Privacy Policy

Last updated: 27 October 2026

Global Strawberry is a registered business name of 1001104506 Ontario Ltd., Toronto, Canada (“we”). This policy explains what we collect and how we use it, in accordance with Canada’s PIPEDA, the UK/EU GDPR for clients in the UK and EEA, and other applicable privacy laws where our clients are located.

What we collect

• Contact details you give us: name, email, WhatsApp/Telegram handle.
• Project information: your order details, files you send us, and correspondence.
• Website forms: order, contact and complaint forms are sent through Formspree, which stores the submission and forwards it to us. Order details (order number, service, package, price, your email and the staff member who helped you) are also saved in our own order system, hosted by Cloudflare, so we can track payment and delivery.
• Live chat: messages you send through the Help button (Crisp), any name or email you give there, and — when you tap “Talk to a person” — the topic you chose, the page you were on, the service it shows and your latest order number, so our team knows what you are asking about.
• Referral program: name and email of participants, and a mailing address only if a bracelet reward is chosen.
• Payment records: handled by our payment processors (Stripe, Interac e-Transfer through our bank, and Payoneer or PayPal for referral payouts); we never see or store your card numbers. For monthly plans, Stripe keeps your card on file to charge the monthly fee until you cancel.
• Technical logs: our hosting provider (Cloudflare) keeps basic technical logs, such as IP addresses, for security. We do not use advertising or analytics trackers.
• Fonts: our pages load their fonts from Google Fonts, so your browser sends your IP address to Google when a page opens. No cookies are set and Google does not receive anything you type on our site.

How we use it

• To quote, deliver and support your order; to send order confirmations and invoices; to run the referral program.
• We do not sell personal information and do not send marketing without consent.
• Client information is used only for order delivery and is handled by team members bound by confidentiality agreements.

Legal basis for processing (UK and EU clients)

1001104506 Ontario Ltd. is the controller of your personal data. Under the UK and EU GDPR we rely on these legal bases:

• Contract: to quote, deliver, support and invoice your order, and to answer your messages before you order (Article 6(1)(b)).
• Legal obligation: to keep invoices and payment records required by Canadian tax law (Article 6(1)(c)).
• Legitimate interests: to keep the website secure, prevent fraud and spam, run the referral program and handle complaints (Article 6(1)(f)). You may object to this processing at any time.
• Consent: for the live chat cookies, which load only after you tap “Talk to a person”, and for any marketing emails (Article 6(1)(a)). You may withdraw consent at any time; this does not affect processing that happened before.

We do not make decisions about you by automated means alone, and we do not create profiles of you.

Service providers and international transfers

We use the providers named above (Formspree, Crisp, Stripe, Cloudflare, Google Fonts, WhatsApp, Payoneer, PayPal) to run this website and our services. We are based in Canada, so personal data from the UK and EEA is transferred to Canada. The European Commission, the UK and Switzerland recognize Canada (for businesses covered by PIPEDA) as providing adequate protection. Some providers also store data in the United States or other countries; for those transfers we rely on the EU–US Data Privacy Framework (and its UK extension) where the provider is certified, or on the provider’s Standard Contractual Clauses (or the UK Addendum). Data stored outside your country may be subject to local laws and accessible to authorities there. You can ask us for more information about these safeguards.

Emails and marketing (CASL)

• We send order emails — quotes, confirmations, invoices, delivery notices and replies to your questions — because you asked for our services. These are not marketing.
• We send marketing emails (offers, news) only to people who have given us express consent, in line with Canada’s Anti-Spam Legislation (CASL) and, for UK/EU recipients, the GDPR and applicable e-privacy rules.
• Every marketing email identifies Global Strawberry (1001104506 Ontario Ltd.), includes our contact details and mailing address, and has a working unsubscribe link. You can also unsubscribe by emailing us. We act on unsubscribe requests within 10 business days at the latest.

Cookies

The live chat (Crisp) loads only after you tap “Talk to a person”. From then on it sets cookies in your browser so your conversation stays open between pages, and it remembers in your browser that you have used the chat. When you send an order, your browser also keeps your latest order number, service and email for up to 90 days so the help panel can show your order; this stays on your device and is removed when you clear this site’s data in your browser. The rest of the site does not use cookies for tracking or advertising. You can block or delete cookies in your browser settings; the chat may not work without them.

How long we keep your data

• Order records and invoices are kept for 7 years for Canadian tax purposes.
• Project files are kept for 12 months after delivery, unless you ask us to delete them sooner.
• Messages and form submissions that do not lead to an order are deleted within 24 months.

Your rights

• Everyone: you can ask to see the personal information we hold about you, ask us to correct it, ask us to delete it, and withdraw your consent, by emailing our Privacy Officer below.
• UK and EEA clients (GDPR): you also have the right to restrict or object to processing, to receive your data in a portable format, and to lodge a complaint with a data protection authority — for example the ICO (United Kingdom), the Data Protection Commission (Ireland), the Autoriteit Persoonsgegevens (Netherlands), the Information and Data Protection Commissioner (Malta), or the authority where you live.
• Canadian clients (PIPEDA): you can also complain to the Office of the Privacy Commissioner of Canada.
• Swiss clients (FADP): you have similar rights under the Swiss Federal Act on Data Protection, and you can complain to the Federal Data Protection and Information Commissioner (FDPIC).
• Clients in other countries (for example Brazil’s LGPD, Japan’s APPI, South Korea’s PIPA, Thailand’s PDPA, South Africa’s POPIA and the data protection laws of the Gulf states): you have the rights your local law gives you. Email our Privacy Officer and we will handle your request under that law.
• We may need to confirm your identity before acting on a request. We reply within 30 days (one month under the GDPR), and requests are free of charge. We may keep records we are legally required to keep, such as invoices.

Children

Our services are for businesses and adults. We do not knowingly collect personal information from children under 16.

Changes to this policy

We will post any changes on this page and update the date at the top. If a change is significant, we will tell clients with an active order by email.

Contact

Privacy Officer: [email protected]