Effective Date: September 7, 2026
1. Introduction and Company Information
This Privacy Policy explains how Maple Peak Barista Studio Ltd. (“Maple Peak Barista Studio Ltd.”, “we”, “us”, or “our”) collects, uses, discloses, stores, and protects personal information in connection with our barista-studio business, including our website, in-person services, classes, workshops, consultations, event bookings, retail transactions, and related communications.
We are committed to safeguarding personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy laws. This Privacy Policy is intended to provide clear information about our privacy practices and your rights.
Business name: Maple Peak Barista Studio Ltd.
Address: 2140 West 4th Avenue, Vancouver, BC V6K 1N7, Canada
Email: [email protected]
Phone: +1 (604) 684-7293
2. Data Collection and Processing
We may collect personal information directly from you, automatically through our website or digital tools, and from third parties where permitted by law. The types of personal information we may collect include:
- Identification and contact information: name, email address, phone number, mailing address, billing address, and business name if you are booking on behalf of a company.
- Booking and transaction information: class or workshop registrations, appointment details, attendance records, purchase history, payment status, invoices, and receipts.
- Communication information: messages, inquiries, feedback, reviews, customer support interactions, and preferences related to how we contact you.
- Technical and usage information: IP address, device information, browser type, pages visited, time and date of visits, cookies, analytics data, and similar online identifiers.
- Service-related information: dietary preferences or accessibility needs provided for events or classes, skill-level information, and customer preferences relevant to our services.
- Marketing information: newsletter subscriptions, event interests, consent to receive promotional communications, and response history.
- Payment-related information: limited payment details necessary to process transactions, typically handled by third-party payment processors. We do not intentionally store full payment card details unless required and permitted for a specific transaction flow.
We process personal information only as reasonably necessary for the purposes described in this Privacy Policy or as otherwise permitted or required by law.
3. Purpose of Data Processing
We use personal information for the following purposes:
- To provide, manage, and deliver our barista-studio services, including bookings, classes, workshops, consultations, and events;
- To process payments, issue receipts, manage invoices, and maintain transaction records;
- To communicate with you about your inquiries, bookings, service updates, changes, cancellations, and customer support matters;
- To personalize our services and understand customer preferences, including training needs and event requirements;
- To send marketing communications, newsletters, promotions, or event announcements where permitted and, where required, with your consent;
- To maintain our internal records, accounting, tax, audit, and legal compliance obligations;
- To detect, prevent, and investigate fraud, misuse, security incidents, or other unlawful activity;
- To improve our website, operations, services, content, and customer experience;
- To comply with legal, regulatory, contractual, and business obligations.
4. Legal Basis for Processing
Under Canadian privacy law, we generally collect, use, and disclose personal information with your knowledge and consent, except where otherwise permitted or required by law. Depending on the circumstance, our legal basis for processing may include:
- Consent: where you have given express or implied consent, including for newsletters, certain marketing communications, optional forms, or participation in surveys.
- Contractual necessity: where processing is required to enter into, perform, or manage our services, bookings, purchases, or other requested transactions.
- Legitimate business purposes: where processing is reasonable for operating our business, such as maintaining records, securing systems, improving services, or responding to customer requests, provided your interests and rights are appropriately protected.
- Legal and regulatory compliance: where we must process information to comply with applicable laws, including tax, accounting, consumer protection, and record-keeping obligations.
- Protection of legal rights: where processing is needed to establish, exercise, or defend legal claims or to protect our rights, property, staff, customers, or operations.
5. Data Sharing and Third Parties
We do not sell personal information. We may share personal information with trusted third parties only where necessary and subject to appropriate safeguards, including:
- Payment processors: to complete purchases, subscriptions, deposits, or refunds;
- Website hosting, IT, and cloud service providers: to operate our website, email systems, and data storage;
- Analytics and marketing providers: to understand website performance, customer engagement, and campaign effectiveness, where permitted by law and subject to your consent where required;
- Scheduling, booking, and customer management platforms: to manage appointments, class registrations, and customer records;
- Professional advisors: including accountants, legal advisors, auditors, and insurers;
- Government authorities or regulators: where required by law, court order, or lawful request;
- Business successors: in connection with a merger, reorganization, financing, sale, or transfer of all or part of our business, subject to applicable legal requirements.
Where third-party service providers process personal information on our behalf, they are required to use the information only for the services they perform for us and to protect it using appropriate safeguards.
6. Data Transfer to Third Countries
Some of our service providers may store or process personal information outside Canada, including in the United States or other jurisdictions. As a result, your information may be subject to the laws of those jurisdictions and may be accessible to foreign courts, law enforcement, or regulatory authorities in accordance with local laws.
Where personal information is transferred outside Canada, we take reasonable steps to ensure that it is protected by contractual, technical, and organizational safeguards appropriate to the sensitivity of the information. We remain accountable for personal information transferred to service providers for processing on our behalf.
7. Storage Duration
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to meet legal, accounting, tax, and reporting obligations, and to resolve disputes or enforce agreements.
The retention period may vary depending on the type of information and the reason it was collected. For example:
- Booking, transaction, and accounting records are generally retained for a period required by applicable legal and tax laws;
- Customer service communications are retained for as long as needed to resolve inquiries and maintain appropriate records;
- Marketing consent records are retained until you withdraw consent or we no longer need them for compliance purposes;
- Technical logs and analytics data are retained for a limited period necessary for security, troubleshooting, and performance analysis.
When personal information is no longer required, we securely delete, anonymize, or destroy it in accordance with our retention practices and applicable law.
8. User Rights
Subject to applicable Canadian privacy laws and any legal exceptions, you may have the following rights regarding your personal information:
- Access: request confirmation of whether we hold personal information about you and receive a copy of such information;
- Rectification: request correction or updating of inaccurate or incomplete personal information;
- Erasure: request deletion of personal information in certain circumstances, subject to legal retention requirements;
- Restriction: request that we limit the use or disclosure of your personal information in certain circumstances;
- Data portability: request a copy of certain information in a structured, commonly used format where applicable law provides such a right;
- Objection: object to certain processing activities, including some forms of direct marketing or processing based on legitimate business purposes where applicable.
To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before responding. We will respond within a reasonable time and in accordance with applicable legal requirements.
9. Withdrawal of Consent
Where our collection, use, or disclosure of personal information is based on your consent, you may withdraw that consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent does not affect processing that has already occurred or processing that is otherwise permitted or required by law.
If you withdraw consent for certain processing activities, we may not be able to provide some services or communications to you, such as newsletters, promotional emails, or specific optional features. We will explain any consequences of withdrawal where appropriate.
10. Right to Complain
If you have concerns about our handling of personal information, you may contact us first so we can address your concerns promptly.
You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or, where applicable, with the privacy commissioner or regulator in your province. We encourage you to contact us first so we can attempt to resolve the matter directly.
11. Data Security
We use reasonable administrative, technical, and physical safeguards to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, modification, or destruction. These measures may include:
- access controls and role-based permissions;
- password protection and authentication practices;
- encrypted transmission where appropriate;
- secure storage and backup procedures;
- staff confidentiality obligations and privacy awareness practices;
- monitoring and maintenance of systems to help detect security incidents.
No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. If we become aware of a privacy or security incident involving personal information, we will take appropriate steps in accordance with applicable law.
12. Contact Information
If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your rights, please contact:
Maple Peak Barista Studio Ltd.
2140 West 4th Avenue
Vancouver, BC V6K 1N7
Canada
Email: [email protected]
Phone: +1 (604) 684-7293
Please include enough detail in your request so we can understand and respond appropriately. We may request additional information to verify your identity and protect your privacy.
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technology, or business operations. When we make changes, we will update the effective date and post the revised Privacy Policy on our website or otherwise make it available to you as appropriate.
Your continued use of our services after an updated Privacy Policy becomes effective indicates your acceptance of the revised version, to the extent permitted by law. We encourage you to review this Privacy Policy periodically.