Privacy Policy

Section 01What Information We Collect

We only collect personal information that you choose to provide to us, primarily through our website contact forms. This may include:

• Your name — so we know who we're speaking with
• Your email address — to respond to your enquiry
• Your phone number — if you include it, to follow up by phone
• Your company or organisation name — where relevant to a corporate catering or partnership enquiry
• The content of your message — details about your catering needs, event, or enquiry

We do not collect payment information through our website. No credit card or banking details are submitted via any form on this site.

We also collect limited non-personal technical data automatically when you visit our website, including your browser type, device type, approximate geographic location (city/region level), pages visited, and time spent on pages. This is collected via Google Analytics 4 and is described in more detail in Section 6.

Section 02How We Use Your Information

We use the information you submit for the specific purpose for which you provided it. In practice, that means:

• Responding to catering enquiries — boardroom lunches, conferences, office parties, client entertainment, product launches, and general corporate catering questions
• Responding to franchise, investment, or mall operator partnership enquiries
• Following up on quote requests with a tailored catering proposal
• Maintaining a record of our correspondence for the purpose of managing your enquiry

We do not use your personal information for automated decision-making or profiling. We do not add you to any mailing list without your explicit consent. If you ask to be contacted about future promotions or news from The Carvery, we will treat that as consent under CASL — but we will not assume consent from a catering or partnership enquiry alone.

Section 03How We Store Your Information

Contact form submissions on this website are processed and stored via Formspree (formspree.io), a third-party form handling service. When you submit a form, your data is transmitted to Formspree's servers and forwarded to our designated email address. Formspree may temporarily store your submission data; their privacy policy is available at formspree.io/legal/privacy-policy.

Once received by our team, your enquiry details may be stored in our internal email correspondence and, where relevant, in a simple CRM or project management tool used to manage catering bookings. We take reasonable precautions to protect correspondence from unauthorised access.

Website analytics data is processed and stored by Google Analytics 4 (described in Section 6). This data is retained in accordance with Google's standard data retention settings, which we have configured to a maximum of 14 months.

We do not store personal data on this website's server. The site is a static HTML website with no database or user account functionality.

Section 04Whether We Share Your Information

We do not sell, rent, or trade your personal information to any third party.

We share your information only in the following limited circumstances:

• Service providers necessary to operate this website — specifically Formspree (form processing) and Google Analytics (anonymous usage analytics). Both are described in this policy. These providers are only given access to the data necessary to perform their specific function.
• If required by law — if we are required to disclose personal information by a court order, legal process, or applicable law, we will comply. Where legally permitted, we will notify you of such a request.

We do not share personal information with advertising networks, data brokers, marketing platforms, or any other commercial third parties.

Section 05Your Rights Under PIPEDA and CASL

As a business operating in Ontario, Canada, we operate in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the Canada Anti-Spam Legislation (CASL).

Under PIPEDA, you have the right to:

• Know what personal information we hold about you — you can request access to any personal information we have collected from you
• Correct inaccurate information — if any information we hold about you is incorrect, you can ask us to update it
• Withdraw consent — where we rely on your consent to process your information, you can withdraw that consent at any time
• Request deletion of your data — see Section 7 for how to do this
• File a complaint — if you believe we have handled your personal information improperly, you have the right to contact the Office of the Privacy Commissioner of Canada at priv.gc.ca

Under CASL, we will not send you commercial electronic messages without your express or implied consent, and every commercial email we send will include a clear and easy way to unsubscribe.

To exercise any of these rights, contact us using the details in Section 8.

Section 06Cookies and Analytics

This website uses Google Analytics 4 (GA4) to collect anonymous information about how visitors use the site. This helps us understand which pages are most useful, where traffic comes from, and how to improve the site over time.

Google Analytics collects information such as:

• Pages visited and time spent on each page
• Browser type and device type
• Approximate geographic location (city or region — not precise address)
• Referral source (how you arrived at the site)

This data is anonymised — it does not identify you personally, and we have enabled IP anonymisation in our GA4 configuration. We have also configured GA4 data retention to a maximum of 14 months.

Google Analytics sets cookies in your browser to track sessions. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, or by using your browser's private/incognito mode.

Beyond Google Analytics, this website does not use advertising cookies, tracking pixels, retargeting tags, or any other third-party cookies for commercial purposes.

Section 07How to Request Data Deletion

If you would like us to delete any personal information we hold about you, please contact us at the email address listed in Section 8 with the subject line "Data Deletion Request".

Please include:

• Your full name
• The email address you used to contact us
• An approximate date of your original enquiry (if known)

We will acknowledge your request within 5 business days and complete the deletion within 30 days, except where we are required by law to retain certain records. We will let you know if any information cannot be deleted and explain why.

Please note that we cannot delete data held by third-party service providers (such as Formspree or Google Analytics) on your behalf — you would need to contact those providers directly using the details in their respective privacy policies.

Section 08Contact for Privacy Enquiries

If you have questions about this privacy policy, want to access or correct your personal information, or wish to make a data deletion request, please contact us:

• Email: [INSERT PRIVACY EMAIL]
• Mail: The Carvery, 499 King St W, Toronto, ON, M5V 1K4

We aim to respond to all privacy-related enquiries within 5 business days.

If you are not satisfied with how we have handled your enquiry, you may contact the Office of the Privacy Commissioner of Canada:

• Website: priv.gc.ca
• Toll-free: 1-800-282-1376

This policy may be updated from time to time. When we make material changes, we will update the "Last reviewed" date at the top of this page. We encourage you to review this policy periodically.