At Roxy Focaccia, we respect your privacy. This policy explains, in plain language, what personal information we collect, why, how we protect it and what your rights are, in accordance with Québec's Act respecting the protection of personal information in the private sector (Law 25) and applicable federal law.
In short: our website has no forms, no accounts, no analytics and no advertising cookies. We only receive personal information if you choose to email us or place an order.
1. Who we are
Roxy Focaccia is a focaccia sandwich counter located at 387 Saint-Zotique Street East, Montréal, Québec H2S 1L8. This policy applies to roxyfocaccia.ca and to the information you send us by email or when placing an order.
2. Person in charge of the protection of personal information
Roxy Focaccia's person in charge of the protection of personal information can be reached at admin@roxyfocaccia.ca. Any question, request or complaint about your personal information can be sent to them.
3. Information we collect
Browsing the website
The website does not ask you for any personal information and does not store any in a database. As with any website, our hosting provider automatically processes some technical data (IP address, browser type, pages requested, date and time) in server logs in order to serve the site and keep it secure. We do not use this data to identify you.
Emails (catering, employment, questions)
The "Catering" and "Employment" links simply open your own email app. If you write to us at traiteur@roxyfocaccia.ca or admin@roxyfocaccia.ca, we receive whatever information you choose to include, for example:
- your name, email address and, if provided, your phone number;
- details about your request or event (date, number of guests, delivery address, etc.);
- for a job application: your résumé, availability and anything else you include.
Please do not send us sensitive information (social insurance number, banking or health information) by email.
Online ordering
The "Order Online" button takes you to an ordering page hosted and managed by Clover, our point-of-sale provider. The information you enter there (name, contact details, order details, payment) is collected by Clover under its own privacy policy. We only receive what we need to prepare your order (name, contact details, items ordered, pickup time). We never have access to your full payment card number.
External links
The website links to Instagram and Google Maps. Those sites are governed by their own privacy policies; we do not control the information they collect.
4. Why we use your information
- to answer your questions and send you a catering quote;
- to organize and deliver a catering order;
- to review a job application and contact you about it;
- to prepare your online orders;
- to meet our legal obligations (e.g. accounting and tax).
We do not use your information for any other purpose without your consent, and we never add you to a mailing list.
5. Consent
By emailing us or placing an order, you consent to our using your information for the purpose for which you provided it. You may withdraw your consent at any time by writing to the person in charge (section 2), subject to our legal obligations.
8. Where information is stored
We do not keep a customer database. Your emails are kept in our business inboxes. Our providers (Google, Vercel, Clover) may store or process information outside Québec, including elsewhere in Canada and in the United States. We chose these providers taking into account the contractual and technical safeguards they offer.
9. Retention
- General questions: as long as needed to answer them, then deleted.
- Catering requests and orders: for the duration of the relationship, then as required by our accounting and tax obligations (generally six years).
- Unsuccessful job applications: up to 12 months after receipt, so we can reach out if a position opens up, then deleted.
Once the retention period ends, the information is securely destroyed.
10. Security
The website is served entirely over HTTPS (encrypted connection). Access to our email inboxes is password-protected and limited to the people who need it for their work.
If a confidentiality incident presents a risk of serious injury, we will notify the Commission d'accès à l'information and the affected individuals as required by law, and record the incident in our register.
11. Your rights
At any time, you may:
- ask to access the information we hold about you;
- have inaccurate or incomplete information corrected;
- withdraw your consent or ask that your information be deleted;
- ask that your information be provided to you in a structured, commonly used technological format (portability).
To exercise these rights, write to admin@roxyfocaccia.ca. We will respond within 30 days. We may need to verify your identity before acting on your request.
If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
12. Minors
We do not knowingly collect personal information from children under 14 without the consent of a parent or guardian. If you believe a child has sent us information, contact us and we will delete it.
13. Changes
We may update this policy. The date of the last update appears at the top of this page. If we make a significant change, we will indicate it clearly on the website.
14. Contact us
Person in charge of the protection of personal information — Roxy Focaccia, 387 Saint-Zotique Street East, Montréal, Québec H2S 1L8 — admin@roxyfocaccia.ca
This policy is also available in French. In case of any discrepancy, the French version prevails.