Privacy Policy

1. Who we are

This Privacy Policy explains how DhakaYeah ("DhakaYeah", "we", "us", or "our") handles personal information when you visit www.dhakayeah.ca (the "Site") or place an order with us.

For privacy questions or requests, contact us at the email or phone number above. We handle personal information under applicable Canadian and British Columbia privacy laws, including the Personal Information Protection Act (British Columbia) and, where applicable, the Personal Information Protection and Electronic Documents Act.

2. Information we collect

• Order information: name, phone number, email address, items, quantities, selected options, prices, totals, and order details needed to process and prepare your pickup order.
• Messages and feedback: information and contact details you provide when contacting us by email, phone, or social media.
• Technical information: our hosting, database, security, and performance providers may process technical details such as IP address, browser and device information, pages visited, and access times to operate and protect the Site.
• Device storage: the Site may use browser storage for information needed for its functions. Cart contents are used to support your current ordering session.

The Site does not currently process card payments directly or store full payment card numbers. If payment instructions or a payment link are provided separately for an order, the payment provider and information it receives are subject to that provider's terms. TODO: Confirm and name the payment provider and payment flow before publishing.

3. How we use your information

We use personal information to receive, validate, prepare, and fulfil orders; contact you about an order; respond to questions; operate, secure, and improve the Site and menu; keep required business records; and comply with legal obligations or protect our rights. We use information only for purposes a reasonable person would consider appropriate in the circumstances, unless you consent to another use.

4. Consent

When you provide information or place an order, you consent to its collection, use, and disclosure as described in this Policy and as reasonably necessary to provide the service you requested. You may withdraw consent by contacting us, subject to legal or contractual limits. If you withdraw consent needed to fulfil an order, we may be unable to provide that service.

5. Who we share information with

We do not sell personal information. We may share it only as needed with:

• Service providers: Vercel for website hosting and performance, Supabase for database and backend services, and our configured email provider for order messages. Twilio may be used for SMS or WhatsApp notifications when configured.
• Third-party ordering platforms: if you choose to order through Uber Eats, DoorDash, Skip The Dishes, or Fantuan, that platform handles your information under its own privacy policy. We do not control its practices.
• Other recipients where appropriate: authorities or professional advisers when required by law or necessary to protect rights, safety, or property, and a successor business in a sale or reorganization, subject to applicable privacy protections.

6. Cookies and similar technologies

Our Site and service providers may use cookies or browser storage needed for site functionality, security, or performance. Optional analytics may be enabled through deployment configuration. You can manage or delete cookies through your browser settings; blocking some storage may affect site functionality. TODO: Confirm whether optional analytics is enabled in production and update this section if the tools change.

7. Storage, transfers, and security

Information is handled by service providers that may process or store it outside Canada, including in the United States, where it may be subject to local laws. We use reasonable safeguards such as access controls and encrypted connections. No transmission or storage method is completely secure, and we cannot guarantee absolute security.

8. How long we keep information

We retain personal information only as long as reasonably needed for the purposes described in this Policy or as required by law, then delete or anonymize it where appropriate. TODO: Confirm and document the retention periods for order records and customer messages.

9. Your rights

Subject to applicable law, you may ask us to provide access to or correct personal information we hold about you, explain how it has been used, or delete it where we are not required to retain it. Contact us using the details in Section 1. We may need to verify your identity before responding. You may also contact the Office of the Information and Privacy Commissioner for British Columbia at oipc.bc.ca.

10. Marketing messages

We do not use the Site's ordering flow to subscribe customers to promotional messages. If this changes, we will request any consent required by law and provide a way to unsubscribe from marketing messages.

11. Children

The Site is not directed to children, and we do not knowingly collect personal information from children without appropriate consent. If you believe a child has provided us with personal information, contact us so we can review and address the request.

12. Links to other websites

The Site may link to delivery platforms, maps, social media, or other websites we do not control. Their content and privacy practices are governed by their own policies. Please review those policies before using their services.

13. Changes to this Policy

We may update this Policy from time to time. The current version will be posted on this page with an updated date. Please review it periodically.

14. Contact us

For questions or requests about privacy, contact DhakaYeah at contact@dhakayeah.ca, call +1 (672) 922-7677, or write to Unit 6, 8086 130 Street, Surrey, BC V3W 8J9, Canada.