Privacy policy

Privacy Policy

Privacy Policy of [Legal Name of your Company, e.g., Cocora Coffee Ltd.]

Last updated: [Date, e.g., April 14, 2026]

At [Legal Name of the Company] (operating as "Cocora" or "we"), we value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information in accordance with Alberta’s Personal Information Protection Act (PIPA) and, where applicable, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

By using our website [www.yourcocorawebsite.ca], visiting our coffee shop in Calgary, or participating in our experiences, you agree to the practices described in this policy.

1. Accountability and Privacy Officer

Cocora is responsible for the personal information under its control. We have designated a Privacy Officer who is accountable for ensuring our compliance with this policy and applicable privacy laws.


Privacy Officer Contact Information:


Name/Title: [e.g., Operations Manager / Your Name]


Email: [email@yourcocorawebsite.ca]


Mailing Address: [Physical address of the coffee shop in Calgary, AB, Postal Code]


2. What Personal Information Do We Collect?

We only collect the personal information necessary for the purposes we identify. This may include:


Contact and Profile Information: Name, email address, and phone number (e.g., for experience reservations or workshops).


Payment Information: Credit/debit card details (processed securely through third-party payment gateways such as Square or Stripe; we do not store this data).


Preferences and History: Your consumption habits, food allergies (if disclosed to us for a tasting), and purchase history.


Technical Information: IP address, browser type, and browsing data on our website through the use of cookies.


3. How Do We Use Your Information?

We collect and use your personal information exclusively for the following purposes:


To manage reservations for our tastings, workshops, and in-store events.


To process transactions and send you receipts or confirmations.


To send marketing communications, special offers, and news about Cocora (only if you have given explicit consent, in compliance with Canada's Anti-Spam Legislation - CASL).


To improve our products, services, and user experience on our website.


To comply with legal, accounting, or security requirements.


4. Consent

By providing us with your personal information to complete a transaction, verify your credit card, make a reservation, or subscribe to our newsletter, you imply your consent for us to collect and use it for that specific reason only.


You may withdraw your consent for the collection, use, or disclosure of your information at any time, subject to legal or contractual restrictions, by contacting our Privacy Officer. For email marketing, we will always include an "unsubscribe" option.


5. Sharing and Disclosing Information

We do not sell, rent, or trade your personal information to third parties. We may only share your information in the following circumstances:


Service Providers: With third parties who assist us in operating our business (e.g., booking platforms, payment processors, email marketing services). We require these providers to protect your information and use it solely for the contracted services.


Legal Compliance: When required by law, a court order, or to protect the rights, property, or safety of Cocora, our customers, or others.


6. Data Retention and Security

We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by Alberta and Canadian laws.


We protect your information using appropriate physical, technological, and administrative safeguards to prevent unauthorized access, disclosure, copying, or modification (e.g., secure networks, SSL encryption on the website, and restricted access to databases).


7. Accessing and Correcting Your Information

You have the right to request access to the personal information we hold about you and to ask for it to be corrected if it is inaccurate or incomplete. To make a request, please contact our Privacy Officer in writing at the email provided in Section 1. We will respond within the timeframes established by PIPA (typically 45 days).


8. Complaints

If you have any concerns about how we handle your personal information, we encourage you to contact our Privacy Officer first. If you are not satisfied with our response, you have the right to file a formal complaint with the Office of the Information and Privacy Commissioner of Alberta (OIPC).


9. Changes to this Policy

We reserve the right to modify this policy at any time to reflect changes in our practices or for legal reasons. We will notify you of any significant changes by posting the updated policy on our website.


Implementation Notes for the English Version:

CASL (Canadian Anti-Spam Legislation): Make sure that the checkbox to subscribe to your newsletter on your website is not pre-ticked. Customers must actively opt-in.

Cookies Banner: Make sure to have a pop-up or banner on your website letting users know you use cookies.

Cloud Storage: If your website host or CRM uses servers in the US, standard PIPEDA guidelines state this is fine, but users are technically subject to the laws of the jurisdiction where the data is held. Section 5 covers you reasonably well for a standard coffee shop operation.