Privacy policy - Fitotiffin

Last Updated: July 11, 2026

Fitotiffin Foods Ltd. (“Fitotiffin,” “we,” “us,” or “our”) operates a fresh meal preparation and delivery service in Surrey, Langley, and Metro Vancouver, British Columbia, and the website fitotiffin.ca (the “Site”).

This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the British Columbia Personal Information Protection Act (PIPA) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

By using our Site or services, you consent to the collection and use of your information as described in this policy.

1. Information We Collect

A. Information you provide directly:

Contact details: your name, email address, phone number, and delivery address when you place an order, subscribe to a meal plan, or contact us. Where applicable, we may also collect information about your SMS communication preferences and consent, including the date, method, and purpose of an SMS opt-in.
Order and subscription information: your selected meals, plan type (weekly or monthly), dietary preferences, portion selections, delivery instructions, and order history.
Delivery zone information: your postal code when you use our delivery zone checker to confirm we serve your area.
Payment information: payment card details are collected and processed securely by Stripe, our third-party payment processor. We do not store your full card number on our servers. If you pay by Interac e-Transfer, your payment is processed through your own bank, and we receive only your name, email address, and payment confirmation.
Preferences and quiz responses: answers you provide through our meal-recommendation quiz or preference forms, such as fitness goals and dietary needs.
Communications: messages you send us by email, phone, WhatsApp, or through the Site’s contact forms.

B. Information collected automatically:

Usage data: pages visited, time spent on the Site, referring pages, and general interaction data.
Device data: IP address, browser type, device type, and operating system.
Cookies and similar technologies: see Section 6 below.

2. How We Use Your Information

We use your personal information to:

Process, prepare, and deliver your meal orders.
Manage your subscription or meal plan, including renewals, pauses, and changes.
Communicate with you about your orders, deliveries, and account, including through WhatsApp or SMS where appropriate and permitted by applicable law and, where required, where you have provided the applicable consent.
Process payments and prevent fraudulent transactions.
Respond to your questions, requests, and feedback.
Send you promotional emails, offers, and updates about our meals and services only where you have consented, in compliance with Canada’s Anti-Spam Legislation (CASL). You may unsubscribe at any time using the link in any marketing email or by contacting us.
Improve our menus, website, and service based on aggregated usage and feedback.
Comply with legal and regulatory obligations, including food safety and tax requirements.

3. How We Share Your Information

We do not sell or rent your personal information. We share it only as needed to operate our business with

Delivery personnel and delivery management software e.g., route optimization and driver dispatch platforms), which receive your name, address, phone number, and delivery instructions to complete your delivery. Proof-of-delivery photos may be captured at your door.
Stripe, our payment processor, which handles your card payment securely on our behalf (see Stripe’s privacy policy at stripe.com/privacy). Interac e-Transfer payments are handled by Interac and your financial institution.
Service providers that support our operations, such as website hosting, email delivery, SMS and customer communication providers, marketing automation providers, delivery management systems, and other technology providers that process information on our behalf. These providers may process your name, phone number, email address, order information, and communication preferences only as reasonably necessary to provide their services to Fitotiffin.
Mobile SMS privacy: Fitotiffin does not sell or rent mobile phone numbers or SMS opt-in information. We do not share mobile phone numbers or SMS consent information with third parties or affiliates for their own marketing or promotional purposes. Service providers may receive such information only where reasonably necessary to provide services to Fitotiffin, such as delivering SMS communications on our behalf.
Professional advisors and authorities where required by law, court order, or to protect our legal rights.

Some service providers may store or process data outside of Canada (for example, in the United States). Where this occurs, your information may be subject to the laws of those jurisdictions.

4. Marketing Communications (CASL)

We send commercial electronic messages, including promotional email, SMS, and WhatsApp messages, only where we have obtained the consent required by applicable law or where otherwise legally permitted.

Marketing consent is separate from acceptance of our Terms of Use and is not required to create an account, purchase a meal plan, or place an order.

If you opt in to promotional SMS communications from Fitotiffin, message frequency may vary and message and data rates may apply. You may withdraw your consent to promotional SMS messages at any time by replying STOP to the applicable message. For assistance, reply HELP or contact us at the contact information provided below.

Transactional or service-related communications necessary to administer an active order or account, such as order confirmations, delivery notifications, payment notifications, or important service updates, are separate from promotional communications and may continue where permitted by applicable law and where reasonably necessary to provide the requested service.

Promotional messages identify Fitotiffin Foods Ltd. and include an appropriate unsubscribe mechanism. Unsubscribe requests for commercial electronic messages are processed within the period required by applicable law.

5. Data Retention

We retain personal information only as long as necessary for the purposes described above or as required by law. Order and payment records are retained to meet Canadian tax and accounting requirements (generally seven years). Marketing lists are retained until you unsubscribe or your consent lapses. Where applicable, we may retain records of SMS consent, including the phone number, consent status, date and time of consent, consent method, purpose of the consent, and the version of the consent language presented at the time of opt-in, for compliance, auditing, dispute resolution, and recordkeeping purposes. Inactive customer accounts may be archived or deleted after a reasonable period.

6. Cookies and Analytics

Our Site uses cookies and similar technologies to keep the ordering process working (e.g., remembering your cart or plan selections), understand how visitors use the Site, and improve performance. We may use analytics tools that collect anonymized or aggregated usage data. You can control or disable cookies through your browser settings, though some site features (such as the ordering wizard) may not function properly without them.

7. Security

We take reasonable administrative, technical, and physical safeguards to protect your personal information against loss, theft, and unauthorized access, use, or disclosure. These include secure payment processing, access controls, and limiting employee access to information needed to perform their duties. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

8. Your Rights

Under BC PIPA and PIPEDA, you have the right to:

Access the personal information we hold about you.
Correct inaccurate or incomplete information.
Withdraw consent to promotional SMS communications at any time by replying STOP to a promotional text message or by contacting us using the information in Section 12. Withdrawal of promotional SMS consent does not necessarily stop service-related communications that are reasonably necessary to provide an active order or account, where permitted by law.
Ask questions or make a complaint about our privacy practices.

9. Children’s Privacy

Our services are intended for adults. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.

10. Third-Party Links

Our Site may contain links to third-party websites or services (such as social media pages).We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be posted on this page, and where appropriate, we will notify you by email. Continued use of the Site after changes take effect constitutes acceptance of the updated policy.