Privacy Policy

Platesready is operated by YS Progress Inc., an Ontario corporation ("Platesready", "we", "us", "our"). This Privacy Policy describes how we collect, use, disclose, and protect personal information when you use the Platesready website, ordering and reservation pages, and related services (the "Services").

We handle personal information in accordance with Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws. We have designated a Privacy Officer who is accountable for our practices and can be reached at [email protected].

This policy does not cover the independent practices of the restaurants you order from or of third-party services (like your card issuer) — those are addressed in Sections 5 and 6.

Information you provide:

• Identity and contact details — your name, email address, and phone number when you place an order, make a reservation, create an account, or contact us.
• Order details — the items you order, special instructions, pickup or delivery preference, delivery address where applicable, scheduled times, and your order history.
• Reservation details — date, time, party size, special occasions, and special requests you choose to share.
• Reviews and messages — content you submit through reviews, contact forms, or support conversations.
• Partner application data — business details submitted by restaurants applying to join the platform.

Payment information:

• Payments are processed by Stripe. Your full card number goes directly to Stripe and is never stored on our servers. We may retain a Stripe customer identifier, the card brand, and the last four digits to support receipts, refunds, and records. Stripe's privacy policy governs its processing.

Information collected automatically:

• Device and usage data such as IP address, browser and operating system, pages viewed, referring pages, approximate location derived from IP, and interactions with the Services — collected through cookies and similar technologies described in Section 6.

• Providing the Services — processing orders and reservations, arranging delivery where offered, sending transactional confirmations, reminders, and status updates by email and SMS.
• Support — responding to questions, investigating order or booking issues, and processing refunds.
• Safety and integrity — preventing and investigating fraud, abuse, and security incidents; enforcing our Terms of Use.
• Improvement and analytics — understanding how the Services are used so we can fix problems and improve them, including measuring the performance of the platform and of advertising (Section 6).
• Marketing, with consent — sending commercial messages only in accordance with Canada's Anti-Spam Legislation (Section 10). Transactional messages about your order or booking are not marketing.
• Legal compliance — meeting tax, accounting, and other legal obligations, and establishing or defending legal claims.

We rely on your consent (express or implied, as appropriate to the sensitivity and context) and, where applicable, on legal obligations as the basis for handling personal information. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice — though some Services (like receiving an order confirmation) cannot function without the related information.

Platesready is a direct-ordering platform: when you place an order or make a reservation, the Partner restaurant receives the information it needs to serve you — your name, contact details, order or booking contents, special instructions, and (for delivery) your address. Partners use this information to fulfil your order or reservation and to maintain their own customer records, and they are independently responsible for their handling of it. Questions about a restaurant's own communications or records are best directed to that restaurant, though we will help where we can.

We do not sell personal information. We disclose it only:

• To service providers that process it on our behalf — payment processing (Stripe), cloud hosting, email and SMS delivery, delivery courier networks (which receive the name, address, and phone number needed to complete a delivery), analytics and advertising-measurement services (Section 6) — under contractual protections limiting their use to our instructions;
• For legal reasons — where required or permitted by law, such as responding to lawful requests by authorities, enforcing our Terms, or protecting the rights, property, or safety of Platesready, our users, Partners, or others;
• In a business transaction — in connection with, or during negotiations of, a merger, financing, acquisition, or sale of all or part of our business, with safeguards appropriate to the circumstances and notice where required by law.

The Services use cookies and similar technologies for three purposes:

• Essential — session management, security, and remembering your cart; the Services cannot function without these.
• Analytics — understanding usage so we can improve the Services, using tools such as Google Analytics.
• Advertising measurement — measuring whether marketing brings customers to the platform and to Partner pages, using tools such as the Meta (Facebook) Pixel and Meta's Conversions API, which may transmit event data (such as a page view or completed order) together with limited identifiers from our servers. Partners may configure their own Meta Pixel or Google Analytics on their Platesready pages; those tags are governed by the Partner's and the provider's policies.

Analytics and advertising-measurement cookies load by default so we can improve the Services and measure marketing. You can turn them off at any time via the on-site cookie banner ("Essential only") or the footer cookie preferences link; we also honour the browser Global Privacy Control signal for those non-essential tags. You can further control cookies through your browser settings (including blocking or deleting them), use the opt-out tools offered by Google and Meta, and enable private browsing. Blocking essential cookies may break ordering. Like most sites, the Services do not respond to browser "Do Not Track" signals for which no standard exists.

We keep personal information only as long as necessary for the purposes described in this policy and to meet legal obligations. In practice: order, booking, and payment records are retained for the periods required by Canadian tax and accounting law (generally up to seven years); support correspondence is kept while relevant to the relationship; analytics data is retained per the configured retention of the tools in Section 6. When information is no longer needed, we delete it or render it anonymous.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information — including encryption in transit (HTTPS), access controls and role-based permissions, payment handling delegated to a PCI-DSS-compliant processor (Stripe), and logging and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; we address incidents in accordance with applicable breach-notification requirements, including notifying affected individuals and the Privacy Commissioner where a breach creates a real risk of significant harm.

Some of our service providers — including Stripe, Google, and Meta — store or process information in the United States or other jurisdictions outside Canada. Where information leaves Canada, we use contractual and other measures to require a comparable level of protection; while in another jurisdiction, information may be accessible to that jurisdiction's courts and authorities under its laws. By using the Services you acknowledge this processing.

We send commercial electronic messages only in compliance with Canada's Anti-Spam Legislation (CASL): with your consent or another lawful basis such as an existing business relationship, always identifying us and always including a functioning unsubscribe mechanism, which we honour promptly. Transactional messages — order confirmations, booking reminders, receipts, and service notices — are necessary to the Services and are not marketing messages.

Subject to applicable law, you may:

• Access the personal information we hold about you and ask how it has been used and disclosed;
• Correct inaccurate or incomplete information;
• Request deletion of information, subject to the retention obligations in Section 7;
• Withdraw consent to uses that rely on it (Section 3), including unsubscribing from marketing at any time;
• Ask questions or complain about our practices.

To exercise these rights, contact [email protected]. We may need to verify your identity before acting on a request, and we respond within the timelines set by applicable law (generally within 30 days). If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact [email protected] and we will delete it.

We may update this policy to reflect changes in our practices or the law. The "Last updated" date at the top shows the current version. For material changes we will provide more prominent notice on the Services before the change takes effect. Continued use of the Services after an update constitutes acknowledgement of the revised policy.

Platesready is operated by YS Progress Inc., Ontario, Canada — ys.contact.

Privacy Officer: [email protected]
General support: [email protected]