Privacy Policy

7eats Inc. ("7eats", "we", "our", or "us") operates the 7eats marketplace at 7eats.ca. This Privacy Policy explains how we collect, use, share, retain, and protect personal information when people use our website, customer app, cook tools, checkout, messaging, support, and related services.

We are based in Ontario, Canada and aim to handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), and other laws that apply to our business.

Contact us with privacy questions, access requests, correction requests, deletion requests, withdrawal of consent, or complaints.

We collect information needed to operate the marketplace, process orders, support customers and cooks, improve safety, prevent fraud, and meet legal obligations.

3.1 Account and Profile Information

We may collect your name, email address, phone number, password or authentication information, date of birth, neighborhood, profile photo, role, account status, notification preferences, and other information you add to your account.

3.2 Customer Marketplace Information

We may collect saved listings, followed cooks, dietary preferences, allergies, goals, order history, subscriptions, order notes, pickup or delivery details, messages, reviews, support requests, and cancellation or refund records.

3.3 Cook and Business Information

For cooks and applicants, we may collect kitchen name, business contact details, address, pickup address, website, social links, business phone and email, contact person information, menu details, listing photos, capacity, delivery settings, food handler certificate details, certificate uploads, review notes, Stripe Connect status, and payout-related identifiers.

3.4 Payment Information

Payments are processed by Stripe. 7eats does not store full card numbers or cook bank account details. We may store Stripe customer IDs, connected account IDs, payment intent IDs, charge IDs, transfer IDs, refund IDs, payout IDs, subscription IDs, payment status, amounts, currency, fees, deposits, and timestamps needed to run the marketplace.

3.5 Technical, Security, and Usage Information

We may collect IP addresses, hashed IP addresses, device and browser information, user agents, session data, cookies, logs, error reports, performance data, rate-limit records, security events, and metadata about how the platform is used.

3.6 Waitlist and Scheduling Information

If you join our waitlist, book a call, or contact us before launch, we may collect your email address, name, scheduling details, messages, and related communication records.

We use personal information for the following purposes:

• create, authenticate, secure, and manage user accounts;
• process orders, subscriptions, payments, refunds, and payouts;
• support pickup, delivery, messaging, reviews, and notifications;
• review cook applications, certificates, listings, and compliance;
• personalize marketplace features such as saved listings, followed cooks, preferences, and account settings;
• send transactional emails, SMS messages, and service notices;
• send marketing messages only where we have consent or another lawful basis under CASL;
• respond to questions, disputes, refunds, and support requests;
• investigate food safety, allergen, fraud, payment, security, and policy concerns;
• debug, monitor, protect, and improve the platform;
• meet legal, tax, accounting, regulatory, and recordkeeping duties.

We generally collect and use personal information with your consent, when it is needed to provide the service you request, when it is reasonably required for safety or security, or when the law allows or requires us to do so.

• You can choose not to provide optional information, but some features may not work without required account, order, payment, or cook onboarding information.
• You can unsubscribe from marketing emails using the unsubscribe link in those emails.
• You can update some account and notification preferences from your account settings.
• You may withdraw consent where consent is the basis for processing, subject to legal, contractual, safety, and operational limits.

7eats uses cookies, local storage, and similar technologies for essential platform functions such as authentication, session security, remembering cookie preferences, fraud prevention, rate limiting, and checkout functionality.

We do not currently use Google Analytics, Meta Pixel, advertising pixels, or similar behavioural advertising trackers. If we add analytics or advertising tools that use cookies or similar identifiers, we will update this policy and our consent flow where required.

Google Search Console may be used to understand search performance and verify site ownership. It does not add tracking scripts or cookies to our site for visitor behaviour tracking.

We use trusted service providers to operate 7eats. These providers may process personal information for us or receive information needed to provide their services. Some providers process information outside Canada.

We may share personal information in the following ways:

• with cooks and customers as needed to complete orders, resolve issues, support pickup or delivery, and show marketplace activity;
• with service providers that process information for hosting, payments, authentication, messaging, monitoring, storage, mapping, support, and communications;
• with payment providers, banks, card networks, and dispute processors to handle payments, refunds, fraud, chargebacks, and payouts;
• with public health units, regulators, law enforcement, insurers, or advisors when needed for safety, legal, fraud, or compliance reasons;
• in connection with a business transaction such as financing, merger, acquisition, reorganization, or sale of assets;
• with your consent or at your direction.

We do not sell personal information in the ordinary sense of selling customer lists to data brokers.

Some of our service providers are located in or process information in the United States and other jurisdictions. Personal information processed outside Canada may be accessible to courts, law enforcement, national security authorities, or regulators in those jurisdictions according to local law.

We remain responsible for personal information under our control and use contractual, technical, and organizational measures intended to provide a comparable level of protection when information is processed by service providers.

We keep personal information only as long as reasonably needed for the purposes described in this policy, unless a longer period is required or allowed by law.

• Account records are kept while your account is active and for a reasonable period after closure for security, tax, legal, dispute, and recordkeeping reasons.
• Order, payment, payout, refund, subscription, and tax-related records may be retained for legal, accounting, chargeback, audit, and business purposes.
• Cook application, certificate, review, and compliance records may be kept while the cook uses 7eats and for a reasonable period after.
• Safety, allergen, fraud, dispute, and support records may be kept as needed to protect users and the platform.
• Waitlist records are retained until the launch purpose has been fulfilled or until you unsubscribe, unless you opt in to continued communications.

We use reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No online system is perfectly secure, so we cannot guarantee absolute security.

If we experience a breach of security safeguards involving personal information under our control, we will assess whether it creates a real risk of significant harm. Where required by PIPEDA, we will notify affected individuals, report to the Office of the Privacy Commissioner of Canada, and keep required breach records.

Subject to legal and operational limits, you may request access to, correction of, or deletion of personal information we hold about you. You may also ask questions or make a complaint about how we handle your information.

• Right of access - request a copy of your personal information.
• Right to correction - ask us to correct inaccurate or incomplete information.
• Right to deletion - ask us to delete information where deletion is legally and operationally possible.
• Right to withdraw consent - withdraw consent where consent is the basis for processing.

To make a request, email team@7eats.ca. We may need to verify your identity before responding. We aim to respond within 30 days unless more time is reasonably required.

7eats is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, contact us and we will take appropriate steps.

Some platform features may require users to meet minimum age or legal capacity requirements. Cooks must be legally able to operate their food business.

We may update this Privacy Policy as 7eats changes. When we do, we will update the "Last updated" date on this page. If changes are material, we may provide additional notice through the platform, email, or another appropriate method.