ZUCCHERO CANADA
Privacy Policy
Canada Cacao Company Inc. ("Zucchero Canada") · Last updated June 15, 2026
Zucchero Canada (Canada Cacao Company Inc., "we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit zuccherocanada.ca or zuccherocanada.us (the "Site"), buy from us online or in person, or contact us. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), and, where it applies to residents of Québec, the Act respecting the protection of personal information in the private sector (Québec Law 25), as well as other applicable privacy laws.
1. Scope
This policy applies to personal information about our retail customers, professional and wholesale (business) customers, and their representatives, website visitors, and people who contact us. "Personal information" means information about an identifiable individual.
2. Our Privacy Officer
We have designated a Privacy Officer who is responsible for our compliance with this policy and applicable privacy law. You may contact our Privacy Officer about this policy, to exercise your rights, or to make a complaint:
- Email: privacy@zuccherocanada.ca
- Mail: Privacy Officer, Canada Cacao Company Inc., 8508 Wentworth Dr. SW, Calgary, AB T3H 5V3, Canada
- Phone: +1 (587) 774-8873 · Toll Free +1 (877) 741-8251
3. Personal information we collect
- Identity and contact details: name, billing and shipping address, email, phone number.
- Order and transaction information: products viewed and purchased, order history, quotations, and invoices, whether you buy online or in person at our location (Shopify Point of Sale).
- Payment information: processed by our payment providers (Shopify Payments and/or Stripe). We do not store full payment card numbers.
- Account information: login credentials and preferences if you create an account.
- Business-customer information: company name, role, and, for credit accounts, credit application and credit-reference information.
- Customs information: for shipments to the United States, the information required for customs clearance includes the name, delivery address, contact details, and end use.
- Device and usage information: IP address, browser, time zone, cookie data, pages and products viewed, and how you interact with the Site (collected automatically — see Section 10).
- Communications: information you provide when you contact us by email or through our chat (Shopify Inbox).
4. Why we collect and use personal information
We use personal information to:
- Process and fulfill your orders, including payment, shipping, customs clearance, pickup, returns, and warranty service.
- Provide customer support and respond to your inquiries and quotation requests.
- Manage accounts, including B2B credit accounts (credit checks and account administration).
- Send you marketing communications where you have consented (see Section 6).
- Detect and prevent fraud and secure our Site.
- Operate, analyze, and improve our Site and services.
- Comply with legal, tax, customs, and regulatory obligations.
5. Consent
We collect, use, and disclose personal information with your consent, which may be express or implied, depending on the information's sensitivity and purpose. By placing an order or providing your information, you consent to the uses described in this policy. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting our Privacy Officer. Doing so may mean we can no longer provide certain products or services.
6. Marketing communications (CASL)
We send commercial electronic messages (such as promotional emails) only in accordance with Canada's Anti-Spam Legislation (CASL), based on your express or implied consent. Every marketing message includes an unsubscribe link, and you can opt out at any time. Opting out of marketing does not affect transactional messages about your orders.
7. How we share personal information
We do not sell your personal information. We share it only as needed to run our business and as permitted or required by law:
- With service providers and processors who act on our behalf (see Section 8).
- To comply with applicable law, a subpoena, court order, customs or tax authority, or other lawful request, and to protect our legal rights.
- For B2B credit and collections: with credit bureaus, credit-reference, and collection agencies, where you have a credit account or an overdue balance, as described in our Sales Terms & Conditions.
- In connection with a business transaction (such as a sale, merger, or financing), subject to appropriate confidentiality protections.
8. Service providers and processors
We rely on trusted third parties to operate our business. Each receives only the information needed for its function. They include:
- Shopify — e-commerce platform, hosting, Point of Sale, the Shop app, and customer messaging (Shopify Inbox) (shopify.com/legal/privacy).
- Shopify Payments and/or Stripe — payment processing.
- Shipping carriers — FedEx, Canada Post, UPS, Canpar, and Purolator — to deliver your order.
- Allied CHB Inc. — our licensed U.S. customs broker — for customs clearance of U.S. shipments.
- Klaviyo — email and marketing communications.
- Advertising and analytics partners — Google (Google Analytics and the Google & YouTube channel), Meta (Facebook & Instagram), Microsoft (Bing), Pinterest, and Shopify — audiences — for website analytics, advertising, measurement, and audiences.
- Shopify Collective — we participate as a supplier; when you buy our products through another Shopify store that sells them, we receive the information needed to fulfill and ship your order.
9. Storage and transfers outside Canada
Your personal information may be stored and processed outside your province and outside Canada, including in the United States, by our service providers (for example, Shopify). While outside Canada, it may be subject to the laws of that jurisdiction, including lawful access by courts, law enforcement, and government authorities. For personal information about residents of Québec, we assess privacy-protection factors before transferring it outside Québec, as required by Québec Law 25. You may contact our Privacy Officer for more information about how we protect information that is transferred.
10. Cookies and tracking technologies
When you visit the Site, our partners and we use cookies and similar technologies (such as pixels and tags) for functionality, performance, analytics, and advertising — including the advertising and analytics partners listed in Section 8. Some cookies are necessary for the Site to work; others require your consent where the law requires it. You can manage cookies through your browser settings, opt out of Google Analytics at tools.google.com/dlpage/gaoptout, and adjust advertising preferences with each partner. Blocking some cookies may affect how the Site works. A detailed list of cookies used by our platform is available at shopify.com/legal/cookies.
11. How long do we keep personal information
We keep personal information only as long as necessary for the purposes described in this policy or as required by law. Order, financial, and tax records are kept for the period required by Canadian tax and commercial law (generally six years). When information is no longer needed, we securely delete or anonymize it.
12. How we protect personal information
We maintain reasonable physical, technical, and organizational safeguards appropriate to the sensitivity of the information, and we rely on the security measures of providers such as Shopify and Stripe. No method of transmission or storage is completely secure, but we work to protect your information and to respond appropriately if an issue arises.
13. Your privacy rights
Subject to applicable law, you may ask us to access, correct, or update the personal information we hold about you, and you may withdraw consent. To exercise a right, contact our Privacy Officer (Section 2). We will respond within the time required by law (generally 30 days under PIPEDA and Québec Law 25). We may need to verify your identity before responding.
Residents of Québec: in addition to access and correction, you have the right to withdraw consent, to data portability (to receive computerized personal information in a structured, commonly used format), to request that we stop disseminating your information or de-index a link where the law allows, and to be informed about and submit observations on any decision based exclusively on automated processing.
Residents of the United States: you may request access to or deletion of your personal information. Residents of California and certain other states may have additional rights under state privacy laws; contact us to exercise them. We do not sell personal information.
14. Automated decision-making
We do not make decisions about you based solely on automated processing that produces legal or similarly significant effects. Our platform (Shopify) uses limited automated tools to prevent fraud — for example, temporarily blocking IP addresses or cards associated with suspicious activity — that do not have a legal or similarly significant effect on you. Where Québec Law 25 applies, we will inform you if a decision is based exclusively on automated processing and allow you to submit observations.
15. Children's privacy
Our Site is a general-audience site intended for businesses and adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please get in touch with our Privacy Officer, and we will delete it.
16. Privacy breaches
We maintain a process to detect, assess, and respond to privacy breaches and confidentiality incidents. Where a breach creates a real risk of significant harm, we will notify the affected individuals and the relevant authority — the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner of Alberta, and/or Québec's Commission d'accès à l'information — as required by law, and we keep records of breaches.
17. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. The "Last updated" date above shows when it was last revised. Material changes will be posted on this page.
18. Contact us and learn how to complain
If you have questions, want to exercise a right, or wish to make a complaint, contact our Privacy Officer (Section 2). If you are not satisfied with our response, you may contact the applicable authority:
- Office of the Privacy Commissioner of Canada (OPC) — priv.gc.ca
- Office of the Information and Privacy Commissioner of Alberta (OIPC) — oipc.ab.ca
- Commission d'accès à l'information du Québec (CAI) — cai.gouv.qc.ca (for Québec residents)
This policy is available in French on request. Cette politique de confidentialité est disponible en français sur demande à l’adresse privacy@zuccherocanada.ca.
