Privacy Policy

Data & Privacy

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use our Service. We operate in British Columbia and our practices comply with BC's private-sector privacy law and applicable Canadian requirements.

14 sectionsLast updated: 19 May 2026

This Privacy Policy applies to personal information collected through our app, website, and related services. We operate in British Columbia. Our privacy practices are intended to comply with BC's private-sector privacy law, and where applicable, other Canadian privacy requirements.

We may collect:

  • Name and email address
  • Account credentials or authentication information
  • Selected store and cart contents
  • Order history and wallet balance / Gift Wallet activity
  • MongoDB user ID or internal account identifiers
  • Payment-related information handled by our payment processor
  • Device, browser, IP address, log, and usage information
  • Support messages and communications
  • Other information you voluntarily provide

We may use personal information to:

  • Create and manage your account
  • Verify your identity and authenticate your access
  • Show your selected store and eligible items
  • Process orders and payments
  • Calculate, apply, or store subsidies and Gift Wallet balances
  • Provide customer support
  • Send account, order, and service-related emails
  • Detect fraud, abuse, or security issues
  • Comply with legal obligations
  • Improve and maintain the Service

We do not sell your personal information. We may share personal information only as needed to operate the Service, including with:

  • Your selected store and authorized cashier or store staff, but only the limited information needed to complete a transaction
  • Service providers such as Stripe, MongoDB, Resend, GoDaddy, Vercel, ImageKit, and Better Auth
  • Professional advisers, regulators, law enforcement, or courts where required by law
  • Another entity in connection with a merger, sale, financing, or business reorganization

Payment information is processed by our payment processor and not stored by us in full where avoidable. If you make a payment through the Service, your information may be processed by Stripe or another payment provider subject to its own privacy policy and security practices.

We may use cookies, session tokens, local storage, and similar technologies to keep you signed in, remember preferences, improve performance, and protect the Service. You can usually control cookies through your browser settings, but some features may not work properly if you disable them.

We use reasonable administrative, technical, and security measures to help protect personal information from unauthorized access, loss, misuse, or disclosure. Your data is stored using trusted service providers and infrastructure platforms. While we take security seriously, no method of electronic storage or transmission over the internet is completely secure. We cannot guarantee absolute security of your information.

We keep personal information only as long as reasonably necessary to provide the Service, maintain business and financial records, meet legal, accounting, or tax obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it where reasonable.

Subject to legal limits, you may:

  • Request access to personal information we hold about you
  • Request correction of inaccurate information
  • Withdraw consent to our collection, use, or disclosure of personal information on reasonable notice
  • Close your account

The Service is not intended for children who cannot legally enter into contracts. We do not knowingly collect personal information from such children without appropriate authorization.

Your information may be stored or processed in Canada or other jurisdictions where we or our service providers operate. Those jurisdictions may have laws that require disclosure of information to courts, law enforcement, or government bodies in those places.

We may send you account, service, and support emails. We will only send marketing messages where permitted by law and, where required, with consent. You may unsubscribe from marketing emails using the link in the message or by contacting us.

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you. Your continued use of the Service after the update takes effect means you accept the revised policy.

To ask questions, make a privacy request, or complain about how we handle personal information, please contact our privacy contact via email.

Privacy requests or questions? Contact info@canadianscart.ca