Last updated: August 25, 2026
When you use the Platform, we may collect: your name, email address, and phone number; delivery or pickup addresses; order history; any optional notes you add to an order; optional tip amounts on delivery orders; and, for restaurant accounts, business details like menu content, pricing, and payout information. We do not collect or store full payment card numbers — those are handled directly by Stripe.
We use this information to process and fulfill orders, communicate order updates and receipts, operate restaurant accounts and payouts, and improve the Platform. We do not sell your personal information to third parties.
We rely on a small number of third-party providers to operate the Platform, each of which processes relevant data under their own privacy terms:
The third-party providers listed above may store or process your information on servers located outside of Canada, including in the United States. Where that happens, your information becomes subject to the laws of that jurisdiction, which may differ from Canadian privacy law.
We use industry-standard technical safeguards to protect your information, including encrypted data storage (via Supabase), encrypted connections (HTTPS), and secure payment tokenization (via Stripe) so we never handle your raw card details directly. No system is perfectly secure, but we take reasonable precautions appropriate to the sensitivity of the data we hold.
Authorized personnel at Arrowfayre can access account and order information across the Platform as needed to operate the service — for example, to provide support, investigate a payment or delivery issue, prevent fraud, or maintain accurate financial records. This access is limited to what's necessary for these purposes. Restaurants do not have access to this platform-wide view; each restaurant can only see its own orders and customers, as described above.
We retain account and order information for as long as your account is active and as needed to comply with legal, tax, and accounting obligations. You can request deletion of your account by contacting us.
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to access the personal information we hold about you, request corrections, and request its deletion. To make a request, or with any other privacy question, contact our designated Privacy Officer at arrowfayre@outlook.com.
We use essential cookies to keep you signed in and to remember basic session information. We do not use third-party advertising or tracking cookies.
The Platform is not directed at children, and we do not knowingly collect personal information from anyone under 13.
We may update this Privacy Policy from time to time. We'll update the date at the top of this page when we do.
Questions about this Privacy Policy, or requests regarding your personal information, can be sent to arrowfayre@outlook.com.