Privacy Policy

1. Overview

This Privacy Policy explains what personal information Ms Tiffin collects, how we use it, and who we share it with when you use our website and subscription service. We are based in British Columbia, Canada.

2. Information we collect

We collect the information you provide and the information needed to deliver the service:

• Contact details — name, email, phone number.
• Delivery details — address, unit/buzzer, parking notes, building type, postal code.
• Subscription details — plan, schedule, dietary preferences, order history.
• Payment information — handled and stored by Stripe; we do not store full card numbers.
• Communications — your SMS/email consent status and the messages we’ve sent you.

3. How we use your information

We use your information to operate the service:

• Prepare, schedule, and deliver your tiffins.
• Process payments, taxes, credits, and refunds.
• Send transactional messages — confirmations, reminders, delivery updates, billing notices.
• Provide customer support and manage your account.
• Improve and secure the service.

We do not sell your personal information.

4. Service providers we share with

We share information only as needed with the providers that run the service on our behalf:

• Stripe — payment processing and billing.
• Twilio — SMS notifications (where you’ve opted in).
• Resend — transactional email delivery.
• Supabase — secure database and authentication.
• Spoke (delivery routing) — name, address, and delivery details for drivers, on delivery days.

Each provider receives only the information needed for its function and is bound by its own privacy and security obligations.

5. Sign-in & authentication

We use passwordless sign-in: you receive a one-time link by email or SMS. We do not store passwords. Sign-in links are single-use and time-limited.

6. Data retention

We keep your information for as long as you have an account and as needed to meet legal, tax, and accounting obligations. You can request deletion of your account information, subject to records we’re required to retain.

7. Your choices

You can update your contact and delivery details from your account. You can opt out of SMS at any time by replying STOP. To access, correct, or delete your personal information, email info@mstiffin.ca.

8. Security

We use industry-standard measures to protect your information, including encryption in transit and access controls on our database. No method of transmission or storage is completely secure, but we work to protect your data and limit access to it.

9. Changes to this policy

We may update this Privacy Policy from time to time. We’ll update the "Last updated" date when we do, and notify you of material changes.

10. Contact

Questions about your privacy? Email info@mstiffin.ca or write to Ms Tiffin, 6084 Fraser Street, Vancouver, BC, V5W 2Z8.