Privacy Policy
Effective Date: October 20, 2026
1. Introduction and Company Information
This Privacy Policy explains how De Mello Coffee Online Inc. (“De Mello Coffee Online Inc.,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit or use our website at buxfombror.site, place orders, contact us, or otherwise interact with us in connection with our coffee-shop products and services.
We are committed to protecting personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and, where applicable, relevant provincial privacy legislation.
Business name: De Mello Coffee Online Inc.
Address: 2489 Yonge Street, Toronto, ON M4P 2H6, Canada
Email: [email protected]
Phone: +1 416-556-5393
2. Data Collection and Processing
We may collect personal information directly from you, automatically through our website, and from third parties where permitted by law. The types of information we may collect include:
- Identification and contact information: name, billing address, shipping address, email address, phone number, and account details.
- Transaction information: products purchased, order history, payment status, delivery preferences, returns, refunds, and customer service records.
- Payment information: payment method details and limited payment identifiers. We generally use third-party payment processors and do not store full card numbers where not necessary.
- Website and device information: IP address, browser type, device identifiers, operating system, pages viewed, referral information, and browsing activity on our website.
- Communication information: messages, inquiries, feedback, reviews, and other communications you send to us.
- Preference information: marketing preferences, product interests, and subscription choices.
We may process personal information by collection, use, storage, organization, disclosure, and deletion, as necessary for the purposes described in this Policy.
3. Purpose of Data Processing
We process personal information for the following purposes:
- to create and manage customer accounts;
- to process and fulfill orders, payments, shipping, and returns;
- to provide customer support and respond to inquiries;
- to communicate order updates, service messages, and administrative notices;
- to personalize the website experience and improve our products and services;
- to conduct analytics, quality assurance, and website performance monitoring;
- to send marketing communications where permitted by law and subject to your choices;
- to prevent fraud, detect security incidents, and protect our business, users, and systems;
- to comply with legal and regulatory obligations;
- to establish, exercise, or defend legal claims.
4. Legal Basis for Processing
Under Canadian privacy law, we generally rely on knowledge and consent as the primary basis for processing personal information, subject to limited exceptions permitted by law. Depending on the context, we may process your personal information because:
- you have given express or implied consent;
- the processing is necessary to provide products or services you requested;
- the processing is required to comply with legal obligations;
- the processing is necessary to protect against fraud or security risks;
- the processing is otherwise permitted or required by applicable law.
Where applicable, we may also rely on legitimate business purposes recognized under Canadian privacy principles, provided such use is appropriate and reasonable in the circumstances.
5. Data Sharing and Third Parties
We do not sell personal information in the ordinary sense of the word. We may disclose personal information to third parties in the following circumstances:
- Service providers: hosting providers, website analytics providers, payment processors, email service providers, delivery and logistics partners, customer support tools, and IT/security vendors.
- Professional advisors: lawyers, accountants, auditors, insurers, and similar advisors who are bound by confidentiality obligations.
- Business transfers: in connection with a merger, acquisition, reorganization, financing, or sale of assets, subject to applicable legal requirements.
- Legal and regulatory disclosure: where required to comply with law, court orders, lawful requests, or to protect rights, safety, or property.
- With your direction or consent: when you ask us to share information or otherwise authorize disclosure.
We require third parties to protect personal information and use it only for the purposes for which it was disclosed, subject to their own legal obligations and our contractual requirements where applicable.
6. Data Transfer to Third Countries
Some of our service providers may process or store personal information outside of Canada, including in the United States or other foreign jurisdictions. When information is transferred outside Canada, it may be subject to the laws of those jurisdictions and may be accessible to foreign courts, law enforcement, or regulatory authorities.
We use reasonable contractual, technical, and organizational safeguards designed to protect personal information when it is transferred internationally. By using our website or providing us with personal information, you acknowledge that such transfers may occur as part of our operations.
7. Storage Duration
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, tax, operational, and security purposes.
The retention period may vary depending on the type of information and the nature of our relationship with you. For example:
- order and transaction records may be retained for the period required by tax, accounting, and consumer protection laws;
- customer service records may be retained for a reasonable period to resolve disputes and improve service quality;
- marketing information may be retained until you unsubscribe or withdraw consent, subject to legal retention requirements;
- website logs and analytics data may be retained for a limited period to maintain security and performance.
When information is no longer required, we will securely delete, anonymize, or De Mello Coffee-identify it where appropriate.
8. User Rights
Subject to applicable law, you may have the following rights regarding your personal information:
- Access: request confirmation of whether we hold personal information about you and obtain access to that information.
- Rectification: request correction of inaccurate, incomplete, or outdated personal information.
- Erasure: request deletion of personal information in certain circumstances, subject to legal and operational retention obligations.
- Restriction: request that we limit the processing of your personal information in certain circumstances.
- Data portability: request a copy of certain personal information in a structured, commonly used format where applicable by law.
- Objection: object to certain uses of your personal information, including some forms of direct marketing.
To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before responding. We will respond within a reasonable time and in accordance with applicable Canadian privacy requirements.
9. Withdrawal of Consent
Where we rely on your consent to process personal information, you may withdraw that consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent for certain processing, we may no longer be able to provide some services or features, such as marketing emails, personalized offers, or certain account functions.
10. Right to Complain
If you have concerns about our privacy practices, we encourage you to contact us first so we can address the issue. You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or with the relevant provincial privacy regulator, depending on the circumstances.
We will cooperate with any lawful investigation and will work in good faith to resolve privacy concerns in a timely manner.
11. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These safeguards may include:
- access controls and authentication measures;
- secure hosting and network protections;
- encryption or other security protections where appropriate;
- staff confidentiality obligations and training;
- monitoring for suspicious activity and security incidents;
- backup and recovery procedures.
No method of transmission or storage is completely secure. While we strive to protect personal information, we cannot guarantee absolute security.
12. Contact Information
If you have questions, requests, or complaints regarding this Privacy Policy or our handling of personal information, please contact:
De Mello Coffee Online Inc.
2489 Yonge Street, Toronto, ON M4P 2H6, Canada
Email: [email protected]
Phone: +1 416-556-5393
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will post the revised Privacy Policy on our website and update the effective date above.
Your continued use of our website or services after a revised Privacy Policy is posted means you acknowledge the updated terms to the extent permitted by law.