Maple Cocoa Artisan Chocolates Ltd. (“we,” “us,” “our”) respects your privacy and is committed to protecting your personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable federal and provincial privacy requirements.
1. Introduction and company information
This Privacy Policy explains how Maple Cocoa Artisan Chocolates Ltd. collects, uses, discloses, stores, and protects personal information in connection with our chocolate business, including our website, online ordering, customer service, marketing, events, and other interactions with customers, suppliers, and visitors.
Company: Maple Cocoa Artisan Chocolates Ltd.
Address: 1425 Evans Avenue, Suite 203, Etobicoke, ON M9C 5A3, Canada
Email: [email protected]
Phone: +1 (416) 742-9186
By using our services, contacting us, making purchases, or otherwise interacting with us, you acknowledge that your personal information may be handled as described in this Privacy Policy.
2. Data collection and processing
We may collect personal information directly from you, automatically through your device or browser, and from third parties where permitted by law.
The types of personal information we may collect include:
- Identity and contact details: name, billing and shipping address, email address, phone number, and company name if applicable.
- Order and transaction information: products purchased, order history, payment confirmation, delivery preferences, gift messages, refunds, and customer service records.
- Account and communication information: login details if you create an account, account preferences, correspondence, complaint details, and survey responses.
- Technical and usage information: IP address, browser type, device identifiers, pages viewed, cookies, analytics data, and website interaction data.
- Marketing preferences: subscription status, newsletter preferences, and responses to promotions or campaigns.
- Special instructions or sensitive information you choose to provide: for example, allergy-related notes, delivery instructions, or information included in customer messages. We encourage you not to provide unnecessary sensitive information.
We process personal information only to the extent necessary for legitimate business purposes and in compliance with applicable privacy laws.
3. Purpose of data processing
We use personal information for the following purposes:
- to process and fulfill orders for chocolates and related products;
- to deliver products, manage shipping, and provide order updates;
- to communicate with you regarding purchases, inquiries, complaints, refunds, and customer support;
- to maintain customer accounts and preferences;
- to personalize your experience and improve our products, services, website, and customer service;
- to send marketing communications, promotions, and newsletters where permitted and, where required, with your consent;
- to operate loyalty programs, promotions, contests, or events;
- to prevent fraud, unauthorized transactions, and misuse of our services;
- to comply with legal, tax, accounting, and regulatory obligations;
- to manage business operations, internal reporting, and recordkeeping;
- to enforce our terms, protect our rights, and resolve disputes.
4. Legal basis for processing
Under Canadian privacy law, we generally process personal information on the basis of consent, contractual necessity, legal obligations, and our legitimate business interests, as applicable and permitted by law.
- Consent: where you have given consent, expressly or impliedly, for specific purposes such as marketing communications or optional cookies.
- Contractual necessity: where processing is required to fulfill an order, provide customer support, or administer your purchase.
- Legal obligation: where processing is necessary to comply with tax, accounting, consumer protection, product safety, or other legal requirements.
- Legitimate business purposes: where processing is necessary for security, fraud prevention, service improvement, analytics, and operational administration, provided such processing is reasonable and appropriate in the circumstances.
Where consent is the basis for processing, you may withdraw it at any time, subject to legal or contractual restrictions and reasonable notice.
5. Data sharing and third parties
We do not sell personal information. We may share personal information with trusted third parties only as necessary and in accordance with this Privacy Policy and applicable law.
Third parties may include:
- Payment processors and financial institutions to process transactions securely;
- Shipping and delivery partners to deliver your orders;
- IT, hosting, website, and cloud service providers to operate our business systems and website;
- Marketing and analytics providers to help us understand website usage and manage communications, where permitted;
- Professional advisors such as accountants, lawyers, auditors, and insurers;
- Government authorities, regulators, courts, or law enforcement where required or permitted by law;
- Business transaction counterparties in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable safeguards.
We require third-party service providers to protect personal information and use it only for authorized purposes.
6. Data transfer to third countries
Some of our service providers may store or process personal information outside Canada, including in other jurisdictions such as the United States. As a result, your personal information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, or regulatory authorities in those countries.
Where cross-border transfers occur, we take reasonable steps to ensure your personal information is handled with appropriate safeguards, contractual protections, and security measures consistent with applicable Canadian privacy requirements.
7. Storage duration
We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including legal, accounting, tax, reporting, and dispute-resolution requirements.
Retention periods may vary depending on the type of information and the purpose for which it was collected. In general:
- order and transaction records are retained for the period required for business administration and legal compliance;
- customer service correspondence is retained as needed to address inquiries and disputes;
- marketing data is retained until you unsubscribe, withdraw consent, or it is no longer required;
- technical logs and analytics data are retained for security, operational, and statistical purposes for a limited period.
When personal information is no longer required, we will securely delete, anonymize, or destroy it in accordance with our retention practices and applicable law.
8. User rights
Subject to applicable law, you may have the following rights regarding your personal information:
- Access: to request confirmation of whether we hold personal information about you and to obtain access to that information;
- Rectification: to request correction of inaccurate, incomplete, or outdated personal information;
- Erasure: to request deletion of personal information in certain circumstances, subject to legal retention requirements;
- Restriction: to request that we limit the use of your personal information in certain situations;
- Data portability: where applicable, to request a copy of your personal information in a structured format;
- Objection: to object to certain processing activities, including some marketing uses, where applicable under law.
To exercise your rights, please contact us using the information provided below. We may need to verify your identity before responding. We will respond within a reasonable time and in accordance with applicable legal requirements.
9. Withdrawal of consent
Where our processing is based on your consent, you may withdraw that consent at any time by contacting us or using available unsubscribe mechanisms for marketing communications.
Please note that withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. In some cases, we may still process information where permitted or required by law, or where another lawful basis applies.
10. Right to complain
If you have concerns about how we handle your personal information, we encourage you to contact us first so that we can try to resolve the issue directly.
You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or another applicable provincial privacy authority if you believe your privacy rights have been violated.
We will cooperate with any lawful inquiry or investigation by a privacy regulator.
11. Data security
We implement reasonable physical, administrative, and technical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification.
These safeguards may include:
- secure systems and access controls;
- role-based access restrictions;
- encrypted or protected transmission where appropriate;
- vendor due diligence and contractual safeguards;
- employee confidentiality obligations and privacy awareness practices;
- monitoring for suspicious or unauthorized activity.
However, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we take reasonable steps to reduce risk and respond appropriately to incidents.
12. Contact information
If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact:
Maple Cocoa Artisan Chocolates Ltd.
1425 Evans Avenue, Suite 203
Etobicoke, ON M9C 5A3
Canada
Email: [email protected]
Phone: +1 (416) 742-9186
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. Any revised version will be posted on our website with the updated effective date.
We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes are posted constitutes acceptance of the updated policy to the extent permitted by law.
Effective date: October 21, 2026