Privacy Policy

At Swiss Chalet, we are deeply committed to protecting the privacy and personal information of every individual who interacts with our website, services, and business operations. This Privacy Policy explains in detail how we collect, use, disclose, store, and protect your personal information when you visit our website at swis-chalets.com, place orders, subscribe to communications, or otherwise engage with our food services. We encourage you to read this document carefully to understand our practices and your rights.

This Privacy Policy is governed by applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and, where applicable, provincial privacy laws such as the Personal Information Protection Act (PIPA) in Alberta and British Columbia, and Act respecting the protection of personal information in the private sector (Law 25) in Quebec. We also align our practices with international best practices, including the principles of the General Data Protection Regulation (GDPR), which is widely recognized as the global benchmark for data protection.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website and services.

1. About Us

Swiss Chalet is a food service business operating in Canada. We are dedicated to providing high-quality food experiences to our customers, whether through our website, online ordering platforms, or in-person interactions.

For all privacy-related inquiries, you may contact us directly at the email address listed above. We are committed to responding to all privacy requests in a timely and transparent manner.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected by Swiss Chalet through:

• Our website located at swis-chalets.com
• Online food ordering systems and delivery platforms
• Email communications and newsletters
• Customer loyalty programs or membership registrations
• Social media interactions and advertising
• In-person dining experiences where digital data is collected
• Any other digital or physical touchpoints associated with our food services

This policy does not apply to third-party websites or services that may be linked from our website. We encourage you to review the privacy policies of any third-party platforms you visit.

3. What Personal Information We Collect

We collect various categories of personal information depending on how you interact with us. We only collect information that is necessary for the purposes described in this Privacy Policy.

3.1 Information You Provide Directly

When you use our services, create an account, place a food order, or contact us, you may provide us with the following personal information:

• Identity Information: First and last name, username or display name
• Contact Information: Email address, phone number, mailing or delivery address
• Account Credentials: Passwords (stored in encrypted form), security questions
• Payment Information: Credit/debit card details, billing address, payment processor tokens (note: full card numbers are not stored by us directly)
• Order Information: Food preferences, dietary restrictions or allergies, order history, special instructions
• Communications Data: Messages sent through our contact forms, email correspondence, customer service records
• Marketing Preferences: Your choices regarding receiving promotional emails, SMS notifications, and other marketing communications

3.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies, web beacons, and similar tracking technologies:

• Device Information: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), unique device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referral URLs, search queries within the website, actions taken during a session
• Location Data: General geographic location inferred from your IP address; precise location data only if you grant permission through your device settings
• Cookie and Tracking Data: Information stored through cookies and similar technologies (see Section 9 for more details)
• Transaction Logs: Time and date of orders, order values, frequency of purchases

3.3 Information From Third Parties

We may receive personal information about you from third-party sources, including:

• Social media platforms (e.g., Facebook, Instagram, Google) when you interact with our social media content or use social sign-in features
• Food delivery aggregator platforms (e.g., DoorDash, Uber Eats, Skip the Dishes) when orders are placed through these platforms
• Analytics and advertising partners who provide demographic or interest-based data
• Fraud prevention and identity verification services
• Publicly available sources

4. How We Use Your Personal Information

We use your personal information for specific, identified, and legitimate purposes. We will not use your information in a manner incompatible with these stated purposes without your prior consent.

4.1 Service Provision and Order Fulfillment

• Processing and confirming food orders placed online or through affiliated platforms
• Arranging delivery or pickup of food orders to the address you provide
• Managing your account, including login credentials and order history
• Processing payments and issuing receipts or invoices
• Responding to customer service inquiries and resolving disputes
• Administering loyalty programs and promotions
• Communicating order status, confirmations, and updates via email or SMS

4.2 Website Improvement and Analytics

• Analyzing how visitors use our website to improve navigation, content, and functionality
• Conducting internal research, data analytics, and business intelligence
• Identifying and fixing technical problems or security vulnerabilities
• Testing new features, menu items, and promotional strategies
• Monitoring website performance and load times

4.3 Marketing and Promotional Communications

• Sending promotional emails, newsletters, or special offers for our food products and services (with your consent, where required)
• Personalizing your experience on our website based on your preferences and order history
• Displaying targeted advertising on our website or third-party platforms based on your browsing behavior
• Conducting surveys, contests, or feedback campaigns
• Notifying you of new menu items, seasonal specials, or changes to our services

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected]. Please note that even if you opt out of marketing communications, we may still send you transactional or service-related messages.

4.4 Legal Compliance and Safety

• Complying with applicable Canadian laws and regulations
• Responding to lawful requests from government authorities or law enforcement
• Detecting, preventing, and investigating fraudulent transactions or unauthorized access
• Enforcing our terms and conditions and other applicable policies
• Protecting the rights, property, and safety of Swiss Chalet, our customers, and the public

5. Legal Basis for Processing

Under Canadian privacy law (PIPEDA and applicable provincial legislation), we collect and use your personal information based on one or more of the following grounds:

• Consent: You have given us your express or implied consent to collect and use your information for specific purposes.
• Contractual Necessity: The processing is necessary to fulfill a contract with you, such as processing your food order.
• Legal Obligation: We are required by law to process your information for compliance purposes.
• Legitimate Interests: We process your information to pursue our legitimate business interests, provided these interests are not overridden by your rights and freedoms.

Where we rely on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

6. Sharing Your Personal Information With Third Parties

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with trusted third parties in the following circumstances:

6.1 Service Providers and Business Partners

We engage third-party service providers who assist us in operating our business. These providers are contractually obligated to protect your information and may only use it for the specific purposes for which it was shared:

• Payment Processors: Companies that process credit card transactions and online payments securely
• Delivery Partners: Food delivery platforms and courier services that fulfill your orders
• Technology Providers: Website hosting, cloud storage, and software-as-a-service (SaaS) providers
• Analytics Providers: Services such as Google Analytics that help us understand website usage
• Marketing and Email Platforms: Email marketing services used to send newsletters and promotional communications
• Customer Support Tools: CRM and helpdesk software used to manage customer inquiries
• Fraud Prevention Services: Companies that help us detect and prevent fraudulent activity

6.2 Legal Requirements and Regulatory Disclosures

We may disclose your personal information when required or permitted by law, including:

• In response to a court order, subpoena, or other legal process
• To comply with requests from regulatory or government authorities in Canada
• To protect and defend the legal rights of Swiss Chalet
• In connection with investigations of fraud, security breaches, or illegal activity

6.3 Business Transactions

If Swiss Chalet undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal information may be transferred to the successor entity. We will notify you via email and/or a prominent notice on our website before your information becomes subject to a different privacy policy.

6.4 Aggregated and Anonymized Data

We may share aggregated or anonymized information that does not directly identify you with third parties for research, marketing, analytics, or other business purposes. This type of data sharing does not constitute a disclosure of personal information.

7. Data Security Measures

We take the security of your personal information very seriously. Swiss Chalet implements a comprehensive set of technical, administrative, and physical security measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

7.1 Technical Safeguards

• Encryption: All data transmitted between your browser and our website is encrypted using Transport Layer Security (TLS/SSL) protocols.
• Secure Payment Processing: Payment information is handled by PCI-DSS compliant payment processors. We do not store full credit card numbers on our systems.
• Access Controls: Access to personal data is restricted on a need-to-know basis, with role-based access controls and multi-factor authentication for staff.
• Firewalls and Intrusion Detection: Our systems are protected by firewalls and monitored for unauthorized access attempts.
• Regular Security Audits: We conduct periodic security assessments and vulnerability scans to identify and address potential risks.

7.2 Administrative Safeguards

• Privacy and data protection training for all employees who handle personal information
• Data processing agreements with all third-party service providers
• Internal policies governing the collection, use, and retention of personal information
• A designated privacy officer responsible for overseeing compliance

7.3 Breach Notification

In the event of a data breach that poses a real risk of significant harm to individuals, we will notify affected individuals and the Office of the Privacy Commissioner of Canada (OPC) as required by PIPEDA and applicable provincial laws. Notifications will be made in a timely manner and will include details of the breach, the information affected, and the steps we are taking to mitigate harm.

8. Your Privacy Rights

As a resident of Canada, you are entitled to certain rights with respect to your personal information under PIPEDA and applicable provincial privacy laws. We are committed to honoring these rights promptly and transparently.

8.1 Right of Access

You have the right to request access to the personal information we hold about you. Upon a verified request, we will provide you with a copy of your data, the purposes for which it is being processed, and information about any third parties with whom it has been shared. We will respond to access requests within 30 days, as required by PIPEDA.

8.2 Right to Correction

If any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct it. You may also update your information directly through your account settings on our website.

8.3 Right to Withdrawal of Consent

Where our processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing conducted prior to the withdrawal. Please note that withdrawing consent for certain processing may limit our ability to provide you with specific services.

8.4 Right to Deletion

Subject to legal obligations, you may request the deletion of your personal information from our systems. We will comply with such requests unless we are required by law to retain the data or unless the data is necessary for the establishment, exercise, or defense of legal claims.

8.5 Right to Data Portability

Where technically feasible, you may request a copy of your personal information in a structured, commonly used, and machine-readable format. This right applies to information you have provided to us directly and that we process using automated means.

8.6 Right to Object to Marketing

You have the right to object to the use of your personal information for direct marketing purposes at any time. You can exercise this right by clicking "unsubscribe" in any of our marketing emails or by contacting us directly.

8.7 How to Exercise Your Rights

To exercise any of the rights described above, please submit a written request to us at:

To protect your privacy, we may ask you to verify your identity before processing your request. We will respond to all rights requests within 30 days. If we are unable to fulfill your request, we will explain the reasons in writing.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver relevant advertising. A cookie is a small text file that is placed on your device when you visit a website.

9.1 Types of Cookies We Use

• Essential Cookies: Required for the basic functioning of the website, including login sessions, shopping cart functionality, and order processing. These cookies cannot be disabled without affecting core website features.
• Analytics Cookies: Used to collect anonymous statistical data about how visitors use our website (e.g., Google Analytics). This helps us improve the user experience.
• Functional Cookies: Allow the website to remember your preferences, such as language settings, location, and previously viewed items.
• Marketing and Advertising Cookies: Used to track your browsing behavior and deliver personalized advertisements on our website and third-party platforms. These cookies may be set by our advertising partners.

9.2 Managing Your Cookie Preferences

You may control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling certain cookies may impact the functionality of our website, including your ability to place orders. You may also opt out of interest-based advertising through industry opt-out tools such as the Digital Advertising Alliance of Canada (DAAC) at youradchoices.ca.

For more detailed information about the cookies we use and your options for managing them, please refer to our Cookie Policy, which is available on our website.

10. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required by law. The following general retention periods apply:

When personal information is no longer needed, we will securely delete, anonymize, or aggregate it so that it can no longer be used to identify you.

11. Children's Privacy

Our website and food services are not directed at individuals under the age of 18 years. We do not knowingly collect personal information from children under 18. If you are under 18, please do not use our website or submit any personal information to us without the supervision and consent of a parent or legal guardian.

If we become aware that we have inadvertently collected personal information from a child under the age of 18 without verified parental consent, we will take immediate steps to delete that information from our records. If you believe that we may have collected information from a minor, please contact us immediately at [email protected].

Parents or guardians who have concerns about their child's privacy may also contact us to request the deletion of any data that may have been collected.

12. International Data Transfers

Swiss Chalet is a Canadian business. However, some of the third-party service providers we use may be located outside of Canada, including in the United States or other countries. When personal information is transferred outside of Canada, we take steps to ensure that it receives an equivalent level of protection as it would in Canada.

These steps may include:

• Entering into data processing agreements with international service providers that incorporate standard contractual clauses or equivalent safeguards
• Transferring data only to countries that have been recognized as providing adequate data protection
• Obtaining your explicit consent for certain international transfers where required by applicable law

Please note that when your information is transferred to another country, it may be subject to the laws of that country, including access by foreign governments or law enforcement authorities. We will notify you of any significant international transfers that may impact your privacy rights.

In accordance with PIPEDA, we remain accountable for personal information transferred to third-party processors, even when those processors are located outside Canada.

13. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, food delivery partners, or other external services. This Privacy Policy applies only to information collected by Swiss Chalet on swis-chalets.com. We are not responsible for the privacy practices of any third-party websites, and we encourage you to review the privacy policies of those websites before providing any personal information.

The inclusion of a link to a third-party website does not imply our endorsement of that website or its privacy practices.

14. Automated Decision-Making and Profiling

We may use automated systems to analyze your order history, preferences, and browsing behavior for the purpose of personalizing your experience on our website and delivering relevant marketing communications. For example, we may use automated tools to recommend menu items based on your past orders.

We do not use automated decision-making processes that produce significant legal effects on you without appropriate human oversight. If you have concerns about any automated processing that may affect you, please contact us at [email protected].

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website informing you of the changes
• Where required by law, seek your renewed consent to any new or materially different uses of your personal information
• Send an email notification to registered users when changes are significant

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes are posted constitutes your acceptance of the updated policy.

16. Filing a Complaint With a Data Protection Authority

If you are not satisfied with our response to your privacy inquiry or believe that we have not handled your personal information in accordance with applicable Canadian privacy law, you have the right to file a complaint with the relevant data protection authority.

16.1 Federal — Office of the Privacy Commissioner of Canada (OPC)

16.2 Provincial Authorities

If you are located in a province with its own privacy legislation, you may also file a complaint with the applicable provincial authority:

• Alberta: Office of the Information and Privacy Commissioner of Alberta — www.oipc.ab.ca
• British Columbia: Office of the Information and Privacy Commissioner for British Columbia — www.oipc.bc.ca
• Quebec: Commission d'accès à l'information du Québec (CAI) — www.cai.gouv.qc.ca
• Ontario: Information and Privacy Commissioner of Ontario — www.ipc.on.ca

We encourage you to contact us first so that we may attempt to resolve your concern before filing a formal complaint. We are committed to working with you in good faith to address any privacy-related issues.

17. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data protection practices, please contact our privacy team using the information below. We are committed to addressing all privacy inquiries promptly and transparently.

When contacting us about a privacy matter, please include:

• Your full name and contact information
• A clear description of your inquiry or concern
• Any relevant reference numbers or account information (if applicable)

We aim to acknowledge all privacy inquiries within 5 business days and to provide a substantive response within 30 days, in accordance with our obligations under PIPEDA.

This Privacy Policy was last updated on June 28, 2026. Swiss Chalet reserves the right to amend this policy at any time in accordance with applicable Canadian privacy legislation. All amendments will be posted on this page with an updated effective date.