Privacy Policy

Introduction

Welcome to Sushi Bay Japanese Cuisine. We respect your privacy and are committed to protecting the personal information you provide when visiting our website, placing an order, making a payment, contacting us, or otherwise interacting with our restaurant.

This Privacy Policy explains what information we may collect, how we use it, when it may be shared with service providers, and the choices available to you.

This policy applies to Sushi Bay Japanese Cuisine, located at 450 Lahave Street, Bridgewater, Nova Scotia, and our website at sushibaybridgewater.com.

Information We Collect

Website Browsing

Our main website does not directly store customer payment information. When you browse our website, certain technical and usage information may be collected automatically, including:

• IP address and approximate geographic location
• Browser and device type
• Operating system
• Pages viewed and website usage patterns
• Referral or traffic source
• General website analytics and performance information
• Security-related information used to identify suspicious or malicious activity

We may use services such as Cloudflare and Google Analytics to help operate, secure, and understand the use of our website.

Orders and Restaurant Services

When you place an order, make a reservation, make a payment, contact us, or otherwise use our restaurant services, we may collect information such as:

• Your name
• Telephone number
• Email address, when provided
• Delivery or pickup information
• Order details and transaction history
• Customer notes or preferences when voluntarily provided
• Information required to process refunds, adjustments, or customer-service requests

Payment Processing and Clover

Sushi Bay currently uses Clover as our point-of-sale and payment-processing platform.

When you make a payment, payment information is processed through Clover and its associated payment-processing systems. Information processed through Clover is subject to Clover's applicable privacy, security, and payment-processing practices.

Sushi Bay does not intentionally store full payment-card numbers, card security codes, or similar sensitive payment credentials on our main website.

Previous Use of Square

Before transitioning to Clover, Sushi Bay used Square for point-of-sale and payment-processing services.

Historical transactions processed while Square was in use may continue to be retained within Square's systems in accordance with applicable retention requirements, service agreements, and legitimate business or legal requirements.

Historical information may include transaction details and limited customer information that was provided or generated in connection with a transaction.

Our transition to Clover does not necessarily result in the immediate deletion of historical transaction records held by Square where those records are required for accounting, tax, fraud-prevention, payment disputes, chargebacks, legal compliance, or other legitimate business purposes.

Online Ordering

When you place an order through an online ordering system or third-party ordering service, information necessary to process your order may be collected.

• Name and contact information
• Pickup or delivery information
• Items ordered
• Transaction information
• Payment information processed by the applicable payment provider
• Order history and preferences

Payment information is processed by the applicable payment provider and is not stored directly on the Sushi Bay main website.

Third-Party Service Providers

We use third-party service providers to help operate our restaurant, process transactions, maintain our website, and provide services to customers.

Depending on how you interact with Sushi Bay, these service providers may include:

• Clover: Our current point-of-sale and payment-processing provider
• Square: Our previous point-of-sale and payment-processing provider, which may retain historical transaction information
• Cloudflare: Website security, content delivery, performance, and related website services
• Google Analytics: Website traffic and usage analytics
• Online ordering, delivery, reservation, communication, hosting, and technology service providers
• Financial institutions and payment-processing partners involved in processing transactions

Third-party providers maintain their own privacy policies, security practices, and data-processing procedures.

Some service providers may process or store information outside Nova Scotia or Canada. Where information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction.

Third-Party Ordering and Delivery Platforms

Orders placed through independent third-party services, such as DoorDash or similar delivery and ordering platforms, are also subject to the privacy policies and terms of those providers.

These companies operate their own systems and may independently collect information from you. We encourage customers to review the privacy policy of any third-party platform they choose to use.

Cloudflare

We use Cloudflare services to support the operation, availability, performance, and security of our website.

Cloudflare may process technical information such as:

• IP addresses
• Browser and device information
• Request and traffic information
• Security-related information

This information may be used to provide content delivery, website performance, bot protection, DDoS protection, and other cybersecurity services.

Google Analytics

We may use Google Analytics to better understand how visitors interact with our website.

Analytics information may include:

• Pages viewed
• Time spent on the website
• General visitor flow
• Browser and device information
• Traffic and referral sources
• Approximate geographic information
• Aggregated demographic information when available

Google Analytics may use cookies and similar technologies.

You can manage cookies through your browser settings or use the Google Analytics Opt-out Browser Add-on .

For more information, review Google's Privacy Policy .

How We Use Personal Information

Personal information may be used to:

• Process and fulfill restaurant orders
• Process payments, refunds, and transaction adjustments
• Communicate with you about an order, reservation, or inquiry
• Provide customer support
• Maintain appropriate transaction and accounting records
• Prevent fraudulent or unauthorized transactions
• Protect our website, systems, customers, and employees
• Improve our restaurant services and website
• Understand website usage and performance
• Measure the effectiveness of our website and marketing efforts
• Resolve payment disputes and chargebacks
• Meet tax, accounting, regulatory, and legal obligations
• Respond to lawful requests where required

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy legitimate business, accounting, tax, payment-dispute, security, and legal requirements.

Different types of information may therefore have different retention periods.

Transaction information processed through Clover, historical information processed through Square, and information held by other third-party services may also be retained according to those providers' applicable requirements and policies.

When information under our control is no longer reasonably required, we take reasonable steps to securely delete, anonymize, or dispose of it where appropriate.

Data Security

We use reasonable administrative, technical, and physical safeguards appropriate to the nature and sensitivity of the information we handle.

• Secure Data Transmission: Secure encrypted connections are used for website traffic where supported
• Access Controls: Access to customer and transaction information is limited to individuals who require it for legitimate business purposes
• Payment Processing: Established third-party payment providers are used to process payment-card transactions
• Website Security: Security and threat-protection technologies are used to help protect our website
• Fraud Prevention: Payment and technology providers may use fraud-detection and security measures to identify suspicious transactions

No electronic system or method of transmission can be guaranteed to be completely secure. We therefore cannot guarantee absolute security, but we take reasonable measures to protect information under our control.

Privacy and Security Incidents

If we become aware of unauthorized access to, loss of, or disclosure of personal information under our control, we will investigate the incident and take appropriate steps based on the nature and circumstances of the incident and applicable legal requirements.

Where required by applicable privacy law, appropriate notifications or reports relating to qualifying privacy breaches will be provided.

Cookies and Similar Technologies

Our website may use cookies and similar technologies for:

• Essential website functionality
• Website security and fraud prevention
• Website analytics
• Performance monitoring
• Understanding how visitors interact with the website

You can control or delete cookies using your browser settings. Disabling certain cookies may affect some website functionality.

We do not intentionally use our main website to collect full payment-card information.

Your Privacy Rights

Subject to applicable law and certain exceptions, you may contact us to:

• Ask what personal information we hold about you
• Request access to personal information under our control
• Request correction of inaccurate or incomplete information
• Ask questions about how your information has been used or disclosed
• Withdraw consent where applicable
• Request deletion of information where appropriate
• Raise a concern about our privacy practices

Certain information may need to be retained for legitimate business, transaction, accounting, tax, fraud-prevention, dispute-resolution, or legal purposes even after a deletion request.

We may need to verify your identity before providing access to or making changes to personal information.

Requests involving information held directly by third-party providers may also need to be handled according to that provider's privacy processes.

Children's Privacy

Our website and restaurant services are intended for a general audience and are not designed specifically to collect personal information from children.

We do not knowingly use our website to solicit unnecessary personal information from children. If we become aware that personal information has been collected inappropriately, we will take reasonable steps to address the situation.

Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to:

• Our services
• Payment or technology providers
• Website functionality
• Business practices
• Privacy or security requirements
• Applicable laws or regulations

When this policy is revised, the Last Updated date at the top of the page will be changed.

Material changes may also be communicated through our website or other appropriate means.