Privacy policy

Privacy Policy — Sukanya Online Thai Food

Effective date: August 15, 2026

This Privacy Policy explains how Sukanya Online Thai Food ("we", "us", "our") collects, uses, and shares your personal information when you visit sukanyaonline.ca or buy from us. If any part of this policy is unclear, please contact us — our details are at the bottom of this page.

1. Who we are

Legal name: Sukanya Online Thai Food
Owner: Sukanya Greenwood
Address: 5040 Fox Run Place, Kingston, Ontario K7P 0E4, Canada
Email: Sukanya_Online@hotmail.com
Phone: +1 (613) 449-4721
Website: sukanyaonline.ca

We ship across Canada and the United States. If you use our site from another country, this policy still tells you what we do with your data.

2. What personal information we collect

Given to us when you order or contact us: name, shipping and billing address, email, phone, payment info (processed by our payment providers; we do not store full card numbers), messages you send us, order and account history.

Collected automatically when you use the site: IP address, general location (city/country) inferred from IP, device and browser information, pages you view, links you click, referring website, timestamps, cookies and similar technologies.

From third parties: payment confirmation from processors, shipping status updates from carriers, aggregated analytics from Google and Meta.

We do not intentionally collect sensitive information (health, biometric, precise geolocation, government IDs beyond what a shipping label needs) or information from children under 16.

3. Why we use it

Fulfill your order — take payment, ship the parcel, provide receipts, handle returns
Send order and shipping updates
Reply to your questions and support requests
Send newsletters, promotions, and recipes when you opt in
Detect and prevent fraud
Improve the site and understand how customers use it
Comply with tax, accounting, and other legal obligations

4. Cookies and similar technologies

We use cookies and pixels to make the site work, remember your preferences, understand how the site is used, and personalize marketing.

Strictly necessary — required for the site and checkout to work. Cannot be disabled.
Analytics — help us understand how the site is used (Google Analytics, Shopify analytics).
Marketing — used by Meta (Facebook) Pixel, Google Ads, and similar tools to show you relevant ads and measure them.

You can manage your cookie choices at any time by clicking the "Cookie preferences" link in the site footer. Your browser also lets you block or delete cookies. Blocking cookies may break parts of the site.

5. Who we share your information with

We share your information with the service providers we need to fulfill your order and run the business. We do not sell your personal information for money. Some of the processing described below (for example, targeted advertising and personalization) may qualify as "sharing" or "sale" under the California Consumer Privacy Act and similar US state privacy laws. You can opt out at any time using the Do not sell or share my personal information link in the site footer.

Shopify Inc. — our e-commerce platform. Shopify provides the site, checkout, the Shop app, abandoned-cart recovery, marketing automation, and a service called "Shopify Network Intelligence" that combines your interaction data with aggregated data from other Shopify stores to improve product recommendations, checkout, fraud detection, and marketing performance. Your identifiable information is not made visible to other merchants. See shopify.com/legal/privacy.
Payment processors — Shopify Payments, PayPal, and others depending on your payment method
Shipping carriers — Canada Post, UPS, and US carriers
Google (Analytics, Ads) — policies.google.com/privacy; opt out at tools.google.com/dlpage/gaoptout
Meta (Facebook, Instagram) — facebook.com/privacy/policy; manage ad preferences at facebook.com/settings/?tab=ads
Email marketing provider — currently Shopify Email, which runs on the Shopify infrastructure described above
Legal and government authorities — where required by subpoena, warrant, tax authority request, or other lawful demand

6. Where your information is stored

Your information is stored and processed by our service providers, primarily in the United States. Shopify Inc., our e-commerce platform, hosts this store on US infrastructure. Additional processing may occur in Canada and in other countries where our providers operate. Our service providers are contractually required to protect your information at a level comparable to what applies in Canada, and to comply with the privacy laws of the jurisdictions where you live.

7. How long we keep your information

Order records — 7 years, to comply with Canadian tax and business record-keeping rules
Customer accounts — until you ask us to delete them, or after 3 years of inactivity
Marketing subscribers — until you unsubscribe or ask us to remove you
Support and contact messages — 2 years after the last message
Analytics data — up to 14 months in identifiable form, then aggregated

8. Your rights

Everyone can:

Ask what personal information we hold about you
Ask us to correct it if it is wrong or incomplete
Ask us to delete it (subject to our legal record-keeping obligations)
Withdraw your consent for marketing at any time
Ask us to explain how we use your information

If you live in Canada (PIPEDA): you also have the right to be informed about how your information is used and disclosed, and to challenge our compliance with the Office of the Privacy Commissioner of Canada.

If you live in Quebec (Law 25): you additionally have the right to know where your information is stored, to receive it in a structured technological format, and to be informed of any decision made about you exclusively by automated processing (we do not make such decisions).

If you live in California (CCPA/CPRA): you additionally have the right to:

Know what personal information we collect, use, and share, and the categories of sources and third parties
Delete personal information (subject to legal exceptions)
Correct inaccurate information
Opt out of the "sale" or "sharing" of personal information — use the Do not sell or share my personal information link in the site footer
Limit the use of sensitive personal information (we do not collect sensitive personal information as defined by the CCPA)
Non-discrimination for exercising your rights

If you live in another US state with a comprehensive privacy law (currently Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Montana, Oregon, Texas, Florida, Delaware, New Jersey, New Hampshire, and others as those laws take effect), you generally have similar rights to know, delete, correct, and opt out of targeted advertising and profiling. Email us and we will honour the rights available in your state.

9. How to exercise your rights

Email Sukanya_Online@hotmail.com with the subject line "Privacy request" and tell us what you want. We may ask you to verify your identity to protect your data. We will respond within 30 days (45 days for California residents).

You do not have to pay us to exercise your rights. If a request is manifestly unfounded, excessive, or repetitive, we may charge a reasonable fee or refuse it, and we will tell you why.

10. Marketing (Canada's Anti-Spam Legislation)

We send newsletters, promotions, and recipes by email only if you have opted in. Under Canada's Anti-Spam Legislation (CASL), we need your express or implied consent to send commercial electronic messages.

You can unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of any marketing email, or by emailing us. It may take up to 10 business days for your request to take effect across our systems.

11. Children

Our site is not intended for children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

12. How to complain

If you have a concern about how we handle your information, please contact us first — most issues can be resolved this way.

You can also complain to a data protection authority:

Canada: Office of the Privacy Commissioner of Canada — priv.gc.ca — 1-800-282-1376
Quebec: Commission d'accès à l'information du Québec — cai.gouv.qc.ca
California: California Privacy Protection Agency — cppa.ca.gov
Other US states: contact your state Attorney General's office

13. Data security

We take reasonable steps to protect your information: encrypted connections (HTTPS), payment tokenization by our payment processors, restricted access to your data on a need-to-know basis, and reliance on Shopify's enterprise-grade infrastructure. No system is perfectly secure. If a breach occurs that is likely to result in serious harm, we will notify you and the appropriate authority without unreasonable delay, as required by PIPEDA and applicable US state laws.

14. Changes to this policy

We update this policy from time to time. The effective date at the top shows when the current version took effect. We will flag material changes on the website; minor changes may not be flagged individually. Please review this page periodically.

15. Contact

Questions or requests about your privacy:

Sukanya Online Thai Food
Attention: Privacy Officer (Sukanya Greenwood)
5040 Fox Run Place, Kingston, Ontario K7P 0E4, Canada
Email: Sukanya_Online@hotmail.com
Phone: +1 (613) 449-4721