Skip to main content

Privacy policy

Last updated: May 1, 2026.

This policy describes what personal information FarmToTable.ca collects, how we use it, and the choices you have. It is written to comply with Canada’s PIPEDA and CASL and the European Union’s GDPR. If you are a resident of the EU/EEA you have the same rights described below, plus the additional rights granted under GDPR Articles 12–22.

What we collect

  • From visitors: standard request logs (IP address, user-agent, referer, path, timestamp). We retain these for 90 days for security and abuse-detection purposes. We do not run any third-party tracking scripts. We do not sell visitor data.
  • From newsletter subscribers: email address, optional first name, and the source page of your sign-up. We use this to send the weekly newsletter and nothing else. Unsubscribe at any time from any issue.
  • From farm owners: name, email, password (hashed with bcrypt), role at the farm, the listing you claim, and verification artefacts (phone code attempt logs, uploaded ID document if used). We retain account data for the lifetime of the account plus 24 months after closure for audit purposes.
  • From paying customers: we use Stripe for all payment processing. We never see or store full card numbers. Stripe’s privacy policy applies to anything you submit on a Stripe-hosted page.

Cookies

We use two first-party cookies: a session cookie for keeping you signed in, and a CSRF token cookie for protecting form submissions. We do not set advertising cookies. We do not embed Facebook Pixel, Google Analytics, or any other third-party tracker.

How we use the information

We use the information you give us to run the directory, send the newsletter you signed up for, process payments for premium listings, and respond when you contact us. We do not sell, rent, or trade personal information to anyone.

Your rights

You can request a copy of the personal information we hold about you, correct anything that’s wrong, or ask us to delete it. Email privacy@farmtotable.ca and we’ll respond within 30 days.

Data storage and transfers

Our servers are located in Germany (Hetzner). If you are a Canadian or US resident, your personal information will be processed in the European Union for the purposes described above. We use standard contractual clauses approved by the European Commission for any transfers outside the EEA.

Changes

If we materially change this policy we’ll email newsletter subscribers and farm owners at least 14 days before the change takes effect.

Contact

Privacy questions: privacy@farmtotable.ca. General questions: the contact page.