en
en

Privacy Policy – The Beans Brews

Effective date: September 23, 2026 Last updated: September 23, 2026

The Beans Brews (“The Beans Brews,” “we,” “us,” or “our”) is an Alberta-based online wellness business located in Edmonton, Alberta, Canada. We provide practical tools and resources for emotional fitness, mindfulness, and everyday well-being, including digital downloads, guided audio, workbooks, online courses and reflective resources.

Our mailing address is:

The Beans Brews, PO Box 25563 RPO Callaghan, Edmonton, AB, T6W 4N8 Canada

We believe personal information should be handled with care, clarity, and respect. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit thebeansbrews.com or interact with us.


This Privacy Policy applies to personal information collected through:

  • thebeansbrews.com and related website pages;

  • newsletter and mailing-list registrations;

  • requests for the complimentary A Place to Land guide;

  • purchases of digital products and downloads;

  • customer service and support communications;

  • contact forms and other communications submitted to us; and

  • cookies, analytics, and similar technologies used on our website.

This Privacy Policy does not apply to third-party websites, applications, payment services, social-media platforms, or other services that may be linked from our website. Those services have their own privacy policies, which we encourage you to review.


“Personal information” generally means information about an identifiable individual. Depending on how you interact with us, it may include your name, email address, purchase information, correspondence, technical information, and other information that can reasonably be associated with you.

We do not ask you to provide sensitive health or medical information. Please avoid submitting detailed health, mental-health, financial-account, or other sensitive information through our contact forms or other general communications.

3.1 Information you provide to us

We may collect the following information directly from you:

  • your name;

  • your preferred name;

  • your email address;

  • shipping and billing details, if those details are required for a particular product or transaction;

  • order details and purchase history;

  • information needed to provide access to digital products or download links;

  • messages, questions, feedback, and other information submitted through our contact form;

  • information provided when requesting customer support; and

  • marketing preferences and consent choices.

We collect only information that is reasonably necessary for the purposes described in this Privacy Policy, unless you provide additional information voluntarily.


3.2 Payment information

Payment card details are collected and processed directly by the third-party payment processor, which may include Lemon Squeezy (Merchant of Record) or its parent company Stripe, used for a transaction. We do not intentionally store complete payment card numbers, security codes, or similar payment credentials on our own systems. The payment processor may collect and handle payment information under its own privacy policy and terms. We encourage you to review those terms before completing a purchase.

We may receive limited transaction information, such as:

  • the purchaser’s name or email address;

  • transaction amount and currency;

  • product purchased;

  • transaction date;

  • payment status; and

  • limited payment-related identifiers or the last four digits of a payment card, where provided by the payment processor.


3.3 Information collected automatically

When you visit our website, we and our service providers may automatically collect technical and usage information, including:

  • IP address;

  • browser type and version;

  • device type and operating system;

  • approximate location derived from IP address;

  • referring website or page;

  • pages viewed and links clicked;

  • dates and times of visits;

  • website performance and error information; and

  • information collected through cookies, pixels, tags, and similar technologies.

This information may be collected directly by us or by third-party website, hosting, analytics, advertising, or technology providers acting on our behalf.


We may use personal information for the following purposes:

  • to operate, maintain, and improve thebeansbrews.com;

  • to process purchases and payments;

  • to deliver digital products, files, and download links;

  • to provide customer service and technical support;

  • to respond to questions, messages, and requests;

  • to send the newsletter where you have provided consent or where otherwise permitted by law;

  • to provide the complimentary A Place to Land guide;

  • to communicate about purchases, account matters, service updates, and other transactional matters;

  • to understand how visitors use our website;

  • to improve our products, services, content, and customer experience;

  • to personalize or measure our communications and offers, where permitted;

  • to maintain website security and prevent fraud, misuse, or unauthorized activity;

  • to detect, investigate, and address technical problems;

  • to comply with legal, regulatory, accounting, tax, and record-keeping obligations;

  • to establish, exercise, or defend legal claims; and

  • for other purposes disclosed at or before the time information is collected, or with your consent.

We will not use personal information for a materially different purpose without providing appropriate notice or obtaining consent where required by law.


If you are located in the European Economic Area, the United Kingdom, or another jurisdiction applying similar data-protection rules, we rely on one or more of the following lawful bases:

Consent

We may rely on your consent to:

  • send newsletters and promotional communications;

  • provide the complimentary A Place to Land guide where it is offered in connection with newsletter registration;

  • use non-essential cookies and similar technologies; and

  • carry out other activities for which consent is required.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.


Performance of a contract

We may process personal information when necessary to:

  • complete and administer a purchase;

  • provide access to purchased digital products;

  • deliver download links;

  • respond to a support request relating to an order; or

  • take steps at your request before entering into a transaction.


Legitimate interests

We may process personal information where reasonably necessary for our legitimate interests, including:

  • operating and improving our website and services;

  • maintaining website and payment security;

  • preventing fraud and misuse;

  • understanding general website performance;

  • communicating with existing customers about related products or services where permitted; and

  • establishing, exercising, or defending legal claims.

When relying on legitimate interests, we consider and balance those interests against your rights and expectations.


Legal obligation

We may process personal information where necessary to comply with legal, tax, accounting, regulatory, court, or law-enforcement requirements.


Consent withdrawal

Where processing is based on consent, you may withdraw consent by:

  • using the unsubscribe link in a marketing message;

  • changing cookie settings through our cookie-consent tool, where available; or

  • contacting us through the contact form or mailing address listed in this Privacy Policy.


Cookies are small files placed on your device when you visit a website. We and our service providers may use cookies, pixels, tags, local storage, and similar technologies.

These technologies may be used for the following purposes:


Essential technologies

Essential cookies help the website function properly. They may support:

  • shopping-cart functionality;

  • checkout and payment processes;

  • security;

  • session management;

  • delivery of digital products; and

  • remembering essential settings.

Essential technologies generally cannot be disabled through our website without affecting functionality.


Analytics technologies

Analytics cookies help us understand how visitors use the website, including:

  • which pages are visited;

  • how visitors navigate the website;

  • whether pages load correctly;

  • how visitors interact with content; and

  • general website performance.

Where required by law, we will request consent before placing non-essential analytics cookies.

Marketing technologies

Marketing cookies and similar technologies may be used to measure communications, understand the effectiveness of promotions, or provide relevant advertising. We will use these technologies only where permitted by applicable law and, where required, after obtaining consent.

The specific cookies and technologies used may change as our website, platform, and service providers change.

Managing cookies

Depending on your location and the technologies in use, you may be able to manage cookies through:

  • our cookie-consent banner or preference centre;

  • your browser settings;

  • your device settings; or

  • third-party opt-out tools.

You can also disable cookies through your browser settings. Disabling cookies may affect website functionality, including shopping-cart, checkout, download, or preference features.

We do not sell personal information.

We may disclose personal information to the following categories of recipients where reasonably necessary for the purposes described in this Privacy Policy:

Website, hosting, and commerce providers

We may use third-party website-hosting, content-management, ecommerce, and digital-delivery providers, which may include Zyrosite, Wix, or successor platforms or related service providers. These providers may process information needed to host the website, operate the online store, process orders, and deliver digital products.


Payment processors

Payment processors process payment information and transaction details to authorize and complete purchases, detect fraud, and comply with payment-network requirements.

Email and marketing providers

We may use an email marketing or customer-communications provider to deliver newsletters, transactional messages, download links, and related communications.

Analytics and technology providers

Analytics, security, performance, and technology providers may process technical and usage information to help us operate, secure, and improve the website.

Professional advisers

We may disclose information to lawyers, accountants, insurers, consultants, auditors, and other professional advisers where reasonably necessary to obtain professional advice, comply with obligations, or protect our legal interests.

Legal, regulatory, and law-enforcement authorities

We may disclose personal information where required or permitted by law, including in response to:

  • a subpoena, warrant, court order, or other legal process;

  • a lawful government or regulatory request;

  • an investigation into suspected fraud, misuse, or unlawful activity; or

  • an emergency involving a risk of harm.


Business transactions

If The Beans Brews is involved in a reorganization, financing, sale of assets, merger, acquisition, or similar transaction, personal information may be disclosed to advisers, counterparties, or successor entities as reasonably necessary for that transaction and subject to appropriate confidentiality and legal protections.

Service providers that process personal information on our behalf are expected to use the information only for the services they provide to us, subject to their contractual and legal obligations.

Our service providers may process or store personal information in Canada, the United States, or other countries where those providers operate.

When personal information is transferred outside Canada, the European Economic Area, or the United Kingdom, it may be subject to the laws of the country where it is processed. Those laws may permit access by courts, law-enforcement agencies, or government authorities in circumstances that differ from those in Canada, the European Union, or the United Kingdom.

Where required by applicable law, we seek to use appropriate safeguards for international transfers, which may include:

  • contractual privacy and confidentiality obligations;

  • data-processing agreements;

  • standard contractual clauses approved or recognized by applicable authorities;

  • the UK International Data Transfer Agreement or UK Addendum, where applicable;

  • reliance on an applicable adequacy decision;

  • transfer-risk assessments and supplementary safeguards; and

  • technical and organizational security measures.

You may contact us through the contact information below to request further information about applicable transfer safeguards, subject to lawful limitations.


We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, accounting, tax, dispute-resolution, security, and record-keeping purposes.

Our general retention practices are as follows:

  • Order and purchase records: We generally retain order, payment-status, and transaction records for as long as reasonably necessary to administer purchases, provide support, meet accounting and tax obligations, resolve disputes, and comply with applicable law.

  • Tax and accounting records: Records required for Canadian tax purposes are generally retained for at least six years from the end of the relevant tax year, or longer where required by law or requested by the Canada Revenue Agency.

  • Newsletter information: We retain newsletter subscriber information until you unsubscribe, withdraw consent, or request deletion, subject to information that must be retained for legal, suppression-list, security, or record-keeping purposes.

  • Customer support and contact messages: We generally retain support communications for as long as reasonably necessary to respond to the request, maintain service records, address disputes, and improve support. We generally aim to delete or anonymize routine support correspondence after two years unless a longer period is reasonably necessary.

  • Technical and analytics information: Retention depends on the relevant technology, provider, purpose, and applicable settings. We generally seek to retain such information only as long as reasonably necessary for security, analytics, and operational purposes.

  • Legal claims and requests: Information relevant to a legal claim, privacy request, audit, investigation, or dispute may be retained until the matter is resolved and any applicable review or appeal period has ended.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy, or anonymize it, subject to technical, legal, and operational limitations.

Your rights depend on where you live and the laws that apply to the relevant processing.


10.1 Rights under Canadian privacy law

Under the Personal Information Protection and Electronic Documents Act (“PIPEDA”), and any applicable Alberta privacy legislation, you may have the right to:

  • request access to personal information we hold about you;

  • ask how your information has been used or disclosed;

  • ask where we obtained information, where applicable;

  • request correction of inaccurate or incomplete information;

  • challenge the accuracy or completeness of information;

  • withdraw consent, subject to legal or contractual restrictions;

  • ask questions about our privacy practices; and

  • make a complaint to the Office of the Privacy Commissioner of Canada.

We may need to verify your identity before responding to an access, correction, deletion, or other privacy request. We will not use identity-verification information for unrelated purposes.

We generally respond to Canadian access requests within 30 days of receiving a complete request. Where permitted by law, we may extend the response period by up to an additional 30 days and will provide notice of the extension and the reason for it.

Some information may be withheld where permitted or required by law, including information subject to legal privilege, third-party privacy rights, confidential commercial information, or other applicable exceptions.


10.2 Rights under the GDPR and UK GDPR

If the GDPR or UK GDPR applies to you, you may have the right to:

  • access your personal information;

  • correct inaccurate or incomplete information;

  • request deletion of personal information;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • object to direct marketing;

  • receive certain information in a structured, commonly used, machine-readable format;

  • request data portability where the legal requirements are met;

  • withdraw consent where processing is based on consent; and

  • lodge a complaint with a data-protection supervisory authority.

We generally respond to requests under the GDPR or UK GDPR within one month. This period may be extended by up to two additional months where legally permitted because of the complexity or number of requests. If an extension is necessary, we will explain the reason.

The right to deletion, restriction, objection, and portability is subject to applicable legal conditions and exceptions. For example, we may need to retain information to comply with a legal obligation, establish or defend legal claims, complete a transaction, or maintain a suppression record.

You may lodge a complaint with the supervisory authority in the country where you live, work, or believe an infringement occurred. UK residents may contact the Information Commissioner’s Office.

10.3 Rights of California residents

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), applies to you, you may have the right to:

  • know the categories and specific pieces of personal information we collect, use, disclose, or otherwise process;

  • know the purposes for which personal information is collected or used;

  • know the categories of sources from which personal information is collected;

  • know the categories of recipients to whom personal information is disclosed;

  • request deletion of personal information, subject to exceptions;

  • request correction of inaccurate personal information;

  • opt out of the sale or sharing of personal information;

  • limit certain uses or disclosures of sensitive personal information, where applicable;

  • receive equal treatment for exercising privacy rights; and

  • not be discriminated against for exercising privacy rights.

We do not sell personal information. We also do not knowingly share personal information for cross-context behavioural advertising. If this changes, we will update this Privacy Policy and provide any opt-out mechanisms required by law.

California residents may submit a request through our website contact form or by writing to our mailing address. We may need to verify your identity before completing certain requests.

We generally respond to verifiable California privacy requests within 45 days. Where reasonably necessary, we may extend the response period by an additional 45 days and will provide notice of the extension.

We generally respond to requests to opt out of sale or sharing as soon as reasonably practicable and within the period required by law. We will process a valid Global Privacy Control signal as an opt-out request where required by applicable law.

We do not charge a fee for privacy requests unless permitted by applicable law. We will not discriminate against you for exercising rights under the CCPA/CPRA.

To submit a privacy request, please contact us through the contact form on thebeansbrews.com or write to:

The Beans Brews PO Box 25563 RPO Callaghan Edmonton, AB T6W 4N8 Canada

Please include:

  • your name;

  • the email address or other identifier associated with your interaction with us;

  • the nature of your request;

  • the relevant time period, if known; and

  • any additional information that will help us locate the relevant records.

For your protection, do not send payment-card numbers, passwords, government identification numbers, or other highly sensitive information through the contact form.

We may ask for reasonable information to verify your identity and authority to make a request. We will use verification information only to verify and respond to the request, protect personal information, and comply with legal obligations.

If you use an authorized agent to make a request on your behalf, we may require proof of your authorization and may verify your identity directly.

If you subscribe to our newsletter or otherwise provide consent to receive marketing communications, we may send information about:

  • The Beans Brews;

  • new products and digital resources;

  • guided audio, workbooks, and related offerings;

  • reflective resources and wellness content;

  • promotions and special offers; and

  • the complimentary A Place to Land guide.

You can unsubscribe from marketing emails at any time by selecting the unsubscribe link in the message or by contacting us through the contact form.

Unsubscribing from marketing communications does not necessarily stop transactional or service messages, such as:

  • purchase confirmations;

  • payment or delivery information;

  • download links;

  • customer-support responses;

  • security notices; or

  • other communications necessary to administer a transaction or service.

We will process unsubscribe requests within a reasonable period and in accordance with applicable anti-spam and privacy laws.

Some browsers offer a “Do Not Track” setting. Because there is no universally accepted technical standard for responding to Do Not Track signals, our website may not respond to all Do Not Track signals.

Where required by applicable law, we will recognize and process a valid Global Privacy Control or similar opt-out preference signal as a request to opt out of the sale or sharing of personal information.

We do not sell personal information. If our practices change, we will update this Privacy Policy and provide any legally required notices or opt-out mechanisms.

We use reasonable administrative, technical, and physical safeguards intended to protect personal information against unauthorized access, collection, use, disclosure, alteration, loss, or destruction.

These safeguards are intended to include:

  • encryption of information in transit where supported by the relevant service;

  • access controls and authentication measures;

  • limited access to personal information based on business need;

  • use of reputable service providers;

  • security monitoring and reasonable technology safeguards;

  • secure handling and disposal practices; and

  • incident-response procedures for suspected privacy or security incidents.

No method of transmission or storage is completely secure. We cannot guarantee that personal information will never be accessed, disclosed, altered, or destroyed through a security incident.

If we become aware of a privacy breach, we will assess and respond to it in accordance with applicable law, including any requirements to notify affected individuals, regulators, or other parties.

Our website and services are not directed to children under 16. We do not knowingly collect personal information from children under 16.

If you believe a child has provided personal information to us, please contact us through the contact form or mailing address above. We will take reasonable steps to investigate and delete the information where required, unless retention is legally necessary.

The Beans Brews is based in Alberta, Canada. If you access our website from outside Canada, your personal information may be transferred to, stored in, or processed in Canada, the United States, or another country where we or our service providers operate.

By using our website, you acknowledge that information may be processed in countries other than your own. Where applicable law requires consent for a transfer or for the use of non-essential cookies, we will request that consent separately.

You may contact us if you have questions about international processing or wish to request information about applicable safeguards.

Our website may contain links, embedded content, payment functions, social-media features, or other connections to third-party services. We are not responsible for the privacy, security, or content practices of those third parties.

When you follow a third-party link or use a third-party service, your information may be collected directly by that third party. We encourage you to read the third party’s privacy policy and terms before using its services.

We may update this Privacy Policy from time to time to reflect changes in:

  • our services or website;

  • the information we collect;

  • our use or disclosure practices;

  • service providers;

  • applicable law; or

  • privacy and security practices.

When we make changes, we will update the “Last updated” date at the top of this Privacy Policy. Where required by law, we will provide additional notice or obtain consent.

Your continued use of the website after an updated Privacy Policy is posted means that you have been provided with notice of the updated terms, subject to any consent requirements that apply.


If you have questions, concerns, or requests relating to this Privacy Policy or our handling of personal information, please contact us through the contact form on thebeansbrews.com or by mail:

The Beans Brews PO Box 25563 RPO Callaghan Edmonton, AB T6W 4N8 Canada

We welcome the opportunity to address concerns directly.

You may also contact the Office of the Privacy Commissioner of Canada:

Office of the Privacy Commissioner of Canada Website: https://www.priv.gc.ca/

Individuals in the European Economic Area or United Kingdom may also contact their local data-protection supervisory authority. UK residents may contact the Information Commissioner’s Office at:

https://ico.org.uk/

California residents may contact the California Privacy Protection Agency or the California Attorney General where applicable.

This Privacy Policy should be reviewed by a licensed attorney before publication, particularly to confirm the applicable privacy legislation, service providers, cookie practices, international-transfer mechanisms, retention periods, and business-entity information.