Privacy.
Last updated 21 May 2026
Plain English version of what I do with your information. I'm a one-person seed-saving operation in Calgary, not an ad network. The short version is: I collect what I need to ship your seeds and nothing else.
What I collect
When you place an order I collect:
- Your name and email so I can confirm your order and tell you when it ships.
- Your mailing address so I can post it.
- Your order details (which seeds, how many) so I can pack the right packets.
- Your notes, if you left any at checkout (shipping instructions, allergies, anything else). Optional, blank if you skip the field.
Payment information goes directly to Stripe or PayPal. I never see or store your full card number. Stripe and PayPal each have their own privacy policies that govern what they do with it: Stripe, PayPal.
If you upvote a variety on the Next harvest page, I record an anonymous vote, with no identifying information attached. If you submit your email to be notified when a variety is available, I store just your email and which variety you're waiting on.
Why I collect it
- To pack and ship your seeds.
- To email you when I receive your order, and again when I post it.
- To email you when a variety you signed up for becomes available.
- To keep records the Canada Revenue Agency legally requires me to hold on to for six years.
Who I share it with
- Stripe and PayPal, for payment processing. They see your name, email, address, and what you bought. Their policies: Stripe, PayPal.
- Canada Post, when I post your envelope. They see the shipping label.
- Google, because order details land in a private Google Sheet I use as my fulfillment notebook, and the form actions are handled by Google Apps Script.
- Vercel, the host that runs this site and the checkout helper code. Each page load and API call passes through Vercel's edge, which logs your IP, user-agent, and the URL for a short retention window (around 30 days) for abuse-detection. Your name, email, address, and notes pass through Vercel's servers in memory while your order is being created, but I don't store them there. Only in the Google Sheet above.
- Cloudflare, which routes email sent to peppers@mightseeds.ca to my real inbox. Cloudflare sees the sender and subject of anything you send to that address.
- Web3Forms, the service that delivers messages from the contact form to my inbox. When you submit contact.html, your name, email, and message pass through Web3Forms's servers on the way to me. Their privacy notice: web3forms.com/privacy.
Several of the processors above (Stripe, PayPal, Google, Vercel, Cloudflare, Web3Forms) are based in the United States. Placing an order or sending a contact form submission means your information may be transferred to and processed in the US, where it can be subject to US legal process.
I don't sell, rent, or share your data with anyone else. No advertisers, no marketing lists.
How long I keep it
- Order details (name, email, address, items, notes): six years, because the Canada Revenue Agency requires me to hold on to books and records that support my income.
- Restock-alert signups on Next harvest (email plus which variety): until I've sent the one notification email, plus a small buffer afterwards, then archived. I keep the original signup record (date, variety, email) as proof of consent under CASL but I won't email you again.
- Anonymous upvotes on Next harvest: indefinitely, because there's nothing in them that identifies you.
- Vercel access logs: governed by Vercel's own retention (around 30 days). I don't pull copies into my own records.
Cookies and tracking
This site has no analytics, no third-party trackers, no advertising cookies. The only browser storage I use is on your own device, to remember your shopping cart between page loads and to remember which varieties you've upvoted on Next harvest. None of that leaves your browser.
Your rights
Under PIPEDA, Canada's federal privacy law, you can ask me to:
- Show you what data I have about you.
- Correct anything that's wrong.
- Delete your data, except where I'm legally required to keep it (tax records).
Email peppers@mightseeds.ca with "Privacy" in the subject. I'll respond within 30 days as required.
Changes
If I update this policy, the "Last updated" date at the top changes. Material changes will be communicated by email to anyone with an active order or subscription.
Contact
Privacy questions: peppers@mightseeds.ca
Calgary, Alberta, Canada