Privacy Policy

1. Information We Collect

We collect information that you provide directly and information we obtain automatically when you use the Platform.

Information you provide. This may include: name, email address, phone number, delivery and billing address; account credentials (e.g., password, in encrypted form); payment information (e.g., card details processed by our payment providers—we do not store full card numbers); subscription preferences (e.g., box tier, max budget, meal plan or wellness program choices); dietary preferences, allergies, or restrictions you choose to share; order and cart history; communications you send to us (e.g., support requests, partner or supplier applications); and any other information you voluntarily provide when registering, ordering, or using the Platform.

Information we collect automatically. When you access the Platform, we may collect: device and browser information (e.g., type, operating system); IP address and general location (e.g., region or city); pages visited, links clicked, and time spent on the Platform; and similar usage data. We may use cookies, pixels, and similar technologies as described in Section 6.

2. How We Use Your Information

We use the information we collect to: provide, operate, and improve the Platform and Services; process orders, subscriptions, and payments; manage your account and preferences (e.g., box customization, cutoff reminders); communicate with you about orders, delivery, account issues, and service updates; send you marketing and promotional communications where you have consented or where permitted by law (you may opt out at any time); respond to your inquiries and support requests; process and evaluate partner or supplier applications; prevent fraud, enforce our Terms, and protect the security of the Platform; comply with legal obligations and respond to lawful requests; and for other purposes described at the time of collection or with your consent.

3. Disclosure of Your Information

We may share your personal information with: Service providers who assist us in operating the Platform (e.g., payment processors, delivery and logistics partners, hosting and analytics providers), subject to agreements that limit their use of your information; suppliers or partners where necessary to fulfill orders or run programs; professional advisers (e.g., lawyers, auditors) where necessary; and law enforcement, regulators, or other parties when required by law or to protect our rights, safety, or property. We do not sell your personal information to third parties for their marketing. We may share aggregated or de-identified information that cannot reasonably identify you.

4. Legal Basis for Processing (Where Applicable)

Where required by applicable law (e.g., in certain jurisdictions outside Canada), we process your information based on: your consent; performance of a contract with you (e.g., providing orders and subscriptions); our legitimate interests (e.g., improving the Platform, preventing fraud, marketing where permitted); and compliance with legal obligations. You may withdraw consent where processing is consent-based, subject to legal or contractual restrictions; withdrawal may limit our ability to provide certain Services.

5. Retention of Your Information

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including to provide the Services, resolve disputes, enforce our agreements, and comply with legal and regulatory requirements. Account and order data are typically retained for a period after your last activity or account closure as needed for legal, tax, or operational purposes; after that, we may delete or anonymize the data. You may request deletion or restriction of your data as described in Section 8, subject to applicable law.

6. Cookies and Similar Technologies

We and our service providers may use cookies, web beacons, pixels, and similar technologies to collect usage data, remember your preferences, keep you signed in, and improve the Platform. You can control cookies through your browser settings; disabling certain cookies may affect the functionality of the Platform. We may use analytics services that collect information about your use of the Platform to help us understand usage patterns and improve our Services. For more details, see any cookie notice or preference centre we provide on the Platform.

7. Security

We use reasonable administrative, technical, and physical measures to protect your personal information against unauthorized access, loss, or alteration. No method of transmission or storage is completely secure; we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us of any suspected unauthorized access.

8. Your Rights and Choices

Depending on your location and applicable law, you may have the right to: Access the personal information we hold about you; correct inaccurate or incomplete information (you can also update many details in your account); request deletion of your personal information, subject to legal or operational retention requirements; object or restrict certain processing; withdraw consent where processing is based on consent; data portability (e.g., receive a copy of your data in a structured format where required by law); and lodge a complaint with a supervisory authority. To exercise these rights, contact us at the details in Section 12. We will respond within the time required by applicable law. If you close your account, we will handle your data as described in this policy and in our Terms (e.g., retention for legal/operational purposes, then deletion or anonymization where appropriate).

9. Canadian Privacy Law

We comply with applicable Canadian federal and provincial privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies, and any provincial legislation (e.g., Quebec’s Act 25, Alberta’s PIPA, British Columbia’s PIPA). We collect, use, and disclose personal information only for the purposes identified in this policy or as otherwise permitted by law. You may contact our privacy officer (see Section 12) with questions or complaints regarding our handling of your personal information.

10. Children

The Platform is not directed at children under the age of majority in their province or territory of residence. We do not knowingly collect personal information from children. If you believe we have collected information from a minor without parental or guardian consent, please contact us and we will take steps to delete such information.

11. Third-Party Links and Services

The Platform may contain links to third-party websites or services (e.g., social media, payment providers). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on the Platform and indicate the date of the last update. Material changes may be communicated by email or by a notice on the Platform. Your continued use of the Platform after the effective date of changes constitutes your acceptance of the updated policy. If you do not agree, you should stop using the Platform and may close your account as described in our Terms.

13. Contact Us

For questions about this Privacy Policy, to exercise your privacy rights, or to contact our privacy officer, email us at privacy@wellfood.ca or use the contact details provided on the Platform. We will respond to your request in accordance with applicable law.