1. Introduction and company information
This Privacy Policy explains how Maple Crust Bakery Ltd. collects, uses, discloses, stores, and protects personal information in connection with its bakery business, including in-store purchases, online inquiries, catering requests, customer service communications, marketing activities, and any other interaction with us.
Maple Crust Bakery Ltd. is committed to protecting personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy requirements.
Business name: Maple Crust Bakery Ltd.
Address: 1450 Eglinton Avenue West, Unit 12, Toronto, ON M6C 2E9, Canada
Email: [email protected]
Phone: +1 (416) 782-9463
2. Data collection and processing
We may collect personal information directly from you, automatically through our website or digital services, and from third parties where permitted by law. The types of personal information we may collect include:
- Identification and contact information, such as your name, email address, phone number, billing address, delivery address, and preferred contact details;
- Order and transaction information, including products purchased, payment method details, order history, special instructions, and receipt information;
- Communication information, including messages you send us by email, phone, contact forms, social media, or customer support;
- Account or loyalty information, if applicable, such as login credentials, preferences, and rewards activity;
- Website and device information, such as IP address, browser type, device identifiers, pages visited, and usage data collected through cookies or similar technologies;
- Marketing preferences and consent records;
- Any other information you voluntarily provide to us in the course of doing business with us.
We process personal information in a lawful, fair, and reasonable manner, and only to the extent necessary for the purposes described in this Policy or as otherwise permitted or required by law.
3. Purpose of data processing
Maple Crust Bakery Ltd. processes personal information for the following purposes:
- To provide bakery products and related services;
- To process and fulfill orders, including in-store, phone, online, pickup, and delivery orders;
- To communicate with customers about orders, inquiries, complaints, and service updates;
- To manage payments, refunds, accounting, and tax-related obligations;
- To provide customer support and respond to requests;
- To send marketing communications, promotions, and offers where permitted by law and subject to consent requirements;
- To personalize our products, services, and customer experience;
- To maintain and improve our website, systems, and business operations;
- To detect, prevent, and address fraud, security incidents, and misuse of our services;
- To comply with legal and regulatory obligations;
- To protect our rights, property, employees, customers, and business operations.
4. Legal basis for processing
Under Canadian privacy law, we process personal information only where we have a lawful and appropriate basis to do so. Depending on the circumstances, our processing may be based on:
- Consent: Where you have given us express or implied consent, including for marketing communications where required;
- Performance of a contract: Where processing is necessary to fulfill your order, provide services, or take steps at your request prior to entering into a contract;
- Legal or regulatory obligations: Where processing is required to comply with applicable laws, tax rules, accounting requirements, or lawful requests;
- Legitimate business purposes: Where processing is necessary to operate, secure, and improve our business and where such interests are not overridden by your rights and interests;
- Other lawful grounds: As otherwise permitted by applicable privacy legislation.
Where consent is required, you may withdraw it at any time subject to legal or contractual restrictions and reasonable notice.
5. Data sharing and third parties
We may disclose personal information to third parties in the following circumstances:
- Service providers that assist with payment processing, website hosting, email delivery, analytics, IT support, accounting, delivery coordination, and customer relationship management;
- Professional advisors, such as lawyers, auditors, insurers, and consultants;
- Government authorities, regulators, law enforcement, or other parties when required or permitted by law;
- Business partners involved in fulfilling a service or promotion, where you have been informed or have consented where required;
- Successors or potential successors in connection with a merger, financing, acquisition, reorganization, or sale of assets.
We require third parties that process personal information on our behalf to use appropriate safeguards and to use the information only for the services they provide to us, except where they act as independent controllers under their own privacy obligations.
6. Data transfer to third countries
Your personal information may be stored or processed outside your province or outside Canada, including in other jurisdictions where our service providers operate. As a result, information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, or government authorities in those locations.
Where personal information is transferred outside Canada, Maple Crust Bakery Ltd. takes reasonable steps to ensure that it is protected by contractual, technical, organizational, and administrative safeguards appropriate to the sensitivity of the information.
7. Storage duration
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to comply with legal and accounting requirements, to resolve disputes, and to enforce our agreements.
The retention period depends on the nature of the information and the context in which it was collected. For example:
- Order and transaction records may be retained for tax, accounting, and operational purposes;
- Customer service communications may be retained for quality assurance and record-keeping;
- Marketing consent records may be retained until you unsubscribe or withdraw consent, and for a reasonable period thereafter to maintain compliance records;
- Website logs and technical data may be retained for security, analytics, and maintenance purposes for a limited period.
When personal information is no longer required, we will securely delete, destroy, anonymize, or de-identify it where appropriate.
8. User rights
Subject to applicable law, you may have the following rights regarding your personal information held by Maple Crust Bakery Ltd.:
- Access: You may request access to the personal information we hold about you and information about how it has been used and disclosed;
- Rectification: You may request correction of inaccurate, incomplete, or outdated personal information;
- Erasure: You may request deletion of personal information in certain circumstances, subject to legal retention requirements;
- Restriction: You may request that we limit certain processing in specific situations where permitted by law;
- Data portability: Where applicable, you may request that certain information be provided in a structured, commonly used, and machine-readable format;
- Objection: You may object to certain forms of processing, including some marketing activities, where applicable.
To exercise your rights, please contact us using the details provided in this Policy. We may need to verify your identity before responding to your request. We will respond within a reasonable time and in accordance with applicable legal requirements.
9. Withdrawal of consent
Where our processing is based on your consent, you may withdraw that consent at any time by contacting us or using any unsubscribe mechanism included in our communications. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
Please note that if you withdraw consent for certain processing activities, we may no longer be able to provide some services or respond to some requests.
10. Right to complain
If you have concerns about how Maple Crust Bakery Ltd. handles your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve the matter.
You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or, where applicable, with a provincial privacy authority.
If you are in Ontario or another Canadian jurisdiction, we encourage you to review the applicable complaint process for your location and circumstances.
11. Data security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, alteration, or misuse. These measures may include:
- Access controls and role-based permissions;
- Secure systems and password protections;
- Encryption or secure transmission methods where appropriate;
- Employee confidentiality obligations and privacy training;
- Monitoring and logging of relevant system activity;
- Regular review of operational and security practices.
However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect personal information, we cannot guarantee absolute security.
12. Contact information
If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your rights, please contact:
Maple Crust Bakery Ltd.
1450 Eglinton Avenue West, Unit 12
Toronto, ON M6C 2E9
Canada
Email: [email protected]
Phone: +1 (416) 782-9463
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technology, or business operations. Any revised version will be posted on our website or otherwise made available to you, and the updated version will take effect when posted unless otherwise stated.
We encourage you to review this Privacy Policy periodically to stay informed about how Maple Crust Bakery Ltd. handles personal information.