Privacy Policy

Beyond Café Inc. (operating as Beyond Café) is the organization responsible for personal information under its control. Its designated owner/administrator handles privacy questions, requests and complaints. Email cafe.beyond2022@gmail.com, call (613) 841-3166, or write to us at the address above.

Customer accounts:

• Name and email address — required to create an account.
• Phone number — optional; only if you add it in My Account.
• Privacy Policy acceptance — which version you accepted and when.
• Marketing choice — whether you opted in to marketing emails and when you last changed it.
• Account and security information — your password (stored as a protected hash by our sign-in service and not visible to staff), email confirmation status, sign-in times and related technical details such as IP address, recorded to keep accounts secure.

Contact form: your first and last name, email, phone number, subject and message.

Gift cards, orders and rewards are not active. We do not collect payment or purchase information through this website. If that changes, we will update this policy first.

• To create, secure and maintain your account and let you sign in.
• To send essential account messages: email confirmation, a one-time notice that your account is confirmed, and password resets.
• After a new customer verifies their email address, to send one operational account-administration notice to the café inbox at cafe.beyond2022@gmail.com, containing only their name, email address and verified status. This planned notice is separate from customer confirmation emails, is not promotional, and does not include passwords or sign-in links. Automatic sending remains paused pending launch checks and approval.
• To respond to contact-form messages and support requests individually.
• To send news, events and offers — only if you opt in. We are not sending marketing emails at this time.
• To keep a record of your consents and to meet legal obligations.

We will ask for your consent before using your information for a new purpose.

We do not sell your personal information, and your profile is not shown publicly or to other customers. Authorized Beyond Café administrators may access account information when necessary to operate or support your account.

• Lovable (Lovable Cloud) — website hosting, account database, sign-in and account emails.
• Web3Forms — delivers contact-form messages to our email inbox.
• Google (Gmail) — our café inbox at cafe.beyond2022@gmail.com, where contact messages and emails you send us are received. When owner verification notices are activated, a copy of each new verified customer's name, email address and verified status will also be held in this inbox for account administration.

These providers process information on our behalf and may store or process it outside Canada, where it may be accessible to authorities under the laws of those countries. We may also disclose information where required or permitted by law.

When you sign in, your browser stores a sign-in session so you stay signed in; signing out removes it. This website does not use advertising cookies or third-party tracking tools.

We use safeguards appropriate to the information, including password-protected accounts, encrypted (HTTPS) connections, and database access rules that limit each customer to their own profile and restrict administrative access to authorized staff. No system is completely secure. If a breach of security safeguards creates a real risk of significant harm, we will respond as required by law, including notifying affected individuals and the Office of the Privacy Commissioner of Canada.

Creating an account requires accepting this policy and providing your name and email; without them we can't provide an account. Marketing emails are separate and optional — the box is unticked by default, and signing up never requires it.

You can withdraw marketing consent anytime by unticking the box in My Account or by emailing cafe.beyond2022@gmail.com; we will act on it within 10 business days. Any marketing email we send will identify Beyond Café Inc., include our mailing address and contact details, and include a working unsubscribe option.

You can view and correct your name, phone and marketing choice in My Account. To request access to the information we hold about you or to correct anything else, email cafe.beyond2022@gmail.com. We may need to confirm your identity first, and we will respond within the time required by law.

We keep personal information only as long as needed for the purposes above or as required by law. Account deletion is handled on request: email cafe.beyond2022@gmail.com from the address on your account. There is no self-serve delete button at this time. We may keep a record of your consent choices where needed to show we respected them.

Owner verification notices will create a separate copy of the information in the café Gmail inbox. Deleting an account does not automatically remove those emails. A request to access, correct or delete account information must also be reviewed for related notices and other copies held in that inbox, including archived messages and trash, subject to any applicable legal retention obligations.

We retain signup notification emails for up to 12 months from receipt, unless a legitimate business or legal need requires longer retention. Beyond Café Inc.'s designated owner/administrator handles privacy requests and reviews related mailbox copies, including archived messages and trash, for removal when no longer needed, subject to those retention needs. This is a manual administrative process, not an automatic deletion feature; we do not promise immediate deletion or deletion of every provider backup.

Please contact us first at cafe.beyond2022@gmail.com and we will try to resolve your concern. You also have the right to complain to the Office of the Privacy Commissioner of Canada.

We may update this policy. We will post the new version here with a new version and date.