1. Who we are
Josie's Sweet Caviaroperates josiessweetcaviar.com from Laval, Québec, Canada. We are the “controller” of the personal information collected through the site — meaning we’re the ones responsible for how it’s used and protected. This policy is written to comply with Canada’s Personal Information Protection and Electronic Documents Act(PIPEDA) and Québec’s Act Respecting the Protection of Personal Information in the Private Sector (Loi 25).
Privacy questions: info@josiessweetcaviar.com
2. What we collect
When you place an order, we collect:
- Your name and shipping address
- Your email address (for order confirmation and tracking)
- Your phone number (for delivery issues)
- The items you ordered and the total you paid
Payment details(card number, expiry, CVV) go directly to Square and never touch our servers. We only see the last four digits, a receipt confirmation, and Square’s transaction ID.
When you browse the site (with or without ordering), our host (Vercel) logs standard technical data — IP address, browser type, pages visited, timestamps — for security and analytics purposes.
3. How we use it
- To fulfill your order: pack it, ship it, and update you along the way.
- To respond to you: when you contact us with a question, feedback, or a problem.
- To keep required business records: Canadian tax law requires us to keep sales records for six years.
- To improve the site: aggregated, anonymized analytics about which products are viewed most, which browsers our visitors use, etc.
We do not sell your personal information to anyone. We do not send marketing emails unless you explicitly opt in.
4. Who else sees it
To run the shop, a small number of trusted service providers receive parts of your data:
- Square — processes your payment. Their privacy practices: squareup.com/ca/en/legal/general/privacy
- Shipping carriers (Canada Post, and any international courier we use) — receive your name and shipping address to deliver the parcel.
- Vercel — hosts the site and processes technical logs.
We may also disclose personal information if required by a valid court order, subpoena, or law enforcement request.
5. Where your data goes
Some of our service providers store data outside Canada (for example, Vercel and Square operate globally). By placing an order, you understand that your data may be processed and stored in other countries, subject to the privacy laws of those jurisdictions.
6. How long we keep it
- Order records: six years, as required by the Canada Revenue Agency.
- Contact form messages: two years, then deleted.
- Website analytics logs: retained by Vercel per their standard log-retention policy (typically 30 days).
7. Your rights
You have the right to:
- Ask us what personal information we hold about you
- Correct anything that’s wrong
- Ask us to delete your information(subject to our legal record-keeping obligations — e.g. we can’t erase a completed order within the six-year retention window)
- Withdraw consentat any time for anything that’s consent-based (like marketing emails)
- File a complaintwith the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec
To exercise any of these rights, email info@josiessweetcaviar.com. We’ll respond within 30 days.
8. Cookies
The site uses a small number of first-party cookies to remember your shopping cart between page loads. Square’s hosted checkout page uses its own cookies for fraud protection. We do not use advertising cookies.
9. Children
The site is not directed at anyone under 13, and we do not knowingly collect personal information from children. If you believe we have, please contact us and we’ll delete it.
10. Changes to this policy
We’ll update this page if our practices change. The current version and the “last updated” date live at the top of this page.
11. Contact
For any privacy question, complaint, or request: info@josiessweetcaviar.com · +1 (514) 244-6629