Privacy Policy

JarJoy ("we", "us") sells Persian torshi (pickled vegetables) online. We are the organization responsible for the personal information described here. Our privacy contact is hello@jarjoy.shop.

• Order information: name, email, phone, billing and shipping address, items ordered, and order history.
• Payment information: processed entirely by Shopify and its payment providers. We never see or store your full card number.
• Account and contact information: anything you send us through our contact form or by email.
• Marketing information: your email address if you subscribe to our newsletter, and whether you opened or clicked our emails.
• Technical information: IP address, device and browser type, pages visited, and referring site, collected through cookies and similar technologies.

• To process, ship and support your orders, and to handle returns or refunds.
• To respond to your questions and provide customer service.
• To send marketing emails where you have given express consent.
• To keep the store secure, prevent fraud, and fix technical problems.
• To meet legal, tax and food-safety record-keeping obligations.

We collect and use your information with your knowledge and consent. Placing an order is your consent for us to use your details to fulfil that order. Marketing emails are sent only with your express opt-in consent (see our CASL commitment below).

You may withdraw consent at any time by emailing hello@jarjoy.shop or clicking "unsubscribe" in any marketing email. Withdrawal takes effect within 10 business days. Note that withdrawing consent for order-related information may mean we cannot complete an order in progress. We may still keep records we are legally required to keep.

We do not sell your personal information. We share only what is needed with:

• Shopify Inc. — our store, cart, checkout and order platform (Canada/United States).
• Payment processors used by Shopify Payments — to authorize and settle payments.
• Shipping and delivery carriers — name, address and phone so your order can be delivered.
• Email and analytics providers — to send email you asked for and to understand site usage.
• Government, regulators or law enforcement — where required by Canadian law.

Some of these providers store or process data outside Canada, including in the United States, where foreign courts and authorities may be able to access it under the laws of that country. We choose providers that offer a comparable level of protection.

• Order and transaction records: 7 years, to meet Canada Revenue Agency and consumer-protection requirements.
• Customer service messages: 2 years after the matter is resolved.
• Newsletter subscriber data: until you unsubscribe, plus a suppression record so we do not email you again.
• Website analytics and cookie data: up to 24 months.

When information is no longer needed for these purposes, it is deleted or anonymized.

You have the right to:

• Ask what personal information we hold about you and how it has been used and disclosed.
• Receive a copy of that information in an understandable form.
• Have inaccurate or incomplete information corrected.
• Ask us to delete information we no longer need to keep.
• Withdraw consent to marketing or non-essential processing.
• Complain to us, and then to the Office of the Privacy Commissioner of Canada, if you are not satisfied.

Email hello@jarjoy.shop with the subject line "Privacy request". We respond within 30 days at no cost. We may ask you to confirm your identity before releasing information.

We do not make any decision about you that produces a legal or similarly significant effect using automated processing alone. We do not use automated profiling to approve or refuse orders, to set individual prices, or to assess creditworthiness. Discounts on this site are applied purely by the number of jars in your cart — the same rule for everyone. Basic automation such as fraud screening inside Shopify's checkout is always reviewable by a human, and you can contact us to have any automated outcome reviewed.

Parts of this website's text, layout and imagery were produced with the help of AI tools, reviewed by us before publishing. Product photographs are real photographs of JarJoy products. Ingredient lists, allergen information, prices and policies are set by us, not generated.

We do not use AI to make decisions about customers, and we do not feed your personal information or order details into AI systems for training.

We use reputable hosted services, encrypted (HTTPS) connections, and access controls to protect your information. No method of transmission or storage is completely secure.

If a breach of security safeguards occurs that creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada, notify you directly as soon as feasible with a description of what happened and what you can do, and keep a record of the breach for at least 24 months, as required by PIPEDA.

This store is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

We may update this policy as our business or the law changes. The "last updated" date above always reflects the current version.