Detour Coffee Roasters (“Detour Coffee Roasters,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information we collect, use, disclose, and retain in the course of operating our coffee-shop business and our website at kinbranvox.pro.
This Privacy Policy explains how we handle personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, where relevant. By using our services, website, or interacting with us, you acknowledge that your personal information may be handled as described in this Privacy Policy.
1. Introduction and company information
Detour Coffee Roasters operates a coffee-shop business and related online services. We are responsible for the personal information under our control.
- Legal name: Detour Coffee Roasters
- Business type: coffee-shop
- Address: 41 King Street W, Dundas, ON L9H 1T5, Canada
- Email: [email protected]
- Phone: +1 905-648-4747
- Website: kinbranvox.pro
This Privacy Policy applies to personal information we collect through our website, in-store interactions, customer communications, loyalty or promotional programs, online ordering or reservations if available, and other business-related interactions.
2. Data collection and processing
We may collect, use, and process the following categories of personal information, depending on how you interact with us:
- Identity and contact information: name, email address, phone number, mailing address, and other contact details.
- Transaction information: purchase history, order details, payment-related transaction records, refunds, and invoices.
- Account or preference information: loyalty program details, saved preferences, marketing preferences, and customer service notes.
- Communications: emails, messages, feedback, complaint details, and any information you provide when contacting us.
- Website and device information: IP address, browser type, device identifiers, approximate location, pages viewed, referring URLs, and usage data collected through cookies or similar technologies.
- Security and operational information: video surveillance images where applicable in or around our premises, access logs, fraud prevention data, and system diagnostics.
We generally collect personal information directly from you, for example when you place an order, sign up for updates, contact us, make a purchase, use our website, or otherwise interact with us. In some cases, we may collect information from third-party service providers, such as payment processors, delivery services, analytics providers, or booking platforms, where permitted by law.
Where required, we obtain your knowledge and consent to collect, use, and disclose personal information, unless an exception under applicable law applies.
3. Purpose of data processing
We process personal information for the following purposes:
- to provide our products and services, including taking and fulfilling orders;
- to process payments, refunds, and account-related transactions;
- to communicate with you about orders, inquiries, promotions, or customer service matters;
- to manage loyalty programs, promotions, contests, and customer engagement activities;
- to improve our website, menu offerings, customer experience, and business operations;
- to maintain business records, accounting, and tax compliance;
- to detect, prevent, and investigate fraud, unauthorized access, or misuse of our systems;
- to comply with legal obligations and enforce our policies and agreements;
- to monitor and secure our premises, staff, customers, and property; and
- to send marketing communications, where permitted and where you have consented or otherwise not opted out as allowed by law.
We only use personal information for purposes that a reasonable person would consider appropriate in the circumstances and that are consistent with applicable Canadian privacy law.
4. Legal basis for processing
Under Canadian privacy law, we generally rely on one or more of the following grounds to process personal information:
- Consent: where you have given express or implied consent for a specific purpose.
- Contractual necessity: where processing is necessary to provide products or services you have requested.
- Legitimate business purposes: where applicable law permits us to collect, use, or disclose personal information without consent for purposes that are appropriate and reasonable in the circumstances, such as fraud prevention, business operations, or internal administration.
- Legal obligations: where processing is necessary to comply with laws, regulations, court orders, or lawful requests by public authorities.
- Protection of interests: where necessary to protect our rights, property, staff, customers, or the public.
Where we rely on consent, you may withdraw it at any time, subject to legal or contractual restrictions and reasonable notice.
5. Data sharing and third parties
We do not sell your personal information. We may disclose personal information to third parties in the following circumstances:
- Service providers: payment processors, IT and hosting providers, analytics providers, email delivery platforms, customer support tools, reservation or ordering services, and other vendors that help us operate our business.
- Delivery and logistics partners: where necessary to complete deliveries or fulfill orders.
- Professional advisors: accountants, auditors, legal counsel, and insurers.
- Authorities and legal recipients: law enforcement, regulators, courts, or other government authorities when required or permitted by law.
- Business transactions: in connection with a merger, sale, financing, reorganization, or transfer of all or part of our business, subject to confidentiality and legal requirements.
We require third-party service providers to protect personal information and use it only for the purposes for which it was shared, subject to their own applicable legal obligations and contractual commitments where appropriate.
6. Data transfer to third countries
Some of our service providers may store, process, or access personal information outside Canada, including in the United States or other jurisdictions. As a result, your information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, or regulatory authorities in those countries.
When we transfer personal information outside Canada, we take reasonable steps to ensure it receives a comparable level of protection through contractual safeguards, security controls, and vendor oversight, as appropriate in the circumstances.
7. Storage duration
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required or permitted by law. Retention periods may vary depending on the type of information and the reason it was collected.
- Transaction and accounting records: retained for the period required by tax, accounting, and business recordkeeping laws.
- Customer communications: retained as needed to respond to inquiries, manage service, and maintain business records.
- Marketing records: retained until you unsubscribe, withdraw consent, or as otherwise permitted by law.
- Security and surveillance records: retained for a limited time unless needed for investigation, safety, or legal purposes.
When personal information is no longer required, we will securely delete, anonymize, or destroy it, subject to our legal obligations and legitimate business needs.
8. User rights
Subject to applicable law, you may have the following rights with respect to your personal information:
- Access: request access to the personal information we hold about you and information about how it is used and disclosed.
- Rectification: request correction of inaccurate, incomplete, or outdated personal information.
- Erasure: request deletion of personal information in appropriate circumstances, subject to legal retention requirements.
- Restriction: request that we limit certain uses of your personal information in appropriate circumstances.
- Data portability: request a copy of certain personal information in a structured and commonly used format where applicable law provides for this right.
- Objection: object to certain uses of your personal information, including some forms of marketing or processing based on our legitimate interests where applicable.
To exercise any of these rights, please contact us using the details in the Contact Information section below. We may need to verify your identity before responding to your request. We will respond within a reasonable time and in accordance with applicable legal requirements.
9. Withdrawal of consent
Where our processing is based on your consent, you may withdraw that consent at any time by contacting us or using any available unsubscribe or preference-management mechanism. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal, nor will it affect processing permitted or required by law without consent.
Please note that if you withdraw consent for certain uses, we may be unable to provide some products, services, or communications to you.
10. Right to complain
If you have concerns about how we handle your personal information, we encourage you to contact us first so we can address your concerns directly.
You also have the right to lodge a complaint with the appropriate privacy regulator in Canada, including the Office of the Privacy Commissioner of Canada (OPC) or, where applicable, a provincial privacy regulator.
We will cooperate with regulators as required by law and will make reasonable efforts to resolve complaints in a timely and fair manner.
11. Data security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. These measures may include:
- access controls and authentication measures;
- secure storage and restricted employee access;
- encryption or other data protection tools where appropriate;
- staff privacy and security practices training;
- monitoring for unauthorized access or suspicious activity; and
- vendor oversight and contractual protections for service providers.
However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, but we take reasonable steps to reduce risk in line with the sensitivity of the information involved.
12. Contact information
If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact:
- Detour Coffee Roasters
- 41 King Street W, Dundas, ON L9H 1T5, Canada
- Email: [email protected]
- Phone: +1 905-648-4747
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. When we do, we will post the revised version on our website and update the effective date below where appropriate.
Your continued use of our website or services after any changes become effective indicates your acceptance of the revised Privacy Policy, to the extent permitted by law.
Effective date: October 12, 2026