Privacy Policy

GoGrocery ("we," "us," or "our") provides an online grocery shopping and local delivery service for customers in the Calgary area through gogrocery.ca. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices you have. We handle personal information in line with applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA), where it applies to our activities.

Account and profile. When you create an account, we collect your name, email address, and a securely hashed password if you register with email and password. If you choose Sign in with Google, we receive your email address and basic profile information (such as your display name and profile picture URL) from Google according to the permissions you approve. We use this only to identify you and operate your account.

Orders and delivery. When you place an order, we collect cart contents, order totals, delivery-related details you provide (such as address and phone number where applicable), and order status. Payment is made by Interac e-Transfer outside our card processing; we do not store full bank or card numbers on our servers.

Communications. If you contact us through our contact form or email, we collect the information you send (name, email, message). We may send transactional emails such as order confirmations, sign-in links, and service notices.

Technical data. Our hosting providers may process standard server logs (IP address, browser type, pages visited, timestamps) for security, performance, and troubleshooting. We use HTTP-only session cookies to keep you signed in; these are essential for account features.

We use personal information to:

• Create and manage your account and authenticate you (including Google sign-in);
• Process orders, arrange delivery, and communicate about your orders;
• Respond to support requests and improve our service;
• Protect against fraud, abuse, and security incidents;
• Comply with legal obligations.

We do not sell your personal information. We do not use Google account data for advertising profiles unrelated to operating GoGrocery.

Google Sign-In is optional. When you use it, authentication is handled by Google under Google's own privacy policy. We receive only the data Google shares with our app (typically your email and basic profile) as described in section 2. You can revoke GoGrocery's access in your Google Account settings at any time; you may still sign in with email if you have set a password or use a magic link where offered.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use trusted providers to run the service. They process data only on our instructions and for the purposes described in this policy. Categories include:

• Website and application hosting (e.g. Netlify);
• Database hosting (e.g. Neon Postgres);
• Transactional email delivery (e.g. Resend);
• Google (OAuth sign-in and, separately, operational tools we use to manage product data).

We keep account and order information for as long as your account is active and as needed to fulfill orders, resolve disputes, and meet legal and accounting requirements. You may request deletion of your account by contacting us; some records may be retained where required by law.

We use reasonable technical and organizational measures to protect personal information, including encrypted connections (HTTPS), hashed passwords, and access controls for administrative functions. No method of transmission or storage is completely secure; please use a strong, unique password and protect your email account.

Depending on applicable law, you may request access to, correction of, or deletion of your personal information, or withdraw consent where processing is consent-based. To exercise these rights, email support@gogrocery.ca. We may need to verify your identity before responding.

GoGrocery is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will post the revised policy on this page with a new effective date. Continued use of the service after changes constitutes acceptance of the updated policy where permitted by law.

For privacy questions or requests, contact GoGrocery at support@gogrocery.ca or through our contact form.