Privacy policy

In short

• We collect only what we need to prepare your order, confirm a booking or answer a question.
• Card details go straight to Square. We never see or store them.
• We measure whether a Google advert led to an order. That is the only tracking on this site, it sets a cookie, and it tells Google the order total, not who you are.
• We never sell your information. News and offers go only to people who ask for them, or to CremaClub members who have shopped with us in the last two years, and every one of those emails has a one-click unsubscribe.

What we collect and why

Online orders

Your name, phone number, email, pickup time, the items you choose and any note for the counter. We use these to prepare your order, contact you about it and send your receipt and updates.

Payments

Handled by Square. We receive the payment result, the amount, and the card brand and last four digits, so we can match the payment to your order.

CremaClub

Your phone number, which links purchases to your rewards account in Square. To use points online, we look up the email on your CremaClub profile and send a one-time code to it.

Table bookings

Your name, email, phone number, party size, date and time, and anything you add, such as an occasion or a note. We use these to review and confirm your booking and to write to you about it.

CremAI

What you type in the chat is sent to our AI provider to write a reply. We do not store conversations. To prevent abuse, we count messages per connection for one hour.

Emails to us

When you write to ottawa@cremahouse.ca, your message is kept in our mailbox so we can reply and follow up.

News and offers

Your email address and name, when you tick “Email me news and offers” at checkout, when booking a table or when asking about catering, or when you are a CremaClub member with an email on file who has bought from us in the last two years, as Canada’s anti-spam law allows. We use them only to send news and offers from Crema House. Use the unsubscribe link in any of those emails, or write to us, and we stop within ten business days.

Website visits

Our hosting provider processes technical information such as your IP address to deliver the site and protect it from attacks. We do not use it to identify or track you.

Google adverts

If you reach us through a Google advert and then place an order, Google's measurement tag tells Google that the advert led to an order, and what the order was worth. It does not send your name, your email or what you bought. It is how we tell which adverts are worth paying for. You can switch this off for every site at adssettings.google.com, or by blocking cookies in your browser.

What stays on your device

Your bag and the contact details you type at checkout are saved in your own browser, so they are still there when you come back. They are not sent to us until you place an order, and you can clear them at any time through your browser settings.

The only cookie this site sets is Google's advertising measurement cookie, described above. Blocking cookies in your browser stops it, and nothing on the site stops working.

Who helps us

We use a small number of service providers, each only for its own part of the work:

• Square: payments, orders, gift cards and CremaClub.
• Cloudflare: hosting this website.
• Resend: sending order, booking and news emails.
• Google Workspace: our email inbox.
• Anthropic: the AI model behind CremAI.
• Google Ads: measuring whether an advert led to an order.

Some of these providers store or process information outside Canada, including in the United States, where it may be subject to the laws of that country.

How long we keep it

Order and booking records on this site are kept for 24 months, then deleted. Payment and sales records held by Square are kept for as long as Canadian tax law requires, which is generally six years.

Your choices and rights

You can ask to see the personal information we hold about you, ask us to correct it, or withdraw your consent where that is possible (for example, leaving CremaClub). Write to ottawa@cremahouse.ca and we will reply within 30 days.

If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Changes to this policy

If we change how we handle your information, we will update this page and the date at the top.