Sucré · Toronto
Privacy Policy
At Sucré, we prioritize the accuracy, confidentiality, and security of your personal information. Our privacy practices are guided by the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Canadian Standards Association's Model Code for the Protection of Personal Information.
Accountability
Sucré is accountable for the Personal Information under its custody and control. A designated privacy officer has been appointed to oversee our organisation's compliance with PIPEDA and these privacy standards. Any questions or concerns regarding how we handle your personal information may be directed to that officer using the contact details in Section 14.
What We Collect & Why
Sucré operates exclusively on a commission and consultation basis. We do not operate an online store, shopping cart, or checkout system. All client relationships begin through our Get a Quote enquiry form or direct communication. The personal information we collect is strictly limited to what is necessary to respond to your enquiry and fulfil your commission.
The table below sets out exactly what personal information we collect, through which channel, and for what purpose:
| Information | How Collected | Purpose |
|---|---|---|
| Name | Quote form, email, phone | To address you and identify your commission |
| Email address | Quote form, email | Primary communication channel for quotes, confirmations, and updates |
| Phone number | Quote form, phone | For time-sensitive commission questions and delivery coordination |
| Event date & type | Quote form | To assess availability and plan your commission timeline |
| Delivery address | Quote form, email | To calculate delivery pricing and coordinate logistics |
| Design & flavour preferences | Quote form, email, consultation | To create your bespoke commission |
| Dietary requirements | Quote form, email, consultation | To ensure safe and appropriate product preparation |
| Payment information | Invoicing / payment processor | To process deposits and final balance payments. Payment card data is handled exclusively by our payment processor and is never stored by Sucré. |
We do not collect personal information beyond what is listed above, and we do not collect it for speculative or future purposes without your consent.
Consent
Your informed consent is required for the collection, use, or disclosure of your Personal Information, except in circumstances where legal exceptions apply. By submitting an enquiry through our quote form or contacting us directly to commission a product, you consent to us collecting and using the information you provide for the purposes described in Section 2.
You have the right to choose whether or not to provide your Personal Information. However, certain information — such as your name, email, event date, and delivery address — is necessary for us to assess your enquiry and fulfil a commission. If you choose not to provide this information, we may be unable to proceed with your order.
We will not condition the provision of a product or service on your consent to the collection, use, or disclosure of Personal Information beyond what is necessary to provide that service.
Limiting Collection
The collection of Personal Information is confined to what is necessary for the purposes disclosed in this policy. We collect information directly from you through the following channels:
- Our online quote and enquiry form at sucre.to/quote
- Email correspondence at [email protected]
- Telephone and WhatsApp communication
- In-person consultations where applicable
We do not purchase, rent, or source personal information about you from third-party data brokers or marketing lists.
Use, Disclosure & Retention
Personal Information is used or disclosed solely for the purposes for which it was collected, unless you provide separate consent or disclosure is required by law.
Use
We use your personal information to: respond to your enquiry; prepare and send a personalised quote; fulfil and deliver your commission; communicate about your order; and process payment via our payment processor. We may also use your email address to follow up after your event to request a review, only where you have not opted out of such contact.
Disclosure
We do not sell, trade, or rent your personal information to any third party. Limited disclosure may occur in the following circumstances only:
- Delivery partners: Your name and delivery address may be shared with a third-party delivery service solely for the purpose of fulfilling your order.
- Payment processors: Payment information is handled by our payment processor. Sucré does not store card data.
- Email service providers: If you have subscribed to our newsletter, your email address may be held by our email distribution platform with your explicit consent. You may unsubscribe at any time.
- Invoicing & payment links: Quotes and payment requests are delivered via email and WhatsApp. By providing these contact details, you consent to receiving commission documentation through these channels. Payment is processed securely through our third-party payment processor (currently Stripe). Sucré does not store or have access to your card details at any point.
- Legal obligation: We may disclose information if required to do so by law or in response to valid legal process.
Retention
We retain Personal Information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Commission records — including design briefs, correspondence, and payment records — are retained for a minimum of seven years for accounting and legal purposes. After this period, records are securely deleted or anonymised.
Accuracy
We strive to keep your Personal Information as accurate, complete, and up-to-date as necessary for its intended use. If you believe any information we hold about you is inaccurate or incomplete, please contact us at [email protected] and we will correct it promptly.
Safeguarding Your Information
Sucré employs security measures appropriate to the sensitivity of your Personal Information, to protect it against loss, theft, unauthorised access, disclosure, copying, use, or modification. These measures include:
- Secure, encrypted transmission of data (HTTPS/SSL) across our website
- Access controls limiting who within Sucré can view client information
- Use of reputable third-party platforms for payment processing and communication, all bound by their own security and privacy obligations
While we take all reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee the absolute security of information transmitted to or from our website.
Openness
Sucré is transparent about its privacy practices. This policy is publicly available at sucre.to/privacy-policy at all times. If you have questions about how we manage your personal information that are not answered here, please contact us directly.
Your Right to Access
You are entitled to request access to the Personal Information Sucré holds about you, subject to limited exceptions under PIPEDA (for example, where disclosure would reveal information about a third party, or where the information is subject to solicitor-client privilege). To make an access request, please contact our privacy officer at [email protected]. We will respond within 30 days. You may also request that inaccurate information be corrected.
Cookies & Analytics
Our website uses cookies — small text files stored on your device — to support core functionality, remember your preferences, and understand how visitors use the site. Cookies are managed through our consent banner, which appears on your first visit and allows you to control which categories of cookies are active:
- Essential cookies: Required for security, network management, and basic website functionality. These are always active.
- Preference cookies: Remember your selections and form inputs to personalise your visit.
- Statistics cookies: Help us understand site usage in an anonymised, aggregated way (e.g. Google Analytics). Active only with your consent.
- Marketing cookies: Used to show relevant advertising and measure campaign performance. Active only with your consent.
You can adjust or withdraw your cookie consent at any time by clicking the cookie preferences link in the page footer, or by adjusting your browser settings. Note that disabling certain cookies may affect the functionality of this website.
Where we use Google Analytics or similar tools, data collected is anonymised and aggregated. We do not use analytics data to identify individual users.
Google User Data
Sucré respects and prioritises the privacy and security of all user data, including any data obtained through Google services. This section exists to satisfy Google's requirements for services that interact with Google user data and to be fully transparent about our practices.
What Google Data We Access
Sucré may access limited Google user data only where you have provided explicit consent. This may include:
- Your Google account email address, where used for login authentication or account-linked communication
- Analytics data collected via Google Analytics (anonymised and aggregated — see Section 10)
We do not access Google account data beyond what is explicitly consented to and necessary for the stated purpose.
How We Use Google Data
Any Google user data accessed is used solely for the following purposes:
- To facilitate communication related to your enquiry or commission
- To improve website performance and user experience through anonymised analytics
We do not use Google user data for advertising profiling, resale, or any purpose not disclosed in this policy.
Storage & Security
Google user data is stored securely using industry-standard measures and is retained only for the duration necessary to fulfil the purpose for which it was collected, or as required by law. It is not shared with third parties except as described in Section 5.
Amendments
We commit to using Google user data exclusively in the ways described in this policy. Should our practices change, we will update this policy and notify affected users where required. For any questions regarding our handling of Google user data, please contact our privacy officer at [email protected].
Third-Party Links
Our website may include links to third-party websites for your convenience. Once you leave sucre.to, this Privacy Policy no longer applies. Sucré is not responsible for the privacy practices or content of third-party sites, and we encourage you to review the privacy policies of any external sites you visit.
Changes to This Policy
Sucré reserves the right to update this Privacy Policy at any time. The most current version will always be available at sucre.to/privacy-policy. The "Last updated" date at the top of this page reflects when material changes were last made. Where changes are significant, we will make reasonable efforts to notify active clients directly.
Contact & Complaints
Questions, access requests, correction requests, or complaints regarding this Privacy Policy or our handling of your personal information should be directed to our privacy officer:
If you are not satisfied with our response to a privacy concern, you have the right to contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or by phone at 1-800-282-1376.
