PRIVACY POLICY

Effective Date: July 2026

Bretzel Traditional German Treats Ltd. (“Bretzel”, “we”, “us”, or “our”) respects your privacy and understands that personal information is important and sensitive.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, place an order, contact us, or otherwise interact with us.

We follow the principles of Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.

By using our website or providing personal information to us, you agree to the terms of this Privacy Policy.

1. Accountability

We are responsible for personal information under our control and have designated personnel responsible for privacy compliance and inquiries.

If you have questions about this Privacy Policy or your personal information, please contact us using the information at the end of this Policy.

2. What Personal Information We Collect

We may collect the following types of personal information:

Name
Email address
Phone number
Billing and delivery addresses
Order and transaction details
Account information (if you create an account)
Information submitted through contact forms, inquiries, surveys, or customer service requests
Technical information such as IP address, browser type, device information, and pages visited
Cookie and tracking information

We collect only the information reasonably necessary for the purposes described in this Privacy Policy.

Loyalty and Rewards Program (“Breadcrumbs”)

If you participate in our rewards program, we may collect:

Account details
Points balances
Rewards earned
Purchase history related to the program

This information is used solely to administer the rewards program and is never sold to third parties.

3. How and Why We Collect Personal Information

We may collect personal information when you:

Place an order
Contact us
Subscribe to our newsletter
Create an account
Complete forms or surveys
Browse our website
Participate in promotions or special offers

We may use your information to:

Process orders and payments
Provide customer support
Respond to inquiries
Improve our website and customer experience
Operate and maintain our business
Protect against fraud, spam, and other security threats
Send marketing communications (only with your consent)
Operate our rewards program
Comply with legal obligations

We obtain consent before collecting, using, or disclosing personal information unless otherwise permitted or required by law.

Consent may be:

Express (for example, checking a consent box)
Implied (for example, providing information necessary to complete an order)

You may withdraw your consent at any time, subject to legal or contractual restrictions.

Marketing emails always include an unsubscribe option.

5. Limiting Collection

We collect only the personal information necessary for the purposes identified in this Privacy Policy using fair and lawful means.

6. Limiting Use, Disclosure and Retention

We use and disclose personal information only for the purposes described in this Policy or where required by law.

We may share information with trusted third-party providers that assist us with:

Payment processing
Website hosting
Email communications
Analytics
Order fulfillment
Website security and fraud prevention

Payment transactions may be processed through trusted providers such as Square, Apple Pay, Google Pay, or similar payment processors. Bretzel does not store complete payment card information on its own servers.

Marketing and transactional emails may be processed through Brevo or similar communication service providers.

Some service providers may process or store information outside Canada, including the United States. Information processed outside Canada may be subject to the laws of those jurisdictions.

We may also disclose personal information:

To comply with legal obligations
To respond to lawful requests
To protect our legal rights
In connection with a merger, acquisition, or sale of our business

We retain personal information only as long as reasonably necessary for business or legal purposes.

7. Accuracy

We take reasonable steps to ensure personal information is accurate, complete, and up to date.

You may request corrections at any time.

8. Safeguards

We use physical, administrative, and technical safeguards appropriate to the sensitivity of the information.

Examples include:

Secure servers
Access controls
Limited employee access
Security monitoring
Encryption where appropriate

If you choose to use social login services, we may receive limited public profile information such as your name, email address, profile image, and a unique account identifier solely for the purpose of creating and managing your account.

9. Cookies, Analytics and Website Security

We have to distinguish between two kinds of cookies.

The cookies in our bakery are delicious and freshly baked.

The cookies used by our website unfortunately are not edible, but they help provide a secure, reliable, and enjoyable browsing experience.

Like many websites, Bretzel uses cookies and similar technologies for:

Website functionality
Shopping cart operation
User preferences
Analytics
Security
Fraud prevention

You may disable cookies through your browser settings; however, certain features of our website may no longer function correctly.

Our website may also use temporary cookies to remember shopping cart contents, preferences, and popup notifications.

Cloudflare Turnstile

To protect our website, contact forms, newsletter signup, and other public forms against spam, automated abuse, and malicious bots, we use Cloudflare Turnstile, a security service provided by Cloudflare, Inc.

When you submit a form, Cloudflare Turnstile may process limited technical information, including:

IP address
Browser and device information
User-Agent
TLS fingerprint
Website hostname
Other technical signals required to distinguish human visitors from automated systems

This information is processed solely for website security, spam prevention, and fraud detection. Turnstile is designed to minimize data collection while helping ensure that our forms remain safe and reliable.

For additional information about how Cloudflare processes this information, please refer to:

Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/
Cloudflare Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy/
Cloudflare Cookie Policy: https://www.cloudflare.com/cookie-policy/

10. Children’s Privacy

Our website is not intended for children under 13 years of age.

We do not knowingly collect personal information from children.

11. Access to Personal Information

Upon request, we will inform you whether we hold personal information about you and provide access where permitted by law.

You may request:

Access to your information
Corrections
Withdrawal of consent
Removal from marketing communications
Deletion where legally permitted

We respond to requests within a reasonable timeframe.

12. International Transfers

Some service providers may process or store personal information outside Canada.

Where this occurs, personal information may be subject to the laws of those jurisdictions.

13. Updates to This Policy

Last Update July 2026: Cloudflare Turnstile

We may update this Privacy Policy periodically.

Any revisions will be posted on this page with an updated Effective Date.

Continued use of our website after changes have been published constitutes acceptance of the updated Policy.

14. Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact us:

policy@bretzel.ca

Bretzel Traditional German Treats Ltd.

Victoria, British Columbia, Canada

Additional Information

Bretzel currently offers local delivery and pickup services within selected areas of British Columbia, Canada.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those external websites and encourage visitors to review their respective privacy policies.