Privacy Policy

MOY-MOY ("we", "us") runs a bubble tea stall at Crossroads Market, 1235 26 Ave SE, Calgary, AB T2G 1R7, and the website moy-moy.ca. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA). This policy explains what personal information we collect, why, who we share it with and the choices you have.

What we collect

• Orders: your name, email address, phone number, and — for delivery — your delivery address and any notes for the driver, plus what you ordered, your chosen options and special instructions, the pickup or delivery time, the amount paid and your order reference.
• Payment: card payments are handled entirely by Stripe. We never see or store your full card number; Stripe tells us only that a payment succeeded and the last few digits and card brand.
• Newsletter: your email address, and a record of your consent (the date and time you signed up, the IP address you signed up from and the fact that you joined through our website).
• Contact and catering forms: whatever you choose to send us — typically your name, email, phone, event details and message.
• Address lookups: while you type a delivery address we send what you type to an address-search service to suggest matches and work out the delivery distance.

Why we collect it

• To make, hand over or deliver your order, and to contact you if something about it needs sorting.
• To send your receipt and order confirmation.
• To calculate delivery fees and keep the records the law requires for sales and tax (GST).
• To send our newsletter, only if you asked for it.
• To reply to your questions and catering requests.

We do not sell your personal information, and we do not use it for anything you would not reasonably expect from the list above.

Who we share it with

We use a small number of service providers to run the site. Each receives only what it needs to do its job:

• Stripe — card payments. Stripe processes your card details directly; we never see full card numbers.
• Mailchimp (Intuit) — our newsletter list.
• Formspree — delivers contact and catering form messages to our inbox.
• Netlify — hosts this website, runs our ordering system and stores order records.
• Resend — sends order receipts and order notifications by email.
• Google Maps and Google Places — the map on our contact page and the Google reviews shown on our site. Google may set its own cookies when the map loads.
• Address search (Photon by komoot, using OpenStreetMap data) — suggests addresses as you type.
• Delivery partners — if a driver delivers your order, they receive your name, phone number, delivery address and driver notes. Orders placed through Uber Eats or DoorDash are covered by those companies' own privacy policies.

Some of these providers store information outside Canada (for example in the United States), where it may be accessible to authorities under local law.

How long we keep it

• Order and payment records: kept for up to 6 years, as Canadian tax rules require.
• Newsletter: until you unsubscribe. We keep a record that you unsubscribed so we do not email you again.
• Form messages: kept as long as needed to answer you and for up to 2 years after.

Email and CASL consent

We only send marketing email to people who have given us express consent, as Canada's Anti-Spam Legislation (CASL) requires — by ticking our sign-up form and agreeing to the consent statement next to it. Order receipts are transactional messages and are sent whether or not you are on the newsletter. Every newsletter has an unsubscribe link, and unsubscribing takes effect right away.

Cookies and local storage

Our site does not use advertising or tracking cookies. Your bag is saved in your browser's local storage on your own device so it is still there when you come back; it is never sent to us until you check out. The order admin page uses a secure sign-in cookie for staff only. Stripe sets its own cookies on its payment page for fraud prevention, and embedded Google Maps may set cookies too.

Your choices and rights

• Unsubscribe: use the link at the bottom of any newsletter, or email us.
• Access or correction: ask us what personal information we hold about you, or to correct it.
• Deletion: ask us to delete your information. We will, except for records we are legally required to keep.

Email info@moy-moy.ca and we will respond within 30 days. If you are not satisfied with our answer, you can contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

Keeping it safe

We use reputable providers, encrypted connections (HTTPS) and limit access to order details to the people who need them to fulfil your order.

Changes

If we change this policy we will update the date at the top of this page.

Contact

MOY-MOY, Crossroads Market, 1235 26 Ave SE, Calgary, AB T2G 1R7 · 587-333-1737 · info@moy-moy.ca