Opened from a form? Close this tab to return to your unchanged form. Reading does not accept anything.

Customer Privacy Notice

Version 2026-10-06.3 · Revised 2026-10-06
Effective upon acceptance

The platform is provided under the business name DropFolks. Business mailing address: 52 Clementine Dr, Brampton, ON L6Y 5R7, Canada. Contact info@dropfolks.ca for questions about these terms, privacy or account access.

What we collect and why. We collect the account details you supply, including name, email, password hash, business contact information, account activity and agreement acceptance records. We use this information to provide accounts, operate the service, respond to requests, investigate misuse and maintain security. Essential session cookies keep you signed in. Accepting these notices does not enrol you in marketing.

Who can access information. Access depends on the person's role and responsibilities. Authorised administrators review applications and investigate support or security issues. Hosting and email providers process information for these services. Our current hosting is in Oregon, United States, so information may be processed outside Canada and be subject to the laws of that jurisdiction. We do not sell personal information.

Your choices. Contact info@dropfolks.ca to request access, correction, withdrawal of an application or account deletion, or to raise a privacy complaint. We may need to verify your identity. Withdrawing information needed to fulfil an order or verify a partner may prevent that service from continuing. Applicable legal rights are not waived by acknowledging this notice.

Retention and security. We retain information for the purposes described here, including handling outstanding orders, disputes, fraud prevention and applicable recordkeeping obligations. Retention depends on the type of information and those purposes; it is not an unlimited permission to keep information. Restricted backups may retain deleted information until replaced or removed. Contact us about a specific record or request. We restrict account and document access, but no online service can guarantee absolute security. Do not send passwords or payment-card information by email.

Customer information. We collect the name, email and phone number you provide, saved addresses, delivery instructions, basket and order details, support correspondence and agreement acceptance records. We use these to operate your account, prepare and deliver orders, keep order history, respond to problems and prevent misuse. Phone numbers are for order-related contact; providing one does not subscribe you to marketing. Do not put unnecessary sensitive information in delivery instructions.

Nearby stores. When you open shopping, we use your selected saved delivery address, or your default saved address when none is selected. You can change it using Deliver to. Its street number, street name, city, province and postal code are sent to Mapbox to locate it; your recipient name, phone number, unit and delivery instructions are not sent for this search. With your device permission, Use my location obtains a one-time position to help you select a nearby saved delivery address. For this shortcut, saved street addresses are also located through Mapbox and compared with your position in your browser. When using this location shortcut, you confirm a saved delivery address before the store list changes. Stores are selected around your saved delivery address, not your device position. Your device coordinates are not sent to Mapbox by this shortcut. It does not track you continuously or change your saved addresses. Search coordinates remain in the current page session and are not saved to your account, browser storage or our location database. Store pickup addresses are also located through Mapbox. Mapbox processes address queries under its privacy policy at https://www.mapbox.com/legal/privacy. You can decline device location and select a saved address.

Order access. The fulfilling store and assigned driver receive order, contact and delivery information needed for their tasks. Authorised administrators can access information needed for support, operations and security. Other customers do not receive your account details. Customer signup does not require continuous device location access.

Device storage and payment. Essential session cookies maintain your login. The app may keep your basket and checkout progress in session storage on your device. Passwords are stored as hashes, not readable passwords. The current payment flow is unavailable or expressly labelled as simulated/test; no real payment should be made through it. Where a test payment provider is enabled, its payment page is separate. Do not send card numbers or passwords to support.

Access and choices. You can edit your contact details and saved addresses in Account. For account access, correction, deletion or privacy complaints, email info@dropfolks.ca. Some order, security and agreement records may need to remain for the purposes and obligations described above. We will explain applicable limitations when responding to your request.