Privacy Policy

Account: name, email, password (stored hashed by our authentication provider) or Google/Apple sign-in (Google shares your name, email address and profile picture; Apple may share a private relay email). Checkout: the name and phone number you give for pickup (we also save that phone number to your account to fill in next time), pickup time, items, notes and special requests. Catering: name, phone, optional email, pickup date and window, dozens ordered and notes. Payment: Stripe holds your verified account email so it can email your receipt, and collects your card details on its secure checkout page; we receive a payment reference, amount and status, not your card number. Orders placed with staff: if you order by phone or in store, staff may enter your name, phone and notes. Device: if you turn on order notifications, a push subscription for that order. Our hosting provider records technical data (IP address, browser, time) in security logs.

Please don't put medical details in order notes. For a serious allergy, call us at 613-830-7171 instead.

• To take, prepare, and hand over your pickup and catering orders.
• To process payments, additional charges, and refunds.
• To operate your account and autofill checkout.
• To email your receipt through Stripe when you pay, and to send a push notification about a pickup order when you turn that on.
• To keep the Service secure, prevent fraud and abuse, and fix problems.
• To meet legal, tax and accounting obligations.

We do not sell or rent your personal information, and we do not use it for third-party advertising. We don't send marketing email.

We collect, use and disclose your personal information with your knowledge and consent, except where the law allows or requires us to do so without consent. The purposes are the ones in this policy. You consent when you create an account, place an order, or give us information for one of those purposes. You may withdraw consent at any time, on reasonable notice, by deleting your account or contacting us, subject to legal or contractual restrictions. If you withdraw consent, we may be unable to complete an order or keep your account, and we will tell you those consequences. After you withdraw consent we keep only the records the law requires us to keep.

We use: Stripe (payments, fraud prevention; USA/Ireland), Cloudflare (website hosting and security; global network), Cloudflare Turnstile (bot protection), Supabase (database and sign-in; USA), Resend (order emails; not yet in use; USA), Google (Google sign-in, and a Google Maps map on our home and About pages that loads only if you choose to open it, which then sends your IP address to Google; USA), Google/Mozilla push services (notifications), Apple (Sign in with Apple, push notifications, iCloud Mail; USA) and WhatsApp/Meta if you choose to message us there. They may only use your information to provide their service to us.

Some of these providers store or process information outside Canada, mainly in the United States. Information processed there is subject to the laws of that country and may be accessible to its courts, law enforcement and national security authorities.

Account details: until you delete your account. Paid and refunded order records: six years after the end of the fiscal year of the order, as Canadian tax law requires (up to about seven years in total). After that we delete or anonymize them. If you delete your account sooner, we keep those order records but replace your name with "Deleted customer" and remove your phone number, email and notes. Unpaid or abandoned checkouts: [90 days]. Notification subscriptions: deleted when you delete your account. Stripe keeps its own payment records under its legal obligations. Backups roll off within [X] days.

You can view and edit your name, phone and email under Account → Settings. You can request access to, or correction of, the personal information we hold by emailing alibababakery@icloud.com.

Deleting your account: you can permanently delete your account at any time in the app, under Account → Settings → “Delete my account”. This removes your profile, saved details, and notification tokens, deletes the Stripe customer that holds your email for receipts, and unlinks you from past orders. We respond to email deletion requests within 30 days.

You can turn push notifications off at any time in your device settings.

We protect your data with encryption in transit (HTTPS), access controls, row-level database security so you can only read your own records, and payment handling delegated to a PCI-DSS Level 1 provider. No system is perfectly secure; if a breach ever affects you, we will notify you and the Privacy Commissioner of Canada as required by law.

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

We use no advertising or analytics cookies. We use: your browser's local storage to keep you signed in, hold your bag, cache the menu and remember your settings; Cloudflare Turnstile (bot protection); Stripe cookies on our payment pages for secure payment and fraud prevention; and, on our home and About pages, a Google Maps map that loads only if you choose to open it, which then sends your IP address to Google. Staff tablets use security cookies for the staff screens.

We may update this policy; the “Last updated” date above shows when.

Privacy Officer, Ali Baba Bakery Inc., 200 Vanguard Dr Unit #7, Orléans ON K4A 1A1, alibababakery@icloud.com · 613-830-7171. We respond to access and correction requests within 30 days. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

See also our Terms of Service.