Privacy Policy
Last updated October 2, 2026
This Privacy Policy explains how Kara-Kata Marketplace (“Kara-Kata”, “we”, “us”), at www.kara-kata.com (the “Site”), collects, uses and shares your personal information when you browse, create an account, or buy from the independent shops that sell on our marketplace. We are based in Saskatchewan, Canada, and handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
Contact
If you have questions about this policy or your information, want to exercise your rights, or would like to make a complaint, e-mail us at [email protected] or write to us at:
2034 Kensington Road, Saskatoon SK S7L 7N2, Canada
What we collect
Account information
- What: your name, email address, phone number and password (stored only as a secure hash).
- Why: to give you an account, keep you signed in and let you see your orders.
- Source: you, when you sign up or update your profile.
Order information
- What: the items you buy, your delivery address or chosen pickup shop, phone number, email address, notes for the shop, any discount code, and your order and tracking history.
- Why: to take your payment, pass your order to the shops you bought from, arrange delivery or pickup, send your receipts and order updates, handle refunds, and prevent fraud.
- Source: you, at checkout. If you check out as a guest, we keep the email address you give us so we can reach you about the order.
Payment information
- What: your card is entered directly into Stripe, our payment provider. We never see or store your full card number; for a saved card we keep only Stripe’s reference to it, the card brand and the last four digits.
- Why: to charge you, refund you, and let you pay with a saved card.
Location
- What: the city and postal code you choose and, only if you allow it in your browser, your approximate position.
- Why: to show shops near you, check delivery is available, and quote shipping and tax.
Support and messages
- What: messages you send us through the contact form or support chat, and our replies.
- Why: to help you and keep a record of how we resolved it.
Technical information
- What: your IP address, browser type and the time of each request, recorded in our server logs.
- Why: to keep the Site secure and working, and to investigate problems.
Who we share it with
We share only what each one needs to do its part:
- The shops you buy from receive your name, contact details, delivery address or pickup choice, notes and the items ordered, so they can prepare your order and hand it over or ship it.
- Stripe processes payments and refunds, and pays our shops (stripe.com/privacy).
- Canada Post receives your name, address, phone number and email address to quote, ship and track deliveries, and may email you delivery updates (Canada Post privacy centre).
- Our email provider (Mailgun) sends your receipts, order updates and account emails.
- OpenStreetMap receives the text you type into the address search at checkout, to suggest matching addresses.
- Our hosting and storage providers run our servers and store images and records on our behalf.
- Authorities, when the law requires it, or to protect our rights and our customers.
We do not sell your personal information, and we do not share it with advertisers.
Cookies and browser storage
Kara-Kata uses only what it needs to run the shop. We do not use advertising, social-media or analytics cookies, and we do not track you across other websites.
- Keeping you signed in. When you sign in, or start shopping as a guest, your browser stores a sign-in token. It stops working after 2 hours without use, and after 24 hours at most.
- Your cart and location. Your browser remembers the items in your cart and the city or postal code you chose, so they are still there when you come back.
- Payments. When you pay or save a card, Stripe sets its own cookies to prevent fraud. These are covered by Stripe’s cookie policy.
- For our sellers. The vendor dashboard uses one cookie to keep sellers signed in.
These are all needed for the Site to work, so we do not ask for consent to them. You can clear them at any time in your browser settings; you will be signed out and your cart will be emptied.
Marketing
We only send you news and offers if you sign up to our mailing list. Every message has a link to unsubscribe, or you can e-mail us. Receipts and order updates are not marketing and are sent to every customer.
How long we keep it
We keep your account while it is open. We keep order and payment records for as long as Canadian tax and accounting law requires (generally six years), even after an account is closed. Support messages are kept for as long as they help us serve you, and server logs for a short period.
Where it is stored
Our records are stored by our hosting providers. Stripe and our email provider may process information in the United States and other countries, where it is protected by their own safeguards and may be accessible to authorities under local law.
Keeping it safe
We use encrypted connections, store passwords only as secure hashes, never hold full card numbers, and limit staff access to what each role needs.
Minors
The Site is not intended for anyone under 13. We do not knowingly collect personal information from children. If you believe a child has given us their information, contact us and we will delete it.
Your rights
You can ask to see the personal information we hold about you, to correct it, or to withdraw consent and have it deleted (except records we must keep by law). Contact us using the details above and we will respond within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.
Changes
We will update this policy when our practices change, and show the date of the latest version at the top of this page.