Privacy Policy – Aeon Stellar Commerce Inc.

Last Updated: June 19, 2025

1. Introduction

Aeon Stellar Commerce Inc. (“we,” “us,” “our”) is committed to protecting the privacy and personal information of all users of our services. This Privacy Policy explains how we collect, use, disclose, and protect personal information in compliance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws.

2. PIPEDA Compliance Framework

Our privacy practices are built on PIPEDA’s 10 Fair Information Principles:

  1. Accountability: We have designated a Chief Privacy Officer responsible for PIPEDA compliance.
  2. Identifying Purposes: We clearly identify why personal information is collected.
  3. Consent: We obtain meaningful consent for collection, use, and disclosure 14
  4. Limiting Collection: We collect only information necessary for identified purposes.
  5. Limiting Use, Disclosure, and Retention: Information is used only for stated purposes.
  6. Accuracy: We maintain accurate and up-to-date information.
  7. Safeguards: Appropriate security measures protect personal information.
  8. Openness: Our privacy practices are transparent and accessible.
  9. Individual Access: Users can access and correct their personal information.
  10. Challenging Compliance: Users can challenge our privacy practices.

3. What Personal Information We Collect

3.1 Account Information

  • Name, email address, phone number, billing address.
  • Business registration details for merchants and B2B customers.
  • Payment information processed through secure third-party providers.

3.2 Platform Usage Data

  • Dietary preferences and restrictions for StellaEats recommendations.
  • Platform interaction data, search queries, and usage patterns.
  • Device information, IP addresses, and browser details.

3.3 Workshop and Event Data

  • Registration information and attendance records.
  • Participation feedback and evaluation responses.
  • Professional background information for networking purposes.

3.4 Marketing and Communication Data

  • Email marketing preferences and engagement metrics.
  • Social media interactions and advertising response data.
  • Customer service communications and support tickets.

4. How We Use Personal Information

4.1 Service Delivery

  • Provide and improve StellaEats marketplace functionality.
  • Deliver StellaHub B2B services and analytics.
  • Facilitate workshop registration and event management.

4.2 AI-Powered Features

  • Generate personalized dietary recommendations and product matches.
  • Improve AI algorithms through anonymized usage patterns.
  • Provide predictive analytics for business users.

4.3 Communication and Marketing

  • Send service updates, newsletters, and promotional content.
  • Provide customer support and technical assistance.
  • Conduct market research and user satisfaction surveys.

5. Information Sharing and Disclosure

5.1 Service Providers
We share personal information with trusted third-party service providers including:

  • Payment processors (Stripe) for transaction processing.
  • Email service providers for communications.
  • Cloud hosting providers for data storage and platform operations.

5.2 Business Transfers
Personal information may be transferred in connection with business mergers, acquisitions, or sales.

5.3 Legal Requirements
We may disclose information when required by law, court order, or to protect our legal rights.

6. Data Security and Protection

6.1 Technical Safeguards

  • Encryption of data in transit and at rest.
  • Secure authentication and access controls.
  • Regular security audits and vulnerability assessments.

6.2 Administrative Safeguards

  • Employee training on privacy and security practices.
  • Access limitations based on job responsibilities.
  • Incident response procedures for security breaches.

6.3 Physical Safeguards

  • Secure data center facilities with restricted access.
  • Environmental controls and monitoring systems.
  • Secure disposal of physical storage media.

7. Data Retention and Disposal

7.1 Retention Periods

  • Account information: Retained while account is active plus 7 years for tax purposes.
  • Platform usage data: Retained for 3 years for service improvement.
  • Workshop records: Retained for 5 years for continuing education compliance.

7.2 Secure Disposal
Personal information is securely deleted or anonymized when no longer required for identified purposes.

8. International Data Transfers

8.1 Cross-Border Processing
Some service providers may process data outside Canada. We ensure adequate protection through:

  • Contractual safeguards requiring equivalent privacy protection.
  • Regular audits of international service providers.
  • Compliance with Canadian adequacy requirements.

9. Your Privacy Rights

9.1 Access and Correction
You have the right to access your personal information and request corrections. Contact privacy@aeonstellar.co to exercise these rights.

9.2 Withdrawal of Consent
You may withdraw consent for non-essential processing, though this may limit service availability.

9.3 Complaint Process
You may file privacy complaints with our Chief Privacy Officer or the Office of the Privacy Commissioner of Canada.

10. Cookies and Tracking Technologies

10.1 Cookie Types

  • Essential cookies for platform functionality.
  • Analytics cookies for usage measurement (Google Analytics).
  • Marketing cookies for advertising personalization.

10.2 Cookie Management
Users can control cookie preferences through browser settings and our cookie consent manager.

11. Marketing and Communications

11.1 Email Marketing

  • Opt-in required for promotional emails.
  • Unsubscribe options available in all marketing communications.
  • Segmented communications based on user preferences.

11.2 Advertising Services

  • Targeted advertising based on platform usage and preferences.
  • Opt-out available for personalized advertising.
  • Third-party advertising network privacy policies apply.

12. Children’s Privacy

We do not knowingly collect personal information from children under 13 9. Workshop participants under 18 require parental consent.

13. Changes to Privacy Policy

We will notify users of material changes to this Privacy Policy with 30-day advance notice. Continued use constitutes acceptance of updated policies.

14. Contact Information

Chief Privacy Officer: privacy@aeonstellar.co
Privacy Inquiries: privacy@aeonstellar.co
General Inquiries: hello@aeonstellar.co

Mailing Address:
Aeon Stellar Commerce Inc.
c/o Dentons Suite 400
77 King St W, Toronto M5K2A1

Office of the Privacy Commissioner of Canada: 1-800-282-1376 or www.priv.gc.ca