Privacy
What we collect, why, who handles it, how long we keep it, and how to have it changed or deleted.
In effect 12 October 2026
Who we are
Gold Leaf Premium Foods Inc.
British Columbia company BC1564872
202-5625 Senlac St
Vancouver, British Columbia V5R 6G8
Canada
shop@goldleaf.dev · +1 778 239 4992
This policy covers goldleafpremiumfoods.ca and goldleaf.dev, and the list we run from them. It follows British Columbia's Personal Information Protection Act, Canada's Personal Information Protection and Electronic Documents Act where it applies, and Canada's anti-spam law (CASL).
What we collect, and why
| Email address | When you subscribe. To send the messages you asked for; it also identifies your record. |
|---|---|
| First 3 characters of your postal code | When you subscribe. To plan markets and delivery by area. The rest of the code is discarded before saving. |
| Mobile number | Only if you tick WhatsApp or text messages. Used only for those messages; deleted when you untick both or unsubscribe. |
| Consent record | Which channels you ticked — email, WhatsApp, text — the time of each, and the wording of the form you saw. Required to show your consent. |
| QR scans | When a subscriber opens a QR page: which code (stall or a variety on a box lid) and the date, once per code per day. To time care reminders and count visits from each market. |
| Contact form | Your name, email and message; phone and postal code if you give them. To answer you. Added to the list only if you tick the list box. |
On your device
The /market page stores, in your own browser: your email address, so the form is not shown again; a Skip for now, for 24 hours; and your answer about analytics. Clearing your browser data removes them.
Analytics and error reports
- Google Analytics loads only after you choose Fine by me. It counts page visits and QR scans, sets cookies, and receives the page, device, browser and an approximate location from your IP address. Contact details are never sent to it.
- Sentry receives a report when something on the site fails: the page, the browser, and — where a message failed to send — the address it was going to.
Who handles it
| Cloudflare | Hosts the site and the list database. |
|---|---|
| Resend | Sends our email; holds the email address, postal characters, source and consent date. |
| Analytics, as above. | |
| Sentry | Error reports, as above. |
| Meta | WhatsApp — messages you send us, and our WhatsApp list if you joined it; our pages on Instagram and Facebook. |
| Phone carriers | Text messages, sent from our business number. |
Each uses your information only to provide its service to us. Cloudflare, Resend, Google, Sentry and Meta are United States companies; your information may be stored and processed in the United States or elsewhere, and is subject to the laws there.
How long we keep it
- The list, with its consent record: until you unsubscribe or ask for deletion.
- Contact form messages: in our mailbox, until you ask us to delete them.
- Analytics and error reports: for the retention period set with Google and Sentry.
Messages, and how to stop them
A few messages a season, only on the channels you ticked: markets near you, delivery in your area, and care for your tray.
- Email: the one-click link at the foot of every email, the unsubscribe button in your mail app, or a reply with stop. The one-click link ends every channel and deletes your mobile number.
- WhatsApp or text: reply STOP. This ends that channel.
We act on every request within 10 business days, usually the same day.
Your rights
You can ask for a copy of what we hold about you, a correction, deletion of your record, or to withdraw your consent. Write to shop@goldleaf.dev; we answer within 30 days, free of charge, and may ask you to confirm the email address is yours.
If you are not satisfied with our answer, you can complain to the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.
Changes
When this policy changes, we update this page and the date at the top.