Privacy Policy

1. Overview

Tandoori Zaika Waterloo ("we", "us", "our") operates the restaurant website and loyalty rewards program. We are committed to protecting the privacy and security of the personal information of our customers, diners, and visitors.

This Privacy Policy describes how we collect, use, disclose, and protect personal information in accordance with the **Personal Information Protection and Electronic Documents Act (PIPEDA)** and Ontario's provincial privacy guidelines.

2. Information We Collect

We collect personal information that you provide directly to us when interacting with our website. This includes:

• Contact Information: Your name, email address, phone number, and delivery street address.
• Reservation Details: Number of guests, date/time of booking, special table requests or allergen notes.
• Loyalty Program Data: Email address, name, password hash, accumulated points balances, and rewards redemption history.
• Order & Billing Details: Items purchased, transaction totals, billing address, and secure tokenized transaction indicators (payment card processing is processed directly via Square API and is never stored on our database).

3. How We Use Your Information

We use your personal information to deliver our culinary experiences and run operations:

• To process and fulfill food pickup/delivery orders.
• To record and confirm dining room table reservations.
• To manage your Loyalty Rewards balance, allowing point accumulation and checkout discounts.
• To send transactional receipt emails, order status notifications, or reservation updates.
• If you explicitly opt-in, to distribute bulk email updates and promotional marketing campaigns (which you can unsubscribe from at any time).

4. Disclosure of Personal Information

We value your trust and **never sell or rent your personal information to third parties**. We only disclose personal information in limited business cases:

• Service Providers: Secure trusted third-party companies assisting our restaurant services, including payment processors (Square) and mapping providers (Google Maps API).
• Legal Requirements: If required to do so by Canadian law, search warrants, or court orders.

5. Cookies and Web Analytics

Our website uses standard session cookies to remember items added to your shopping cart, preserve your logged-in session state for the loyalty widget, and analyze general website traffic patterns to optimize performance. You can choose to disable cookies in your browser settings, though some checkout functions may be restricted.

6. Data Retention and Security

We implement administrative, technical, and physical security measures to safeguard your personal data. Customer databases and credential hashes are stored securely. We retain your profile data only as long as you maintain an active account, or as required for accounting and tax reporting obligations in Ontario.

7. Your Rights and Access

Under PIPEDA, you have the right to request access to the personal data we hold about you and request corrections if any details are inaccurate. You can also request that your loyalty account be deleted by contacting our Privacy Representative at privacy@tandoorizaikawaterloo.ca.