1. Introduction
This Privacy Policy explains how Edaga collects, uses, discloses and protects your personal information when you use our marketplace platform (the "Platform"). Edaga is operated by Edaga Inc., a corporation incorporated under the Canada Business Corporations Act (Corporation No. 1801228-8; Québec NEQ 1182281734) ("Edaga", "we", "us" or "our"), with its registered office at 3-1070 Rue de la Sucrerie, Montréal, QC H3K 2G9.
We are committed to handling your personal information in accordance with applicable Canadian privacy law, including Québec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA).
2. Person responsible for protecting your information (Privacy Officer)
Michael Kassa is the person responsible for the protection of personal information for Edaga. You can reach our Privacy Officer at:
- Email: privacy@edaga.ca
- Mail: Michael Kassa, Privacy Officer, Edaga Inc., 3-1070 Rue de la Sucrerie, Montréal, QC H3K 2G9
3. Information we collect
Information you give us
- Account information: name, email address, password (stored in hashed form), and, if you choose, phone number.
- Order and delivery information: delivery and billing addresses, order contents, pickup/delivery preferences, and order history.
- Communications: messages you send to support, including through our WhatsApp support channel if you opt in, and reviews or content you submit.
- Marketing preferences: your email and messaging opt-in choices.
Information we collect automatically
- Device and usage data such as IP address, browser type, pages viewed and interactions, collected through cookies and similar technologies (see our Cookie Policy).
Information from third parties
- If you sign in with Google or Apple, we receive basic profile information (such as your name and email) from that provider.
- Our payment processor confirms payment status to us; we do not receive or store your full card number.
4. Why we use your information, and on what basis
We collect and use your personal information for the following purposes, with your consent or as otherwise permitted by law:
- To create and manage your account and authenticate you.
- To process, fulfill and deliver your orders, and to enable the relevant Shop and couriers to fulfill them.
- To process payments, refunds and chargebacks through our payment processor.
- To provide customer support and respond to your requests, including via our AI-assisted and human support channels.
- To send transactional messages (order confirmations, status updates, security and account notices).
- To send marketing communications where you have consented, and from which you can unsubscribe at any time.
- To operate, secure, troubleshoot and improve the Platform, and to detect and prevent fraud and abuse.
- To comply with legal obligations and enforce our terms.
Marketing messages (Canada's anti-spam law, CASL). We send commercial electronic messages (such as promotional emails) only where you have given consent. Every marketing message identifies us and includes an easy way to unsubscribe, which we honour promptly. Transactional and service messages — order confirmations, delivery updates, security and account notices — are not marketing and are sent as needed to provide the Platform.
5. Use of artificial intelligence in support
Our customer-support chat may use an AI assistant to help answer questions and route conversations. Messages may be processed by a third-party AI provider for this purpose. The AI assists support staff and does not make decisions that produce legal or similarly significant effects about you without human involvement. You can ask to speak with a person at any time.
6. Who we share your information with
We do not sell your personal information. We share it only as needed to operate the Platform. Our main recipients, their purpose, and where they process data are:
| Recipient | Purpose | Processing location |
|---|---|---|
| Independent Shops | Prepare and fulfill your order (your name, order contents, delivery details) | Canada |
| Stripe | Payment processing and refunds | United States / Canada |
| Couriers & carriers (Uber Direct, UPS, Purolator, Canada Post) | Deliver your order | Canada |
| Resend | Transactional and (with consent) marketing email | United States |
| WhatsApp / Meta (opt-in) | Messaging support | United States |
| AI provider (Anthropic) | Power AI-assisted support chat | United States |
| Google / Apple (if used) | Sign-in authentication | United States |
| Microsoft Azure | Hosting and database | Canada (and as configured) |
| Authorities / professional advisors | Legal compliance, protection of rights and safety | As applicable |
These service providers are bound by contract to use your information only to provide services to us.
7. Transfers and storage outside Québec / Canada
Some of our service providers (including payment, communications, AI and certain infrastructure providers) may store or process personal information outside Québec, including in the United States. Before disclosing personal information outside Québec, we assess whether it receives adequate protection, taking into account the sensitivity of the information, the purposes, the safeguards in place and the legal framework of the destination. By using the Platform you understand that your information may be processed in these locations. You may contact our Privacy Officer for more information about these transfers.
8. How long we keep your information
We keep personal information only for as long as necessary for the purposes described above and to meet legal, accounting, tax and dispute-resolution requirements, after which we destroy, delete or anonymize it. Indicative retention periods by category:
| Category | Retention |
|---|---|
| Account information | While your account is active; deleted or anonymized within a reasonable period after closure |
| Order & transaction records | As required by tax and commercial law (generally about 6–7 years) |
| Support communications | While needed to handle your request and for a reasonable period afterward |
| Marketing consent records | Until you withdraw consent, plus a record of the change |
| Analytics data | Short-term and/or in aggregated form |
9. Your rights
Subject to legal limits, you have the right to:
- Access the personal information we hold about you and obtain a copy.
- Correct information that is inaccurate, incomplete or out of date.
- Withdraw consent to non-essential uses, and unsubscribe from marketing at any time.
- Portability — receive computerized personal information you provided in a structured, commonly used technological format (as provided under Law 25).
- De-indexing / deletion — request that we cease disseminating your information or de-index it, where the conditions set by law are met.
- Be informed about the reasons and main factors of any decision based exclusively on automated processing, if applicable.
To exercise these rights, contact privacy@edaga.ca. We will respond within the time limits set by law (generally 30 days). If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
10. Cookies and tracking
We use cookies and similar technologies as described in our Cookie Policy. You can control non-essential cookies through our cookie banner and your browser settings.
11. How we protect your information
We use reasonable physical, technical and organizational safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls and use of reputable service providers. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to those who need it.
12. Privacy incidents
If a confidentiality incident occurs that presents a risk of serious injury, we will notify the Commission d'accès à l'information and affected individuals as required by law, and take reasonable measures to reduce the risk of harm.
13. Children
The Platform is intended for adults. We do not knowingly collect personal information from children under the age of majority without parental consent. If you believe a child has provided us information, contact privacy@edaga.ca and we will take appropriate steps.
14. Changes to this policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date and, for material changes, provide additional notice where appropriate.
15. Contact us
For any privacy question or to exercise your rights, contact Michael Kassa, Privacy Officer, at privacy@edaga.ca or by mail at Edaga Inc., 3-1070 Rue de la Sucrerie, Montréal, QC H3K 2G9.
16. Language
This Policy is available in English and French. For individuals in Québec, the French version prevails in the event of any discrepancy.