🚀 Beta — pre-launch in November 2026, official launch in January 2027. Founding member spots are open.

Privacy Policy

1. Who We Are

This privacy policy applies to the Baron Co-Pack platform (baroncopack.com), operated by:

Baron Co-Pack (9407-4093 Québec Inc.)
Laval (Québec), Canada
Email: hello@baroncopack.com

It applies to anyone who visits the site, creates an account (buyer/brand or co-packer/supplier), uses the Baron conversational assistant, or otherwise communicates with us.

Privacy Officer

In accordance with Quebec’s Law 25, the following person acts as the privacy officer for Baron Co-Pack:

Name: Nelson Roberge
Title: President and CEO, co-founder; Privacy Officer
Email: hello@baroncopack.com

This title and contact information are published on the site in accordance with section 3.1 of Law 25.

2. Scope

This policy describes the personal information we collect in operating Baron Co-Pack, a B2B directory and marketplace connecting food and beverage brands with co-packers and service providers, why we collect it, who we share it with, how long we keep it, and the rights you have.

3. Personal Information We Collect

  • Account and profile — Name, company name, email, phone number, city/region, preferred language, role (brand or co-packer). Provided directly at sign-up or when updating your profile.
  • Listings and platform content — Company description, service categories, images, publicly displayed city (your exact civic address is never published). Provided by the member when creating or updating a listing.
  • Payment and billing — Subscription status, billing history; card numbers are processed and stored by Stripe, never by us. Provided to Stripe at checkout.
  • Browsing and cookies — Session and authentication cookies and, depending on your choices, functional/analytics/advertising cookies. Collected automatically, according to your consent preferences.
  • Activity tracking and listing health score — Last login date, number of logins, listing updates, service requests sent or received, membership status. Generated automatically through platform use.
  • Conversations with the Baron assistant — Questions and messages entered in the chat; your email if you voluntarily provide it to be contacted back. Provided directly during a conversation with the assistant.

We do not knowingly collect sensitive categories of personal information (health, origin, orientation, political opinions, etc.). In particular, the “health score” described in section 6 is not health information: it is an internal indicator of a listing’s engagement and completeness.

4. Why We Use This Information

  • Create and manage your account, and authenticate you securely.
  • Display and help brands discover co-packer and supplier listings.
  • Facilitate connections between brands and co-packers (request forms, internal messaging).
  • Process payments and manage subscriptions, through Stripe.
  • Provide customer support, including through the Baron conversational assistant.
  • Measure engagement on the platform (activity tracking, listing health score) to prioritize our outreach and support to members.
  • Keep the platform secure and prevent fraud or abuse.
  • Comply with our legal, accounting and tax obligations.
  • Send you information related to your account, and, if you consent, marketing communications (e.g. newsletter).

5. Legal Basis for Processing

We collect and use your personal information on one of the following bases:

  • Performance of a contract — the information necessary to create your account, display your listing, and allow you to use the platform as described in our terms of use.
  • Reasonable legitimate interest — engagement measurement, security, fraud prevention, service improvement — always proportionate and without unjustifiably infringing your rights.
  • Consent — non-essential cookies (analytics, advertising), marketing communications, and voluntarily providing your email to the Baron assistant. You may withdraw this consent at any time.
  • Legal obligation — retention of financial and tax data for the period required by law.

6. Activity Tracking, the Listing “Health Score,” and No Automated Decision-Making

To better support our members, the platform tracks certain events related to account use (logins, listing updates, requests sent or received, membership status). This data is used to calculate an internal indicator, called the listing’s “score” or “health score,” which reflects a listing’s level of engagement and completeness — for example, whether it is up to date, active, and receiving requests.

The word “health” here refers to the health of the listing and its business activity on the platform. It is in no way personal health information within the meaning of the law, and this indicator does not draw on any medical or biometric data.

This indicator feeds an internal tracking tool (the “Baron CRM”) used by our team (Nelson and Leonardo) to prioritize human follow-up with members — for example, reaching out about an inactive listing or offering support. No decision producing legal effects or similarly significant effects on you (e.g. account suspension or termination) is made solely by automated means based on this indicator: any such decision involves human intervention. Should this change, we would inform you in accordance with section 12.1 of Law 25, and you would be able to submit your observations.

7. Disclosure to Third Parties and Service Providers

We do not sell your personal information. We disclose it only in the following cases:

  • Stripe — payment and billing processing (United States/international). Information involved: payment and billing information.
  • Anthropic (provider of the Baron assistant) — generates the Baron conversational assistant’s responses (United States). Information involved: content of messages exchanged with the assistant; email if voluntarily provided.
  • Website host — hosts the platform and database, currently in the United States; migration to a server located in Quebec is planned before pre-launch. Information involved: all information described in section 3.
  • Meta and LinkedIn — advertising measurement (Meta Pixel, LinkedIn Insight Tag), only if you consent to advertising cookies (United States). Information involved: browsing data related to your visit, for the purpose of measuring our ads.
  • Other members — brand ↔ co-packer matchmaking. Information involved: contact and listing information necessary for a service request.
  • Legal authorities — where required by law. Information involved: as required by the applicable legal obligation.

Each of these providers only has access to the information necessary to perform the service it provides us, under a contractual agreement.

8. Transfers of Information Outside Quebec

Some of our service providers process information outside Quebec, notably in the United States: this is the case for the Baron assistant, and, for now, our host. Before entrusting personal information to a provider located outside Quebec, we carry out a privacy factors assessment, taking into account the legal framework applicable in the territory where the information would be disclosed, the contractual safeguards in place, and the sensitivity of the information. This information may be subject to the laws of the country where it is processed and accessible to that country’s authorities.

A transfer of our hosting to a server located in Quebec is planned before the platform’s pre-launch. Once this migration is complete, hosting will no longer constitute a transfer outside Quebec and this section will be updated accordingly; processing by the Baron assistant will nonetheless remain a transfer outside Quebec as long as the artificial intelligence provider used is located in the United States, as will advertising measurement by Meta and LinkedIn when you consent to it.

9. Retention Period

  • Account and listing information: retained as long as your account is active, then for a reasonable period after closure to respond to your requests and meet our legal obligations.
  • Financial and billing information: retained for a minimum of 7 years, in accordance with Quebec and federal tax requirements.
  • Activity tracking data: raw events (logins, listing updates, requests) are retained on a rolling 24-month basis, after which they are deleted or anonymously aggregated. Summary metadata used for the health score (e.g. last login date, number of logins) is retained as long as the account is active.
  • Conversations with the Baron assistant: we retain exchanges for 12 months to support follow-up and improve the service. Our provider, Anthropic, retains data submitted through the API only for as long as technically necessary on its end (generally a few days, up to a maximum of 30 days depending on the model or agreement), and never uses it to train its models by default.

Once these periods have elapsed, your information is securely destroyed, de-identified, or anonymized.

10. Security Measures and Privacy Incidents

We take reasonable measures, appropriate to the sensitivity of the information, to protect it against loss, theft, and unauthorized access, use, or disclosure, including role-based access limits, encrypted connections, and the use of recognized providers (Stripe, cloud hosting).

We maintain a privacy incident register, in accordance with Law 25. In the event of an incident presenting a risk of serious harm, we will notify the Commission d’accès à l’information du Québec as well as the individuals concerned, as soon as possible.

11. Cookies and Tracking Technologies

Our site uses cookies and similar technologies:

  • Essential cookies — necessary for the site to function (session, authentication, language). They cannot be disabled.
  • Functional cookies — remember your preferences (e.g. chosen language).
  • Analytics cookies — not yet in use (no audience measurement tool is currently connected).
  • Advertising cookies — the Meta Pixel and LinkedIn Insight Tag, used to measure the effectiveness of our ads. They are only set if you consent.

On your first visit, a banner lets you accept or decline non-essential cookies, and you can manage your preferences at any time via the “Manage Cookies” link in the footer. For more details, see our Cookie Policy.

12. Your Rights

In accordance with Law 25, you may at any time:

  • Access the personal information we hold about you.
  • Have inaccurate, incomplete, or outdated information corrected.
  • Withdraw your consent to a use or disclosure of your information, where consent is the basis for it.
  • Request that the dissemination of information about you cease, or that a link be de-indexed, in the cases provided for by law.
  • Request a copy of your information in a structured, commonly used technological format (portability), where the law allows it.
  • File a complaint with us or with the Commission d’accès à l’information du Québec.

To exercise a right, write to us at hello@baroncopack.com. We will respond within the timeframes required by law and may ask you to confirm your identity.

13. Complaints

If you believe your rights have not been respected, you may first write to us at hello@baroncopack.com. You may also file a complaint with the Commission d’accès à l’information du Québec (cai.gouv.qc.ca) or the Office of the Privacy Commissioner of Canada.

14. Minors

Baron Co-Pack is a business-to-business (B2B) platform. It is not directed at minors, and we do not knowingly collect personal information about minors.

15. Changes to This Policy

We may update this policy from time to time, notably to reflect changes to the platform or the law. The date of the last update appears at the bottom of this page. In the event of a significant change, we will notify you through a notice on the site or by email.

16. Contact Us

For any question about this policy or how we handle your personal information, write to hello@baroncopack.com, attention Privacy Officer.

Last updated: September 16, 2026

© Baron Co-Pack