Privacy Policy

This Privacy Policy describes how 1948 Authentic Mediterranean Taste Ltd. ("we," "us," or "the Restaurant") collects, uses, and discloses your personal information when you use our online ordering portal at 1948coldlake.ca. We comply with Alberta's Personal Information Protection Act ("PIPA") and applicable Canadian federal privacy laws.

1. Information We Collect

When you place an order through our portal, we collect:

• Contact information — your name and phone number, required to identify and fulfill your order.
• Order details — items selected, special instructions, tip amount, and order total.
• Payment information — credit card data is collected and processed by our payment processor, Stripe Payments Canada Ltd. We do not store full card numbers on our systems.
• Receipt email — if you provide an email address to receive a Stripe digital receipt, it is transmitted directly to Stripe.
• Technical data — IP address, browser type, and page activity, collected by our hosting provider (Vercel Inc.) for site performance and security monitoring.

2. Why We Collect It

Your personal information is used solely for:

• Fulfilling and preparing your order in the kitchen.
• Contacting you if there is a problem with your order (e.g., out-of-stock items, pickup delays).
• Processing your payment via Stripe.
• Maintaining accounting and tax records as required by the Canada Revenue Agency.
• Monitoring the performance and reliability of our online ordering system.

We do not use your information for marketing, advertising, or any purpose unrelated to fulfilling your order.

3. Third Parties Who Process Your Data

Your information is shared with the following service providers, each of which is contractually bound to handle your data in accordance with applicable privacy laws:

• Stripe Payments Canada Ltd. — processes your credit card payment. Stripe's own privacy policy is available at stripe.com/privacy.
• Google LLC (Firebase Realtime Database) — securely stores your active order data so our kitchen can fulfill it in real time. Data is stored on servers located in the United States. By placing an order, you consent to the cross-border transfer of your personal information.
• Vercel Inc. — provides our website hosting. May collect technical data such as IP address and page views.

We do not sell, rent, or share your personal information with any other third party for any reason.

4. How Long We Keep Your Data

• Active orders: retained for the duration of fulfillment, typically less than one hour.
• Order history: retained for a minimum of six (6) years to satisfy Canada Revenue Agency record-keeping requirements.
• Payment records held by Stripe: retained according to Stripe's own retention schedule, typically seven (7) years.

5. Your Rights Under PIPA

Under Alberta's Personal Information Protection Act, you have the right to:

• Access a copy of the personal information we hold about you.
• Correct any information that is inaccurate or outdated.
• Withdraw consent to our continued use of your information, subject to legal and contractual restrictions.
• Request deletion of your data, subject to our legal obligation to retain order records for tax purposes.

To exercise any of these rights, please call us at the number below.

6. How We Protect Your Information

All connections to our ordering portal are encrypted using HTTPS (TLS). Order data stored in Firebase is protected by access controls that prevent unauthorized public reading of customer details — individual orders are accessible only to the customer who placed the order (using their secret order ID) and to authenticated restaurant staff. Payment data is handled exclusively by Stripe, which is certified PCI DSS Level 1.

7. Cookies and Tracking

Our portal uses minimal browser storage necessary to remember your shopping cart between page loads. We do not use third-party advertising cookies, social media trackers, or behavioural profiling.

8. Children's Information

Our portal is intended for use by individuals aged 18 or older who are able to enter into a binding contract for the purchase of food. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this policy from time to time. The current version is always available at 1948coldlake.ca/privacy. Continued use of our ordering portal after a change constitutes your acceptance of the updated terms.

10. Contact Us

If you have a question, concern, or complaint about our privacy practices, please contact:

• 1948 Authentic Mediterranean Taste Ltd.
• 5121 50 Avenue, Cold Lake, Alberta, T9M 1X2
• Phone: (780) 665-6490

If you are not satisfied with our response, you may also contact the Office of the Information and Privacy Commissioner of Alberta at oipc.ab.ca.

Last updated: May 26, 2026