Privacy policy
Last updated : May 23, 2025
Applies to Beytoot.ca, the Beytoot iOS and Android apps, and any related Canadian services (collectively, the “Services”).
Who We Are
Beytoot Inc. (“Beytoot,” “we,” “us,” or “our”) produces and sells Lebanese dips across Canada. Our contact details are at the end of this Policy.
Scope & Acceptance
By accessing or using the Services you consent to the collection, use, and disclosure of your personal information as described below. If you do not agree, please discontinue use of the Services.
Updates to This Policy
We may revise this Policy to reflect changes in our practices or legal requirements. The date at the top will change and the new version will be posted at beytoot.ca/policies/privacy-policy. Continued use of the Services constitutes acceptance of the updated Policy.
Personal Information We Collect
| Category | Examples |
|---|---|
| Information you provide directly | • Name, billing & shipping address, telephone, e‑mail |
| • Account credentials (username, password, security questions) | |
| • Order details, loyalty points, reviews, gift‑card balances | |
| • Customer‑support messages | |
| Information collected automatically | • Device & browser type, operating‑system version |
| • IP address and general location (province/city) | |
| • App activity (screens viewed, taps, cart events) | |
| • Advertising Identifier / IDFA (only if you grant tracking permission on iOS) | |
| • Push‑notification token | |
| • Crash & diagnostics data (Firebase Crashlytics) | |
| Information from third parties | • Shopify (storefront & checkout) |
| • Payment processors (e.g., credit‑card token, fraud score) | |
| • Analytics partners (Firebase, Google Analytics) |
Past 12 months disclosure (PIPEDA transparency): All categories above have been collected and disclosed as outlined in Sections 6 and 7.
How We Use Personal Information
-
Provide & fulfil orders (process payments, arrange shipping, manage returns).
-
Operate the apps & site (account login, security, bug fixing).
-
Improve products & user experience (analytics, A/B testing).
-
Marketing (e‑mail or push offers). You may opt out at any time.
-
Fraud prevention & legal compliance.
We do not use your information to create automated decision‑making profiles, nor do we sell or share sensitive personal information.
Cookies & Tracking Technologies
We use essential, performance, and analytics cookies. Details of Shopify cookies are available here.
Do Not Track: our Site is not configured to respond to DNT signals.
iOS Tracking Transparency: we will only access your IDFA for ad measurement if you tap “Allow” on Apple’s tracking prompt; otherwise no cross‑app tracking occurs.
Disclosure of Personal Information
We disclose data only for the purposes set out in Section 5:
-
Service providers: Shopify (hosting), payment gateways, courier integrators, analytics and crash‑reporting tools, cloud storage.
-
Business partners: marketing agencies that run Canadian ad campaigns on our behalf.
-
Legal or regulatory authorities if required to comply with law or defend our rights.
-
Successor entities in the event of a merger or asset sale (your information will remain subject to this Policy).
We require all third parties to protect your information to a standard equivalent to ours.
Security & Retention
We employ TLS encryption, network firewalls, least‑privilege access, and regular vendor audits.
Retention schedule:
| Data element | Typical retention | Legal basis |
| Order & tax records | 7 years | Canada Revenue Agency requirements |
| Account credentials | Until you delete your account or 24 months of inactivity | Operational necessity |
| Marketing consents | Until withdrawn | CASL compliance |
| Crash logs & diagnostics | 12 months | Service improvement |
| Push‑notification tokens | Deleted within 30 days of app uninstall | Functional |
Your Privacy Rights (Canada)
Under PIPEDA you may:
-
Access the personal information we hold about you.
-
Request correction of inaccurate or incomplete data.
-
Withdraw consent to marketing communications.
-
Delete your account and associated data (subject to legal record‑keeping obligations).
How to exercise your rights:
• In the Beytoot app: Account → Profile → Delete My Account
• By e‑mail: support@beytoot.ca (please provide your name and order number for verification).
We respond to all requests within 30 days.
International Transfers
Shopify may process data on servers located in Canada and the United States. Where personal information is transferred outside Canada, it is protected by contractual clauses that require the recipient to safeguard it to Canadian standards.
Children’s Privacy
Our Services are intended for users aged 16 and older. We do not knowingly collect personal information from anyone under 16. Parents who believe a child has provided data may contact us for deletion.
Complaints & Contact
If you have questions or wish to lodge a privacy complaint, contact our Privacy Officer:
Privacy Officer – Beytoot Inc.
20 Tubman Avenue
Toronto ON M5A 0M8
Canada
E‑mail: support@beytoot.ca
Tel: +1 (647) 446-6241
If you are dissatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada(www.priv.gc.ca).
13 — Compliance Statement
This Policy meets the transparency requirements of:
-
PIPEDA (Canada)
-
GDPR (EU users who may access our site)
-
Apple App Store Review Guideline 5.1
-
Google Play Data Safety Section
-
Shopify Legal Page Standards
No U.S. state privacy law disclosures (e.g., CCPA) are required because Beytoot currently sells only within Canada.