Privacy Policy
On The Bop is a restaurant in Windsor, Ontario. This policy describes what the website does with your information. It is written to match what the system actually does — every retention period and right below is enforced by code, not just stated here.
To have your information removed, email [email protected] from, or quoting, the email address or phone number you used to order.
1. What we collect, and why
When you place an order
| What | Why | Where it goes |
|---|---|---|
| Name | Calling your order out | Our order records; the kitchen screen |
| Phone number | Reaching you about the order | Our order records; the kitchen screen |
| Email address | Receipt and confirmation | Our order records; our email provider |
| Pickup time, items, special instructions | Making your food | Our order records; the kitchen screen |
| Delivery address (catering only) | Delivering the order | Our order records. Not sent to the kitchen screen |
Card details are handled entirely by Square. We never see or store your card number — only whether the payment succeeded, the amount, and Square's reference for it.
When you browse the site
- How you arrived — the site you came from and any campaign tags in the link, so we know whether an ad or a post was worth doing. Stored with a one-way hash of your IP address, never the address itself.
- A visit cookie (
otb_vsid), so a returning visit is not counted as a new one.
Stored in your own browser, not on our servers
- Your name, phone and email from the last checkout, so you do not have to retype them.
- Your cart.
- Your Bop Tree and what you have ordered before, used to offer you the same order again in one tap.
- Your cookie choice.
Clearing your browser data removes all of this.
2. The Bop Tree and the in-store forest
Ordering grows a tree that is yours. It lives in your browser. So that it is not lost when you change phone or clear your browser, a copy is kept on our servers against a one-way hash of your phone number — we store the hash, not the number, and it can only be matched, never read back.
There is deliberately no way to look up a tree by phone number. Restoring your tree requires an order number together with the phone number on that order, which only you have.
Once a tree reaches the sapling stage it may appear in the shared forest on the website and on a screen in the shop. The forest is anonymous: it shows the name you gave the tree, never your own name, and the tree's shape is generated from a hashed value rather than anything that identifies you. If you would rather not appear, ask us and we will hide it.
3. Marketing email, and how consent works
If you give us an email address when you order, we may send you occasional updates about the shop. Under Canada's anti-spam law this is implied consent arising from your purchase, and it is valid for 24 months from that purchase. Each new order restarts that period.
We enforce that expiry automatically. If 24 months pass with no order and you have not separately asked to receive emails, you stop receiving them without having to do anything.
If you sign up through the form on the site, that is express consent and it does not expire.
If you unsubscribe, that decision outranks everything after it — a later order will not put you back on the list. Only asking us again will.
Every email has a one-click unsubscribe. You can also turn off open and click tracking from the preferences link in any email.
We keep a record of each consent decision — the basis, the date, and the order it came from — because we have to be able to show consent existed. That record is kept even after you are erased, with your address replaced by a hash.
We do not sell or rent your information to anyone.
4. How long we keep things
These are enforced by a job that runs nightly.
| Data | Kept for |
|---|---|
| Orders | Kept as financial records. Your personal details are removed on request (§5) |
| Visitor and referral analytics | 400 days |
| Email delivery logs | 400 days |
| Payment gateway logs | 400 days |
| Bop Tree, if untouched | 3 years |
| Newsletter subscription | Until you unsubscribe or ask to be erased |
| Consent records | Kept as evidence, pseudonymised once you are erased |
5. Your rights
- Know what we hold about you.
- Correct anything wrong.
- Be erased. We remove your name, phone, email, delivery address and any instructions from your past orders, and delete your newsletter subscription, promotion entries, email logs and Bop Tree. The orders themselves stay — they are financial records we are required to keep — but they no longer say who placed them. This cannot be undone.
- Withdraw consent to marketing email at any time.
Email [email protected]. We respond within 30 days. Unsubscribe requests take effect immediately.
6. Who else sees your information
| Who | What they get | Why |
|---|---|---|
| Square | Your payment details, directly from your browser | Taking the payment |
| Our email provider | Your email address and the message | Receipts and updates |
| Google Maps | Your browser's request, only if you accept map cookies | Showing where we are |
| Our kitchen display | Name, phone, order contents | Making your food |
If you post a review or comment about us on Google, Instagram or Facebook, it is mirrored into our admin tools so we can reply. That content is already public on those platforms; we receive nothing private.
7. Cookies
- Essential — your cart, saved checkout details, Bop Tree and cookie choice, all stored in your browser. Always on; the site does not work without them.
- Google Maps — loaded only if you accept. Google may set its own cookies.
- Square payments — loaded only when you open the checkout.
You choose on your first visit, and personalisation stays off until you do.
8. Security, honestly stated
- Payments go directly from your browser to Square. Card data never reaches us.
- Phone numbers used for Bop Trees and IP addresses used for analytics are stored as one-way hashes.
- Access to customer information is limited to the shop's own staff accounts, and every look at or change to customer personal data is logged against the account that did it.
- No system is perfectly secure, and we do not claim otherwise.
9. Children
The site is not directed at children under 13 and we do not knowingly collect their information.
10. Changes
If this policy changes we update the date at the top. Consent records store the version of the policy in force when you consented, so we can always tell what you actually agreed to.