Legal Policies

Last Updated: March 19, 2026 Gran’s Ola respects your privacy and is committed to protecting your personal information in accordance with applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA). This Privacy Policy explains what personal information we collect, how we use it, when we share it, how long we keep it, and the choices available to you. PIPEDA requires meaningful consent and clear explanation of how personal information is handled.

Gran’s Ola is a Canadian granola business based in Constance Bay, Ottawa, Ontario, Canada. If you have questions, privacy requests, or complaints, you can contact us at eatgransola@gmail.com. The current website also offers a contact form requesting name, email address, and message content.

Depending on how you interact with us, we may collect: A. Information you provide directly your name; billing address; shipping address; email address; phone number, if provided during checkout or shipping; order details and purchase history; messages you send through our contact form or by email; any reviews, testimonials, or other content you send us; newsletter or promotional sign-up information, where offered. B. Payment and transaction information When you place an order, payment details are typically processed by third-party payment providers integrated into the website platform. We may receive limited transaction details such as confirmation of payment, order value, billing name, billing address, and partial payment metadata, but we do not intend to store full payment card numbers ourselves unless clearly stated at the point of collection. C. Technical and website usage information When you visit the website, we or our service providers may automatically collect certain technical information, such as: IP address; browser type; device type; operating system; referring pages; pages viewed; date and time of visits; session information; cookies and similar tracking identifiers. This type of collection is commonly associated with website hosting, security, analytics, storefront functionality, and performance monitoring. PIPEDA applies to such information where it can identify an individual or be linked to them.

We collect personal information: when you browse the website; when you add items to cart or place an order; when you fill out the contact form; when you email us directly; when you subscribe to newsletters or marketing communications, if offered; when you interact with our social-media pages or embedded social features; through cookies and similar technologies used by us or our service providers.

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances, including to: provide and deliver products you order; process payments and issue confirmations; communicate with you about your order, shipment, delivery, or customer service issue; respond to questions submitted through our contact form or by email; maintain website security and prevent fraud; improve website performance, customer experience, product offerings, and business operations; comply with legal, tax, regulatory, accounting, and record-keeping obligations; send newsletters, promotions, or marketing messages where permitted by law and where the required consent has been obtained. PIPEDA requires that these purposes be identified clearly and that consent be meaningful.

Under PIPEDA, we obtain consent for the collection, use, and disclosure of personal information, except where permitted or required by law. Consent may be express or implied depending on the sensitivity of the information and the reasonable expectations of the individual. For example: when you provide shipping, billing, and contact information to place an order, you consent to our use of that information to process and deliver the order; when you submit an inquiry through our contact form, you consent to our use of your information to respond; when you voluntarily opt in to receive newsletters or promotional emails, you consent to receiving those communications subject to CASL and your right to unsubscribe. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may affect our ability to provide certain products or services.

If we send commercial electronic messages such as newsletters, promotions, product updates, or special offers, we will do so in accordance with Canada’s Anti-Spam Legislation (CASL). Where required, we will obtain your express consent before sending marketing emails. In some limited situations permitted by law, we may rely on implied consent, such as where you have an existing business relationship with us through a recent purchase or inquiry, for the period allowed by law. Our marketing emails will identify us and include a functioning unsubscribe mechanism that can be readily performed. You may unsubscribe at any time, and we will process unsubscribe requests as required by law. CASL generally requires consent, sender identification, and an unsubscribe mechanism.

The website may use cookies, pixels, tags, scripts, and similar technologies for essential storefront functions, remembering cart activity, security, fraud prevention, site performance, analytics, and marketing. Some cookies may be strictly necessary for the website to function. Others may be used for analytics or marketing, depending on how the Wix site and any connected apps are configured. You can control cookies through your browser settings and, where available, any cookie-management tools provided on the website. Disabling certain cookies may affect website functionality, including checkout, saved preferences, or cart performance. Canadian privacy guidance stresses transparency and meaningful consent where tracking collects or uses personal information, especially for behavioural advertising.

We may share personal information with trusted third parties who provide services needed to operate the business, such as: website hosting and eCommerce infrastructure providers, including Wix; payment processors; shipping, courier, or delivery providers; email service providers; customer-support tools; analytics, security, fraud-prevention, and performance tools; professional advisors such as accountants, insurers, or legal counsel where reasonably necessary. We share only the information reasonably necessary for those providers to perform services for us, and those providers are expected to protect the information appropriately. PIPEDA requires organizations to remain accountable for personal information transferred to third parties for processing.

Some service providers may store or process personal information outside your province or outside Canada, including in the United States or other jurisdictions where they or their sub-processors operate. When this happens, personal information may be subject to the laws of those jurisdictions and may be accessible to courts, law-enforcement authorities, or national-security authorities in accordance with local law. By using the website or submitting your information, you understand that such cross-border processing may occur where required to operate our website or services. PIPEDA permits cross-border processing but requires transparency and appropriate safeguards.

We keep personal information only as long as reasonably necessary for the purposes described in this Policy, including to fulfill orders, respond to customer inquiries, maintain business and tax records, resolve disputes, enforce agreements, and comply with legal obligations. When information is no longer required, we will delete it, anonymize it, or securely destroy it, subject to legal retention requirements.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the personal information we hold. These may include restricted access, password protection, secure third-party platforms, encrypted payment environments managed by service providers, and reasonable procedures to limit unauthorized access, use, disclosure, or loss. No method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.

Our website and products are intended for a general audience and are not directed to children. We do not knowingly collect personal information directly from children without appropriate consent from a parent or guardian. If you believe a child has provided personal information to us without proper authorization, please contact us so we can review and delete it where appropriate. PIPEDA’s consent framework requires particular care where meaningful consent may be difficult to obtain, including for minors.

Subject to legal limitations, you may request: access to the personal information we hold about you; correction of inaccurate or incomplete information; information about how your data has been used or disclosed; withdrawal of consent to certain uses; deletion of information where appropriate and legally permissible. To make a request, contact eatgransola@gmail.com. We may need to verify your identity before processing your request. PIPEDA gives individuals a right of access and correction, subject to limited exceptions.

If you have a question, concern, or complaint about our privacy practices, please contact us first at eatgransola@gmail.com. We will review your concern and respond within a reasonable time. If you are not satisfied with our response, you may have the right to contact the Office of the Privacy Commissioner of Canada.

Our website may contain links to third-party websites or social-media platforms, including Facebook and Instagram. If you click through to a third-party platform, your information will be governed by that platform’s own terms and privacy practices, not this Privacy Policy. We are not responsible for third-party privacy practices.

If you are a resident of Québec or another province with mandatory consumer-protection rules for online purchases, nothing in this Privacy Policy or on the website is intended to limit any mandatory rights you may have under applicable law. Québec’s consumer-protection regime includes specific protections for online purchases and cancellation rights in some circumstances.

We may update this Privacy Policy from time to time to reflect changes to the website, our practices, legal requirements, or service providers. The updated version will be posted on this page with a revised “Last Updated” date. Continued use of the website after changes are posted means you acknowledge the revised Policy.