Privacy Policy
This policy explains, in plain terms, what personal information Café Sel collects when you use this website and our online ordering service, why, who we share it with, how long we keep it, how we protect it and how to exercise your rights. It is published under Québec’s Act respecting the protection of personal information in the private sector (as amended by “Law 25”) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Who we are
This website and the online ordering service are operated by Le Ciao Gourmand inc., doing business as Café Sel (NEQ 1181016537), 6600 Trans-Canada Highway, Suite 120, Pointe-Claire, QC H9R 4S2. Phone: 514 603-4286. Email: cafe.sel@outlook.com.
This policy covers the website, online ordering for pickup, and the related emails. It does not cover third-party sites we link to (for example Google Maps, Instagram or Facebook) or Stripe’s payment page, which have their own policies.
2. Person in charge of the protection of personal information
Under section 3.1 of the Québec Act, the person in charge of the protection of personal information for the business is:
Le Gao, Owner and Person in Charge of the Protection of Personal Information
Email: cafe.sel@outlook.com
Phone: 514 603-4286
Address: 6600 Trans-Canada Highway, Suite 120, Pointe-Claire, QC H9R 4S2
Contact this person with any question about this policy, to exercise your rights, or to make a complaint.
3. Information we collect and why
We only collect the information needed for the purposes below. You give it to us yourself when you place an order; we do not buy it from any other source.
| Information | Purposes | Basis |
|---|---|---|
| First name, last name, email address, phone number | Prepare your order, recognize you at pickup, reach you about this order, send your receipt. | Necessary to conclude and perform the sales contract you request. |
| Items ordered, options, pickup date and time, amounts, taxes, language chosen | Fulfil the order; keep our accounting and tax records. | Contract; legal obligations (tax laws). |
| Order notes (optional), which may contain health information such as an allergy | Only to prepare your order according to your request. | Your express consent: you choose to write them after the notice shown next to the field. This is sensitive information; we erase it quickly (see section 7). |
| Acceptance of the Terms of Sale: version, date, time and language | Prove the distance contract. | Legal obligation (Consumer Protection Act). |
| Stripe’s payment confirmation and payment identifier (never your card number) | Know that the order is paid; reconcile our accounts; handle a refund or a dispute. | Contract; legal obligations. |
| Technical data: IP address, browser type, pages and time of requests | Run and secure the website; prevent fraud and abuse. | Serious and legitimate security interest. Our application records the IP address only for security events (admin sign-ins, blocked or excessive requests); it also keeps it briefly in memory, without recording it, to limit the number of unpaid orders per visitor. Our hosting provider keeps its own connection logs. |
Your payment card details are entered directly on Stripe’s secure page. We never receive, see or store them.
We do not use your information for marketing: no newsletter, no promotional email. The only emails we send you are about your order.
4. Cookies, local storage and tracking tools
- No tracking tools. The website uses no audience analytics, no advertising, no social-media pixel and no technology that identifies, locates or profiles you.
- No third-party content. Fonts are hosted on our own server: your browser does not contact Google or any other third party when displaying our pages. Links to Google Maps, Instagram and Facebook send nothing to those services until you click them.
- Your browser’s local storage. Your cart (items, quantities, options) and your chosen language are saved in your browser’s local storage, on your device, so the cart survives navigation. This data contains no personal information and is only sent to us when you place an order. The cart is emptied once payment is confirmed; you can erase everything at any time by clearing the site’s data in your browser.
- One cookie, strictly necessary, keeps the site administrator signed in. Customers receive none.
Because all of this is strictly necessary for the service you ask for, no consent banner is required. If we ever added an analytics or tracking tool, it would be off by default and only turned on with your consent.
5. Sharing with third parties
We never sell, rent or trade your personal information. We share it only with the following service providers, to the extent their job requires, and they are bound by contract to protect it and to use it only to provide that service to us:
- Stripe (payment processing): your email address (for your Stripe receipt), the amount, the description of the items and our order number. You give your card details directly to Stripe. Stripe applies its own privacy policy.
- Google LLC (Gmail) (sending email): your name, email address and the content of your receipt, plus your phone number in the order notice we receive; order notes are never sent by email.
- Oracle Corporation Canada Inc. (Oracle Cloud Infrastructure) (hosting the website and database, region: Montréal, Canada): all order data, stored on its servers.
We may also disclose information when the law requires or permits it, for example to tax authorities during an audit, or in response to a court order.
6. Transfers outside Québec
Stripe, our email provider and our hosting provider may store or process your information outside Québec, including elsewhere in Canada and in the United States. As section 17 of the Québec Act requires, before communicating information outside Québec we assess the privacy-related factors: the sensitivity of the information, the purposes for which it will be used, the protection measures (including contractual ones) that will apply, and the legal framework of the place where it will be communicated. We only proceed if the assessment shows the information will receive adequate protection, and the communication is covered by a written agreement. Health information that order notes may contain is not communicated to any of these providers other than by being stored at our hosting provider.
7. How long we keep information
Once the purpose for which information was collected has been achieved, we destroy or de-identify it. Our system applies these periods automatically, except for emails kept in our mailbox, which we delete ourselves:
| Information | Period |
|---|---|
| Order started but never paid (including name, email, phone, notes) | Cancelled 35 minutes after it was created if not paid, then deleted entirely after 24 hours. |
| Order notes | Erased 30 days after the order. |
| Name, email address and phone number on a paid order | Erased 90 days after the order (the order is then de-identified). |
| Emails about your order in our mailbox (new-order notice received by the café, copy of your receipt) | Deleted no later than 90 days after the order. They never contain your order notes. |
| Transaction record, with nothing that directly identifies you: items, amounts, taxes, dates, Stripe payment identifier | 7 years, then deleted. Tax laws require records to be kept six years after the end of the tax year they relate to. |
| Order subject to a payment dispute | Kept until the dispute is closed, then subject to the periods above. |
| Record of our responses to access or erasure requests (it does not contain your email address in clear) | 3 years. |
| Encrypted database backups | 30 days at most; erased data therefore also disappears from backups within that time. |
| Our hosting provider’s connection logs | For the period set by Oracle Corporation Canada Inc. (Oracle Cloud Infrastructure). |
| Our email provider’s sending logs | For the period set by Google LLC (Gmail). |
| Cart and language in your browser | On your device only, until the order is paid (cart) or until you clear the site’s data. |
8. Your rights and how to exercise them
At any time, you may:
- access the personal information we hold about you and get a copy, including, on request, in a structured, commonly used technological format (portability);
- have inaccurate, incomplete or equivocal information corrected;
- withdraw your consent to the use of information, for example an order note, or ask for your information to be erased, subject to what the law requires us to keep (de-identified tax records);
- ask us to stop disseminating information about you or to de-index a hyperlink attached to your name (we do not disseminate any information about our customers);
- be told when an automated decision is made about you and ask for it to be reviewed (see section 9).
To exercise a right, write to the person in charge (section 2), giving the email address used for your orders. To protect your information, we will verify your identity before acting, for example by replying to that address. We answer in writing within 30 days of receiving the request, free of charge. If we refuse, in whole or in part, we will explain why and tell you about your recourse before the Commission d’accès à l’information, which must be exercised within 30 days of our decision.
9. Automated decisions and artificial intelligence
Café Sel makes no decision about you based exclusively on automated processing of your personal information. Whether an order is accepted depends on fixed rules that are not about you (opening hours, room left in a pickup slot, item availability).
Stripe, our payment provider, does use automated fraud-prevention tools that can decline a payment. Stripe makes those decisions and we have no access to them. If a payment is declined, contact us: we will explain the options (another card, paying in store) and can direct you to Stripe for a review.
We do not use your information to train artificial-intelligence systems. See our statement on the use of AI.
10. Security and confidentiality incidents
We take reasonable security measures, proportionate to the sensitivity of the information:
- encrypted connection (HTTPS) required across the whole site;
- payments processed by Stripe, a PCI DSS Level 1 certified provider; no card data on our side;
- access to orders limited to the owner, protected by a password and two-factor authentication, with automatic sign-out;
- technical protections against common attacks (strict content security policy, request-forgery protection, rate limits, validation of all data received);
- database reachable only by the server, encrypted backups, automatic erasure under the schedule in section 7;
- technical logs that contain neither customers’ names, contact details nor order contents.
If a confidentiality incident presents a risk of serious injury, we will promptly notify the Commission d’accès à l’information and the people concerned, and take steps to reduce the risk. We keep a register of all confidentiality incidents.
Found a vulnerability on this site? Email cafe.sel@outlook.com (see also security.txt).
11. People under 14
The online ordering service is not intended for people under 14. We do not knowingly collect their information without the consent of a parent or guardian. If you are under 14, ask a parent to place the order.
12. Our governance policies (summary)
As section 3.2 of the Québec Act requires, we have adopted policies and practices governing how we handle personal information. In summary:
- Roles and responsibilities. The owner is the person in charge of the protection of personal information (section 2). Only the owner, and anyone the owner expressly authorizes to prepare orders, can access customer information, and only the information their role requires.
- Information life cycle. Collection limited to what is necessary (section 3); retention and destruction under the schedule in section 7, applied automatically.
- Privacy impact assessments. Carried out before any information-system project involving personal information and before any communication outside Québec (section 6).
- Requests and complaints. Handled by the person in charge, in writing, within 30 days (sections 8 and 13).
- Confidentiality incidents. Response procedure, incident register, and notice to the Commission d’accès à l’information and the people concerned when there is a risk of serious injury (section 10).
- Service providers. Chosen for their security measures and bound by contract (section 5).
- Awareness. Anyone authorized to view orders is informed of these rules and of the confidentiality of order notes.
The full text of our governance policies is available on request from the person in charge.
13. Complaints
If you are not satisfied with how we handle your personal information, please write to the person in charge first (section 2); we will answer in writing within 30 days.
You may also contact the Commission d’accès à l’information du Québec: www.cai.gouv.qc.ca, 1 888 528-7741 (toll-free), 514 873-4196 (Montréal), 418 528-7741 (Québec City). Depending on the complaint, the Office of the Privacy Commissioner of Canada may also have jurisdiction: www.priv.gc.ca, 1 800 282-1376.
14. Changes and history
We may change this policy. The version in effect is always published on this page with its date; a significant change is also announced on the website before it takes effect.
| Version | Changes |
|---|---|
| 2026-10-05 | First published version. |