What we collect, and why
- Your email and postal code, when you check a postal code, start the plan builder or take the book. We need them to tell you whether we deliver to your street, to send the Table Report you asked for, and to send a sign-in link.
- Your dog’s details: name, weight, age, activity, tummy, allergies, what they eat now, and your own words in the two open boxes, saved exactly as you typed them. They size the plan and print on the pouch label and the order ticket.
- Your name, address and phone when you order, so the route can find your door and the driver can reach you.
- Your consent choices: each box you tick is stored with the exact wording you saw, the page and the time, and checked again before anything is sent.
- How you found us: the link you arrived on (campaign tags, a referral code) and your answer to “How did you hear about us?”, so we know which of our few channels works.
- Orders, deliveries and payments, kept as the record of what you bought and what you paid, as the law requires of any business.
Cookies and storage in your browser
We set three small first-party cookies when you visit: an anonymous visitor id (400 days), the first link that brought you here (set once) and the most recent one (for the session). They carry no name or email and are used only to attribute a sign-up to a channel. A fourth, set only after you start the plan builder, lets you resume where you left off. The one-off order basket is kept in your browser’s own storage and never leaves it until you check out.
We run no analytics or advertising scripts today. When we add them, a banner will ask first, and a “no” will be honoured on our servers as well as in your browser.
Who processes it
We do not sell or rent personal information, and we share it only with the companies that run the service for us, each under its own contract:
- Supabase hosts our database, in Canada (Central).
- Vercel runs the website (United States).
- Resend sends our emails, such as sign-in links and order notes (United States).
- Stripe will take and store card details when checkout opens; we never see or store your card number.
Some of these companies are outside Canada, so your information may be processed under the laws of those countries while it is with them.
Emails and texts
Service messages (a sign-in link, your order ticket, a delivery note, a question about a delivery) go to anyone with an order or an account and carry no offers. Marketing email or texts go only to people who ticked the separate, unticked box for each, and every one has a working unsubscribe. If you check a postal code outside our routes and leave an email, we send one note when we reach your street, and nothing more unless you ticked the box.
Friends you refer
If you invite a friend, we send them one message about your gift and no more. Their contact details are encrypted and deleted 30 days after an unclaimed invite.
How long we keep it
Account, dog and order records stay while you have an account and for the period the tax rules require afterwards. A plan-builder draft that never becomes an order is deleted within 12 months. Consent records are kept as long as we might need to show what you agreed to. If you ask us to delete your account, we remove or anonymise everything we are not legally required to keep.
Your rights
You can ask to see what we hold about you, correct it, withdraw a consent, or have it deleted. Most of it you can see and change yourself in your account. For anything else, write to us; we answer within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.
Changes
When we add a processor or a purpose, this page changes the same day and the date at the top moves. We do not change what we do with your information quietly.