Tandoor et grille
This page explains what personal data we collect when you visit tandoorandgrill.ca or place an order, why we collect it, who sees it and how you can ask us to remove it. We follow Canadian data protection rules. If something here is not clear, write to us and we will explain.
By using this site, you confirm that you have read this page. If you do not agree with it, please do not place an order.
When you place an order, we ask for your name, address, phone number and email. We need these to prepare the food, send it to you and confirm that everything went through. We also give your name, phone and address to the driver, because otherwise they cannot deliver. Nothing more than that is shared with the driver.
When you create an account, we also store a password. We do not see it in plain text, it is hashed on our side. Keep it to yourself. If someone else uses your account because you gave them the password, that is on you, and we cannot be responsible for what they order.
If you leave a review or a comment, we store that too, because it is meant to be shown to other customers. If you later want it removed, write to us and we will take it down.
Like almost every website, our server logs some information every time a page is loaded. Nothing personal, just standard technical data. Here is what is stored:
We use this only to keep the site running, spot abuse and fix errors. We do not sell it, we do not hand it to advertisers, we do not build profiles from it.
After you order, we send you a confirmation email and, if something changes, a second email. The restaurant also sends its own confirmation. If you use the mobile app, we may send a push notification about the status of your order. That is it for the ordering process.
If you agreed to receive newsletters, we may send you occasional updates about promotions from restaurants. If you change your mind, there is an unsubscribe link at the bottom of every newsletter. You can also write to us at email and we will remove you manually.
Cookies are small text files that the site saves in your browser. We use them to keep you logged in, to remember your cart if you reload a page, and to understand which pages people actually use. They do not contain your name or your address, just a random identifier.
You can block cookies in your browser settings. Some parts of the site will stop working if you do, especially the checkout and the account area.
Some parts of the site load content or scripts from other companies. When they load, those companies see your IP address, because that is how the internet works. We do not pass them your name, your address or your order details. Here is who we use and what for.
Google Maps for the map on the contact page. Google reCAPTCHA to block bots on forms. Google Analytics to see which pages are visited and how people move around the site. Google collects this data under its own privacy policy at google.com/policies/privacy.
Social media plug-ins for Facebook, Instagram, YouTube and Twitter. If you click a share button, the network you picked gets the information that you visited our page. If you are logged into that network at the same time, they can link the visit to your account. We do not control what they do with it. Their privacy policies are at facebook.com/policy.php, help.instagram.com, youtube.com and twitter.com/en/privacy.
We use Google Analytics to count visits and see which pages people spend time on. It sets a cookie and sends the data to Google servers, mostly in the United States. The IP address is shortened before it is stored, so it cannot be tied back to a single person.
If you do not want to be counted, you can install the Google Analytics opt-out plugin from tools.google.com/dlpage/gaoptout. You can also block the cookie in your browser. The site still works, we just do not see you in the reports.
The restaurant you ordered from sees your name, phone and address, because they need to cook and deliver. The driver sees your name, phone and address, because they need to find you. Our hosting provider stores the data on their servers. That is the full list. We do not sell data to advertisers, we do not share it with marketing companies, and we do not hand it to anyone else.
You can ask us at any time what data we have about you, why we have it, where it came from and who we shared it with. You can also ask us to delete it, correct it, or send you a copy in a common format. Write to email and we will handle it within a reasonable delay.
If you think we handled your data badly, you can also contact the Office of the Privacy Commissioner of Canada. We would rather you write to us first, so we can fix it, but it is your right.
If we change how we handle data, we will update this page. The date of the last change will appear at the top. Big changes will also be announced on the home page, so you are not surprised.
