Privacy Policy
Effective Date: January 15, 2026
We're PizzaPizza, and we take your privacy seriously. This document explains how we handle your information when you interact with our national cuisine training programs. We've written this in plain language because legal jargon helps no one.
Who We Are and What This Covers
PizzaPizza operates from our location at 4250 1re Av., Québec, QC G1H 3H3 (Galeries Charlesbourg – Food Court). This policy applies to all interactions you have with us—whether you're browsing our website, enrolling in a training program, or contacting us about our services.
We're governed by Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and we follow its principles in everything we do.
Information We Collect
We collect different types of information depending on how you interact with us. Here's what that looks like in practice:
Information You Give Us Directly
- Contact details when you inquire about our programs (name, email, phone number)
- Enrollment information when you register for training courses
- Payment information when you pay for our services
- Dietary restrictions or preferences relevant to our cuisine training
- Feedback and communications you send us
Information We Collect Automatically
- Website usage data (pages visited, time spent, navigation patterns)
- Device information (browser type, operating system, IP address)
- Location data (general city/region based on IP address)
- Attendance records for training sessions you participate in
| Data Type | Purpose | Retention Period |
|---|---|---|
| Contact Information | Communication and service delivery | Active relationship + 2 years |
| Payment Records | Transaction processing and accounting | 7 years (legal requirement) |
| Training Records | Certificate issuance and progress tracking | Active relationship + 5 years |
| Website Analytics | Service improvement | 14 months |
| Marketing Preferences | Communication preferences | Until you withdraw consent |
How We Use Your Information
We're not in the business of hoarding data. Everything we collect serves a specific purpose:
- Delivering our training programs: We need your information to schedule classes, send you materials, issue certificates, and generally make sure you get what you signed up for.
- Processing payments: Financial transactions require certain information. We keep these records for accounting and legal purposes.
- Improving our services: We look at usage patterns to understand what's working and what needs adjustment.
- Staying in touch: If you've agreed to receive updates, we'll send you information about new programs or relevant changes to our offerings.
- Meeting legal obligations: Sometimes the law requires us to keep certain records for specific periods.
Important: We won't use your information for purposes beyond what we've described here without asking you first. And we definitely won't sell your data to third parties—that's not our business model.
Your Rights Under Canadian Law
PIPEDA gives you specific rights regarding your personal information. Here's what you can do and how to actually do it:
Access Your Information
You can request a copy of the personal information we hold about you. We'll provide it within 30 days in a format that makes sense.
Correct Inaccuracies
If something we have on file is wrong, let us know. We'll update it promptly and notify anyone we've shared it with if necessary.
Withdraw Consent
You can withdraw consent for marketing communications or certain data uses at any time. This won't affect services you've already paid for.
Request Deletion
You can ask us to delete your information, though we may need to keep some records for legal or contractual reasons.
File a Complaint
If you believe we've mishandled your information, you can file a complaint with the Office of the Privacy Commissioner of Canada.
Understand Automated Decisions
We don't use automated decision-making that significantly affects you, but if we ever do, we'll explain how it works.
To exercise any of these rights, contact us at support@pizzrarizza.org or call (613) 384-4705. We'll respond within 30 days and won't charge you unless your request is clearly unfounded or excessive.
How We Protect Your Information
Security isn't just about technology—though that's part of it. Here's our approach:
Technical Measures
- Encrypted data transmission using SSL/TLS protocols
- Secure storage systems with access controls and authentication
- Regular security updates and patches to our systems
- Encrypted backups stored in secure locations
Organizational Measures
- Limited access—only staff who need your information to do their jobs can see it
- Confidentiality agreements with all employees and contractors
- Regular training on privacy practices and data protection
- Clear policies for handling and disposing of personal information
Physical Security
- Secure facilities with controlled access
- Locked filing cabinets for physical documents
- Secure disposal procedures for documents containing personal information
In Case of a Breach: If something goes wrong and your information is compromised in a way that poses a real risk of harm, we'll notify you and the Privacy Commissioner as required by law. We'll also tell you what happened and what we're doing about it.
Sharing Your Information
We don't share your information casually. When we do share it, here's who might see it and why:
Service Providers
We work with third-party companies that help us run our business. This might include payment processors, email service providers, or scheduling software. These companies can only use your information to provide services to us, and they're bound by contracts to protect it.
Legal Requirements
Sometimes we're legally required to share information—like responding to a valid court order or complying with tax regulations. When this happens, we'll only share what's legally required.
Business Transfers
If PizzaPizza is sold or merged with another company, your information would be part of that transfer. The new owner would have to follow this privacy policy unless they notify you otherwise.
What We Don't Do: We don't sell, rent, or trade your personal information to marketers or other third parties. That's not how we operate.
Data Retention and Deletion
We don't keep information longer than necessary. Here's how we decide what stays and what goes:
Active Relationships
While you're actively using our services, we keep the information needed to provide those services effectively.
After You Leave
Once you're no longer actively engaged with us, we keep certain records for specific periods:
- Financial records: 7 years (required by Canadian tax law)
- Training records and certificates: 5 years after program completion
- General contact information: 2 years after last interaction
- Marketing preferences: Until you unsubscribe or we conduct a cleanup (every 3 years)
Deletion Process
When retention periods expire, we permanently delete or anonymize your information. This means overwriting digital files and securely shredding physical documents—not just moving them to a recycling bin.
Cookies and Tracking Technologies
Our website uses cookies—small files stored on your device that help the site function and help us understand how people use it.
Types of Cookies We Use
- Essential cookies: These make the website work. You can't really disable these and still use the site effectively.
- Analytics cookies: These help us understand which pages are popular, how long people stay, and where they came from. We use this to improve the website.
- Preference cookies: These remember your choices (like language preferences) so you don't have to set them every visit.
You can control cookies through your browser settings. Blocking all cookies might break some website functionality, but that's your choice to make.
Children's Privacy
Our training programs are designed for adults. We don't knowingly collect information from anyone under 16 without parental consent. If you're under 16 and interested in our programs, have a parent or guardian contact us.
If we discover we've accidentally collected information from a child without proper consent, we'll delete it promptly.
International Data Transfers
We primarily operate within Canada, and your information is stored on Canadian servers. However, some of our service providers may process data outside Canada.
When this happens, we ensure these providers meet Canadian privacy standards through contractual agreements. If you're concerned about where your data goes, contact us and we'll provide specific details about our current service providers.
Marketing Communications
If you've signed up to receive updates from us, here's what to expect:
- Information about new training programs and schedule changes
- Tips and resources related to national cuisine preparation
- Occasional updates about PizzaPizza news and developments
You can unsubscribe at any time by clicking the unsubscribe link in any email, contacting us directly, or adjusting your preferences in your account. We'll process unsubscribe requests within 10 business days.
Note: Even if you unsubscribe from marketing, we'll still send you essential communications about programs you're enrolled in or services you've purchased.
Changes to This Policy
We review and update this policy periodically. When we make significant changes, we'll notify you by email (if we have your address) and post the updated policy on our website with a new effective date.
Minor changes—like updating a phone number or clarifying existing practices—won't trigger a notification, but you'll always find the most current version at pizzrarizza.org/privacy-notice.html.
Questions or Concerns?
If something in this policy isn't clear, or if you have questions about how we handle your information, we're here to help.
We aim to respond to all privacy inquiries within 5 business days. If your concern requires more investigation, we'll let you know what's happening and when to expect a full response.