Privacy Policy
Petit Lunch Inc. ("Petit Lunch", "we", "our", or "us") is committed to protecting the personal information of every person who uses our platform. This policy explains what information we collect, how we use it, and your rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25 / Bill 64).
Last updated: October 2026 · Effective date: October 2026
1. Who We Are
Petit Lunch is a Canadian school lunch platform that connects parents, schools, and food vendors. Our servers are located exclusively in Canada (Quebec and Ontario data centres). We do not transfer personal data outside of Canada.
Privacy contact: info@petitlunch.com
2. Information We Collect
2.1 Information you give us (contact form)
- Name
- Email address
- School or business name
- Role (school, food vendor, parent or other)
- Your message
2.2 Information collected automatically
We use Google Analytics 4 (GA4) only after you consent via the cookie banner. GA4 collects aggregated, anonymised data including:
- Pages visited and time spent
- Approximate geographic region (province-level)
- Device type and browser
- Referral source
We use GA4's Consent Mode v2 with analytics_storage defaulted to denied. No analytics cookies are set unless you click "Accept All".
2.3 Essential cookies
We store one item in your browser's localStorage (nml-cookie-consent) to remember your cookie preference. This is strictly necessary and does not track you.
3. How We Use Your Information
- To answer your message and follow up on your request
- To understand which regions and audiences are most interested in our platform
- To improve our website based on anonymous usage data (only with your consent)
- To respond to your messages and questions
We do not sell, rent, or trade your personal information with any third party. We do not use your information for advertising profiling or automated decision-making.
4. Legal Basis for Processing (Quebec Law 25)
Under Quebec's Law 25, we process your personal information on the basis of your explicit consent at the time of submission (contact form) or cookie consent (analytics). You may withdraw consent at any time.
5. Data Retention
Contact messages are kept as long as needed to answer and follow up on your request, for a maximum of 3 years, after which they are deleted. You may request deletion at any time by emailing us.
6. Third-Party Services
| Service | Purpose | Data location |
|---|---|---|
| HubSpot | Keeping track of contact messages and our follow-up | United States |
| Resend | Delivering contact messages to our team and our reply email to you | United States |
| Cloudflare Turnstile | Checking that a contact form is sent by a person, not a bot | United States (global network) |
| Google Analytics 4 | Anonymous site traffic analysis (consent-gated) | United States (only with your consent) |
| Vercel | Website hosting and delivery | United States (global edge network) |
These services may store and process your information outside Quebec and Canada, mainly in the United States, where it may be accessed by courts and authorities under the laws of that country. We choose providers that protect personal information under written agreements.
7. Your Rights
Under PIPEDA and Quebec Law 25 you have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — ask us to correct inaccurate information
- Deletion — request that we delete your personal information
- Portability (Law 25) — receive your data in a structured, commonly used format
- Withdraw consent — at any time, without penalty
To exercise any right, email info@petitlunch.com. We will respond within 30 days.
8. Cookies and Tracking
We use the minimum cookies necessary. The cookie banner on your first visit lets you choose:
- Essential Only — only
nml-cookie-consentin localStorage; no tracking whatsoever - Accept All — enables Google Analytics 4 (anonymised aggregates, no individual profiling)
You can change your preference at any time by clearing your browser's localStorage and reloading the page.
9. Security
Petit Lunch uses HTTPS (TLS 1.3) for all data in transit. Contact form messages are sent only over encrypted connections, to the services listed above. We do not store payment information on this marketing site.
10. Children's Privacy
This marketing site is intended for adults (school administrators, food vendors, and parents). Petit Lunch does not knowingly collect personal information from children under 16.
11. Changes to This Policy
We will post any material changes to this page and update the "Last updated" date. Continued use of the site after changes constitutes acceptance.
12. Contact Us
Petit Lunch Inc.
Canada
info@petitlunch.com
You may also file a complaint with the Office of the Privacy Commissioner of Canada or, for Quebec residents, the Commission d'accès à l'information du Québec.