Privacy Policy

Last updated: April 2026

1. Who We Are

Fairfolk Farm is a small family farm based in Sherwood Park, Alberta, Canada. We sell farm-fresh eggs, preserves, pesto, and seasonal vegetables through our online portal.

Contact: hello@fairfolkfarm.com

2. What We Collect

  • Account information: name, email address, phone number
  • Delivery information: addresses, postal codes
  • Payment information: processed entirely by Stripe — we do not store credit card numbers
  • Browsing data: anonymous page views and web vitals via Vercel Analytics
  • Mailing list: email address and subscription preference

3. Why We Collect It

  • Account management and authentication
  • Order fulfillment (delivery routing, pickup scheduling)
  • Payment processing via Stripe
  • Farm updates and mailing list broadcasts (with your express consent)
  • Service improvement via anonymous analytics

4. How We Protect It

  • Data stored in Supabase (encrypted at rest, TLS in transit)
  • We do not store passwords — authentication uses magic links via Supabase Auth
  • Payment data handled entirely by Stripe (PCI DSS Level 1 compliant)
  • Row Level Security (RLS) enabled on all database tables
  • Service role keys are never exposed to the client

5. Who We Share With

  • Stripe — payment processing
  • Resend — transactional and marketing email delivery
  • Google — address geocoding for delivery routing (address only, no user identity)
  • Vercel — hosting and anonymous analytics

We do not sell, rent, or trade your personal information.

6. Your Rights

  • Access your data via your customer dashboard
  • Correct your data via account settings
  • Delete your account (PIPEDA right to erasure) via dashboard or email request
  • Unsubscribe from marketing emails via one-click unsubscribe in every email
  • Request a copy of your data by emailing us

7. Cookies & Tracking

  • Supabase auth session cookie (functional, required for login)
  • No third-party tracking cookies
  • No Facebook Pixel, no Google Analytics

8. Data Retention

  • Active accounts: retained while the account exists
  • Deleted accounts: data anonymized upon deletion
  • Mailing list: unsubscribed users remain in database for CASL compliance tracking with is_subscribed = false
  • Stripe webhook events: purged after 90 days

9. Contact

For privacy inquiries, email hello@fairfolkfarm.com. We will respond within 10 business days as required by CASL.