Privacy Policy

Last Updated: 2 September 2026

This Privacy Policy explains how Yanga Ventures, doing business as Kmusta (“Kmusta”, “we”, “us”, “our”), collects, uses, discloses, and protects your personal information when you visit kmusta.ca or interact with us. By using this Site, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when you:

• Contact us via forms or email (name, email address, phone number, message content)

• Submit an event inquiry (event date, event type, guest count, venue or city, and how you heard about us)

• Join our launch list or subscribe to updates (email address, preferences)

1.2 Automatically Collected Information

When you visit our Site, we automatically collect certain information through cookies and similar technologies:

• Device information: IP address, browser type, operating system, device type

• Usage information: pages visited, time spent on pages, links clicked, referral source

• Location information: general geographic location based on IP address (city/region level, not precise location)

1.3 Information from Third Parties

We may receive information about you from:

• Social media platforms (if you engage with Kmusta content on Facebook or other platforms)

• Google Analytics (aggregate site-usage statistics — only if you accept analytics cookies; see Section 4)

• Meta (that a browser opened one of our order pages — only if you accept; see Section 4.3)

1.4 Referral Link Visits

Members of our referral program each have a personal link (kmusta.ca/r/ followed by their code). When a page at one of those links is opened, we add 1 to a single daily total for that link so the member can see whether anyone is looking. That total is the only thing recorded.

• What is stored: the link's code, the date, and a count. Nothing else.

• What is not stored: no cookie is set, no IP address is kept, no browser or device details, no location, no page you came from, and no record of any individual visit — only the day's running total.

• Who sees it: the member whose link it is, and us. It is a count, so it identifies nobody.

• What it is used for: telling a member their link is working. It is approximate by design, and it is never used to calculate anyone's pay.

This is separate from anything in Section 4 — it involves no cookies and no third party, and it happens whether or not you accept analytics cookies. If you go on to fill in the enquiry form on that page, what you type is covered by Section 1.1.

2. How We Use Your Information

We use your information for the following purposes:

2.1 Service Delivery

• Respond to inquiries and check date availability

• Prepare quotes and event agreements

• Deliver booked services, including event coffee service, setup, and teardown

• Communicate about your booking, logistics, and support

2.2 Site Improvement

• Analyze Site usage to improve content, design, and user experience

• Monitor Site performance and troubleshoot technical issues

• Maintain Site security and prevent abuse

2.3 Marketing and Communications

• Send updates about where the cart will pop up next, seasonal drinks, and launch news (where permitted)

• Send information about events, offers, or services you might find relevant

• Measure and improve the effectiveness of our marketing

2.4 Legal and Compliance

• Comply with applicable laws and regulations

• Enforce our Terms of Service and other agreements

• Protect our rights, property, and safety, and those of our users and third parties

3. Legal Basis for Processing (GDPR)

If you are located in the EEA, UK, or similar jurisdictions, we process your personal information based on:

• Consent: For marketing communications and non-essential cookies

• Contractual necessity: To respond to your requests or perform a contract with you

• Legitimate interests: To operate and improve our Site, market our services to business users, and protect our business (balanced against your privacy rights)

• Legal obligation: To comply with laws and regulations

4. Cookies and Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help us recognize your device, remember preferences, and understand Site usage.

4.2 Types of Cookies We Use

Cookie Type

Purpose

Typical Duration

Essential

Core functionality and security

Session / short

Analytics (Google Analytics 4 — only with your consent)

Usage analytics and performance

Up to 24 mo

Marketing (if used)

Track engagement with campaigns

Up to 12 mo

Preference

Remember language and other choices

Up to 12 mo

4.3 Third-Party Cookies

With your consent, we use Google Analytics 4 (provided by Google LLC) to understand how visitors use the Site. If you accept analytics cookies, Google Analytics sets cookies (such as _ga and _ga_*) and collects the usage information described in Section 1.2. We do not use Google Analytics for advertising, and no analytics code loads — and no data is sent to Google — unless you accept. Learn more in Google's Privacy Policy, or install the Google Analytics opt-out browser add-on.

On our order pages only (kmusta.ca/order/ and the QR links under it, such as kmusta.ca/order/market), and again only with your consent, we use the Meta pixel (provided by Meta Platforms Ireland Limited) so that we can show Kmusta ads to people who have visited our order page, and reach others like them. If you accept, the pixel sets cookies (such as _fbp) and tells Meta that a browser opened that page, together with the technical information Meta receives with any such request: IP address, browser and device details, and the page address. Nothing about your order is sent — not your name, your drink, your note to the barista, the amount, or your ticket number. No pixel code loads and no data reaches Meta unless you accept. Learn more in Meta's Privacy Policy, and control how ads are personalised to you in Meta's Ad Preferences.

4.4 Cookie Consent and Management

• On your first visit, a cookie banner asks whether we may use analytics cookies. No analytics cookies are set unless you choose Accept; choosing No thanks keeps the Site fully functional with no analytics at all.

• Your choice is remembered in your browser's local storage. To change it, use the link below or clear the Site's browsing data, and the banner will ask again.

• Manage cookie preferences (reopens the consent banner)

• You can also manage cookies using your browser settings. Disabling cookies may affect Site functionality.

4.5 Do Not Track

Our Site does not currently respond to “Do Not Track” signals. You can control tracking through cookie settings and browser tools.

5. How We Share Your Information

We do not sell or rent your personal information. We may share it in these situations:

5.1 Service Providers

With vendors that help us operate the Site and deliver services, such as:

• Hosting providers (Hostinger, which hosts kmusta.ca)

• Email delivery (Resend, for inquiry replies and our email list)

• Analytics (Google LLC, via Google Analytics 4 — only if you accept analytics cookies)

• Advertising (Meta Platforms Ireland Limited, via the Meta pixel on our order pages — only if you accept)

• Payment processors, if applicable

These providers are bound by confidentiality and data protection obligations.

5.2 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to this Privacy Policy.

5.3 Legal Obligations and Protection

We may disclose information where required by law, regulation, legal process, or to protect our rights, property, or safety.

5.4 With Your Consent

We may share your information with third parties when you ask us to or explicitly consent.

6. Data Retention

We retain personal information only as long as necessary for the purposes described above or as required by law:

• Contact and inquiry data: up to 2 years after last contact

• Booking and event records: duration of the engagement plus up to 7 years (for legal and tax reasons)

• Marketing data: until you unsubscribe or request deletion

• Analytics data: retained in Google Analytics for up to 14 months, then deleted automatically

After retention periods, data is deleted or anonymized.

7. Your Privacy Rights

Your rights depend on your location.

7.1 EEA/UK (GDPR)

You may:

• Request access to your personal information

• Request correction of inaccurate data

• Request deletion (“right to be forgotten”)

• Request restriction of processing

• Object to processing based on legitimate interests or for direct marketing

• Request data portability

• Withdraw consent where processing is based on consent

7.2 California (CCPA/CPRA)

You may:

• Request to know what personal information we have collected about you in the past 12 months

• Request deletion of your personal information (subject to legal exceptions)

• Opt out of sale or sharing of personal information (we do not sell personal information)

• Not be discriminated against for exercising your rights

7.3 Canada (PIPEDA)

You may:

• Request access to personal information we hold about you

• Request correction of inaccurate information

• Withdraw consent to collection, use, or disclosure (subject to legal/contractual restrictions)

7.4 How to Exercise Your Rights

To submit a request, email:

Email: hello@kmusta.ca Subject line: “Privacy Request – [Your Region]”

Include your name, contact details, and what you are requesting. We may ask for additional information to verify your identity. We will respond within the time required by applicable law.

8. Data Security

We use commercially reasonable technical and organizational measures to protect your information, such as:

• Encryption in transit (HTTPS/TLS)

• Access controls and least-privilege principles

• Secure storage and regular backups (where applicable)

• Internal practices for handling and minimizing personal data
  
  

No method of transmission or storage is completely secure. You use the Site at your own risk.

9. International Data Transfers

Kmusta is based in Canada and uses service providers in other countries, including the United States and potentially the European Union.

If you access the Site from outside Canada, your information may be processed in those jurisdictions. Where required (for example, under GDPR), we use appropriate safeguards such as standard contractual clauses.

10. Children’s Privacy

Our Site is intended for adults planning and booking events and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Third-Party Links

The Site may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We are not responsible for their content, policies, or practices. Review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Post the updated version on this page, and

• Update the “Last Updated” date at the top

Material changes may also be communicated via prominent notice on the Site or email, where appropriate. Your continued use of the Site after changes take effect means you accept the updated policy.

13. Contact Us

If you have questions, concerns, or privacy requests, contact:

Yanga Ventures, doing business as Kmusta

Email: hello@kmusta.ca

Website: kmusta.ca

If you are in the EEA/UK and are not satisfied with our response, you may lodge a complaint with your local data protection authority.