Privacy policy

Privacy Policy

Last updated: March 26, 2026

The Leaf Origin ("we", "us", "our") is committed to protecting your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the Canadian Anti-Spam Legislation (CASL). This policy explains what information we collect, why we collect it, how we use it, and your rights.

1. Who We Are

The Leaf Origin operates at 1130 Tall Pine Avenue, Oshawa, Ontario, L1K 2X9, Canada. We are an indoor microgreens farm delivering fresh produce across Durham Region. Questions about this policy may be directed to us using the contact details at the bottom of this page.

2. Information We Collect

We collect information you provide directly when you:

Place an order (name, email, phone number, delivery address, payment information)
Create an account
Subscribe to our weekly delivery service
Contact us with a question or feedback
Sign up for our email newsletter

We also automatically collect certain technical information when you visit our website, including your IP address, browser type, pages visited, and time spent on pages, through cookies and similar technologies.

3. How We Use Your Information

We use your personal information to:

Process and fulfil your orders and deliveries
Manage your subscription and send renewal reminders
Communicate with you about your orders, including delivery confirmations
Send marketing communications — only where you have given consent, which you may withdraw at any time
Improve our website and services
Comply with legal obligations

4. Sharing Your Information

We do not sell your personal information to third parties. We may share it only with:

Shopify Inc. — our e-commerce platform (servers in Canada and the United States). See Shopify's Privacy Policy.
Payment processors — to securely process payments. We never store full payment card details on our own systems.
Email service providers — to send order confirmations and newsletters.
Legal authorities — only where required by Canadian law or valid court order.

5. Cookies

Our website uses cookies to maintain your shopping cart, remember your preferences, and analyse site traffic. You may control cookies through your browser settings. Disabling certain cookies may affect shopping cart and checkout functionality.

6. Data Storage and Security

Your information is stored on secure servers maintained by Shopify Inc. We use SSL/TLS encryption for all data transmitted between your browser and our website. Some data may be stored or processed outside Canada (including in the United States) by our service providers, with appropriate safeguards in place.

7. Your Rights Under PIPEDA

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Withdraw consent for marketing at any time (use the unsubscribe link in any email)
Request deletion of your account and personal data, subject to legal retention requirements
Lodge a complaint with the Office of the Privacy Commissioner of Canada

To exercise any right, contact us using the details below. We will respond within 30 days.

8. Retention

We retain order and transaction records for a minimum of 7 years as required under the Canadian Income Tax Act. Marketing consent records are kept for as long as you remain subscribed. Account data is retained until you request deletion.

9. Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us their information, please contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top will reflect any changes. Significant changes will be communicated by email to registered customers.