This website (the “Site”) is provided by Grandmother’s Greenhouse Limited Partnership, its general partner, Grandmother’s Greenhouse GP Ltd., and their affiliates (collectively, “Grandmother’s Greenhouse”, “we”, “us”, “our”). By accessing the Site, you are indicating your acknowledgement and acceptance of this Policy. This Policy is subject to change by Grandmother’s Greenhouse at any time in its discretion. Your use of this Site after such changes are implemented constitutes your acknowledgment and acceptance of the changes. Please consult this Policy regularly.

This Policy explains how Grandmother’s Greenhouse collects, uses, discloses, retains, protects, and provides access to personal information obtained through our Site. It is written to meet the requirements of the Personal Information Protection Act, RSBC 1996, c 63 (“PIPA”).

1. Accountability and Contact Information

We are responsible for personal information under our control and for ensuring our practices comply with PIPA. Our Privacy Officer is responsible for implementing and monitoring this policy and for responding to questions or requests about personal information. 

Privacy Officer contact: [Contact Information]

2. What Personal Information We Collect

We collect only the personal information that is necessary for the purposes described below. Typical information collected through the Site may include: 

• Contact details — name, email address, phone number, mailing address.
• Transaction details — order history, payment confirmation (we do not store full payment card numbers).
• Account information — username, password (securely stored), preferences.
• Communications — messages you send to us, customer service notes.
• Technical and usage data — IP address, device and browser type, cookies and analytics data.

3. Purposes for Collection Use and Disclosure

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate, including: 

• To process and fulfill orders, payments, deliveries, and returns.
• To communicate about orders, products, promotions, and customer service.
• To maintain and administer customer accounts and preferences.
• To improve our Site, services, and marketing through analytics.
• To comply with legal or regulatory obligations.

We will not use personal information for new purposes without obtaining consent where required by PIPA.

4. Consent

We obtain consent for the collection, use, and disclosure of personal information except where PIPA permits collection or use without consent (for example, in limited legal or emergency circumstances). Consent may be express (e.g., checking a box, signing an order) or implied (e.g., providing contact details to receive a requested product or service). You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice; withdrawal will not affect the lawfulness of prior processing.

5. Limiting Collection

We limit collection to information that is necessary for the identified purposes. We collect information by fair and lawful means and will notify you at or before the time of collection about the purposes for which the information is being collected.

6. Use and Disclosure Limits

We use and disclose personal information only for the purposes identified in this policy or for purposes to which you have consented, except where PIPA allows otherwise (for example, to protect legal rights or in emergencies). We may disclose information to: 

• Service providers who perform functions on our behalf (payment processors, shipping companies, IT and analytics providers).
• Legal or regulatory authorities when required by law.

We require third-party service providers to protect personal information and to use it only for the purposes we authorize.

7. Retention and Disposal

We retain personal information only as long as necessary to fulfill the identified purposes, to meet legal or accounting requirements, or to resolve disputes. When information is no longer required, we securely destroy, erase, or anonymize it. Our retention periods vary by record type; if you need details about how long a specific record is kept, contact our Privacy Officer.

8. Accuracy

We make reasonable efforts to ensure personal information is accurate, complete, and up-to-date for the purposes for which it is used. You can help by notifying us of any changes to your information.

9. Safeguards and Security

We protect personal information with appropriate administrative, technical, and physical safeguards proportionate to the sensitivity of the information. Safeguards include access controls, encryption where appropriate, secure passwords, staff training, and contractual protections with service providers. No internet transmission is completely secure; we cannot guarantee absolute security of information transmitted to or from the Site.

10. Access and Correction

You have the right to request access to personal information we hold about you and to request correction of inaccurate or incomplete information. We will respond to access or correction requests in accordance with PIPA timelines and may charge a minimal fee where permitted by law. To make a request, contact our Privacy Officer with sufficient detail to locate the records. If we refuse access or correction, we will explain the reasons and the review options available to you.

11. Cookies and Analytics

Our Site uses cookies and similar technologies to provide functionality, remember preferences, and collect analytics. You can manage cookie preferences through your browser settings; disabling certain cookies may affect Site functionality. We use analytics providers to help us understand site usage; these providers may collect aggregated or pseudonymized data.

12. Transfers Outside British Columbia

Some service providers we use may be located outside British Columbia or Canada. When personal information is transferred to another jurisdiction, we take steps to ensure it receives a comparable level of protection (contractual safeguards, security measures). Where required by law, we will obtain consent for cross-border transfers.

13. Employee and Contractor Information

We collect, use, and disclose employee and contractor personal information for employment and administrative purposes in accordance with PIPA. Such information is subject to the same protections described in this policy unless otherwise required by employment law.

14. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be posted on the Site with an updated effective date.

15. Complaints and Review

If you have questions, concerns, or wish to make a complaint about our handling of personal information, contact our Privacy Officer. If you remain unsatisfied after our response, you may file a complaint with the Office of the Information and Privacy Commissioner for British Columbia. Information about the Commissioner’s role and complaint process is available from the Commissioner.