Privacy policy

Fraser Valley Co-op is a pre-launch plan for household group buying in the Fraser Valley, British Columbia. We are not yet an incorporated organization. This policy explains how we handle personal information under British Columbia's Personal Information Protection Act (PIPA).

We collect only what we need, and only when you give it to us.

• Waitlist: your email address, and if you choose to give them, your first name, postal code, household size and whether pickup or delivery would suit you.
• Consent record: the wording you agreed to, when you agreed, when you confirmed your email and when you unsubscribed.
• Contact form: your name, email address, the topic and your message.
• How you found us: when you first arrive, a short-lived first-party cookie remembers campaign tags in the link (such as utm_source), the website that sent you, the first page you landed on and any referral code. It is copied onto your waitlist entry if you join. It holds nothing else.
• Spam protection: a keyed, one-way hash of your IP address. We never store or log the address itself.

• To email you about the project, and only about the project, after you confirm you want that.
• To see how many households in each community are interested, so we can decide where to start and where pickup points should go.
• To answer your messages.
• To keep the forms safe from spam and abuse.

• We do not sell, rent or trade your information.
• We do not use advertising or tracking cookies, analytics services or third-party scripts.
• We never show anything about an individual on a public page. Public numbers are totals only.

Only the few people who run the project, through a staff console protected by a password and a second sign-in step. Access is limited by role, and sensitive actions are recorded in an audit log.

The service providers listed below handle information on our behalf, only to run this website and send our messages.

Your information is stored and processed outside Canada, in the United States, by these service providers. They act on our instructions and may not use it for anything else.

• Website and database: the app and its database are hosted by Railway, in the United States.
• Website emails: confirmation and update emails are sent through Resend.
• Our mailbox: when you write to us by email, your message is kept in our Google Workspace mailbox.
• Domain and caching: Cloudflare provides our domain's DNS and caches the website's public pages.

Waitlist details: until you unsubscribe and ask us to erase them, or until the project ends. Contact messages: as long as we need them to deal with your message.

If you ask us to erase your details, we delete them and keep only a keyed hash of your email address on a do-not-contact list, so we never email you again by mistake. Final retention periods will be set before launch.

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to erase it. Use the contact form and choose "Privacy request", or write to hello@fvco-op.ca. We will confirm it is really you, by email, before acting, and reply within the time PIPA allows.

If you are not happy with our answer, you can contact the Office of the Information and Privacy Commissioner for British Columbia.

We will post any change here with a new date. If a change affects how we use information you already gave us, we will email you first.