Sources and purposes
We receive information directly from customers, automatically when our website is used, from Shopify and payment or fraud-prevention services, from delivery providers, and from analytics or advertising services where permitted. We use it to operate the website, process and deliver orders, take payment, handle returns and support requests, communicate about orders, meet legal and accounting duties, prevent fraud, protect our services, improve the website, measure performance, and send marketing only where permitted.
Authority and consent
We collect, use and disclose personal information with meaningful consent where consent is required, for purposes a reasonable person would consider appropriate, and as otherwise permitted or required by law. Customers may decline optional collection or withdraw consent, subject to legal or contractual restrictions and reasonable notice. If information is required to process an order or provide a requested service, declining it may prevent us from completing that service.
Shopify and other service providers
Shopify hosts and supports our online store. Authorized payment providers process payment credentials and transactions. Delivery providers receive details needed to deliver orders. We may also use customer-support, security, analytics and advertising providers. Each provider receives only information reasonably needed for its role and is subject to applicable privacy duties and contractual controls.
Cookies and similar technologies
Strictly necessary technologies used for the shopping cart, checkout, account security, fraud prevention and core website functions may operate as permitted by law. Non-essential analytics, advertising and tracking technologies are activated only with valid consent where consent is required. Customers can use available cookie controls and browser settings to accept, reject or change optional choices.
Electronic marketing
Commercial electronic messages are sent only with express or implied consent permitted by Canada's Anti-Spam Legislation (CASL) or another lawful basis. Marketing messages identify the sender, provide contact information and include a working unsubscribe method. Unsubscribe requests are acted on within 10 business days. Service messages needed for an order, account, safety notice or legal obligation may still be sent where permitted.
Retention
We keep personal information only as long as reasonably needed for the purposes described here. Order, payment, tax and accounting records are generally kept for up to seven years where needed for legal, tax, audit or claims purposes. Customer-service records are generally kept for up to two years after a matter closes. Marketing records are kept until consent is withdrawn or they are no longer needed. Limited records may be kept longer when law, fraud prevention, dispute resolution or enforcement requires, after which information is deleted or anonymized.
Security and incidents
We use physical, organizational and technical safeguards appropriate to the sensitivity of the information, including access controls, secure transmission where appropriate, data minimization, service-provider controls, monitoring and access limited to legitimate needs. No method is completely risk free. We assess privacy incidents and provide notices or reports where applicable law requires.
Processing outside Canada
Shopify or another service provider may process personal information outside the customer's province or outside Canada. Information in another jurisdiction may be accessible to courts, law-enforcement or regulatory authorities under that jurisdiction's laws. We use reasonable contractual and organizational safeguards and remain accountable for personal information under our control as required by applicable law.
Access, correction and complaints
Subject to applicable conditions and exceptions, individuals may request access to personal information we hold about them, ask how it has been used or disclosed, and request correction of inaccurate or incomplete information. Individuals may withdraw consent subject to legal or contractual limits, challenge our compliance, and exercise any additional rights provided by applicable provincial law.
Privacy concerns may be raised with us first. Individuals may also complain to the Office of the Privacy Commissioner of Canada or the applicable provincial privacy commissioner.
To exercise a privacy right or ask a question, contact us by email Support@grocerstead.top or telephone 819-732-4019.
Contact details
- Email: Support@grocerstead.top
- Telephone: 819-732-4019
- Business address: 1151 Heritage Dr, Lasalle, Ontario, N9H 2C1, Canada