Effective date: April 19, 2026
HomeBakeryBusiness.ca (“we,” “us,” “our”) operates the website https://homebakerybusiness.ca and the online course “Ready to Sell: The Canadian Home Bakery Business Course” (the “Course”). This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. We are committed to handling your personal information in a way that complies with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial privacy laws.
1. The personal information we collect
We collect personal information directly from you, from your use of our website and course platform, and from our service providers. Depending on how you interact with us, we may collect:
- Account information: your name, email address, password (stored encrypted), and province of residence.
- Payment information: billing name, billing address, and transaction details. Credit card numbers are processed directly by our payment processor (e.g., Stripe, PayPal, WooCommerce) and we do not store full card numbers on our servers.
- Course activity: which lessons you have opened, quiz results, progress completion, login times, and any notes or questions you submit inside the Course.
- Communications: emails, contact-form messages, support tickets, and any feedback you send us.
- Marketing preferences: whether you have subscribed to our newsletter or other email lists and which emails you have opened or clicked.
- Automatically collected data: IP address, browser type, device type, referring URL, pages viewed, and timestamps, collected through cookies and similar tools on our website.
2. How we use your personal information
Under PIPEDA we only use your personal information for the purposes we have identified to you, and only to the extent reasonably necessary. Specifically, we use it to:
- Create and manage your student account.
- Deliver the Course, track your progress, and provide customer support.
- Process payments and keep required financial records.
- Send transactional emails (receipts, password resets, course updates).
- Send marketing emails, but only if you have opted in, and you can unsubscribe at any time.
- Understand how our website and Course are used so we can improve them.
- Prevent fraud, enforce our Terms and Conditions, and meet our legal obligations.
3. Legal basis and your consent
We rely on your consent to collect and use your personal information. By registering for the Course or using our website, you consent to the collection and use described in this Policy. For sensitive or unexpected uses (for example, sharing a testimonial you submitted) we will ask for your express consent first. You may withdraw your consent at any time, subject to legal or contractual restrictions, by contacting our Privacy Office (see Section 11).
4. Who we share your information with
We do not sell your personal information. We share it only with trusted service providers who help us run the business, and only to the extent they need it for that purpose:
- Course platform / learning management system: Academy LMS.
- Payment processor: Stripe, PayPal, WooCommerce.
- Email service provider: gmail.
- Website analytics: Google Analytics, Jetpack.
- Cloud storage and hosting: Bluehost.
We require these providers to protect your information and to use it only for the services they are providing to us. We may also disclose personal information if we are required to do so by law, court order, or a regulator, or to protect our legal rights.
5. Where your information is stored
Some of our service providers are based outside Canada (most commonly in the United States). When personal information is transferred to or stored in another country, it may be accessible to law enforcement or national-security authorities in that country under their local laws. We choose providers that offer industry-standard safeguards, but you should be aware of this when you consent to our use of your information.
6. How long we keep your information
We keep your personal information only as long as we need it for the purposes described above, or as required by law. In general:
- Account and course progress information: kept while your account is active, and for up to 24 months after you close it, so we can reinstate access if you return.
- Payment and transaction records: kept for at least six (6) years, to meet Canada Revenue Agency record-keeping requirements.
- Marketing list data: kept until you unsubscribe.
When we no longer need your information we will securely delete or anonymize it.
7. How we protect your information
We use reasonable physical, organizational, and technical safeguards to protect your personal information, including encrypted connections (HTTPS), restricted staff access, and secure third-party providers. No system is perfect, but we work to protect against unauthorized access, loss, misuse, and disclosure. If a privacy breach occurs that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA.
8. Cookies and similar technologies
Our website uses cookies and similar technologies to keep you logged in, remember your preferences, measure traffic, and (if you have consented) deliver marketing. You can control cookies through your browser settings, but some parts of the website may not work properly if you disable them.
9. Your rights under PIPEDA
You have the right to:
- Ask whether we hold personal information about you and request a copy of it.
- Ask us to correct information that is inaccurate or incomplete.
- Withdraw your consent to our use of your information at any time (note that if you withdraw consent we may no longer be able to provide the Course).
- Ask us to stop sending you marketing communications.
- Make a complaint to us, and if you are not satisfied with our response, to the Office of the Privacy Commissioner of Canada.
To exercise any of these rights, please contact our Privacy Office using the information in Section 11. We will respond within 30 days as required by PIPEDA. In some cases we may be unable to provide access (for example, if doing so would reveal someone else’s personal information), and we will explain the reason if that applies.
10. Children
The Course is for adults (18 and older) starting or running a home bakery business. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.
11. How to contact us
Our Privacy Office is responsible for compliance with this Policy and with PIPEDA. Email: homebakerybusinesscourse@gmail.com
If you are not satisfied with how we have handled a privacy concern you can contact: Office of the Privacy Commissioner of Canada — file a complaint
12. Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will change the effective date at the top of the page and, for significant changes, we will notify registered students by email or through the Course dashboard. The current version is always posted at https://homebakerybusiness.ca/privacy-policy.