Plain language summary: We collect only what we need to process your order and run our subscription program. We do not sell your data to anyone. You can request deletion of your data at any time by emailing hillcupcafe@gmail.com.
HillCup Café ("HillCup," "we," "us," or "our") is a specialty coffee company registered in Québec, Canada. We operate the website at hillcupcafe.com and the HillCup Club subscription program. Our contact address is hillcupcafe@gmail.com.
This Privacy Policy applies to all personal information we collect when you visit our website, make a purchase, subscribe to the HillCup Club, participate in the Patronage program, or contact us.
We comply with Québec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), the federal Personal Information Protection and Electronic Documents Act (PIPEDA), and Canada's Anti-Spam Legislation (CASL).
We process your personal information on the following legal bases:
When you place an order: name, email address, shipping address, phone number (optional), and payment information. Payment data is processed by Shopify Payments / Stripe and is never stored on our servers.
When you subscribe to HillCup Club: the above, plus your roast preferences, delivery frequency, and any special instructions.
When you contact us: your name, email, and the content of your message.
Automatically collected: IP address, browser type, pages visited, and time spent on the site (via standard web analytics). We do not use Google Analytics on this site. Cookies are used only for essential cart and session functions.
We do not collect: sensitive personal information such as health data, financial account numbers, or government identification numbers.
We share your information only with third parties necessary to operate our business:
We do not sell, rent, or trade your personal information with any third party for their own marketing purposes. Ever.
We retain order data for 7 years as required by Canadian tax law. Subscription data is retained for the duration of your subscription plus 2 years. Marketing consent records are retained for 3 years after withdrawal. You may request deletion of non-legally-required data at any time.
Under Québec Law 25 and PIPEDA, you have the right to:
To exercise any of these rights, email us at hillcupcafe@gmail.com with the subject line "Privacy Request." We will respond within 30 days.
We use only essential cookies required for the shopping cart and session management. We do not use tracking, advertising, or analytics cookies. You may disable cookies in your browser, but this may prevent the cart from functioning correctly.
Our website is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
We may update this policy from time to time. Material changes will be communicated by email to active subscribers and by a notice on our website for 30 days. Continued use of the site after changes constitutes acceptance of the revised policy.
For any privacy-related questions, requests, or concerns:
HillCup Café
Email: hillcupcafe@gmail.com
Québec, Canada
This policy was drafted in accordance with Québec Law 25, PIPEDA, and CASL. It does not constitute legal advice. For specific legal concerns, consult a qualified privacy lawyer in Québec.