Privacy policy

1. Who is responsible

Free Will Eats, 100 Symes Rd, Toronto, Ontario, is responsible for the personal information described here. Questions, access requests and deletion requests all go to the same place: Freewilleats@gmail.com.

2. What we collect, and why

We collect it because we need it to sell you food safely. Nothing here is collected to build a profile of you.

• Account: your name, email address and phone number. We need to reach you about an order and to let you sign in.
• Delivery addresses: the address itself, plus the coordinates and driving distance from our kitchen that we look up once and cache. The distance decides your delivery fee and whether we can serve you at all.
• Orders: what you bought, what it cost, where it went, and its delivery status. Records of what we sold are also tax records.
• Food preferences, including allergens: your allergens, dietary preferences, likes, dislikes, meals never to pick for you, your goal, and any free-text allergy notes you write. Allergens are health information and we treat them that way. We use them to keep unsafe food out of your box.
• Nutrition targets: if you save a plan, the calorie and macro targets it produced. See clause 3 for what happens to the measurements behind them.
• Payment: Stripe processes card payments. We hold Stripe’s reference to you and to a saved payment method — never your card number.
• Consent records: when you gave or withdrew marketing consent, and through what. CASL requires us to be able to prove consent, and this is that proof.
• Messages you send us: what you write to us and what we reply.

3. The plan builder

The plan builder asks for your age, sex, height and weight. Under PIPEDA that is health information, and it gets the strictest handling on this site.

Those four answers are used in your browser to calculate your targets and are never stored by us. They are not written to our database, not logged, and not sent to any analytics service. Only the calorie and macro targets that come out the other end are saved, and only if you have an account to save them to. Use the plan builder without signing up and we keep nothing at all.

4. Analytics

We measure whether the site works. We do not measure you.

• Page views, through Vercel Web Analytics. For each view we receive the page path, the site that referred you, whether you are on mobile or desktop, and a coarse region worked out from your IP address at the edge. No cookie is set, no identifier is stored in your browser, and nothing links one visit to the next or one device to another. Views of our admin pages are discarded before they are sent.
• Three plan-builder events: that the plan builder was opened, which question was reached, and that a plan was produced. The question is identified by its name — that a weight question was reached — and never by the answer you gave it. There is no field in these events capable of carrying an answer.
• Our own order reporting, calculated inside our database from records we already keep in order to sell food. It never leaves our systems and only an administrator sees it.

There are no advertising pixels, no Meta or Google tags, no cross-site tracking, no session replay and no heatmaps, and no purchase or cart event is sent to any third party.

5. Cookies

We set two kinds of cookie, and both are strictly necessary for something you asked for: one that keeps you signed in, and one that keeps your cart attached to you before you have an account. Neither is used for advertising or shared with anyone.

Our analytics sets no cookie and identifies nobody, which is why you are not being asked to consent to it — there is nothing here to consent to. If that ever changes, we will ask before it does.

6. Who else touches it

We do not sell personal information and we do not trade it. We use a small number of service providers to run the business, each limited to what its job needs:

• Supabase — our database and sign-in.
• Stripe — card payments and refunds.
• Resend — sending our email.
• Vercel — hosting the site and the page-view analytics in clause 4.
• Google Maps Platform — turning a delivery address into coordinates and a driving distance.
• Sentry — error reports, so we find out when something breaks.

Some of these store and process data outside Canada, including in the United States. While it is there it is subject to the laws of that country, and a foreign court or authority may be able to compel access to it. That is true of essentially every hosted service; we tell you because PIPEDA says you should be able to know.

We will also disclose information where the law requires it — a valid order, a public-health investigation into food we sold — and we will tell you when we are allowed to.

7. How long we keep it

• Orders, invoices and tax records: at least six years after the end of the tax year they belong to, because Canadian tax law requires it. These we cannot delete on request.
• Your account, addresses and preferences: for as long as you have an account, and until you ask us to delete them.
• Consent records: for three years after consent is withdrawn, as proof that we sent what we sent lawfully.
• Page-view analytics: for as long as Vercel retains it under our plan. It identifies nobody, so there is nothing in it to tie back to you.
• Error reports: 90 days.

8. Your rights, and how to use them

Under PIPEDA you can ask us to:

• tell you what personal information we hold about you and how we have used it;
• correct anything that is wrong;
• delete your account and the information attached to it, other than the order and tax records we are required to keep;
• withdraw marketing consent — instantly, from the unsubscribe link in any marketing email, or by asking us.

Email Freewilleats@gmail.com from the address on your account and we will respond within 30 days. There is no charge. Some of this you can do yourself right now: your addresses, preferences, allergens and subscription are all editable from your account.

If you are not satisfied with how we handle it, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

9. How we protect it

Traffic to the site is encrypted. Access to your rows in our database is restricted at the database itself, so one customer’s account cannot read another’s. Administrative access is limited to the people who run the kitchen and is granted separately from any customer account. Card numbers never reach our systems at all.

No system is perfect. If a breach ever creates a real risk of significant harm to you, we will tell you and the Privacy Commissioner, as PIPEDA requires.

10. Children

The service is meant for adults and we do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.

11. Changes to this policy

When what we collect changes, this page changes with it and the date at the top moves. If a change is significant — a new category of information, or a new reason for using it — we will tell you rather than quietly editing the page.