Privacy

This privacy notice for The Carriage House Restaurant ("Company," "we," "us," or "our") describes how and why we may collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you visit our website at https://www.thecarriagehouse.ca, or any website of ours that links to this privacy notice, or engage with us in other related ways, such as sales, marketing, or events.

Do you have any questions or concerns? Reading this privacy notice will assist you in better understanding your privacy rights and options. Please do not use our website ("Services") if you do not agree with our policies and procedures. If you have any other questions or concerns, please email us at policy@thecarriagehouse.ca.

WHAT DATA DO WE COLLECT?

We collect the personal information you provide. In a nutshell, we only gather personal information that you willingly supply.

We gather personal information that you voluntarily supply to us when you register for the Services, express interest in getting information about us or our goods and Services, participate in activities on the Services, or otherwise communicate with us.

Personal Information You Provide. The personal information we gather is dependent upon the nature of your contacts with us and the Services, the decisions you make, and the goods and functions you employ. The personal information that we gather may include:

• phone number
• email addresses
• name

Confidential Information. We do not process any sensitive data.

Reservations Data. If you reserve a table via OpenTable, they may collect information required to complete your reservation, such as your payment instrument number and the security code associated with your payment instrument. The required table reservation information is saved in the OpenTable platform. Their privacy notice link(s) may be found at https://www.opentable.com/legal/privacy-policy.

You are required to provide your genuine, complete, and accurate personal information to OpenTable, as well as any updates to that information.

Information Acquired Automatically. When you access our Services, certain information, such as your Internet Protocol (IP) address and/or browser and device characteristics, is automatically gathered by the web host/server provider and/or mobile carrier, operating system, and system configurartion data.

They gather certain information automatically when you visit, utilize, or navigate the Services. This information does not reveal your specific identity (such as your name or contact information), but may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services. This data is largely required to maintain the security and functioning of our Services, as well as for internal reporting and analytics reasons.

We, like numerous other organizations, through our website provider gather information using cookies and similar technologies. Included in the information we gather are:

Log and Usage Data. Log and use data consists of service-related, diagnostic, usage, and performance information that our servers gather automatically when you access or use our Services and which we store in log files. This log data may include your IP address, device information, browser type, settings, and information about your activity in the Services (such as the date/timestamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes referred to as "crash Clumps"), and hardware settings.

Device Data. We gather device data, such as information on your computer, smartphone, or other device used to access the Services. This device data may comprise your IP address (or proxy server), device and application identifying numbers, location, browser type, hardware model, and Internet service provider.

Location Data. We acquire location data, such as information on the precise or approximate location of your device. We gather data based on the kind and settings of the device you use to access the Services. Using GPS and other technologies, for instance, we may acquire geolocation data indicating your present position (based on your IP address). You can refuse access to the information or disable the Location setting on your device to prevent us from collecting this information. If you choose to opt out, however, you may not be able to utilize some parts of the Services.

HOW DO WE PROCESS THE INFORMATION YOU PROVIDE?

We process your information to offer, enhance, and manage our Services, to interact with you, to ensure security and prevent fraud, and to comply with the law. We may potentially use your data for other purposes with your consent

Depending on how you engage with our Services, we may handle your personal information for the following purposes:

• To handle user accounts and enable account creation and authentication. We may handle your information so that you may establish and access your account, as well as maintain its functionality.
• To reply to user queries and provide assistance to users. We may process your information in order to react to your enquiries and address any problems you may encounter with the requested service.
• To provide you with administrative information. We may use your information to send you information about our products and services, updates to our terms and conditions, and other material of a similar nature.
• Facilitate user-to-user communication. If you choose to utilize any of our services that enable contact with another user, we may process your information.
• To solicit comments. We may process your information as required to collect feedback and communicate with you on your usage of our Services.
• To post testimonials. We post testimonials that may contain personal information on our Services.
• To safeguard our Services. We may handle your data as part of our efforts to maintain the safety and security of our services, including fraud monitoring and prevention.
• To assess and enhance our services, products, marketing, and your overall experience. We may process your information when we deem it essential to detect use trends, establish the success of our promotional programs, and evaluate and enhance our Services, goods, marketing, and your experience.
• To identify use trends. We may process information about how you use our Services in order to have a better understanding of how they are utilized and to enhance them.
• To fulfill our legal responsibilities. We may treat your data to comply with our legal obligations, to react to legal demands, and to establish, exercise, or defend our legal rights.

WHAT LEGAL FOUNDATIONS DO WE RELY ON TO PROCESS YOUR DATA?

We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, such as with your consent to comply with laws, to provide you with services, to enter into or fulfill our contractual obligations, to protect your rights, or to pursue our legitimate business interests.

If you have given us particular permission (i.e., express consent) to use your personal information for a specific purpose, or if your permission may be inferred from the circumstances, we may handle your information (i.e., implied consent). You are free to revoke your permission at any time.

In some extreme circumstances, relevant law may authorize us to handle your information without your consent, such as the following:

• If collection is plainly in the individual's best interests and consent cannot be acquired in a timely manner, the collection may proceed.
• For investigations and the prevention of fraud
• For commercial transactions if specific requirements are satisfied
• If it is contained in a witness statement and its gathering is essential for assessing, processing, or settling an insurance claim, then it may be collected.
• For identifying injured, sick, or deceased individuals and contacting with their next-of-kin
• If we have cause to suspect a person has been, is being, or may become a victim of financial abuse, we will investigate.
• If it is reasonable to expect that collection and use with consent would compromise the availability or accuracy of the information, and the collection is reasonable for the purposes of investigating a breach of an agreement or a violation of the laws of Canada or a province, then the information may be collected without consent.
• If disclosure is necessary to comply with a subpoena warrant, court order, or court regulations governing the production of records, then disclosure will be made.
• If the information was created by a person in the course of their work, business, or profession and the collection is compatible with the purposes for which the information was produced, then the information may be collected.
• If the collection is intended only for journalistic, artistic, or literary purposes
• If the information is public and specified by the regulations, it may be disclosed.

WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may disclose information in the circumstances stated in this section and/or with the parties listed below.

Third-party vendors, consultants, and other service providers. We may share your information with third-party vendors, service providers, contractors, or agents ("third parties") that perform services for us or on our behalf and require access to such information to carry out their duties. We have in place arrangements with third parties that are meant to protect your personal information. This implies that they cannot do anything with your personal information without our express permission. Additionally, they will not disclose your personal information with any organization other than ours. In addition, they agree to protect the data they have on our behalf and maintain it for the time period we choose. These are the third parties with which we may share your personal information:

• Mobile and Web Analytics
• Google Analytical Services

Additionally, we may be required to release your personal information in the following instances:

• Business Transfers. We may disclose or transfer your information in conjunction with or during talks of any merger, sale of corporate assets, financing, or purchase of all or part of our business by another firm.
• We may share your information with some Google Maps Platform APls when we use these services (e.g., Google MapsAPI, PlacesAPI). To learn more about Google's Privacy Statement, please visit this page.
• Affiliates. We may share your information with our affiliates, in which case those affiliates will be required to adhere to this privacy notice. Affiliates consist of our parent firm as well as any subsidiaries, joint venture partners, or other companies that we control or that are controlled jointly with us.
• Similar Users. When you provide personal information (such as by posting comments, submissions, or other content to the Services) or otherwise engage with public sections of the Services, such personal information may be accessible by all users and may be made publicly available outside the Services indefinitely. Similarly, other users will be able to access your activity descriptions, contact with you inside our Services, and view your profile.

HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your information for as long as necessary to achieve the purposes mentioned in this privacy notice, unless a longer retention period is mandated by law.

We will only retain your personal information for as long as necessary to fulfill the stated purposes, unless a longer retention time is needed or authorized by law (such as tax, accounting or other legal requirements). No reason described in this notice requires us to retain your personal information for longer than the duration of your account with us.

When we no longer have an ongoing legitimate business requirement to process your personal information, we will delete or anonymize the information.

If this is not feasible (for instance, if your personal information has been saved in backup archives), then we will safeguard your personal information and isolate it from any further processing until deletion is possible.

HOW DO WE KEEP YOUR INFORMATION SAFE?

We want to safeguard your personal information using a combination of organizational and technical security measures.

We have established reasonable and suitable technological and organizational security measures to preserve the confidentiality of any personal information we process. Despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Therefore, we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to circumvent our security and improperly collect, access, steal, or modify your information. Although we will do our best to secure your personal information, you assume all risk associated with its transmission to and from our Services. You must only access the Services from a secure location.

DO WE COLLECT DATA FROM CHILDREN?

We do not collect information from or market to minors under 18 years of age.

We do not seek information from or sell to children under the age of 18. By using the Services, you affirm that you are at least 18 years old, or that you are the parent or legal guardian of a child who is using the Services with your permission. If we discover that personal information of users under the age of 18 has been obtained, we will deactivate the account and take reasonable steps to erase the information from our databases. Please notify us at policy@thecarriagehouse.ca if you become aware that we have collected information from minors under the age of 18.

WHAT ARE YOUR RIGHTS TO PRIVACY?

In some locations, like Canada, you have the right to greater access to and control over your personal information. You may at any moment examine, modify, or end your account.

In certain locations, such as Canada, applicable data protection laws provide you with particular rights. These may include the rights I to seek access to and a copy of your personal information, (ii) to request rectification or deletion, (iii) to restrict the processing of your personal information, and (iv), where applicable, to data portability. You may also have the right to object to the processing of your personal information under certain conditions. You can submit such a request by contacting us using the information provided in the section below under "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?"

We will evaluate and respond to any requests in compliance with relevant data protection regulations.

You have the right to withdraw your consent at any time if we are relying on your consent to handle your personal information, which may be express or implicit consent depending on the applicable legislation. You may withdraw your permission at any time by contacting us using the information provided in the section below under "HOW MAY WE BE CONTACTED REGARDING THIS NOTICE?"

Note, however, that this will not impact the lawfulness of the processing that occurred prior to your withdrawal of consent, nor, where permitted by applicable legal, the lawfulness of the processing of your personal information undertaken on the basis of valid processing grounds other than consent.

CONTROLS FOR DISPLAY-ONLY FEATURES

Most web browsers, as well as some mobile operating systems and mobile applications, contain a Do-Not-Track ("DNT") function or setting that you may enable to indicate your privacy desire not to have your online browsing activity recorded and collected. There is currently no consistent technical standard for identifying and executing DNT signals. Consequently, we do not respond to DNT browser signals or any other technology that automatically expresses your want not to be tracked online. If a standard for online monitoring is adopted in the future that we are required to comply with, we will tell you of this practice in a subsequent version of this privacy notice.

HOW DO YOU ACCESS, UPDATE, OR DELETE THE INFORMATION WE COLLECT FROM YOU?

Depending on the laws of your country, you may have the right to seek access to the personal information we collect about you, to make changes to that information, or to request that we remove such information.

ARE UPDATES MADE TO THIS NOTICE?

In a nutshell, we will update this notice as needed to ensure compliance with applicable laws.

This privacy notice may be updated from time to time. The new version will be marked with an updated "Revised" date, and it will become effective as soon as it is made available. If we make substantial changes to this privacy notice, we may tell you by publicly displaying a notice or by directly emailing you a communication. We urge you to routinely check our privacy notice to be updated about how we protect your information.

HOW MAY WE BE CONTACTED REGARDING THIS NOTICE?

If you have any questions or concerns regarding this notice, please send an email to policy@thecarriagehouse.ca or send a letter to

Last modified on April 5, 2023.