Legal

Privacy Policy

Effective April 23, 2026.

Alhana Bakery (“we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This policy explains what we collect, why we collect it, how we use it, and your rights under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

Who we are

Alhana Bakery is a family-run Middle Eastern bakery based in Toronto, Ontario, Canada. You can reach us at Yazan.lzidan@gmail.com or (647) 960-4559.

What we collect

We collect personal information in the following ways:

When you place an order: your name, shipping address, email, phone number, and payment information (processed directly by Stripe — we never see or store your full card number).
When you submit a form (catering, wholesale, contact): your name, email, phone, event or store details, and any message you include.
When you use our website: standard server logs including IP address, browser type, pages viewed, and timestamps. We use this only for troubleshooting and basic security.

We do not use behavioural advertising cookies, and we do not sell your information to third parties.

Why we collect it

To fulfill your orders and ship products to you.
To respond to catering, wholesale, and general inquiries you submit.
To keep records required by Canadian tax and consumer protection law.
To protect the website from spam, abuse, fraud, and security incidents.

We will only use your information for the purpose you gave it to us. We will not repurpose it for marketing without a separate opt-in.

Who we share it with

We share only the minimum information needed with a small number of trusted service providers:

Stripe — processes your card payment and fulfills shipping address collection. Stripe privacy policy.
Resend — delivers our transactional emails (order confirmations, quote replies). Resend privacy policy.
Vercel — hosts the website and serves your requests. Vercel privacy policy.
Canada Post (or another carrier) — delivers your package; we share the shipping address and phone number only.

We do not share your information with any other third parties except where required by Canadian law (e.g. a valid court order).

How long we keep it

Order records (name, address, purchase history) — retained for 7 years as required by the Canada Revenue Agency for tax purposes.
Inquiry form submissions — retained for up to 2 years, then deleted.
Server logs — typically retained for 30-90 days for security and debugging, then deleted automatically by our hosting provider.

How we protect it

All traffic to our website is encrypted with TLS / HTTPS.
Payment information is collected directly by Stripe using their PCI-DSS compliant infrastructure. We never see or store full card numbers.
Access to customer data is limited to a small number of authorized people protected by unique passwords and two-factor authentication.
We apply industry-standard security headers (HSTS, CSP, etc.) to every response on our site.

Your rights under PIPEDA

You have the right to:

Access the personal information we hold about you.
Correct any inaccurate personal information.
Delete your information (subject to our legal obligation to retain order records for tax purposes).
Withdraw consent to the processing of your information.
Complainto the Office of the Privacy Commissioner of Canada if you believe we’ve mishandled your data.

To exercise any of these rights, email us at Yazan.lzidan@gmail.com with the subject line “Privacy request.” We will respond within 30 days.

Children

Our website and products are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The effective date at the top will always reflect the most recent version. Material changes will be communicated by email to anyone who has placed an order with us.

Contact

Questions or concerns about privacy? Email Yazan.lzidan@gmail.com or call (647) 960-4559.