Effective date: November 3, 2025
Baqers Canada. (“Baqers”, “we”, “us” or “our”) operates an online cake delivery platform that connects customers with independent Baker Vendor. We respect your privacy and are committed to protecting your personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation (for example, Quebec’s private-sector privacy rules under Law 25, and provincial private-sector acts such as BC’s PIPA and Alberta’s PIPA where applicable).
This Privacy Policy explains:
1. The information we collect;
2. How we collect, use and share personal information;
3. Consent, your rights and how to exercise them;
4. Data retention and safeguards;
5. Breach notification procedures;
6. Third-party services and links; and
7. How to contact us.
Please read it carefully. By using the Baqers platform you consent to the collection, use and disclosure of your personal information as described below.
1. What information we collect
We collect the personal information necessary to deliver our services, operate our platform, and meet legal obligations. This may include:
Identity and contact information: name, email, phone number, billing and delivery addresses, date of birth (where required for age verification), country and city.
Financial and payment information: payment card token / payment processor details (we do not store full card numbers), bank account details for payouts where applicable.
Account and transaction data: order history, preferences, communications with customer support.
Sensitive information (only where required and with explicit consent): government identification numbers (e.g., where required for verification or payouts), biometric data if expressly provided for a narrow operational purpose, dietary/allergen information you give us for order fulfilment.
Technical and device data: IP address, device identifiers, cookies and analytics data to improve the platform and secure our services.
We collect only the minimum personal information necessary for the stated purposes.
2. How we collect personal information
We collect information directly from you (for example, when you create an account, place an order, contact customer support or subscribe to communications). We may also collect information automatically when you use our website or apps (cookies, web tokens, analytics). In limited circumstances, we may receive information about you from third parties (for example, payment processors, delivery vendors, or identity verification providers).
Where a Baker Vendor supplies ingredient or allergen information for a product, Baqers retains and displays that information for customer use; Baker Vendor remains responsible for the accuracy of ingredient/allergen disclosures they provide to us.
3. Purposes for collection, use and disclosure
We use personal information for legitimate business purposes, including to:
• Provide and operate the platform, process orders and payments, and deliver customer support;
• Communicate order confirmations, delivery updates and service notices;
• Display Baker Vendor ingredient/allergen information and facilitate fulfilment;
• Prevent and detect fraud, abuse and illegal activity;
• Improve our services, perform analytics and research, and personalise your experience;
• Send marketing or promotional messages where you have consented (see Section 8 on CASL); and
• Comply with legal obligations (tax, accounting, regulatory requests).
We only use personal information for the purposes described at or before the time of collection, or for purposes to which you have provided consent.
4. Consent, access and other rights:
Consent: Where required, we will obtain your consent to collect, use and disclose personal information. Consent may be express (e.g., by checking a consent box or signing a document) or implied (e.g., providing contact details to receive delivery). You may withdraw consent at any time, subject to legal or contractual restrictions; withdrawal will not affect the lawfulness of processing prior to withdrawal.
Your rights: Subject to applicable law, you have the right to:
• Request access to the personal information we hold about you and receive a copy;
• Request correction or update of inaccurate or incomplete information;
• Request deletion of personal information where retention is not required for legal or legitimate business purposes;
• Object to or restrict processing in certain circumstances;
• Request portability of your data in a commonly used machine-readable format;
• Withdraw consent for direct marketing communications.
To exercise these rights, contact our Privacy Officer (details below). We will verify your identity before fulfilling access or change requests and respond within the time required by applicable law.
For Quebec residents: additional transparency and consent requirements apply under Law 25; we will provide information and notices in clear and simple language and will respond to Law 25 requests as required.
5. Special categories and automated decisions
We do not ordinarily make decisions about you based solely on automated processing that would have a legal or similarly significant effect. If we ever rely on automated decision-making (including profiling) that has a significant effect, we will (i) notify you, (ii) provide meaningful information about the logic involved, and (iii) offer a mechanism to request human review where required by law.
6. Cookies, analytics and tracking
We use cookies and similar technologies to operate the platform, improve user experience, and collect analytics. You may control cookie preferences through your browser settings or the cookie banner on our site. Setting your browser to block cookies may limit the functionality of the platform.
7. Sharing with third parties and international transfers
We may share personal information with:
• Baker Vendor for order fulfilment (ingredient/allergen disclosure, delivery);
• Payment processors and financial institutions to process payments and payouts;
• Service providers that assist in platform operations (hosting, analytics, CRM, fraud prevention); and
• Law enforcement or regulators where required by law or to protect rights and safety.
We require third-party service providers to process personal information only on our instructions and to maintain appropriate security safeguards (contractual data-processing agreements).
If personal information is transferred and processed outside Canada (for example, to cloud service providers or analytics vendors), we will take reasonable steps to ensure a comparable level of protection (contractual safeguards, standard contractual clauses or other measures).
8. Commercial electronic messages (CASL)
Baqers complies with Canada’s Anti-Spam Legislation (CASL). We will only send you commercial electronic messages (CEMs) where you have provided express or implied consent as defined by CASL. Every CEM we send contains a clear unsubscribe mechanism and we will honour unsubscribe requests without delay — in any event within 10 business days as required by CASL. Please see guidance from the Canadian Radio-Television and Telecommunications Commission (CRTC) and Innovation, Science and Economic Development Canada for more detail.
9. Data security
We implement reasonable administrative, technical and physical safeguards to protect personal information against unauthorized access, loss, misuse, disclosure or destruction. Safeguards include encryption, access controls, secure development practices and periodic security testing.
No system is perfect. Where a data security incident occurs, we will follow our incident response procedures (see Section 11).
10. Data retention
We retain personal information only as long as necessary to fulfil the identified purposes, to satisfy legal, tax or regulatory requirements, or for legitimate business needs (for example, to maintain records of transactions and warranty claims). Where retention periods are required by law (for example, tax record retention), we will retain the relevant information for the legally required period; otherwise we securely delete or anonymize data when it is no longer necessary.
11. Breach notification and recordkeeping
If Baqers becomes aware of a breach of security safeguards involving personal information that creates a real risk of significant harm to an individual, we will: (a) notify affected individuals as soon as feasible and in the prescribed manner; and (b) notify the Office of the Privacy Commissioner of Canada (OPC) and other applicable provincial privacy regulators in accordance with PIPEDA and relevant provincial rules. We will include in our notification the information required by law (description of the breach, steps taken to mitigate harm, contact information for further enquiries, and recommendations for protective steps). We will also keep records of breaches and steps taken to respond, as required by law.
Where provincial rules require reporting to a provincial regulator (for example, Quebec or BC rules), we will comply with those rules in addition to federal requirements. For guidance on breach reporting procedures please consult the OPC and the applicable provincial privacy commissioners.
12. Links to third-party websites
The platform may contain links to third-party websites or services. This Privacy Policy does not apply to third-party sites; review their privacy notices before providing personal information. We are not responsible for third-party privacy or security practices.
13. Minors
Our services are intended for users aged 18 or older (or the age of majority in the applicable province). We will not knowingly collect personal information from minors without appropriate parental or guardian consent. If we learn that we have collected a minor’s personal information without consent, we will take steps to delete it.
14. Remedies and complaints
If you have questions, requests, or complaints about how we handle your personal information, contact us at nmajekodunmi@baqers.com.
We will acknowledge and respond to your request in accordance with applicable law. If you remain unsatisfied, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) or the relevant provincial privacy commissioner (for example, the Commission d’accès à l’information in Quebec, the Information and Privacy Commissioner for BC, or the Information and Privacy Commissioner for Alberta).
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, regulation or our operations. We will post the revised policy on our website with the effective date. Where required by law, we will obtain consent for material changes.
16. Consent declaration
By using the Baqers platform or by providing personal information to Baqers, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use and disclosure of your personal information as described herein, subject to your rights under applicable law.
