Privacy Policy – Resistance Coffee
Last updated: August 1, 2025
At Resistance Coffee Corp. (“Resistance Coffee”, “we”, “us”, “our”), we believe in freedom, transparency, and treating people with respect—including when it comes to your personal information. This Privacy Policy explains how we collect, use, and protect your data when you visit our website, place an order, or interact with us.
We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, provincial laws in Ontario, U.S. consumer protection standards, and the General Data Protection Regulation (GDPR) for our customers in the European Union, as applicable.
1. What Information We Collect
When you shop with us or use our site, we may collect:
- Contact details: Name, email address, phone number, shipping and billing address
- Payment information: Credit card details (processed securely via Shopify)
- Order history: Products you’ve purchased, dates, and amounts
- Technical data: IP address, browser type, device info, and cookies
- Optional info: If you leave a review, send us feedback, or sign up for our newsletter
We only collect what we need to serve you better—and we don’t collect sensitive data like health or biometric info.
2. How We Use Your Information
We use your information to:
- Process and deliver your orders
- Communicate with you about your purchases
- Send you updates, promotions, or newsletters (only if you opt in)
- Improve our website and customer experience
- Comply with legal obligations
We do not sell your data. Ever.
3. Legal Bases for Processing (EU Customers)
If you're in the EU, we process your data under the following legal bases:
- Consent: When you opt in to marketing or cookies
- Contract: To fulfill your order
- Legal obligation: For tax, fraud prevention, or regulatory compliance
- Legitimate interest: To improve our services and protect our business
4. Sharing Your Information
We may share your data with:
- Trusted service providers: Like Shopify (our e-commerce platform), payment processors, digital marketing consultants, distributors, and shipping partners
- Legal authorities: If required by law or to protect our rights
All third parties are required to handle your data securely and in accordance with applicable laws.
5. International Transfers
We’re based in Ontario, Canada, but we serve customers across Canada, the United States, and the European Union. Your data may be stored or processed in countries outside your own, including the U.S. and Canada. We take steps to ensure your data is protected, including using secure servers and contractual safeguards.
6. Your Rights
Depending on where you live, you may have the right to:
- Access your personal data
- Correct inaccurate information
- Delete your data (“right to be forgotten”)
- Object to or restrict processing
- Withdraw consent at any time
- Lodge a complaint with your local data protection authority
To exercise these rights, email us at [email protected].
7. Cookies & Tracking
We use cookies to improve your experience, remember your preferences, and analyze site traffic. You can manage cookie settings through your browser. EU visitors will see a cookie consent banner in compliance with GDPR.
8. Data Retention
We keep your data only as long as necessary to fulfill the purposes outlined in this policy, or as required by law. When we no longer need it, we securely delete or anonymize it.
9. Security
We take data security seriously. Your information is protected using industry-standard encryption, secure servers, and access controls. While no system is 100% foolproof, we do our best to keep your data safe.
10. Children’s Privacy
Our site is not intended for children under the age of majority. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make significant changes, we’ll post a notice on our site. Your continued use of our services means you accept the updated policy.
13. Third-Party Processing & Data Protection
Resistance Coffee may engage trusted third-party service providers to process personal information on our behalf. This includes, but is not limited to, e-commerce platforms (e.g., Shopify), payment processors, marketing platforms, and logistics providers.
In accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), we remain accountable for the personal information we transfer to these providers. We ensure that all third-party processors are contractually obligated to:
- Handle personal information only for the purposes we specify
- Implement appropriate security safeguards to protect the data
- Comply with applicable privacy laws, including PIPEDA, U.S. consumer protection laws, and the EU’s General Data Protection Regulation (GDPR) where relevant
- Notify us promptly in the event of a data breach or unauthorized access
We do not authorize third parties to use your personal information for their own purposes. All processing is done under our direction and in alignment with this Privacy Policy.
13. Contact Us
If you have questions, concerns, or requests related to your privacy, reach out to us:
📧 [email protected]
📍 Resistance Coffee Corp.
Peterborough, Ontario, Canada
© Copyright 2025 Resistance Coffee