Privacy policy

Scope and who this policy covers

This policy applies to visitors and customers who interact with our website, send email or form messages, visit our Toronto location, or otherwise share personal information with us in connection with grocery retail and related services. It does not govern third-party websites that we may link to; those sites publish their own notices.

By using the site or providing information, you acknowledge that you have read this policy. If you do not agree with how we process data, you should discontinue use of optional features such as contact forms and adjust your browser or cookie settings as described in our cookies policy.

Identity of the data controller

The controller responsible for personal data processed in connection with this website and related retail activities is:

• Legal name: Vorxyrelmykhepor
• Address: 3401 Dufferin St, Toronto, ON M6A 2T9, Canada
• Email: assist@vorxyrelmykhepor.world
• Phone: +1 416-789-3261
• Public website: vorxyrelmykhepor.world

Where we appoint processors (such as hosting or email delivery providers), they process data only on our instructions and under contractual terms that require appropriate confidentiality and security.

Categories of personal data we may process

Depending on how you interact with us, we may process the following categories of data, not all of which will apply in every situation:

• Identity and contact data: name, email address, phone number, postal address, and similar identifiers you provide.
• Communication content: text of messages, questions about products, and attachments you choose to send.
• Transaction and visit data: purchase or pickup references, dates of visits, and notes you agree we may keep to honour preferences or substitutions.
• Technical and usage data: IP address, browser type and version, device characteristics, referring URLs, approximate location derived from network information, timestamps, and pages viewed, as recorded in server logs or similar tools when enabled.
• Cookie and preference data: records of consent choices and identifiers stored in cookies or local storage, as explained in the cookies policy.

Sources of personal data

We obtain personal data directly from you when you complete forms, email us, speak with staff, or subscribe to updates where available. We may also generate technical data automatically when you load pages or when security tools log events. We do not purchase marketing lists that contain personal data for this website.

Purposes of processing and legal bases

We process personal data only where a lawful basis applies. The table below summarises typical purposes. Where consent is required, you may withdraw it without affecting the lawfulness of processing before withdrawal.

Cookies and similar technologies

We use strictly necessary mechanisms to run the site and optional categories that depend on your choices. Detailed descriptions, retention, and controls appear in our cookies policy. Cookie preferences you save are stored locally in your browser.

Recipients and categories of recipients

Access to personal data is limited to personnel and service providers who need it to perform their duties. Categories of recipients may include hosting providers, email and communication services, IT support, and professional advisers where appropriate. We do not sell personal data.

International transfers

If a processor stores or processes data outside Canada or the European Economic Area, we assess the transfer and implement safeguards such as standard contractual clauses, adequacy decisions, or other mechanisms recognised under applicable law. You may request further information about specific transfers by contacting us.

Canadian privacy law (PIPEDA)

Where our activities fall under federal private-sector privacy law in Canada, we handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial statutes where they apply. We collect, use, and disclose personal information for purposes a reasonable person would consider appropriate in the circumstances, and we maintain policies and practices to give effect to principles of accountability, consent, limiting collection, limiting use, accuracy, safeguards, openness, individual access, and recourse.

Retention periods

We keep personal data only as long as necessary for the purposes described, unless a longer period is required by law or for legitimate dispute resolution:

• General contact messages: typically up to twenty-four months unless a longer retention is justified by an open matter.
• Server and security logs: typically rotated within ninety days unless an incident investigation requires a limited extension.
• Records tied to transactions or returns: retained for the period needed to process refunds, warranties, and accounting requirements.
• Cookie consent records: stored in your browser until you clear site data or update preferences.

Security measures

We apply administrative, technical, and organisational measures appropriate to the risk, including access controls, transport encryption where supported, separation of environments where feasible, and staff awareness. No online transmission is completely secure; we encourage you to use updated browsers and protect your own devices.

Your rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: request deletion where applicable, for example when data is no longer needed for the original purpose.
• Restriction: ask us to limit processing in certain circumstances.
• Data portability: receive structured, machine-readable data you provided where processing is based on consent or contract and automated.
• Objection: object to processing based on legitimate interests, balancing your rights and ours.
• Withdraw consent: where processing is consent-based, without affecting prior lawful processing.

We will respond within a reasonable period and inform you if we need additional verification. In some cases we may refuse requests where permitted by law, for example to protect the rights of others or meet legal obligations.

Automated decision-making

We do not use fully automated decision-making that produces legal or similarly significant effects solely based on profiling in connection with this website.

Children

Our services are not directed to children under the age where parental consent is required for data collection in your jurisdiction. If you believe we have collected data from a child without appropriate authority, please contact us and we will take steps to delete it where appropriate.

How to exercise your rights

Send requests to assist@vorxyrelmykhepor.world or write to our postal address. We may ask you to confirm your identity before disclosing or changing information. We do not charge a fee for reasonable requests unless your requests are manifestly unfounded or excessive.

Supervisory authority

In Canada, you may contact the Office of the Privacy Commissioner of Canada (OPC) regarding matters under PIPEDA, or your provincial privacy commissioner where provincial law applies. If you reside in the European Economic Area, you may lodge a complaint with a supervisory authority in your member state. We encourage you to contact us first so we can try to resolve your concern.

Changes to this policy

We may update this policy to reflect operational, technical, or legal changes. The date displayed in the hero section of this page is generated when you load it and reflects the current calendar day; substantive revisions to the text will be published here and may also be announced through other reasonable channels when appropriate.

Contact

For privacy questions or to exercise rights: assist@vorxyrelmykhepor.world, +1 416-789-3261, or 3401 Dufferin St, Toronto, ON M6A 2T9, Canada.