Privacy Policy

At Salvatore Pizza, we are deeply committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website salvatore-ca.com, place an order with us, or otherwise interact with our services. Please read this policy carefully. If you disagree with the terms of this Privacy Policy, please discontinue your use of our website and services.

We operate in accordance with Canada's federal and provincial privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA), as well as applicable provincial privacy statutes. We also recognize and align our practices with international standards established by the General Data Protection Regulation (GDPR) as a global benchmark for responsible data governance.

1. Who We Are

Salvatore Pizza is a food services business operating in Canada. For the purposes of this Privacy Policy, Salvatore Pizza acts as the data controller responsible for your personal information.

If you have any questions, concerns, or requests related to this Privacy Policy, you may contact us at any time using the contact details above or those provided in Section 14 of this document.

2. Information We Collect

We collect several types of information from and about users of our website and services. The categories of personal information we may collect are outlined below.

2.1 Personal Identification Information

When you place an order, create an account, subscribe to our newsletter, or contact us, we may collect personally identifiable information such as:

• Full name
• Email address
• Phone number
• Billing and delivery address (including street address, city, province, and postal code)
• Payment information (processed securely through third-party payment processors; we do not store full card details)
• Account login credentials (username and encrypted password)
• Order history and preferences
• Dietary preferences or restrictions you voluntarily provide

2.2 Usage and Behavioral Data

When you navigate our website, we may automatically collect certain usage data, including:

• Pages visited and time spent on each page
• Links and buttons clicked
• Search queries entered on our website
• Items added to or removed from the cart
• Time and date of your visits
• Referring URLs (the page that directed you to our website)
• Session duration and frequency of visits

2.3 Device and Technical Information

We automatically collect certain technical information about the device and connection you use to access our website, including:

• IP address
• Browser type and version
• Operating system and platform
• Device identifiers
• Screen resolution and display settings
• Language preferences
• Geolocation data (approximate location derived from IP address or, if permitted, GPS-level location for delivery purposes)

2.4 Cookie and Tracking Data

We use cookies, pixel tags, web beacons, and similar tracking technologies to collect information about your interactions with our website. For more detailed information, please refer to Section 10 of this Privacy Policy and our dedicated Cookie Policy available on our website.

2.5 Communications Data

If you contact us via email, our online contact form, or by phone, we may collect the contents of your messages, your contact details, and records of our communications with you for the purpose of responding to your inquiries and improving our services.

2.6 Information You Provide Voluntarily

In some cases, you may provide additional information voluntarily, such as when you participate in surveys, promotions, competitions, or leave reviews and ratings for our products. We collect this information only when you choose to provide it.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. Specifically, your information may be used in the following ways:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including delivery arrangements
• Managing your account and maintaining account security
• Processing payments and issuing receipts or invoices
• Sending order confirmations, delivery updates, and transactional notifications
• Responding to your inquiries, complaints, and customer support requests
• Providing accurate delivery estimates based on your location

3.2 Analytics and Service Improvement

• Analyzing website traffic and usage patterns to improve site functionality and user experience
• Conducting internal research and data analysis to better understand customer preferences
• Identifying and resolving technical issues or errors on our website
• Evaluating the effectiveness of our menus, promotions, and offerings
• Developing new products and services based on customer feedback and behavior

3.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, special offers, and discounts, where you have consented or where we have a legitimate interest to do so
• Personalizing your experience on our website and displaying relevant content and promotions
• Administering contests, promotions, surveys, and loyalty programs
• Retargeting advertising campaigns based on your browsing behavior (subject to your cookie preferences)

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send, or by contacting us directly at [email protected].

3.4 Legal Compliance and Safety

• Complying with applicable laws, regulations, and legal obligations under Canadian federal and provincial law
• Protecting our legal rights and interests, and those of our customers and partners
• Preventing, detecting, and investigating fraud, security breaches, and other illegal or unauthorized activities
• Enforcing our Terms and Conditions and other agreements

4. Legal Basis for Processing Your Information

Under PIPEDA and in alignment with GDPR principles, we rely on the following legal bases for processing your personal information:

• Consent: Where you have given us clear consent to process your data for a specific purpose, such as subscribing to marketing emails or enabling certain cookies.
• Contractual Necessity: Where processing is necessary to fulfill our contractual obligations to you, such as processing your food order and arranging delivery.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as fraud prevention, improving our website, and direct marketing (where balanced against your rights).
• Legal Obligation: Where we are required to process your data to comply with a legal or regulatory obligation, such as tax reporting requirements under Canadian tax law.

5. Sharing Your Information with Third Parties

We do not sell, trade, or rent your personal information to third parties. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We work with carefully selected third-party service providers who assist us in operating our website and delivering our services. These providers may include:

• Payment processors (e.g., Stripe, PayPal, or similar) who handle payment transactions securely
• Delivery and logistics partners who fulfill your food delivery orders
• Cloud hosting and IT infrastructure providers who store and manage our website and data
• Email marketing platforms used to send promotional and transactional communications
• Analytics providers (e.g., Google Analytics) that help us understand website usage
• Customer support software providers that facilitate our communications with you

All third-party service providers are required to maintain the confidentiality of your information and are prohibited from using it for any purpose other than to perform services on our behalf. We enter into appropriate data processing agreements with all such parties.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we are required to do so by law or in response to valid legal requests by public authorities, including:

• Compliance with a subpoena, court order, or other legal process
• Requests from government authorities or law enforcement agencies in Canada
• Protecting and defending our rights or property
• Preventing or investigating possible wrongdoing in connection with our services
• Protecting the personal safety of our users or the public

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you via email and/or a prominent notice on our website prior to your information being transferred and becoming subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other business purposes. This type of data sharing does not constitute a disclosure of personal information.

6. Data Security

We take the security of your personal information very seriously and have implemented a range of technical, administrative, and physical security measures designed to protect your information from unauthorized access, use, alteration, disclosure, or destruction.

6.1 Security Measures We Employ

• Encryption: All data transmitted between your browser and our website is protected using industry-standard SSL/TLS encryption (HTTPS protocol).
• Secure Payment Processing: Payment card information is processed through PCI DSS-compliant payment processors. We do not store full credit card numbers on our servers.
• Access Controls: Access to personal information is restricted to authorized personnel who require it to perform their job functions. All staff receive training on data privacy and security practices.
• Firewalls and Intrusion Detection: Our systems are protected by firewalls and regular security monitoring.
• Password Protection: User account passwords are stored using strong cryptographic hashing algorithms.
• Regular Security Audits: We conduct periodic reviews of our security practices and vulnerabilities.

6.2 Data Breach Response

In the event of a data breach that poses a real risk of significant harm to individuals, we will notify affected individuals and the Office of the Privacy Commissioner of Canada (OPC) as required under PIPEDA's breach reporting requirements. We maintain an internal breach response plan to ensure prompt and effective action in such circumstances.

7. Your Privacy Rights

As a resident of Canada, you have specific rights regarding your personal information under PIPEDA and applicable provincial privacy laws. We are committed to honoring these rights.

7.1 Right of Access

You have the right to request access to the personal information we hold about you. We will provide you with a copy of your personal information within 30 days of receiving a verifiable request, free of charge (subject to any exceptions permitted under applicable law).

7.2 Right to Correction

If you believe that any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. You may also update some of your information directly through your account settings on our website.

7.3 Right to Deletion (Right to be Forgotten)

You may request the deletion of your personal information from our records. We will honor such requests to the extent permitted by law. Please note that we may be required to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements.

7.4 Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing your personal information, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to your withdrawal.

7.5 Right to Data Portability

Where technically feasible, you may request a copy of your personal information in a structured, commonly used, and machine-readable format. This right applies to information you have provided to us directly and that we process electronically.

7.6 Right to Object to Marketing

You have the right to object to the processing of your personal information for direct marketing purposes at any time. You can exercise this right by clicking "unsubscribe" in any marketing email or by contacting us directly.

7.7 How to Exercise Your Rights

To exercise any of the rights described above, please contact our Privacy Officer at:

• Email: [email protected]
• Website: salvatore-ca.com

We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 30 days, in which case we will notify you of the extension and the reason for it. We may require you to verify your identity before processing your request.

8. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver relevant content and advertisements. Cookies are small text files that are placed on your device when you visit our website.

8.1 Types of Cookies We Use

• Essential Cookies: These are strictly necessary for the website to function and cannot be switched off. They are usually set in response to actions you take, such as setting privacy preferences or filling in forms.
• Performance and Analytics Cookies: These cookies allow us to count visits and traffic sources to measure and improve website performance. They help us understand which pages are most popular and how visitors navigate the site.
• Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences, saved cart items, and delivery address.
• Marketing and Targeting Cookies: These cookies may be set through our site by our advertising partners to build a profile of your interests and display relevant advertisements on other websites.

You can manage your cookie preferences through our cookie consent tool available on our website, or through your browser settings. Please be aware that disabling certain cookies may affect the functionality of our website.

For complete information about the cookies we use, their purposes, and how to manage them, please refer to our full Cookie Policy.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, we will securely delete or anonymize your personal information in accordance with our data disposal procedures. If you request deletion of your account, we will remove your personal profile information promptly, subject to any legal retention obligations.

10. Children's Privacy

Salvatore Pizza does not knowingly collect, solicit, or maintain personal information from individuals under the age of 18. Our website, services, and online ordering platform are not directed to children or minors. If you are under 18 years of age, please do not use our website or provide any personal information to us.

If we become aware that we have inadvertently collected personal information from a person under the age of 18 without verifiable parental consent, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

We encourage parents and guardians to monitor and guide their children's online activities and to ensure that children do not use our services or website without appropriate supervision.

11. International Data Transfers

Salvatore Pizza is based in Canada and primarily processes personal information within Canada. However, some of our third-party service providers may be located in other countries, including the United States and other jurisdictions. As a result, your personal information may be transferred to, stored, and processed outside of Canada.

When we transfer personal information internationally, we take steps to ensure that your data receives an adequate level of protection consistent with Canadian privacy law. These steps may include:

• Transferring data only to countries with privacy laws that provide comparable protection to Canada's PIPEDA
• Entering into data processing agreements with third-party recipients that incorporate appropriate safeguards
• Using service providers that have certified compliance with internationally recognized privacy frameworks
• Implementing contractual clauses that require recipients to protect personal information to a standard consistent with Canadian law

Please be aware that when your personal information is transferred to another country, it may be subject to the laws of that country, including the legal right of governmental authorities in that jurisdiction to access personal information. By using our services, you acknowledge and consent to such transfers as may be necessary for the provision of our services.

If you would like more information about how we protect your personal information in connection with international transfers, please contact us at [email protected].

12. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, and services that are not owned or controlled by Salvatore Pizza. These may include social media platforms (such as Facebook, Instagram, and Twitter/X), payment gateways, delivery tracking platforms, and review sites.

This Privacy Policy applies solely to information collected through our own website and services. We are not responsible for the privacy practices of third-party websites or services. We strongly encourage you to read the privacy policies of every third-party website you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

13. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or applicable regulations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Post a prominent notice on our website homepage
• Send an email notification to registered users where the changes are significant

Your continued use of our website and services after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

If you disagree with any changes to this Privacy Policy, you should stop using our services and, if applicable, close your account with us.

14. Contact Us — Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy, the handling of your personal information, or your privacy rights, please do not hesitate to contact our Privacy Officer:

We are committed to addressing your privacy concerns promptly and professionally. We will acknowledge receipt of your inquiry within 5 business days and provide a substantive response within 30 calendar days.

15. Filing a Complaint with the Data Protection Authority

If you are not satisfied with our response to your privacy concern or believe that we are processing your personal information in a manner that is inconsistent with applicable Canadian privacy law, you have the right to file a complaint with Canada's federal privacy regulator.

Residents of certain Canadian provinces may also have the right to file complaints with provincial privacy commissioners, depending on their province of residence and the nature of the complaint. Applicable provincial regulators include:

• Alberta: Office of the Information and Privacy Commissioner of Alberta — www.oipc.ab.ca
• British Columbia: Office of the Information and Privacy Commissioner for British Columbia — www.oipc.bc.ca
• Quebec: Commission d'accès à l'information du Québec — www.cai.gouv.qc.ca

We strongly encourage you to reach out to us directly before filing a complaint with a regulatory authority. We are committed to resolving any privacy concerns fairly and efficiently.

16. Governing Law

This Privacy Policy is governed by and shall be construed in accordance with the laws of Canada, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and any applicable provincial privacy legislation. Any disputes arising under or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Canada.