Effective Date: 20 November 2025

​

GISAY Pâtisserie respects your privacy and complies with all applicable laws that govern the collection, use, and disclosure of personal information on our website https://www.gisay.ca/ and other sites we own or operate. No payment processing occurs on the website; all payments are made offline.

​

1. What Personal Information We Collect

​

We collect only the personal information that is necessary to process your orders and provide customer support. This includes:

• Contact Information: name, email address, telephone number.

• Order & Delivery Details: billing and shipping addresses, order specifications (e.g., dietary notes, preferred delivery date), and purchase history.

• Health‑related information: occasionally we collect dietary or allergy notes (e.g., “lactose‑free”). This data is treated as sensitive personal data and is stored with heightened security (encrypted at rest) and accessed only by personnel directly involved in order preparation.

 

We also collect non-personal information automatically as you browse the site (e.g., IP address, browser type, browsing history) to improve functionality and your user experience.

​

2. How We Collect Your Information

​

Information is obtained directly from you when you:

• Submit an order through our online form;

• Fill out the “Contact Us” form, email, or call us.

 

3. How We Use Your Information

 

We use your personal data only for the purposes identified at the time of collection, or for purposes that are compatible with those reasons, namely:

• Processing, confirming, and delivering your order;

• Communicating order status, answering inquiries, and providing customer support;

• Improving our products, services, and website functionality;

• Fulfilling legal and regulatory obligations;

• Sending you marketing material only with your explicit consent (you may unsubscribe at any time).

 

4. When We Disclose Your Information

 

We do not sell, rent, or trade your personal information. Disclosure occurs only when it is necessary to: 

• Fulfill your order;

• Provide essential services;

• Comply with legal obligations.

 

We may share your information with:

• Delivery Carriers: to transport your baked goods to the address you provide.

• Service Providers: such as web‑hosting, email, and analytics vendors that support our business operations. We do not share any payment‑card or banking information because no such data is collected.

• Legal authorities: when required by a court order, subpoena, or to prevent fraud or other unlawful activity.

 

Age Restrictions / Parental Consent: We do not knowingly collect personal information from children younger than 13 years of age. If we become aware that a child under 13 has provided us with personal data, we will promptly delete that information unless we obtain verifiable parental or guardian consent to retain it.

 

Some third parties may store or process data outside Canada; we require a written contract (data‑processing agreement or equivalent) that obligates them to uphold privacy protections comparable to Canadian law.

 

5. Data Retention and Safeguards

 

We retain personal data for as long as necessary to meet the purposes outlined above and to satisfy legal obligations (e.g., tax records retained for seven years). All data is protected by reasonable administrative, technical and physical safeguards, including encryption of data in transit and at rest.

​

6. Data Breach Notification

 

In a data breach creates a real risk of significant harm, we will:

1. Contain the incident and assess its scope;

2. Notify the Office of the Privacy Commissioner of Canada, if required by law, as soon as feasible;

3. Inform affected individuals without undue delay, describing the breach, potential consequences, and recommended remedial steps;

4. Document the breach and retain the record, as required by law.

 

7. Use of Cookies and Tracking Technologies

 

Our website uses cookies and other similar tracking technologies (e.g., pixels, web beacons) to improve your experience, analyze site usage, and support our marketing efforts.

 

A. Purposes

• Strictly Necessary/Essential Cookies: required for core site functions (shopping‑cart, order‑form security). No consent is needed.

• Functionality Cookies: remember preferences such as language or login status.

• Analytics and Performance Cookies: third‑party services (e.g., Google Analytics) provide aggregated usage data.

• Marketing and Advertising Cookies: with your consent, we or our partners (e.g., Facebook, Google Ads) display interest‑based ads.

 

B. Third-Party Cookies

Some cookies are placed by third parties that provide services to us (e.g., payment processing, analytics, advertising). Those parties have their own privacy policies; data shared with them may be processed and stored on servers outside Canada and therefore be subject to different legal access requirements.

 

C. Your Choices and How to Manage Cookies

We obtain your explicit consent before using non-essential cookies (e.g., functionality, analytics, marketing). When you first visit the site, a cookie‑consent banner lets you:

• Accept all cookies;

• Reject non‑essential cookies; or

• Customize your preferences.

You may change your preferences at any time via the Cookie Settings link (typically in the footer) or through your browser’s settings. Blocking essential cookies may affect site functionality and prevent successful order placement.

 

D.  Do‑Not‑Track (DNT)

Our site does not currently honour DNT signals. However, you can decline non‑essential cookies at any time using the cookie‑consent banner.  By continuing to use our website without adjusting your browser settings, you consent to our use of cookies as described herein, unless you have used the cookie‑consent manager to modify your preferences.

 

8. Your Rights and How to Contact Us

 

Under PIPEDA, you have the right to:

• Access the personal information we hold about you;

• Request correction of any inaccurate data;

• Withdraw consent for marketing communications at any time;

• Receive a portable copy of your data;

• Lodge a complaint with the Office of the Privacy Commissioner of Canada.

 

To exercise any of these rights, contact our Privacy Officer:

Privacy Officer - GISAY Pâtisserie:

Email: info@gisay.ca
Phone: [Phone Number]

​

We will respond to all requests within 30 calendar days.

​

9. Updates to This Privacy Statement

We may amend this privacy statement from time to time to reflect changes in our practices or legal requirements. Any revisions will be posted on this page with a new “Effective Date.” Continued use of the website after the posting of changes constitutes your acceptance of the updated policy.