Privacy Policy

1. Who We Are

OrderKit is operated by Elora & Co, a digital web studio based in Prince George, BC, Canada. We build and maintain the OrderKit platform on behalf of our restaurant partners. Questions about this policy can be directed to hello@orderkit.ca.

2. Our Role

OrderKit plays two roles depending on the data involved:

• Service provider (processor) — for customer data collected on a restaurant's ordering page (name, contact details, orders, addresses, rewards). We process this information on each restaurant's behalf to operate their ordering service. The restaurant decides how that data is used beyond what the platform requires.
• Controller — for data we collect for our own platform operations, including account credentials, security logs, error monitoring, and restaurant subscription billing.

For privacy requests about order and account data tied to a specific restaurant, you may contact that restaurant directly or reach us at hello@orderkit.ca and we will assist as required.

3. Information We Collect

We collect information you provide directly, including:

• Name and email address when you create an account
• Phone number if provided during registration or checkout
• Order details (items, quantities, special instructions)
• Delivery address if a restaurant offers delivery

We also collect limited technical data: IP address, browser type, and pages visited, for security and platform improvement purposes.

4. How We Use Your Information

We use your information to:

• Process and fulfil your orders
• Send order confirmation and status emails
• Operate the loyalty rewards programme
• Allow restaurants to view their customer and order data
• Improve the platform and diagnose technical issues

We do not sell your personal information to third parties.

5. Data Sharing

Your order and account data is visible to the restaurant you order from. As described in section 2, restaurants are responsible for their own use of customer data in accordance with applicable law.

We use the following third-party services to operate the platform. These providers may process personal information on our behalf and may store data outside Canada:

• Supabase — database and authentication
• Cloudflare — hosting, CDN, and security
• Resend — transactional email
• Stripe — restaurant subscription billing
• Sentry — error monitoring and performance diagnostics

6. Data Retention

We retain your account and order history for as long as your account is active. You may request deletion of your account and associated data by contacting us at hello@orderkit.ca.

7. Cookies

OrderKit uses session cookies for authentication and to maintain your cart between visits. Our infrastructure provider, Cloudflare, may set strictly necessary security cookies to protect the platform. We do not use third-party advertising or tracking cookies.

8. Cross-Border Data Transfers

Personal information may be stored or processed in Canada and in other countries where our service providers operate, including the United States. When data is processed outside Canada, it may be subject to the laws of that jurisdiction, including lawful access by courts, law enforcement, or national security authorities.

9. Your Rights

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, British Columbia's Personal Information Protection Act (PIPA).

Subject to applicable law, you may have the right to access, correct, or delete your personal information, or to withdraw consent where consent is the basis for collection. To exercise these rights, contact us at hello@orderkit.ca. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.

10. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), access-controlled databases, and row-level security on all customer records.

11. Changes to This Policy

We may update this policy periodically. We will post the revised policy on this page with an updated date. Continued use of the platform constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions, email us at hello@orderkit.ca.