Skip to main content
Sven & Toffee

Privacy policy

We collect only the information needed to run the shop, serve customers and improve the experience, with clear choices whenever consent is required.

Last updated · August 18, 2026

Information we collect

  • Contact information, shipping and billing addresses, language preferences and order history.
  • Information you provide when creating an account, contacting us, joining a newsletter or participating in a loyalty program.
  • Limited technical data such as IP address, browser, device, viewed pages and performance or security events.
  • We do not store full card numbers. Payments are handled by our payment provider.

How we use it

  • Process orders, payments, deliveries, returns and support requests.
  • Create and protect your account, prevent fraud and meet legal obligations.
  • Send required transactional communications.
  • Send marketing only when permitted by law or consent, with an unsubscribe mechanism.
  • Measure and improve the site after optional cookies have been accepted.

Service providers and transfers

We share necessary information with providers that help deliver the service, including Vendure for commerce operations, Stripe for payments, carriers, hosting, email, analytics and technical support. They must use information only for the agreed services and under appropriate security obligations.

Some providers may process information outside Québec or Canada, where it may be subject to local laws.

Retention and security

We retain information only as long as needed for the purposes described, tax, accounting and legal obligations, and dispute resolution. We use administrative, technical and physical safeguards proportionate to risk.

No system is risk-free. If an incident creates a risk of serious harm, we follow applicable notice and record-keeping requirements.

Your rights and choices

  • Request access to or correction of your personal information.
  • Withdraw consent where processing relies on it, subject to legal or contractual limits.
  • Unsubscribe from marketing at any time.
  • Ask about our practices, providers or automated decisions, if any.
  • Complain to our privacy officer or the competent regulator.

Cookies and similar technologies

Essential cookies and storage support the session, cart, language, currency, security, payment and the record of your privacy choice. They cannot be disabled without impairing the shop.

Analytics and marketing technologies remain off until you consent. When configured and accepted, Google Analytics 4 may measure pages, searches and purchase steps, and Meta Pixel may measure selected advertising conversions. We intentionally exclude names, email addresses, security tokens and visible order codes. A pseudonymous transaction identifier may be used only to deduplicate a conversion. Analytics URLs omit query parameters and mask order codes. You can change or withdraw your choice at any time through “Privacy choices” in the footer.

The site responds to Global Privacy Control and Do Not Track signals by recommending essential storage only. Refusing optional technologies does not prevent shopping, account access or support.

Newsletter and cart recovery

Newsletter signup uses a separate consent checkbox and address confirmation when the connected service supports double opt-in. Every marketing message must provide an unsubscribe method. Transactional order, security and support messages do not depend on this consent.

A cart reminder is scheduled only when you expressly select that option at checkout. The connected service then receives the email address, language, cart contents and value, and a recovery link. The reminder must be cancelled as soon as payment is confirmed and must not be sent after consent is withdrawn or the recipient unsubscribes.

Loyalty program

The portal may calculate estimated points from eligible paid orders. When a reward is requested, the connected loyalty service receives the account identity, selected reward and current calculation so it can verify the actual balance, maintain the redemption ledger and issue a unique Vendure coupon. Displayed points alone are not proof of an available balance.

Contact us

To exercise a right or ask a privacy question, use the Contact page and select “Privacy” as the subject. We may verify your identity before responding.