Privacy Policy
Who We Are
Deb's Meatbuns is a cottage food business based in Landmark, Manitoba. This policy explains how we handle your personal information when you place an order through our website.
What We Collect
When you place an order, we collect:
- Your name
- Email address
- Phone number
- Delivery address (delivery orders only)
- IP address — used for abuse prevention and rate limiting. IP addresses are stored temporarily in our rate-limiting system (sliding window of up to 1 hour) and are not associated with your order data
Email addresses are also used as rate-limit identifiers for abuse prevention and are stored temporarily in Redis (up to 1 hour).
How We Use Your Information
Your information is used solely for order fulfillment and delivery coordination. We do not use your data for marketing unless you explicitly opt in.
Third Parties
We share data only with the services required to process your order:
- Stripe — payment processing and receipt delivery. Your email address is shared with Stripe so they can send payment receipts. Stripe's privacy policy is available at stripe.com/privacy.
- Resend — email order confirmations. Resend's privacy policy is available at resend.com/legal/privacy-policy.
- Upstash — temporary order processing. Upstash's privacy policy is available at upstash.com/trust/privacy.
- Sentry — error monitoring and application stability. We configure Sentry with
sendDefaultPii: false, but error data (such as error messages and stack traces) may inadvertently contain user input. Sentry's privacy policy is available at sentry.io/privacy. - Adobe TypeKit — typography and font delivery. TypeKit delivers web fonts and may collect usage analytics such as page URLs and user agents. Adobe's privacy policy is available at adobe.com/privacy/policy.
Data Retention
We retain order data in our payment processor (Stripe) according to their retention policy, and in transactional confirmation emails. Temporary processing data stored in Redis (such as order details for email delivery) is automatically deleted after 7 days. Rate-limiting data (IP addresses and email identifiers) is automatically deleted after 1 hour.
Your Rights
You may request access to or deletion of your personal data at any time. Email us at deb@debsmeatbuns.ca and we will respond within 30 days.
Contact
If you have questions about this policy, contact us at deb@debsmeatbuns.ca.
Last updated: March 11, 2026