Privacy Policy

Introduction

KANAFANI Sweets & Coffee ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website kanafani.ca, use our services, or participate in our loyalty rewards program.

By using our website or services, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our website or services.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Create an account or register for our loyalty program
• Sign up for our newsletter
• Place a catering order
• Contact us via email, phone, or contact form
• Submit a job application

This information may include:

• Name (first and last name)
• Email address
• Phone number
• Profile picture (if using Google sign-in)

Loyalty Program Information

When you participate in our loyalty rewards program, we collect:

• Points balance and transaction history
• Tier status (Bronze, Silver, Gold, Platinum/VIP)
• Account activity and engagement
• Birthday (optional, for birthday bonus rewards)
• Referral activity and referral codes
• Points expiration and redemption history

Automatically Collected Information

When you visit our website, we automatically collect certain information, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on pages
• Referring website
• Date and time of visit

How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account
• To administer our loyalty rewards program
• To process catering orders and inquiries
• To send you newsletters and promotional communications (with your consent)
• To respond to your customer service requests
• To improve our website and services
• To send you important updates about our services
• To prevent fraud and enhance security
• To comply with legal obligations

Third-Party Services

We use trusted third-party services to help us operate our website and provide our services:

• Google OAuth: For secure authentication when you sign in with Google
• Supabase: For secure database hosting and authentication
• Resend: For sending transactional and promotional emails
• Vercel: For website hosting and deployment

These third parties have access to your information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of sensitive data in transit and at rest
• Secure authentication protocols
• Regular security audits and updates
• Access controls and authentication requirements

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can request access to the personal information we hold about you
• Correction: You can update or correct your information through your account settings
• Deletion: You can request deletion of your account and personal information
• Opt-out: You can unsubscribe from marketing emails at any time using the unsubscribe link in our emails
• Data Portability: You can request a copy of your data in a portable format

To exercise these rights, please contact us at info@kanafani.ca

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device that help us:

• Remember your preferences and settings
• Keep you signed in to your account
• Understand how you use our website
• Improve website performance and functionality

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our website.

Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.