# NIGHT OFF DELIVERY — PRIVACY POLICY **Last updated:** 05 October 2026 ## About this policy Night Off Delivery is committed to protecting personal information and handling it responsibly under applicable Canadian privacy laws, including the *Personal Information Protection and Electronic Documents Act* (“PIPEDA”), where applicable. Personal information means information about an identifiable individual. This policy explains how we collect, use, disclose, protect, and retain personal information in connection with our website, orders, deliveries, and customer communications. Our Privacy Officer is responsible for our privacy practices. Their contact details appear below. ## Information we collect and why We limit collection to personal information reasonably necessary for the purposes identified to you. Depending on how you interact with us, this may include: - **Contact and delivery information:** your name, email address, telephone number, delivery address, and delivery instructions, to communicate with you and complete deliveries. - **Order and transaction information:** items ordered, order history, transaction amounts, and payment status, to fulfill orders, resolve payment issues, and maintain required business records. - **Customer communications:** inquiries, feedback, complaints, and correspondence, to respond to you and resolve service issues. - **Website activity information:** browser, device, and interaction information collected through optional analytics, as explained below. We identify any additional collection purposes before or when we collect the information. ## How we obtain information We collect personal information directly from you when you place an order, contact us, or otherwise use our services. When an order is placed through a participating restaurant, we may receive information needed to arrange and complete the delivery. We require an appropriate legal basis for receiving and using that information, including valid consent where required. Receiving information from another business does not give us permission to use it for unrelated purposes. ## Consent and your choices We explain what information we need, why we need it, and relevant sharing practices so you can make an informed choice. Depending on the information’s sensitivity and your reasonable expectations, consent may be express or implied. For example, providing your address when requesting a delivery may imply consent to use it to complete that delivery. We seek express consent when appropriate, including for sensitive information or unexpected uses. We do not require consent to unnecessary collection, use, or disclosure as a condition of providing a service. You may withdraw consent by contacting our Privacy Officer, subject to legal or contractual restrictions and reasonable notice. We will explain any resulting limitations. For example, without a delivery address, we cannot complete a delivery. Simply visiting our website does not constitute consent to optional analytics or marketing. These choices are explained below. Our consent practices follow the [OPC’s guidance on meaningful consent](https://www.priv.gc.ca/en/privacy-topics/privacy-for-businesses/appropriate-handling-of-personal-information/collecting-personal-information-and-consent/consent/gl_omc_201805/). ## When we share personal information We share personal information only as necessary for identified purposes, with appropriate consent, or where permitted or required by law. Depending on the service, recipients may include: - **Participating restaurants and delivery personnel**, who receive the order, contact, and delivery information needed to prepare or deliver your order. - **Payment providers**, who process payments and provide transaction information. - **Service providers**, who support functions such as website hosting, order management, customer communications, and recordkeeping. - **Google and Microsoft**, who receive website analytics information when you allow analytics, as described below. - **Authorities or other recipients**, where disclosure is legally required or permitted. For providers processing information on our behalf, we use contractual or other appropriate measures to require comparable protection and limit processing to authorized purposes. We remain accountable for personal information under our control. See the [OPC’s accountability guidance](https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/p_principle/principles/p_accountability/). ## Processing outside Canada Where information is processed outside Canada, it may be accessible to courts, law enforcement, or government authorities under the laws of those jurisdictions. You may contact our Privacy Officer for information about our foreign service providers and related privacy practices. See the [OPC’s cross-border processing guidance](https://www.priv.gc.ca/en/privacy-topics/airports-and-borders/gl_dab_090127/). ## Website analytics With your permission, we use Google Analytics and Microsoft Clarity to understand website visits and interactions, including contact-link clicks, provider-link clicks, and offer views. Google Analytics uses cookies and processes information about your browser, device, and website activity. Microsoft Clarity provides heatmaps and session recordings showing interactions such as clicks, scrolling, and navigation. We use this information to understand how visitors use the site and identify improvements. Analytics is optional and does not load until you choose **“Allow analytics.”** Choosing **“No thanks”** does not affect ordering or other website features. You can change your choice using **“Analytics preferences”** in the website footer. Withdrawing consent stops future optional analytics collection in that browser; it does not automatically delete information already collected. Contact our Privacy Officer about information already held. We store your preference in your browser for up to **180 days**. This preference period is separate from how long analytics information is retained. Clearing browser storage or using another browser or device may require you to choose again. Advertising features are disabled in our site configuration. For more information, see [how Google uses information from sites that use its services](https://policies.google.com/technologies/partner-sites) and [Microsoft’s privacy statement](https://www.microsoft.com/en-us/privacy/privacystatement). ## Marketing communications Where we send promotional emails or text messages, we do so with the consent or other authorization required by applicable law. You can stop promotional messages using the unsubscribe method included in the message or by contacting us. Declining marketing does not prevent you from placing orders or receiving necessary order and delivery communications. ## Retention and disposal We retain personal information only for as long as needed for the purposes for which it was collected, including applicable legal, accounting, and dispute-resolution requirements. Retention periods depend on the type of record, the reason it is held, and legal obligations. When information is no longer required, we securely destroy, erase, or effectively anonymize it. Information about applicable retention periods is available from our Privacy Officer. These practices reflect the [OPC’s retention guidance](https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/p_principle/principles/p_use/). ## Protecting your information We use physical, organizational, and technical safeguards appropriate to the sensitivity of the personal information we handle. Access is limited to people who need the information for authorized responsibilities. No security measure provides an absolute guarantee. If a privacy breach occurs, we assess and respond to it and maintain legally required records. Where required by law, we notify affected individuals and report the breach to the appropriate privacy regulator. See the [OPC’s safeguards guidance](https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/p_principle/principles/p_safeguards/) and [PIPEDA’s breach-reporting requirements](https://laws-lois.justice.gc.ca/eng/acts/P-8.6/section-10.1.html). ## Accessing and correcting your information You may contact our Privacy Officer to request access to personal information we hold about you, information about its use and disclosure, or correction of inaccurate or incomplete information. We take reasonable steps to keep information accurate for its intended use. We may need to verify your identity before acting on a request and will limit verification information to what is reasonably necessary. For requests governed by PIPEDA, we respond within 30 days unless a legally permitted extension applies. If we extend that period, we notify you within the initial 30 days, explain why, and advise you of your right to complain about the extension. Access is provided at little or no cost. If a fee applies, we provide an estimate before proceeding. If we cannot provide access to some information, we explain the reason and available recourse, subject to legal restrictions. See the [OPC’s access-request guidance](https://www.priv.gc.ca/en/privacy-topics/accessing-personal-information/obligations-for-organizations/02_05_d_54_ati_02/). ## Questions and complaints Please direct privacy questions, consent withdrawals, access or correction requests, and complaints to: **Privacy Officer — Night Off Delivery** **Legal business name:** Night Off Delivery **Email:** privacy@nightoffdelivery.ca **Mailing address:** 126 Castel St. Wendover, Ontario K0A 3K0 **Telephone:** +1 (613) 406-4638 We investigate privacy complaints and communicate the outcome, including any corrective action. You may also raise a concern with the [Office of the Privacy Commissioner of Canada](https://www.priv.gc.ca/) or the applicable provincial privacy regulator. Our complaint process reflects the [OPC’s complaint-handling guidance](https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/p_principle/principles/p_compliance/). ## Changes to this policy We may update this policy to reflect changes in our services, practices, or legal requirements. The current version and its revision date will be posted on our website. We provide appropriate notice of significant changes. Before using personal information for a new purpose requiring consent, we explain that purpose and obtain the necessary consent. Posting an updated policy does not, by itself, authorize new uses of previously collected information.