​​

This Privacy Policy will help you better understand how we collect, use, and share your personal information. If we change our privacy practices, we may update this privacy policy. If any changes are significant, we will let you know (for example, through account notification or by email).

Last Updated: March 31st, 2026
Effective Date: July 8th, 2018

Tasteport is an online grocery ordering and delivery service made available to you by BagIt Solutions Inc. ("Tasteport," "we," or "us"), via the Tasteport mobile app(s) (the "App"), and the Tasteport website(s) (the "Site," collectively, with the App, the "Service"). Tasteport is committed to protecting your privacy and safeguarding your personal information.

The purpose of this Privacy policy is to inform you about the types of Personal Information Tasteport (as follows, "we" or "us") collects, uses and discloses. It explains how we use and disclose that information, the choices you have regarding such use and disclosure, and how you may correct that information.

Your privacy is one of our priorities. We are proud to demonstrate our commitment to your privacy, by complying with the laws and regulations under applicable privacy laws in Canada. As we are a national organization, this Privacy policy is designed to meet the standards prescribed by the Personal Information Protection and Electronic Documents Act and the regulations thereunder ("PIPEDA").

From time to time, we may make changes to this Privacy policy. The Privacy policy is current as of the "last updated" date which appears at the top of this page. We will treat Personal Information in a manner consistent with the Privacy policy under which it was collected, unless we have your consent to treat it differently. This Privacy policy applies to any information we collect or receive about you, from any source.

1. To which companies does this Privacy policy apply?

This Privacy policy applies to the collection, use and disclosure of Personal Information by Tasteport.

2. What is Personal Information?

"Personal Information" is any information that is identifiable with you, as an individual. This information may include but is not limited to your name, company, mailing address, e-mail address, billing address, credit card information. Personal Information, however, does not include business title or business address and business telephone number in your capacity as an employee of an organization.

3. How do we collect your Personal Information?

We will always collect your Personal Information by fair and lawful means (for example, when you register with us). We collect information you provide directly to us, including your name, email address, phone number, payment information, and any other information you choose to provide when signing up for our services or communicating with us.

We also automatically collect standard internet log information about how and when you use our platform. This information may include, but not be limited to, your IP address and location data, weblogs, time, date, browser used, referring web addresses, other communication data, searches conducted, pages visited, and other usage patterns through cookies and similar technologies.

We may collect Personal Information from you directly or from third parties, where we have obtained your consent to do so or as otherwise required or permitted by law.

We may also collect information about how, when, and where you use our App. This information may include, but not be limited to, the type of device, your mobile carrier, your internet access provider, and your physical location.

In addition, to ensure that our website is optimized for ease of use, we or our service provider(s) may use cookies (small data files that may contain certain information) to collect standard information about your use of our site, including your language preferences, your browser type and version, URLs, number of clicks, how you interact with links on the service, domain names, landing pages, pages viewed, mobile carrier, and similar information. These cookies are intended to optimize your experience of our website. We may employ clear gifs (also known as "web beacons") to track online usage patterns. We may also use clear gifs in HTML-based emails sent to our users to track which emails are opened by recipients. The information is used to enable more accurate reporting and improve the service.

We may also collect and store chat transcripts of your interactions with our AI Assistant, including text inputs and voice-to-text transcriptions.

4. How do we store and secure your Personal Information?

We will keep the Personal Information that we collect at our offices or at the offices of our third party service providers in Canada and the US. This includes computer systems that are located at our offices or hosted at the offices and data centers of our third party platform service providers. To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. Payment processing is handled through secure, PCI-DSS compliant services via Stripe. All data transmitted between your browser and our servers is encrypted using TLS/SSL protocols. Our teams work tirelessly to protect your Personal Information, and to ensure the security and integrity of our platforms. However, we all know that no method of transmission over the Internet, and method of electronic storage, can be 100% secure. This means we cannot guarantee the absolute security of your personal information.

5. How do we use your Personal Information?

We identify the purposes for which we use your Personal Information at the time we collect such information from you and obtain your consent, in any case, prior to such use. We use the information we collect to provide, maintain, and improve our services, process transactions, send you notifications about your membership, your participation in Reward programs and Referral Programs and communicate with you about products, services, and promotional offers. We generally use your Personal Information for the following purposes (the "Purposes"):

• to provide you with requested services;

• to develop and maintain strong business relationships with customers, partners and potential customers and partners;

• to manage your Tasteport account and memberships;

• to respond to questions, comments or concerns regarding Tasteport;

• to allow for more meaningful and useful sales and marketing initiatives, for example, your physical location while using our app may be used to provide you with personalized offers, rewards, and suggestions about new shops or other information in your area;

• to use Google Analytics to better understand our web traffic and marketing effectiveness (whose privacy policy can be found at www.google.com/policies/privacy/partners/);

• We may use your interactions with our digital and AI assistants and related chat and speech-to-text data to provide and optimize the Service and to personalize your culinary journey, meal planning and preparation recommendations.

• We may use anonymized or de-identified chat data to improve our AI models and service accuracy. We do not use personally identifiable information (PII) to train general models shared with third parties.

• to collect opinions and comments in regard to Tasteport's operations;

• to perform demographic analysis for planning purposes (but only on an aggregate and anonymous basis);

• to recruit for positions at Tasteport and for other employment-related tasks;

• to investigate legal claims;

• to administer any Tasteport software applications;

• such purposes for which Tasteport may obtain consent from time to time; and

• such other uses as may be permitted or required by applicable law.

• Email marketing: With your permission, we may send you emails about our stores, new products and other updates.

6. To whom do we provide your Personal Information?

We identify to whom, and for what purposes, we disclose your Personal Information, at the time we collect such information from you and obtain your consent to such disclosure.

We may transfer your Personal Information to third party service providers with whom we have a contractual agreement that includes appropriate privacy standards, where such third parties are assisting us with the Purposes – such as service providers that provide telephone support, data storage or processing, payment processing or hosting and partners who operate grocery stores or other businesses.

In addition, we may send Personal Information outside of the country for the Purposes, including for process and storage by service providers in connection with such Purposes. However, you should note that to the extent that any Personal Information is out of the country, it is subject to the laws of the country in which it is held, and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies of such other country, pursuant to the laws of such country. For written information about our policies and practices regarding service providers outside of Canada, contact our Privacy Officer (see section 27 below).

7. When and how do we obtain your consent?

We generally obtain your consent prior to collecting, and in any case, prior to using or disclosing your Personal Information for any purpose. You may provide your consent to us either orally, electronically or in writing. The form of consent that we seek, including whether it is express or implied, will largely depend on the sensitivity of the Personal Information and the reasonable expectations you might have in the circumstances. If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.

8. How do we ensure the privacy of your Personal Information when dealing with our affiliates and other third parties?

We ensure that all affiliates and other third parties that are engaged to perform services on our behalf and are provided with Personal Information are contractually required to observe the intent of this Privacy policy and our privacy practices.

We do not sell, trade, or otherwise transfer your Personal Information to third parties without your consent, except as necessary to provide our services or as required by law. We may share information with trusted service providers who assist us in operating our platform, as described in this document.

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.

Links

When you click on links on our website or apps, they may direct you away from our site. We are not responsible for the privacy practices of other sites. Once you leave our Service or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website's Terms of Service. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

Google Analytics

Our store uses Google Analytics to help us learn about who visits our site, what pages are being looked at and what options are selected.

9. How long will we utilize, disclose or retain your Personal Information?

We will retain your personal data only for as long as necessary to fulfill the purposes for which we have collected it. To determine the appropriate retention period, we consider the amount, nature and sensitivity of your personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means and the applicable legal requirements. We will also retain and use your personal information to the extent necessary to comply with the law, our legal obligations, resolve disputes and enforce our policies. If you stop using our services or if you delete your account with us, we will delete your information or store your information in an aggregated and anonymized format, unless required otherwise by law.

10. How can you review your Personal Information that we have collected, utilized or disclosed?

If you make a written request to review any Personal Information about you that we have collected, utilized or disclosed, we will provide you with any such Personal Information to the extent required by law. We will make such Personal Information available to you in a form that is generally understandable, and will explain any abbreviations or codes.

11. Your Rights

You have the right to access, correct, or delete your personal information. You may also opt out of marketing communications at any time by following the unsubscribe instructions in our emails. Under Canadian privacy law (PIPEDA), you have additional rights regarding how your personal information is collected, used, and disclosed.

12. Cookies & Tracking

We use cookies and similar tracking technologies (including Google Tag Manager) to analyze usage patterns, improve our services, and deliver relevant content. You can control cookie preferences through your browser settings. Disabling cookies may affect certain features of our platform.

Here is a list of cookies that we use. We've listed them here so that you can choose if you want to opt-out of cookies or not.

• _session_id, unique token, session-based, Allows us to store information about your session (referrer, landing page, etc).

• _tasteport_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider's internal stats tracker to record the number of visits.

• _tasteport_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.

• cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.

• _secure_session_id, unique token, sessional.

• storefront_digest, unique token, indefinite. If the shop has a password, this is used to determine if the current visitor has access.

• PREF, persistent for a very short period, Set by Google and tracks who visits the store and from where.

13. Voice & AI Data (Mina)

When you interact with Mina, our AI voice assistant, or with our other digital assistants, your text and voice inputs and conversations are transmitted to third-party artificial intelligence services (including OpenAI for speech-to-text and chat processing, Amazon Web Services for text-to-speech or Google Gemini) to generate responses. By using the Assistant, you acknowledge that your inputs may be processed by these providers in accordance with their respective security and privacy standards.

Voice audio, in interactions with our digital agents, is processed in real time and is not stored by Tasteport after the interaction is complete. Text-based conversation content (your messages and the assistant's responses) is retained in our systems to maintain conversation context, improve service quality, and enhance your experience. If you are logged in, your conversations may be associated with your account to provide continuity and support. Anonymous conversations (when not logged in) are periodically purged after 90 days.

Conversation data may be reviewed internally for quality assurance, service improvement, and customer support purposes. Conversation data related to active order servicing and support, either with our digital agents, our live customer service teams, or with our third-party providers, are recorded and retained and may be reviewed internally for quality assurance, service improvement, and customer support purposes. We do not use your voice or conversation data for advertising, profiling, or sale to third parties.

Third-party AI providers may process data in accordance with their own privacy policies, which we encourage you to review.

14. Loyalty & Referral Data

We collect and maintain records of your loyalty points balance, earning history, and redemption activity to operate the loyalty program. Referral data, including your unique referral code, referred contacts' email addresses (provided by them during registration), and referral status, is stored to track and fulfill referral rewards.

This data is used solely for program administration and is not shared with third parties for marketing purposes. You may request a summary of your loyalty and referral data at any time by contacting us or through your account.

We collect data on your purchase history and AI interactions to award loyalty points and provide personalized rewards. You are able to view this in your account.

When you refer a friend, you confirm that you have their permission to provide their email address to us for the sole purpose of sending a referral invitation.

15. Payment & Subscription Data

Payment processing is handled by Stripe, a PCI-DSS compliant payment processor. Tasteport does not store your full credit card number, CVV, or other sensitive payment credentials on our servers.

We retain your subscription status, billing history, and membership tier for account management purposes. Stripe may collect and process payment data in accordance with their privacy policy and terms of service. We encourage you to review those on their site at www.stripe.com.

16. Community Campaign Data

When you participate in community giving campaigns, your order contributions are aggregated anonymously for campaign tracking and public progress displays. Individual order amounts and personal information are not publicly disclosed. Campaign participation data is retained for reporting to partner or beneficiary charitable organizations in aggregate form only. Such aggregated data is available for review as well via our Service (website).

17. SMS & Phone Verification

We use Twilio to send SMS verification codes to your phone number during account registration and login. Your phone number is transmitted to Twilio solely for the purpose of delivering verification codes.

We store your phone number in our system for account security and communication purposes. You may request removal of your phone number by contacting us, though this may severely limit your ability to access certain account features and our ability to provide any service to you.

18. Email Communications

We use SendGrid to deliver transactional emails including welcome messages, membership confirmations, and account notifications. Your email address is shared with SendGrid solely for email delivery purposes.

You may opt out of promotional emails at any time, though transactional emails related to your account and membership will continue as necessary for service delivery.

19. Age of Consent

By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.

20. Changes to This Privacy Policy

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. If our store or platform is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products and services to you. We encourage you to review this policy periodically to stay informed about how we protect your information.

21. How do you know that the Personal Information we have on you is accurate?

We will ensure that your Personal Information is kept as accurate, complete and up-to-date as possible. We will not routinely update your Personal Information, unless such a process is necessary. We expect you, from time to time, to supply us with written updates to your Personal Information, when required.

22. What if the Personal Information we have on you is inaccurate?

At any time, you can challenge the accuracy or completeness of your Personal Information in our records. If you successfully demonstrate that your Personal Information in our records is inaccurate or incomplete, we will amend the Personal Information as required. Where appropriate, we will transmit the amended information to third parties having access to your Personal Information.

23. How fast will we respond to your written requests?

We will attempt to respond to each of your written requests no later than thirty (30) days after receipt of such requests. We will advise you in writing if we cannot meet your requests within this time limit. You have the right to make a complaint to the Privacy Commissioner of Canada or applicable provincial privacy commissioner in respect of this time limit.

24. Are there any costs to you for requesting information about your Personal Information or our privacy practices?

We will not charge any costs for you to access your Personal Information in our records without first providing you with an estimate of the approximate costs, if any.

25. How do we know that it is really you requesting your Personal Information?

We may request that you provide sufficient identification to permit access to the existence, use or disclosure of your Personal Information. Any such identifying information shall be used only for this purpose.

26. What safeguards have we implemented to protect your Personal Information?

We have implemented physical, organizational, contractual and technological security measures to protect your Personal Information from loss or theft, unauthorized access, disclosure, copying, use or modification. The only employees, who are granted access to your Personal Information, are those with a business 'need-to-know' or whose duties reasonably require such information.

27. How do you contact us regarding access to your Personal Information or our privacy practices?

All comments, questions, concerns or complaints regarding your Personal Information or our privacy practices should be forwarded to our Privacy Officer as follows:

In writing:
Attn: Privacy Officer

Address:
BagIt Solutions Inc.
7030 Woodbine Ave., Suite 500
Markham, ON L3R 6G2

OR By e-mail:
privacy@tasteport.com