Privacy Policy
This policy explains what information Spicy Mango Kitchen ("we", "us", "our") collects from you when you use spicymangokitchen.ca, how we use it, who we share it with, and what choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the rules of the Ontario Privacy Commissioner.
1. What we collect
- Order info — name, phone number, pickup or delivery address, items ordered, special notes, total. Saved to your browser so the cart survives page refreshes.
- Catering quote requests — name, email, phone, event date, party size, event type, and your notes. Sent to us by email when you submit.
- Contact form messages — name, email, your message. Sent to us by email when you submit.
- Newsletter signups — email address only, if you choose to subscribe.
- Anonymous usage — page views, browser type, approximate city, device type, and referrer. Used only in aggregate to improve the site.
2. How we use it
- To prepare and fulfil your order (calling you if we're missing a detail).
- To respond to catering, contact, and newsletter requests.
- To prevent fraud and keep the site secure.
- To understand which pages are popular and which need work — anonymous totals only.
We do not sell, rent, or trade your personal information to third parties for marketing.
3. Cookies & local storage
Our site uses your browser's localStorage (not tracking cookies) to remember:
- What's in your cart (so a refresh doesn't empty it)
- Your last order (so "Reorder" works)
- Your loyalty stamp count (9 orders = 10th free)
- Whether you've enabled dark mode
You can clear this any time via your browser settings (Site Data → Clear). Doing so empties your cart and resets the loyalty counter. We never set advertising cookies or share data with ad networks.
4. Third parties we share with
- Stripe — when you choose to pay online, your card details are handled by Stripe's checkout. We never see your card number. Read their policy: stripe.com/privacy.
- WhatsApp — clicking our chat button opens WhatsApp in a new tab. Their privacy policy governs what they collect: whatsapp.com/legal.
- Uber Eats / DoorDash — only if you choose to order through them. We have no access to your account with them.
- Hosting (Netlify) — serves our pages. They log basic request metadata (IP, user agent) for security and abuse prevention.
5. How long we keep it
- Order info — kept locally in your browser only; we receive it via phone/email confirmation, not stored on our server.
- Catering quotes — kept in our email inbox for 2 years for rebooking reference, then deleted.
- Contact form messages — same, 2 years.
- Newsletter list — until you unsubscribe.
6. Your rights
You can ask us at any time to:
- Tell you what personal info we have about you
- Correct anything that's wrong
- Delete your information (subject to legal record-keeping requirements)
- Unsubscribe from our newsletter (one click, in every email we send)
Email hello@spicymangokitchen.ca with your request. We respond within 30 days.
7. Children
Our site is not directed at children under 13. We don't knowingly collect information from children. If you believe a child has provided info, email us and we'll delete it.
8. Security
The site runs over HTTPS (TLS) so your browser-to-server traffic is encrypted. Payment details go directly to Stripe's PCI-DSS Level 1 infrastructure. We never store credit card numbers on our systems.
9. Changes to this policy
If we update this policy, we'll change the "Last updated" date at the top. Material changes (e.g. a new type of data collection) will be announced on the homepage for 30 days before they take effect.
10. Contact us
Spicy Mango Kitchen
2407 Eglinton Ave E, Scarborough, ON M1K 2C5
hello@spicymangokitchen.ca
(416) 265-5556
If you're not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.