Last updated: May 1, 2026

At Phafo (Phafofood), we take your privacy seriously. This policy explains what data we collect, why, and what your rights are.

1. Who we are

Phafofood, based in Montreal, Quebec, Canada. Questions: info@phafo.com.

2. Data we collect

• Order data: name, shipping address, email, phone, purchase history.
• Payment data: handled directly by Shopify Payments / Stripe. We never store your card numbers.
• Browsing data: pages visited, time spent, traffic source, via cookies and analytics tools.
• Marketing data: if you sign up for our newsletter, your email and preferences.

3. Why we collect it

• Process and ship your orders.
• Provide responsive customer service.
• Improve our website and products.
• Send marketing communications (only with your consent).
• Meet our legal and tax obligations.

4. Cookies

We use essential cookies (cart, session) and analytics/marketing cookies (Google Analytics, Meta Pixel). You can decline them via the cookie banner or your browser settings.

5. Sharing your data

We never sell your data. We only share with:

• Shopify (store hosting)
• Carriers (Canada Post, Purolator, etc.) for delivery
• Marketing tools (Klaviyo, Meta) if you've consented
• Authorities if legally required

6. Your rights (Quebec Law 25, PIPEDA, GDPR)

You have the right to:

• Access your data
• Correct it
• Delete it ("right to be forgotten")
• Withdraw your marketing consent at any time
• File a complaint with the Quebec Commission d'accès à l'information

To exercise these rights: info@phafo.com. Reply within 30 days.

7. Data retention

Order data: 7 years (accounting requirement). Marketing data: until you unsubscribe.

8. Security

HTTPS site, PCI-DSS payments through Shopify Payments, restricted internal access to data.

9. Updates

This policy may be updated. The date at the top shows the latest version.