Privacy Policy

1. Who We Are

farmilyGO (also known as Granjas Canada / Agro-Conecta) operates a marketplace connecting Ontario families with local farms. We are committed to protecting your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)and the Consumer Privacy Protection Act (CPPA).

Our designated Privacy Officer can be reached at:[email protected]

2. Information We Collect

• Account data: name, email, phone, city, province, country.
• Transaction data: orders, bookings, payment references (we do not store card numbers).
• Usage data: pages visited, search queries, session logs.
• Location data: approximate coordinates for farm discovery (precision ≤ 2 km).
• Communications: messages exchanged with farms or our support team.

3. How We Use Your Information

• To create and manage your account.
• To process orders, bookings, and payments.
• To send transactional notifications (order confirmations, booking reminders).
• To improve platform features and personalize recommendations.
• To comply with legal obligations and resolve disputes.

We will not sell your personal information to third parties.

4. Legal Basis for Processing

We process personal data with your consent (collected at registration), for contractual necessity (to fulfill orders and bookings), and where required by law.

5. Data Sharing

We share data only with service providers necessary to operate the platform (payment processors, cloud storage, email delivery, mapping services). All providers are bound by data processing agreements.

6. Data Retention

• Account data: retained while active + 30 days after deletion request.
• Order records: 7 years (CRA tax compliance).
• Messages: 2 years.
• Security logs: 1 year.

7. Your Rights (PIPEDA)

• Access: You can export all your personal data from your account settings.
• Correction: Update your profile information at any time.
• Deletion: Request account deletion from your account settings. PII is anonymized within 30 days.
• Withdrawal of consent: Contact [email protected].
• Complaint: You may file a complaint with the Office of the Privacy Commissioner of Canada (OPC).

8. Cookies & Tracking

We use strictly necessary session cookies for authentication. We do not use third-party advertising trackers or fingerprinting technologies.

9. Security

We apply industry-standard security measures including TLS encryption in transit, bcrypt password hashing, HttpOnly session cookies, rate limiting, and security headers (HSTS, CSP).

10. Changes to This Policy

We will notify registered users by email of material changes at least 30 days before they take effect.