Ontario Fresh & Tasty logo

Privacy Policy

Last updated: July 17, 2026

Ontario Fresh & Tasty Inc. ("we," "us," or "our") respects your privacy. This policy explains what personal information we collect through our public website and customer accounts at FreshAndTasty.ca (the "Service"), how we use it, and the choices you have. By using the Service, you agree to the practices described in this policy.

Definitions

Personal Data
Any information that relates to an identified or identifiable individual.
Usage Data
Data collected automatically when you use the Service, such as your IP address, browser type, and pages visited.
Account
A customer account created for you to access the Service. Accounts require email verification before access is granted.
Cookies
Small files placed on your device by a website to store browsing session information and preferences.

Information We Collect

Account Information

When you register for a customer account or update your profile, we collect:

  • Full name
  • Email address (verified before account activation)
  • Password, stored as a one-way cryptographic hash — never in plain text
  • Display preferences (theme, time format)

Contact Form Submissions

When you use the public contact form, we collect:

  • Name, email address, and phone number (phone is optional)
  • Message content
  • IP address, browser type, platform, and device type at the time of submission

Usage Data

We automatically collect the following when you use the Service:

  • IP address
  • Browser type and version
  • Operating platform and device type
  • Date and time of access

Cookies & Similar Technologies

We use the following technologies to operate the Service:

  • Essential Cookies — Session Cookies, administered by us.

    Required to authenticate you, maintain your login session, and prevent fraudulent account use. The Service cannot function without these cookies.

  • Functionality Cookies — Persistent Cookies, administered by us.

    Remember your preferences, such as theme and time format, so you do not need to re-enter them on each visit.

  • Cloudflare Turnstile — Bot-protection widget, administered by Cloudflare, Inc.

    Displayed on our sign-in, registration, password-reset, and contact forms to distinguish legitimate visitors from automated bots. Turnstile evaluates signals from your browser (and may briefly use your IP address) to produce a pass/fail result for the form you're submitting. It is not used for advertising and does not track you across other websites. See Cloudflare's Privacy Policy for details.

You may instruct your browser to refuse cookies, but doing so will prevent you from logging in and using the Service.

How We Use Your Information

  • To operate the Service — including account authentication and core site functionality.
  • To manage your account — registration, email verification, and password resets.
  • To respond to contact inquiries — reading and replying to messages submitted through our contact form.
  • To prevent spam and automated abuse — using Cloudflare Turnstile to block bot-driven form submissions and credential-stuffing attempts.
  • To comply with legal obligations — retaining records as required by applicable law.

We do not sell your personal information to third parties. We do not use your data for advertising or marketing profiling.

Retention of Your Personal Data

We retain personal data for as long as necessary to fulfill the purposes described in this policy, or as required by law. Account data is retained for the life of your account. You may request deletion of your account data by contacting us (see below); some records may be retained where required by legal obligation.

Disclosure of Your Personal Data

Internal Access Controls

Access to personal data within the Service is restricted to authorized personnel with a legitimate business need, such as responding to a contact inquiry or providing account support.

Service Providers

We share data with third-party service providers who help us operate the Service, including:

  • Cloudflare, Inc. — content delivery network, network security, bot protection (Turnstile), and file storage. Cloudflare may process your IP address and request data as part of routing and securing traffic to our Service.
  • Email delivery provider — used to send account verification, password reset, and reply emails.

These providers are bound to process data only on our behalf and in accordance with this policy.

Business Transactions

If we are involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction.

Law Enforcement & Legal Requirements

We may disclose your personal data when required to do so by law or in response to valid requests from public authorities, and to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of the Company
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of users of the Service or the public
  • Protect against legal liability

Security of Your Personal Data

We take the security of your personal data seriously. Your password is stored using one-way cryptographic hashing and is never readable by anyone, including our staff. All accounts require email verification before access is granted. Sign-in, registration, and password-reset forms are protected by Cloudflare Turnstile to guard against automated attacks. We use encrypted connections (HTTPS) for all data in transit. While no system can guarantee absolute security, we are committed to continuously maintaining and improving our safeguards to protect your information.

Your Rights (Canadian Residents)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Withdraw consent to certain uses of your information (subject to legal or contractual restrictions)
  • File a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, please contact us using the information below.

Links to Other Websites

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: