Privacy
Privacy policy.
Bouwer Flowers Inc. · Last updated 5 November 2026
1. Who we are and what this policy covers
Bouwer Flowers Inc. (“Bouwer Flowers”, “we”, “us”) is an Ontario corporation that supplies fresh cut roses to wholesalers and florists. This policy explains how we collect, use, share and protect personal information in our business: on our website bouwerflowers.ca, by email, phone or messaging, at meetings, and when we quote, supply, deliver and invoice.
We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL).
We sell to businesses. PIPEDA does not apply to business contact information, such as your name, title, business address, phone number and email, when we use it only to communicate with you about your work. We still protect that information as described here. Information about sole proprietors, and any information about you as an individual, is personal information, and this policy applies to it in full.
2. Accountability and our Privacy Officer
Bouwer Flowers is responsible for the personal information under its control, including information we pass to service providers for processing. Our Privacy Officer is accountable for our compliance with this policy and with PIPEDA.
Privacy OfficerSean Bouwer, Managing Director
Bouwer Flowers Inc.
London, Ontario, Canada
Send a privacy request
3. Personal information we collect
We collect only what we need for the purposes in section 4.
| When | What we collect |
|---|---|
| You contact us or ask for a quote (website contact form or chat, email, phone, WhatsApp, in person) | Name, company, role, business email, phone number, city and province, your message, and the volumes and varieties you are interested in |
| You place an order request | Delivery address and instructions, delivery window, purchase order number, and what you ordered, including box sizes and packing preferences |
| We invoice and you pay | Invoice details and payment records (amount, date, payer name, bank reference). We do not collect or store payment card numbers |
| We deliver or handle a claim | Delivery confirmations, the name of the person receiving, photos and descriptions you send about a quality issue |
| You send a privacy request | Name, company, email, phone, the type of request and the details you give us, so we can confirm who you are and respond |
| You agree to receive marketing emails | Your email address, and when, where and how you agreed |
| You visit our website | Technical information recorded by our hosting provider for security and operation: IP address, browser type, pages requested and time of the request |
| You work for one of our suppliers or partners | Your business contact details and our correspondence with you |
We do not ask for sensitive information such as health information or government identification numbers, and we ask you not to send it to us.
4. Why we use it and how we obtain consent
We use personal information to:
- Answer your questions and prepare quotes.
- Process, deliver and invoice your orders, and collect payment.
- Handle quality claims and keep lot-by-lot traceability of what we deliver.
- Plan purchasing and imports with our growers and logistics partners.
- Keep business, tax and customs records required by law.
- Protect our website and systems against fraud and misuse.
- Send you marketing emails, only as described in section 8.
Consent. We collect, use and share personal information with your knowledge and consent, except where the law permits otherwise. When you contact us, request a quote or place an order, you consent to us using your information for the purposes above that relate to that request. We ask for express consent before any use you would not reasonably expect, and we will not use your information for a new purpose without first telling you and, where required, asking again.
You can withdraw consent at any time by contacting our Privacy Officer, subject to legal or contractual limits. We will explain the consequences: for example, we cannot deliver an order without a delivery address. We never make consent to marketing a condition of doing business with us.
5. Who we share it with
We do not sell or rent personal information. We share it only as follows, and only what each party needs:
- Service providers that work for us under contract and may use the information only to provide their service: website and database hosting, email sending, payment and banking services, business messaging, and our accountant.
- Logistics partners: our customs broker, freight forwarder, cold storage and delivery partners receive the delivery and shipment details they need to clear, store and deliver your order.
- Authorities, such as the Canada Revenue Agency or the Canada Border Services Agency, when the law requires it.
- A buyer or investor in our business, if we sell, merge or finance the business, under an agreement that requires them to protect the information and use it only for that transaction.
We use contracts and other means to make sure our service providers protect your information to a standard comparable to ours.
6. Processing outside Canada
Some of our service providers store or process information outside Canada, including in the United States and the European Union. For example, our website hosting, email, payment and messaging providers operate internationally. Information processed outside Canada is subject to the laws of that country and may be accessed by its courts, law enforcement and national security authorities. We choose providers that protect information to a standard comparable to Canadian requirements.
7. Website, cookies and analytics
Our website does not use cookies. Its fonts and images are served from our own website, not from third-party services.
We do not use analytics, advertising or social media tracking tools on our website. Our hosting provider keeps short-term server logs (section 3) to keep the site secure and running. If we ever add cookies, analytics or other tracking, we will update this policy before we do.
8. Marketing emails and messages
We send commercial electronic messages, such as program offers and availability updates, only in line with Canada’s Anti-Spam Legislation:
- with your express consent, for example by ticking the optional box on our contact or order form, or
- where the law allows implied consent: for example, when you bought from us in the past two years, made an enquiry in the past six months, or published your business email without saying you don’t want unsolicited messages and our message relates to your role.
Every marketing message identifies Bouwer Flowers, includes our contact details and has a simple way to unsubscribe. We act on unsubscribe requests without delay and within 10 business days, and we keep records of how we obtained consent.
Messages about your quotes, orders, deliveries, invoices and claims are not marketing. We send them as part of doing business with you, even if you have unsubscribed from marketing.
9. How long we keep it
We keep personal information only as long as we need it for the purposes in section 4, or as long as the law requires. Then we delete it or anonymize it so it no longer identifies you.
| Information | Kept for |
|---|---|
| Orders, invoices, payment, claims and import records | 7 years, because Canadian tax and customs law requires business records to be kept for six years |
| Customer contact details | While you are a customer; deleted or anonymized two years after your last order or when you ask, except what must be kept with the records above |
| Enquiries and quotes that did not lead to an order | 24 months |
| Marketing consent records | As long as we send you marketing, and three years after you unsubscribe, to show we complied with the law |
| Website security and server logs | No longer than 24 months |
10. Safeguards and privacy breaches
We protect personal information with safeguards suited to its sensitivity: encrypted connections (HTTPS) on our website, access limited to people who need it for their work, strong passwords and two-step verification on our business accounts, and contracts with our service providers. No system is completely secure, but we review our safeguards regularly.
We keep a record of every breach of security safeguards involving personal information. If a breach creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as soon as feasible, and tell you what you can do to reduce the risk.
11. Your rights
You can ask us, in writing to our Privacy Officer, for example with the privacy request form:
- Access: whether we hold personal information about you, what it is, how we have used it and who we have shared it with.
- Correction: to correct information that is inaccurate or incomplete.
- Withdrawal of consent: to stop using your information for a purpose, including marketing.
We respond within 30 days. If we need more time, we will tell you within those 30 days, explain why, and respond within a further 30 days at most. Access is free, or at minimal cost if we tell you in advance. We may ask you to confirm your identity first. If we cannot give you some information, for example because it would reveal information about someone else or is protected by law, we will explain why.
Complaints. Please contact our Privacy Officer first; we will investigate and respond. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada, 1-800-282-1376.
12. Changes and contact
We may update this policy when our business, our service providers or the law change. The date at the top shows the latest version. If we make a significant change to how we use personal information, we will tell our customers before it takes effect.
Our website and services are intended for businesses and are not directed at children.
Questions about this policy or your personal information: use the privacy request form below, or write to our Privacy Officer at the address in section 2.
Privacy request
Use this form to ask for access to, correction of or deletion of your information, to withdraw consent or unsubscribe, or to ask any question about this policy. It goes directly to our Privacy Officer, and we respond within 30 days.
Last updated: 5 November 2026