Privacy Policy

1. Introduction and company information

This Privacy Policy explains how Outpost Coffee Roasters Ltd collects, uses, discloses, stores, and protects personal information in connection with its coffee-shop operations, website mortroryx.site, and related services. We are committed to handling personal information in a manner that complies with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and, where applicable, provincial privacy legislation.

Outpost Coffee Roasters Ltd
1578 Bloor St W, Toronto, ON M6P 1A4, Canada
Email: [email protected]
Phone: +1 416-516-9040

By using our website, visiting our café, placing an order, making a reservation, contacting us, or otherwise interacting with Outpost Coffee Roasters Ltd, you acknowledge that your personal information may be collected, used, and disclosed as described in this Privacy Policy.

2. Data collection and processing

We may collect personal information directly from you, automatically through our website, or from third parties where permitted by law. Depending on how you interact with us, we may collect the following categories of personal information:

  • Identity and contact information: name, email address, telephone number, billing and delivery address.
  • Transaction information: order details, purchase history, payment status, receipts, refunds, and loyalty or rewards-related information, if offered.
  • Account and communication information: messages sent to us, customer service inquiries, reservation details, and preferences.
  • Website and device information: IP address, browser type, device identifiers, pages viewed, timestamps, referral sources, and usage data collected through cookies or similar technologies.
  • Location information: approximate location derived from your device or IP address where necessary for website functionality, fraud prevention, or service improvement.
  • Employment or applicant information: if you apply for a job, we may collect resume details, references, work history, and related application materials.

We only collect personal information that is reasonably necessary for the purposes described in this Privacy Policy. Where possible, we collect information directly from you and with your knowledge and consent, except where otherwise permitted or required by law.

3. Purpose of data processing

Outpost Coffee Roasters Ltd processes personal information for the following purposes:

  • to provide products and services, including café purchases, online ordering, reservations, and customer support;
  • to process payments, issue receipts, handle refunds, and prevent fraud;
  • to communicate with you regarding orders, inquiries, promotions, updates, or service-related notices;
  • to manage customer relationships, preferences, and feedback;
  • to maintain and improve our website, operations, menu offerings, and customer experience;
  • to monitor, analyze, and secure website usage and business systems;
  • to comply with legal, regulatory, tax, accounting, and reporting obligations;
  • to support recruitment, hiring, and employment-related administration where applicable;
  • to enforce our terms, protect our rights and property, and ensure the safety of our customers, staff, and premises.

4. Legal basis for processing

Under Canadian privacy law, we generally rely on one or more of the following grounds to process personal information:

  • Consent: where you have provided express or implied consent for a specific purpose.
  • Contractual necessity: where processing is necessary to provide a product or service requested by you, or to take steps at your request prior to entering into a contract.
  • Legal obligation: where processing is required to comply with legal or regulatory obligations.
  • Legitimate business purposes: where processing is reasonable for operating our business, improving services, maintaining security, detecting fraud, or managing risk, and where such interests do not override your rights and freedoms.
  • Other permitted purposes: where collection, use, or disclosure is otherwise permitted or required by applicable law.

For certain activities, such as marketing communications or the use of optional cookies, we will seek your consent where required.

5. Data sharing and third parties

We may share personal information with third parties only as necessary and in accordance with this Privacy Policy. These third parties may include:

  • Service providers: payment processors, website hosting providers, email delivery services, analytics providers, IT support, and security vendors.
  • Delivery and logistics partners: where necessary to fulfill delivery orders or manage related communications.
  • Professional advisors: accountants, auditors, lawyers, insurers, and consultants engaged by us.
  • Government and law enforcement authorities: where required or permitted by law, court order, subpoena, or similar legal process.
  • Business transfer parties: in connection with a merger, acquisition, reorganization, sale of assets, or similar corporate transaction.

We require third-party service providers to use personal information only for authorized purposes and to implement appropriate safeguards. However, some third parties may process personal information as independent controllers under their own privacy policies.

6. Data transfer to third countries

Some of our service providers may store or process personal information outside Canada, including in the United States or other jurisdictions. When personal information is transferred outside Canada, it may be subject to the laws of those jurisdictions and accessible to courts, law enforcement, or national security authorities in those countries.

We take reasonable contractual, organizational, and technical measures to protect personal information when it is transferred internationally, including requiring appropriate safeguards from our service providers where applicable.

7. Storage duration

We retain personal information only as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with legal obligations, to resolve disputes, to enforce agreements, and to maintain business records.

Retention periods may vary depending on the type of information and the context in which it was collected. For example:

  • transaction and accounting records may be retained for the period required by tax and bookkeeping laws;
  • customer service communications may be retained for a reasonable period to handle follow-up matters;
  • website analytics data may be retained for a shorter period or in aggregated form where possible;
  • job application materials may be retained for a reasonable period after the hiring process unless a longer period is required or permitted by law.

When personal information is no longer required, we will securely delete, anonymize, or otherwise dispose of it in accordance with our retention practices.

8. User rights

Subject to applicable law and any lawful exceptions, you may have the following rights regarding your personal information:

  • Access: the right to request access to the personal information we hold about you.
  • Rectification: the right to request correction of inaccurate or incomplete personal information.
  • Erasure: the right to request deletion of your personal information in certain circumstances.
  • Restriction: the right to request that we restrict certain processing in limited circumstances.
  • Data portability: the right to request a copy of certain personal information in a structured, commonly used format where applicable.
  • Objection: the right to object to certain processing, including direct marketing where applicable.

To exercise any of these rights, please contact us using the details in the Contact Information section. We may need to verify your identity before responding. We will respond within a reasonable time and in accordance with applicable legal requirements.

9. Withdrawal of consent

Where our processing is based on your consent, you may withdraw that consent at any time, subject to legal or contractual restrictions and reasonable notice.

Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal. If you withdraw consent, we may no longer be able to provide certain services or features. For example, if you opt out of marketing emails, you may still receive transactional or service-related messages.

10. Right to complain

If you have concerns about how Outpost Coffee Roasters Ltd handles your personal information, we encourage you to contact us first so we can try to resolve the issue directly.

You also have the right to file a complaint with the appropriate privacy regulator in Canada, such as the Office of the Privacy Commissioner of Canada, or with the relevant provincial privacy authority if applicable.

11. Data security

We use reasonable physical, organizational, and technical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These safeguards may include access controls, secure systems, password protection, vendor management, and staff confidentiality obligations.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. If we become aware of a privacy or security incident involving personal information, we will take appropriate steps in accordance with applicable law.

12. Contact information

If you have questions, requests, or complaints regarding this Privacy Policy or our handling of personal information, please contact:

Outpost Coffee Roasters Ltd
1578 Bloor St W, Toronto, ON M6P 1A4, Canada
Email: [email protected]
Phone: +1 416-516-9040

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technologies, or business operations. When we make material changes, we will post the updated policy on our website and revise the effective date below if applicable.

Your continued use of our website or services after any changes are posted means you acknowledge the updated Privacy Policy, to the extent permitted by law.

Effective date: October 20, 2026

10/20/2026 Home