Privacy Policy

When you use our website, place an order, or contact us, we may collect the following categories of personal information:

• Identity data: your name, as provided in forms or order submissions.
• Contact data: email address, phone number, and delivery address.
• Transaction data: details of orders placed, packages selected, and payment method type (we do not store full card details).
• Usage data: IP address, browser type, pages visited, and session duration collected automatically via standard web server logs and analytics tools.
• Communication data: the content of messages you send us via our contact form or email.

We do not collect sensitive personal data such as health, financial, or biometric information.

We use your personal data only for the following lawful purposes:

• Order fulfilment: processing and delivering your sushi order or catering booking.
• Customer service: responding to your inquiries, complaints, and feedback.
• Service improvement: analysing usage data to improve our website and delivery operations.
• Marketing communications: sending promotional emails only if you have opted in. You may unsubscribe at any time.
• Legal compliance: maintaining records as required by Canadian tax and business law.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

We may share your data with trusted third-party service providers who assist us in operating our business, including:

• Delivery partners: driver names and your delivery address are shared only to complete your order.
• Payment processors: your payment data is processed by PCI-DSS compliant processors. We never store card details.
• Analytics providers: anonymised usage statistics may be shared with Google Analytics or similar tools.
• Legal authorities: we will disclose data where required by law, court order, or governmental authority.

All third-party service providers are contractually required to protect your data and may not use it for their own purposes.

We retain your personal data only as long as necessary for the purposes described in this policy:

• Order records: retained for 7 years to comply with Canadian tax regulations.
• Contact form submissions: retained for 2 years for customer service reference.
• Marketing preferences: retained until you unsubscribe or request deletion.
• Website analytics: aggregated and anonymised after 26 months.

You may request deletion of your personal data at any time, subject to our legal retention obligations. To request deletion, email unlockspace@gmail.com.

You have the following rights regarding your personal data under Canada's PIPEDA and applicable privacy legislation:

• Right of access: request a copy of the personal data we hold about you.
• Right of correction: request correction of inaccurate or incomplete data.
• Right of deletion: request that we delete your personal data, subject to legal retention requirements.
• Right to withdraw consent: withdraw consent to marketing communications at any time.
• Right to lodge a complaint: you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you believe your rights have been violated.

To exercise any of these rights, contact us at unlockspace@gmail.com. We will respond within 30 days.