1. Who we are
BackHome ("we") operates the BackHome platform. For the purposes of data-protection law we are the controller of the personal data described in this Policy. Vendors (businesses and home producers) that you order from are independent controllers of the data they receive to fulfil your order. Contact: privacy@back-home.ca.
2. Data we collect
Account data: phone number (verified by one-time code), name, date of birth (to confirm you are 18+), country, province and district, profile photo, language, cultural tags and interests you choose.
Social sign-in data: when you sign in with Google, Apple or Facebook we receive your name, e-mail address and profile picture from that provider.
Transaction data: orders, reservations, appointments, BackHome Credit purchases and balances, loyalty points, campaign usage, payments (card details are processed by our payment provider and never stored by us).
Content you create: reviews, messages, event participation, reports.
Technical data: IP address, device and browser information, app version, push-notification token, approximate location derived from IP or, with your permission, from your device (used for discovery and for hiding the exact address of home producers).
Consent evidence: when you accept an agreement we record the version and language shown, server time, IP address, user agent, device information and a device identifier, plus a cryptographic fingerprint of the text.
3. Why we use it and on what basis
To provide the Platform and perform our contract with you (account, orders, credit, messaging). To comply with legal obligations (tax, fraud prevention, evidence of consent). For our legitimate interests in securing and improving the Platform, preventing abuse and enforcing our terms. With your consent, for marketing communications and precise location — you may withdraw consent at any time without affecting prior processing.
4. Who we share it with
Vendors receive the data needed to fulfil your order or reservation (name, order details, table or pickup information, and your phone number where the Vendor needs to contact you). Service providers process data on our behalf under contract: hosting and storage, SMS delivery, push notifications, payment processing, analytics and error monitoring. Authorities where the law requires. We do not sell your personal data.
5. International transfers
Our servers and some service providers may be located outside your country. Where data is transferred internationally we rely on safeguards recognised by the applicable law (such as standard contractual clauses or adequacy decisions) and apply appropriate security measures.
6. Retention
Account data is kept while your account is active and for the period required by law afterwards. Transaction records are kept for the statutory accounting period. Consent evidence is kept for as long as necessary to establish, exercise or defend legal claims, which may be indefinitely; when you delete your account your profile is anonymised but the consent ledger entry is retained.
7. Your rights
Depending on your country you may have the right to access, correct, delete or port your data, to object to or restrict processing, to withdraw consent, and to lodge a complaint with a supervisory authority. You can exercise most rights from your profile (edit, download, delete account) or by writing to privacy@back-home.ca. We respond within the period required by law.
8. Security
We use encryption in transit, access controls, one-time-code authentication, audit logging and a tamper-evident ledger for consent records. No system is perfectly secure; please keep your credentials confidential and report suspected misuse.
9. Children
The Platform is for adults. We do not knowingly collect data from anyone under 18 and we delete such data when we become aware of it.
10. Cookies and similar technologies
The website uses strictly necessary cookies and local storage for login, language and preferences, and, with your consent where required, analytics. You can manage cookies in your browser; disabling necessary cookies may prevent the site from working.
11. Changes
We may update this Policy. Material changes will be presented for acceptance; minor changes take effect when published. Previous versions remain available on request.
12. Canada — PIPEDA and Québec Law 25
We comply with the Personal Information Protection and Electronic Documents Act and applicable provincial laws. Our Privacy Officer (person in charge of the protection of personal information) can be reached at privacy@back-home.ca. You may request access to and correction of your personal information and complain to the Office of the Privacy Commissioner of Canada. If you reside in Québec: we collect personal information with your consent for the purposes stated above; you may withdraw consent, request de-indexing where applicable, and complain to the Commission d'accès à l'information. Personal information may be stored or processed outside Québec and outside Canada under safeguards. Marketing messages are sent only with your express consent in accordance with Canada's Anti-Spam Legislation (CASL).