Privacy policy

Privacy Policy

Order By The Case ("we", "us") respects your privacy. This policy explains how we collect, use, share and protect your personal information when you visit our website, place an order or apply for a business account.

We handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, provincial privacy laws, including Quebec's Act respecting the protection of personal information in the private sector.

Accountability

Our Privacy Officer is responsible for our privacy practices. You can reach our Privacy Officer at orderbythecase@gmail.com.

Information we collect

  • Contact and delivery details: name, email address, phone number, delivery address and delivery instructions.
  • Order information: products ordered, order history, delivery dates and communications with us.
  • Payment information: payments are processed by our payment providers. We do not store full card numbers.
  • Business account information: if you apply for invoice terms, your business name, billing contact and the information needed to review your application.
  • Website information: device and browser information, IP address and how you use our site, collected through cookies and similar tools.

Why we collect it

We collect only what we need to:

  • process, deliver and support your orders;
  • confirm your delivery day by text or email;
  • manage orders and business accounts, including invoicing and collections;
  • prevent fraud and keep our website secure;
  • meet our legal, tax and accounting obligations; and
  • improve our products and website.

Consent

By placing an order or creating an account, you consent to our use of your information for the purposes above. We will ask for your separate consent before sending you marketing emails or texts. The marketing checkbox at checkout is unticked by default, so you only receive marketing if you choose to. You can unsubscribe at any time using the link in our messages or by emailing us. You may withdraw your consent to other uses, subject to legal or contractual limits. If you do, we may not be able to complete your order.

Sharing your information

We do not sell your personal information. We share it only with service providers who help us run our business, such as:

  • Shopify, our e-commerce platform;
  • payment processors;
  • email and SMS tools;
  • delivery partners; and
  • accounting tools.

These providers may use it only to provide services to us and must protect it.

We may also disclose information when required by law.

Storage outside Canada

Some of our service providers store or process information outside Canada, including in the United States. When that happens, your information is subject to the laws of that country and may be accessed by its authorities. We use contracts and other safeguards to protect it.

Cookies

Our website uses cookies to keep your cart working, remember your preferences and understand how the site is used. You can manage cookies in your browser settings. Turning off some cookies may affect how the site works.

How long we keep it

We keep personal information only as long as we need it:

  • Account and order records are kept for 7 years, to meet tax and accounting requirements.
  • Marketing information is kept until you unsubscribe.
  • Other information is kept only as long as needed for the purposes above or as required by law.

When we no longer need it, we securely delete or anonymize it.

How we protect it

We use reasonable physical, administrative and technical safeguards, such as access controls and encrypted connections, to protect your information from loss, theft and unauthorized access.

If a privacy breach creates a real risk of significant harm, we will notify you and the appropriate privacy regulator as required by law.

Your rights

You can ask to:

  • see the personal information we hold about you;
  • correct information that is inaccurate or incomplete; and
  • withdraw your consent or ask us to delete your information, subject to legal requirements.

Email your request to orderbythecase@gmail.com. We will respond within 30 days and may need to confirm your identity first.

Complaints

If you have a concern, please contact our Privacy Officer first. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or, in Quebec, the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca).

Changes to this policy

We may update this policy from time to time. The current version is always posted on this page with its effective date.

Effective date: November 1, 2026