Privacy Policy

1. Information We Collect

We collect the following categories of personal information, only as needed to take and fulfill your orders and run our business:

• Account information — if you create an account: your name, email address, phone number, a password (stored only as a securely hashed value, never in plain text), and an optional saved delivery address and delivery instructions.
• Order information — the items you order, order totals, pickup or delivery selection, scheduled time, tips, promo codes used, and any special instructions or notes you provide.
• Contact & delivery details — the name, phone number, email, and (for delivery orders) the delivery address you provide at checkout.
• Payment information — when you pay online, your card and wallet details are entered directly into our payment processor (Stripe) and are processed by Stripe. We do not receive or store your full card number. We only receive limited, non-sensitive confirmation details (such as a payment status and the last four digits or card brand) needed to confirm your order.
• Marketing preferences — whether you have opted in to receive marketing emails, and the date you opted in.
• Loyalty / rewards — information related to your participation in our loyalty rewards program, such as points earned and redeemed.
• Usage & device information — if you choose “Allow analytics” on our website, Google Analytics 4 and similar technologies collect information such as pages viewed, actions taken, approximate location, device and browser type, and referring pages. See the “Cookies and Analytics” section below.

2. How We Use Your Information

We use your personal information to:

• Take, process, prepare, and fulfill your pickup and delivery orders;
• Process payments and prevent fraud;
• Arrange delivery through our courier partner and keep you updated on order status;
• Create and manage your account, saved address, and loyalty rewards;
• Send you transactional messages (order confirmations, receipts, and delivery updates);
• Send you marketing emails about deals and rewards, but only if you have opted in (see “Email Marketing” below);
• Understand and improve how our Service is used; and
• Comply with our legal and tax obligations.

We collect, use, and disclose your personal information with your consent, or as otherwise permitted or required by law. By placing an order you consent to the uses described in this policy.

3. How We Share Your Information

We do not sell your personal information. We share it only with trusted third-party service providers who help us operate the Service, and only to the extent needed for them to perform their function:

• Stripe — payment processing for online card and wallet payments.
• Uber Direct — for delivery orders, we share your name, phone number, and delivery address with our courier partner so your order can be delivered and so you can receive live delivery tracking.
• Google Analytics 4 — website usage analytics, only after you explicitly allow analytics. Google Analytics is not loaded inside our native mobile app.
• Email provider (Resend / SendGrid) — to send transactional and (where you have opted in) marketing emails.
• Supabase — secure cloud database and hosting for your account and order records.

We may also disclose personal information if required to do so by law, to enforce our Terms, or to protect the rights, property, or safety of our customers, our business, or others. Some of these providers may store or process data outside Canada (for example, in the United States); where that occurs, the information may be subject to the laws of those jurisdictions.

4. Cookies and Analytics

On our website, Google Analytics 4 (property ID G-CX3D40VMM3) is loaded only after you explicitly choose “Allow analytics” in the analytics notice. If you decline, Google Analytics is not loaded. It is never loaded inside our native mobile app. You can change your choice by clearing this site’s stored data, control or block cookies through your browser settings, and use Google’s opt-out browser add-on. Essential first-party login and checkout cookies continue to work regardless of your analytics choice.

5. Email Marketing (CASL)

We send marketing and promotional emails only to customers who have given express consent by opting in — for example, by checking the marketing opt-in box at sign-up or in your profile. This is consistent with Canada’s Anti-Spam Legislation (CASL). Every marketing email includes an unsubscribe link, and you can withdraw your consent at any time by using that link, unchecking the marketing option in your profile, or emailing us at support@thepizzahouses.ca. Withdrawing marketing consent does not stop transactional messages such as order confirmations and receipts.

6. Your Privacy Rights (PIPEDA)

Under PIPEDA, you have the right to:

• Access the personal information we hold about you;
• Correct personal information that is inaccurate or incomplete;
• Withdraw your consent to our collection, use, or disclosure of your information (subject to legal or contractual limits); and
• Ask questions or make a complaint about how we handle your information.

To exercise any of these rights, email us at support@thepizzahouses.ca. We will respond within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

7. Data Retention

We keep your personal information only as long as needed for the purposes described in this policy or as required by law — for example, we retain order and transaction records for the period required for tax, accounting, and legal purposes. Account information is kept while your account is active. When information is no longer needed, we securely delete or anonymize it.

8. Security

We use reasonable administrative, technical, and physical safeguards to protect your personal information. Passwords are stored only as securely hashed values, card payments are handled by Stripe (a PCI-DSS compliant processor), and account and order data are stored in a restricted database that is only accessible to our server-side systems. No method of transmission or storage is completely secure, but we work to protect your information and to address any issues promptly.

9. Children’s Privacy

Our Service is intended for a general audience and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@thepizzahouses.ca and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Significant changes may be communicated through the Service. Your continued use of the Service after an update means you accept the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact:

The Pizza House
Grimsby, Ontario, Canada
Email: support@thepizzahouses.ca