Privacy Policy

Effective Date: September 13, 2026

Truly Fresh Grocery Delivery Inc., operating as TASTA (“TASTA,” “we,” “us,” or “our”), respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit tasta.ca, create an account, place an order, contact us, or otherwise use our services.

1. INFORMATION WE COLLECT

Depending on how you interact with us, we may collect:

  • Contact and account information, such as your name, email address, phone number, account credentials, and communication preferences.
  • Order and delivery information, such as your billing and delivery addresses, order history, delivery instructions, product preferences, substitutions, refunds, and promotional credits.
  • Payment information. Payments are processed by Shopify and other authorized payment processors. We generally do not directly collect or store complete payment-card numbers or card security codes.
  • Device and usage information, such as your IP address, browser and device type, pages viewed, website activity, and access times.
  • Delivery-area information, such as the postal code you enter or save, which we link to website activity so we can measure delivery coverage and decide which areas to serve next.
  • Communications, including information you provide when you contact customer service, submit a request, or participate in a promotion or survey.
  • Marketing information, such as your email or SMS subscription preferences and your interactions with marketing messages.

We collect this information directly from you, automatically through cookies and similar technologies, and from service providers that help us operate our website and fulfill orders.

2. HOW WE USE YOUR INFORMATION

We may use personal information to:

  • create and manage your account;
  • process payments, orders, substitutions, refunds, and credits;
  • prepare, deliver, and provide updates about your orders;
  • respond to questions, complaints, and customer-service requests;
  • personalize and improve our website, products, services, and customer experience;
  • understand website usage and measure the performance of our services and promotions;
  • detect and prevent fraud, misuse, security incidents, and unlawful activity;
  • communicate product recalls or other important safety information;
  • comply with legal, tax, accounting, and regulatory obligations; and
  • send marketing communications with your consent or as otherwise permitted by law.

We will not use your personal information for a new purpose that is materially different from those described in this Policy without providing appropriate notice and obtaining consent where required.

3. EMAIL AND SMS COMMUNICATIONS

We may send service-related communications necessary to manage your account or orders, including order confirmations, receipts, substitution requests, delivery updates, refund notices, security alerts, and product-safety notices.

With your consent, or as otherwise permitted by law, we may also send promotional emails or SMS messages about products, offers, and company updates.

If you have consented to receive SMS marketing or cart reminders, we may use information about products placed in your shopping cart to remind you about an incomplete purchase.

Consent to receive marketing communications is not required to place an order.

You may unsubscribe from marketing emails using the unsubscribe link in the message. You may opt out of marketing SMS messages by following the instructions provided in the message, such as replying STOP, where supported. Message and data rates may apply.

Unsubscribing from marketing communications will not prevent us from sending communications necessary to process an order, respond to you, protect your account, or communicate a product-safety issue.

4. HOW WE SHARE YOUR INFORMATION

We do not sell or rent your personal information.

We may share information with service providers that help us operate our business, including:

  • Shopify and website-hosting providers;
  • payment processors and financial institutions;
  • delivery and logistics providers;
  • email and SMS platforms;
  • analytics, advertising, and marketing providers;
  • customer-service and IT providers; and
  • security and fraud-prevention providers.

These providers may access personal information only as needed to provide services to us or as otherwise permitted by law and their applicable agreements.

We may also disclose personal information:

  • when required or permitted by law;
  • to respond to lawful requests, court orders, or legal proceedings;
  • to investigate fraud, security incidents, or unlawful activity;
  • to protect the rights, safety, or property of TASTA, our customers, or others;
  • in connection with a proposed or completed business transaction, such as a merger or sale, subject to appropriate safeguards; or
  • with your consent or at your direction.

We do not share your consent to receive SMS marketing with third parties for their own unrelated marketing purposes. We may share your phone number and consent status with providers that help us deliver and manage SMS communications.

5. COOKIES AND SIMILAR TECHNOLOGIES

We and our service providers use cookies and similar technologies to:

  • operate our website and checkout;
  • keep track of items in your cart;
  • remember your preferences;
  • keep your account secure;
  • understand how our website is used;
  • improve website performance;
  • measure the effectiveness of promotions and advertising; and
  • personalize content or marketing where permitted.

Some cookies are necessary for the website to function. You can manage cookies through your browser settings and any cookie preference tools available on our website. Blocking certain cookies may prevent some website, cart, account, or checkout features from working properly.

Third-party analytics or advertising providers may use their own cookies or similar technologies in accordance with their privacy policies.

6. DATA STORAGE AND RETENTION

Some of our service providers may process or store personal information outside Ontario or outside Canada. Information processed in another jurisdiction may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies, or government authorities as permitted by law.

We retain personal information only for as long as reasonably necessary to:

  • provide our services and maintain your account;
  • complete transactions and address customer-service matters;
  • comply with legal, tax, accounting, and regulatory requirements;
  • prevent fraud and misuse; and
  • resolve disputes or enforce our agreements.

When personal information is no longer required, we will delete, anonymize, or securely dispose of it, subject to applicable legal and operational requirements.

7. DATA SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, misuse, and unauthorized access, disclosure, alteration, or destruction.

However, no website, electronic transmission, or storage system can be guaranteed to be completely secure. You are responsible for protecting your account credentials and should contact us promptly if you believe your account or personal information has been compromised.

8. YOUR PRIVACY RIGHTS AND CHOICES

Subject to applicable law, you may request to:

  • access the personal information we hold about you;
  • correct inaccurate or incomplete information;
  • withdraw consent to certain uses of your information;
  • update your communication preferences;
  • close your account; or
  • request deletion of information that we are not legally or operationally required to retain.

We may need to verify your identity before completing a request.

If you withdraw consent, we may be unable to provide certain services that require the relevant information. Withdrawal of consent will not affect information that we are required or permitted to retain under applicable law.

To make a privacy request, contact us using the information below.

9. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our services, practices, technologies, or legal obligations.

The updated Policy will be posted on this page with a revised effective date. Where appropriate, we may provide additional notice of material changes.

If a change requires new consent under applicable law, we will request that consent before applying the change.

10. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, please contact:

Privacy Officer Truly Fresh Grocery Delivery Inc. Operating as TASTA 2710 14th Ave Markham, ON L3R 0J1 Canada

Email: support@tasta.ca