Bouquet Café (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and safeguard your personal information when you visit or make a purchase from our Shopify-powered website, in accordance with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (PIPA). All personal data is collected, processed, and stored on secure servers in Canada. We use clear, plain language so you can easily understand our practices (as Shopify recommends, we explain what personal information we collect, how we use it, and who we share it with). By using our site or services, you agree to the terms of this Privacy Policy.

Personal Information We Collect

We only collect personal information necessary to serve you and operate our business. This may include details you provide and information automatically gathered when you use our site. For example, we collect:

Identity and Contact Information: Name, email address, phone number, and postal address (for billing and shipping).

Order and Payment Information: Payment details (e.g. credit card number) and billing information, which are processed securely via Shopify payment provider. We do not store full credit card numbers on our servers.

Transactional and Account Data: Order history, items purchased, and account login credentials (if you create an account).

Website Use Data: Technical information like your browser type, device ID, IP address, and cookies that track preferences (e.g. items in your cart). This helps us ensure the website functions properly and personalize your experience.

These are typical categories of personal data collected by e-commerce sites. We collect personal information directly from you (for instance, when you place an order or fill in a form), and through automated means (such as cookies when you browse our site). You may choose not to provide certain information; however, this might limit your ability to use some services (for example, we need your address to deliver products).

How We Use Your Personal Information

Bouquet Café uses your personal information only for identified and reasonable purposes in running our café and online store. The main purposes for which we collect and use personal information include:

Order Fulfillment: To process your orders, arrange delivery of products, and provide you with order confirmations and invoices. (For example, we use your name and address to ship your bouquet, and your payment information to process the transaction.)

Communication: To communicate with you about your orders and respond to your inquiries or customer service requests. We may email you updates about your purchase or notify you of any issues.

Marketing (with Consent): To send you promotional communications, such as our newsletter, special offers, or updates about new products or events at Bouquet Café – only if you have opted-in. You can unsubscribe from these messages at any time.

Improvement and Personalization: To improve our products, services, and website. For instance, analyzing site usage data (like which pages are visited) helps us enhance user experience. We may also use cookies to remember your preferences (e.g. currency or cart contents).

Legal Compliance: To comply with legal obligations or regulatory requirements (for example, maintaining records for tax purposes) and to protect our rights or the safety of our customers (such as fraud prevention).

We will not use your personal information for any purpose other than the ones outlined above without obtaining your consent, unless required or permitted by law. We retain personal information only as long as necessary to fulfill these purposes or as required by law, after which it will be securely deleted or anonymized.

Third-Party Service Providers (Shopify and Others)

We do not sell your personal information to third parties. However, we do share certain personal information with trusted third-party service providers, strictly to help us provide our services to you, as described below:

Shopify: Our online store is built on the Shopify platform. Shopify Inc. acts as our data processor and hosting provider. This means your personal information (such as your name, email, address, and order details) is stored in Shopify’s secure databases on our behalf. Shopify only uses your information to help run our store – for example, to manage our inventory, process payments, and facilitate shipping. Shopify is a Canadian company with robust security measures, and it is contractually obligated to protect your data and keep it confidential. (In other words, Shopify will not use your personal data for its own marketing or share it without authorization.)

Payment Processors: We use reputable payment processing services (for example, credit card companies or payment gateways) to securely handle your payment transactions. Your payment details are transmitted directly to these providers over encrypted connections and are subject to strict data security standards (such as PCI-DSS). These processors only use your payment information to process the transaction and are not permitted to use it for other purposes.

Shipping Partners: If your purchase includes physical products, we share your necessary contact information (name and delivery address, and sometimes phone/email for delivery updates) with our delivery partners or postal services to ship your orders. They are provided only the information required to deliver your package.

Other Service Providers: In certain cases, we may use other third-party services to assist with our business operations – for example, an email newsletter platform (to send you updates if you subscribed) or analytics tools (to understand how customers use our site). We carefully select these providers and ensure they also have privacy and security standards to safeguard your data. They are given access only to the information needed to perform their functions and must not use it for any other purpose.

All third-party providers we engage are required to protect your information in a manner consistent with this Privacy Policy and applicable law. We do not authorize them to use or disclose your information for their own marketing or any unrelated purposes.

International Transfers: As noted above, your personal data is stored in Canada. In general, we aim to keep your data in Canada. If any service provider is located outside Canada (for example, an email service based in the United States), we take steps to ensure your information is given a similar level of protection as it would be under Canadian law. This may include using contracts or agreements to protect your data.

Security of Your Personal Information

Bouquet Café takes the security of your personal information seriously. We implement appropriate technical and organizational safeguards to protect your data against unauthorized access, loss, or theft. These measures include:

Encryption: All information you enter on our site (such as personal details and payment data) is transmitted over a secure connection. We use Secure Socket Layer (SSL) technology to encrypt data during transmission. In addition, Shopify’s infrastructure encrypts sensitive information at rest using advanced encryption standards. This means that your data is scrambled and protected both when it’s sent to us and when it’s stored on our servers, so that it cannot be read by unauthorized parties.

Access Controls: We limit access to personal information to only those employees, contractors, and service providers who need it to perform their duties (for example, fulfilling orders or assisting you). Our team is trained on confidentiality obligations, and all personnel with such access are required to keep your information confidential.

Secure Storage: Shopify and our other service providers maintain physical, electronic, and procedural safeguards in line with industry best practices to guard your personal data. For instance, Shopify is Level 1 PCI-DSS compliant (the highest standard in the payment industry) and uses firewalls and monitoring to prevent intrusions. We regularly update our security practices and adapt to new threats as needed.

Payments Security: Any credit card information you provide on our website is handled through secure, encrypted channels. We do not store your full payment card details on our own systems. Our payment processors and Shopify adhere to strict security standards to protect your financial data.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. However, we continuously review and enhance our security measures to ensure your data is as safe as possible. If you have reason to believe that your interaction with us is no longer secure (for example, if you suspect a security vulnerability), please contact us immediately using the contact information below.

Your Rights and Choices

We respect your rights to your personal information. Under PIPEDA and PIPA, and other applicable privacy laws, you have the following rights regarding your personal data:

Access Your Information: You have the right to request a copy of the personal information we hold about you, and to receive an explanation of how we have used it and who we have disclosed it to (subject to certain exceptions under law).

Correct Your Information: If any of your personal details are inaccurate or outdated, you have the right to request that we correct or update them. If correction is not possible (for example, if the information is an opinion or evaluative), we will note the correction request in our records, or discuss alternative actions such as deletion of the information if appropriate.

Withdraw Consent / Opt-Out: Where you have given consent for us to use your personal information, you have the right to withdraw that consent at any time. For instance, if you initially agreed to receive marketing emails, you can unsubscribe using the link in those emails or contact us to be removed from our mailing list. If you withdraw consent for a specific purpose (e.g. for marketing), we will stop using your information for that purpose. Please note that withdrawing consent will not affect our use of your information for purposes that do not rely on consent (for example, fulfilling an order you placed), and it may not be retroactive.

These rights are provided under Canadian privacy laws. To exercise any of these rights, please contact us (see Contact Us below). We may need to verify your identity (for your protection) before fulfilling certain requests, especially for access or deletion. We will respond to your inquiry or request as quickly as possible, and in any event within the timeframes required by law. There is no fee for making a request unless it is unusually large or repetitive, in which case we will inform you of any cost before proceeding.

In addition to the above, you can opt-out of cookies or tracking by adjusting your browser settings, and you can opt-out of targeted advertising by using industry tools or settings on platforms (as applicable). For more information on cookies and managing your preferences, you can refer to your browser’s help documentation. (Note: Our site currently does not use any third-party advertising trackers beyond basic Shopify analytics.)

If you have any questions about your rights or need assistance exercising them, please reach out to us. We are here to help.

Contact Us

Bouquet Café has appointed a Privacy Officer who is responsible for overseeing our privacy practices and compliance with PIPEDA/PIPA. If you have any questions, concerns, or requests regarding your personal information or this Privacy Policy, please contact our Privacy Officer:

Privacy – Bouquet Café

Email: info@bouquetcafe.ca

Mailing Address: 1418 Robson Street, Vancouver, British Columbia