Privacy Policy
Last updated: January 2025
Windridge Farm ("we," "our," "us") respects your privacy. This policy explains how we collect, use, and protect your personal information when you use our website and services.
Information We Collect
- Contact information: name, email address, phone number, delivery address
- Order information: products purchased, order history, payment method (we do not store full card numbers)
- Website usage: pages visited, browser type, device information (via analytics)
- Communications: messages sent through our contact form or email
How We Use Your Information
- Process and fulfill your orders
- Communicate about your orders and account
- Send weekly availability emails (with your consent)
- Improve our website and services
- Comply with legal obligations
Payment Processing
Payments are processed securely by Square. We never store your full credit card information. Square's privacy policy applies to payment data they collect.
Cookies & Local Storage
We use browser local storage (not cookies) to store your shopping cart and authentication session. Vercel Analytics collects anonymous, aggregated usage data to help us improve the site. No advertising cookies or third-party tracking cookies are used.
Third-Party Services
We use the following services to operate our website. Some are based in the United States, which means your data may be transferred and processed outside of Canada:
- Wix (Wix.com Ltd.) — Member authentication and CMS data storage (Israel/US)
- Square (Block, Inc.) — Payment processing (US)
- Vercel Inc. — Website hosting, image storage, and analytics (US)
- Resend (Resend, Inc.) — Transactional and weekly availability emails (US)
Each service has its own privacy policy governing data it collects. By using our site, you consent to data being processed by these providers.
Breach Notification
In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.
Children's Privacy
Our website is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
Your Rights
Under Canadian privacy legislation (PIPEDA), you have the right to:
- Access your personal information
- Request corrections to your information
- Withdraw consent for marketing communications
- Request deletion of your data
Data Retention
We retain order data for 7 years for tax and legal purposes. Contact form submissions are retained for 2 years. You may request early deletion of non-essential data.
Contact Us
For privacy-related questions, contact us at windridgefarm1@outlook.com or through our Contact page.