Privacy Policy

Dishly ("we", "us") operates in British Columbia, Canada, and is committed to protecting your personal information in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, British Columbia's Personal Information Protection Act (PIPA). This policy explains what information we collect, why, and how it's used.

1. Information We Collect

• Account details: name, email address, phone number, password
• Order details: items ordered, delivery or pickup address, order history, special instructions
• Payment information: processed directly by Stripe, our payment processor — Dishly does not receive or store your full card number
• Restaurant Partner details: business name, address, banking/payout details (via Stripe Connect), menu content
• Usage information: device, browser, and general usage data collected automatically to keep the platform secure and working correctly

2. How We Use Your Information

• To process and fulfill orders, including sharing relevant order details with the Restaurant Partner you ordered from
• To process payments and, where applicable, calculate and collect platform commission
• To send order confirmations, status updates, and account notifications by email and, if you opt in, SMS text message
• To operate loyalty point programs on behalf of Restaurant Partners
• To provide customer support and respond to inquiries
• To maintain the security, integrity, and performance of the platform

3. Who We Share Information With

We do not sell your personal information. We share it only as needed to operate the platform:

• With the Restaurant Partner you order from, to the extent needed to fulfill your order
• With Stripe, to process payments and, for Restaurant Partners, payouts
• With Twilio, to deliver SMS notifications you've opted into
• With our hosting and infrastructure providers, solely to operate the platform
• Where required by law or a valid legal request

4. Data Storage & Security

Your information is stored on secured servers with access restricted to what's necessary to operate the platform. No online service can guarantee absolute security, but we take reasonable technical and organizational measures to protect your information against unauthorized access, loss, or misuse.

5. Cookies

We use essential cookies to keep you signed in, remember your cart, and keep the platform secure. These are required for Dishly to function and cannot be disabled while using the site.

6. Data Retention

We retain personal information for as long as needed to provide the service, comply with legal, tax, and accounting obligations, and resolve disputes, after which it is deleted or anonymized.

7. Your Rights

Under PIPEDA and BC's PIPA, you have the right to access the personal information we hold about you, request corrections, and withdraw consent for certain uses (subject to legal or contractual restrictions). To make a request, contact us at privacy@dishly.ca. If you're not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia.

8. Children's Privacy

Dishly is not directed at children, and we do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions or requests regarding your personal information can be sent to privacy@dishly.ca.