Privacy Policy

Last updated: April 2026 · PIPEDA compliant

TajWater ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information We Collect

We collect information across our primary platform (tajwater.ca) and our custom payment portal (pay.tajwater.ca):

Account information: Name, email address, phone number
Delivery information: Delivery address and zone
Payment metadata: Order history, products ordered, delivery dates, and custom payment link metadata
Financial data: Processed securely by Square — we never store full credit card numbers
Usage data: Pages visited, browser type, IP address, and timestamp data (collected automatically for security and analytics)
Communications: Support tickets, emails, and SMS messages

2. How We Use Your Information

To process, fulfill, and deliver your orders
To manage your subscriptions and user account
To generate and send custom payment links (via email or SMS)
To send transactional messages: order confirmations, invoices, and delivery updates
To provide customer support and respond to inquiries
To improve our website functionality, payment portals, and general services
To comply with legal, tax, and accounting obligations

3. Information Sharing & Payment Processing

We do not sell your personal information. Data is shared exclusively with trusted third-party service providers required to operate our business:

Square — Processes all credit card payments (tajwater.ca/shop and pay.tajwater.ca). Square is PCI-DSS Level 1 compliant. TajWater does not process or store sensitive card data.
Supabase — Hosts our database, user authentication, and secure session management.
Resend — Delivers all transactional emails, including custom payment links and receipts.
Delivery Personnel — Provided only with your name, delivery address, and specific delivery notes necessary to complete the service.
Law Enforcement — Only when strictly required by law.

4. Data Retention & Link Expiry

We adhere to data minimization principles. We retain account information as long as your account remains active. Order records and completed custom payment links are retained for 7 years to fulfill Canada Revenue Agency (CRA) tax and audit requirements. Unpaid custom payment links expire automatically after 30 days. You may request the deletion of your account and personal data at any time, subject to our legal retention obligations.

5. Your Rights (PIPEDA)

Under PIPEDA, you have the right to:

Access the personal information we hold about you
Request corrections to inaccurate or incomplete data
Withdraw your consent for certain non-essential data uses
Request the deletion of your account and personal data
File a complaint with the Office of the Privacy Commissioner of Canada

6. Security Measures

We employ industry-standard security protocols to protect your data. This includes end-to-end SSL encryption on all domains (tajwater.ca and pay.tajwater.ca), secure token-based authentication, and Row-Level Security within our database infrastructure to ensure data isolation.

7. Cookies

We utilize essential cookies for authentication, session management, and preventing cross-site request forgery (CSRF). We may also deploy analytics cookies to evaluate website usage. You may disable non-essential cookies via your browser preferences.

8. Contact Our Privacy Officer

For privacy inquiries, access requests, or to register a complaint, please contact us at: privacy@tajwater.ca
TajWater · Metro Vancouver, BC, Canada

1. Information We Collect

We collect information across our primary platform (tajwater.ca) and our custom payment portal (pay.tajwater.ca):

Account information: Name, email address, phone number

Delivery information: Delivery address and zone

Payment metadata: Order history, products ordered, delivery dates, and custom payment link metadata

Financial data: Processed securely by Square — we never store full credit card numbers

Usage data: Pages visited, browser type, IP address, and timestamp data (collected automatically for security and analytics)

Communications: Support tickets, emails, and SMS messages

2. How We Use Your Information

To process, fulfill, and deliver your orders

To manage your subscriptions and user account

To generate and send custom payment links (via email or SMS)

To send transactional messages: order confirmations, invoices, and delivery updates

To provide customer support and respond to inquiries

To improve our website functionality, payment portals, and general services

To comply with legal, tax, and accounting obligations

3. Information Sharing & Payment Processing

We do not sell your personal information. Data is shared exclusively with trusted third-party service providers required to operate our business:

Square — Processes all credit card payments (tajwater.ca/shop and pay.tajwater.ca). Square is PCI-DSS Level 1 compliant. TajWater does not process or store sensitive card data.

Supabase — Hosts our database, user authentication, and secure session management.

Resend — Delivers all transactional emails, including custom payment links and receipts.

Delivery Personnel — Provided only with your name, delivery address, and specific delivery notes necessary to complete the service.

Law Enforcement — Only when strictly required by law.

4. Data Retention & Link Expiry

5. Your Rights (PIPEDA)

Under PIPEDA, you have the right to:

Access the personal information we hold about you

Request corrections to inaccurate or incomplete data

Withdraw your consent for certain non-essential data uses

Request the deletion of your account and personal data

File a complaint with the Office of the Privacy Commissioner of Canada