Privacy Policy
Effective November 4, 2026
OrderFlow builds online ordering for independent restaurants in Canada. This policy explains what personal information this website collects, why we collect it and the choices you have. It's written to follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
When you ask for a demo, you give us:
- Your name, your restaurant's name and its city
- Your email address, and your phone number if you choose to share it
- Your answers about how orders reach you today and what POS you use
- Whether you asked to receive product updates
When you visit, our hosting provider records standard technical logs, such as IP address, browser type and the pages requested. This site doesn't use advertising or analytics cookies.
Why we use it
- To reply to your request and set up your demo
- To work out whether OrderFlow is a fit for your restaurant
- To keep this site running and secure
- To send you product updates, only if you opted in
Your consent
By sending the form, you agree that we can use your details to respond to your request. Product updates are separate: the box is unchecked unless you tick it, and your demo doesn't depend on it. You can withdraw your consent at any time by contacting us.
Emails we send
We send promotional email only with your consent, or where Canada's anti-spam law (CASL) otherwise allows it. Each one identifies OrderFlow, includes our contact details and has an unsubscribe option that we act on within 10 business days.
Who we share it with
We don't sell personal information. We share it only with service providers that help us run this site and handle requests, such as our website host (Vercel), our email provider (Resend) and the tools we use to manage demo requests. They may use it only to provide those services to us. We may also disclose information where the law requires it.
Where it's stored
Our service providers may store and process information outside Canada, including in the United States. While it's there, it's subject to that country's laws and may be accessible to its courts and authorities.
How long we keep it
We keep demo requests for as long as we need them to respond and follow up. If you don't become a customer, we delete or anonymize your details within 24 months of our last contact. We keep records of marketing consent for as long as we need to show that we had it.
How we protect it
We use safeguards suited to the information we hold, including encrypted connections and limited access. No system is perfectly secure, so we'll notify you and the Privacy Commissioner where the law requires it if a breach creates a real risk of significant harm.
Your rights
You can ask to see the personal information we hold about you, have it corrected, or have it deleted where we don't need to keep it. Contact us and we'll respond within 30 days. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada.
Restaurants using OrderFlow
This policy covers this website. When a restaurant uses OrderFlow to take orders, that restaurant decides how its guests' information is used, and we handle that information on its behalf under our agreement with it.
Contact us
Privacy Officer, OrderFlow
corporate@orderflow.ca
Changes to this policy
If we change this policy, we'll post the new version here and update the date at the top.