Privacy Policy

Effective date: October 17, 2026

Messi Shawarma Inc. ("Messi Shawarma", "we", "us") runs the Messi Shawarma restaurant at 1975 Cottrelle Blvd, Brampton, Ontario, and the Messi Shawarma ordering app for iPhone and Android. This policy explains what personal information we collect when you use our app or website, why we collect it, and the choices you have. We follow Canada's privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information we collect

Information you give us when you order:

• Your name, so we can call out and label your order.
• Your mobile phone number, so we can identify your order and text you about it.
• Your order: the items, options, special requests, the restaurant you picked, pickup time, prices, taxes, fees and order status.
• Whether you ticked "Text me order updates".

If you create an account:

• Your account is your mobile phone number. To sign in, we text you a one-time code. We do not use passwords.
• Your account lets you see your past orders at any of our locations. When you sign in, orders you placed with the same phone number are added to your account.

Payment information:

• Card payments are processed by our payment processor. Your full card number, expiry date and security code go straight to the processor and are never stored by us.
• We receive and keep only the card brand (for example, Visa), the last 4 digits, the amount, and the processor's transaction reference, so we can show it on your receipt and issue refunds.

Information stored on your phone:

• The app saves on your own device: the restaurant you picked, the name and phone number you typed at checkout (so you don't have to type them again), your sign-in if you signed in, your recent orders with their pickup codes, and copies of your receipts. This lets them open quickly and without internet. Signing out removes your sign-in; deleting the app removes everything.

What we don't collect: the app does not use your location, contacts, camera, photos or microphone. It has no advertising, analytics or crash-reporting tools, and it does not track you across other apps or websites.

If you contact us: we keep your email or message and our reply, so we can help you.

2. How we use your information

• To receive, prepare and hand over your order.
• To take payment and, when needed, give refunds.
• To send you text messages about your order (for example, accepted, ready for pickup, or refunded), only if you asked for them, and to send sign-in codes when you sign in.
• To show your receipts and order history in the app.
• To keep the business records the law requires (for example, sales and tax records).
• To answer your questions and handle problems with an order.
• To protect our customers and our business against fraud and misuse.

We do not sell, rent or trade your personal information. We do not use it for advertising, and we do not send marketing texts.

3. Who we share it with

We share information only with service providers who help us run the ordering service, and only what they need to do that job:

• Payment processor: to charge your card and issue refunds.
• Text message provider: to deliver order texts and sign-in codes to your phone.
• Cloud hosting provider: the secure server that connects the app to our restaurant.

These providers must protect your information and may not use it for their own purposes. Some of them may store or process information outside Canada, including in the United States, where it may be subject to the laws of that country.

We may also share information if the law requires it, for example to answer a valid legal request.

Our website: our website shows a map from Google Maps, which may set its own cookies. Its "Order Online" button takes you to a separate online ordering service, which has its own privacy policy.

4. Where your information is kept

• Your orders and receipts are kept in the computer system of the Messi Shawarma restaurant that made your order.
• Your account (your phone number and the list of your orders) is kept on our secure cloud server, so it works at all of our locations.
• Our cloud server keeps the details of an order only while it is needed to complete it, take payment and send its texts, usually about one day. To show your receipt later, it keeps the card brand and last 4 digits for up to 400 days.

5. How long we keep it

• Order, payment and refund records are kept for as long as Canadian tax law requires (generally 6 years).
• Your account is kept until you delete it. See Delete My Account.
• Messages you send us are kept as long as needed to help you.

6. How we protect it

Information between the app and our servers is sent over encrypted connections (HTTPS). Access to our systems is limited to people who need it, and staff sign in with their own personal codes. No system is perfectly secure, but we work to protect your information and will act quickly if something goes wrong.

7. Your choices and rights

• Texts: you choose whether to get order texts each time you order.
• Access and correction: you can ask us what personal information we hold about you and ask us to correct it.
• Delete your account: you can delete your account at any time, right in the app (Account, then Delete account) or by asking us. See Delete My Account.
• Withdraw consent: you can stop using the app at any time. Some records must still be kept for tax purposes.

To make a request, email us at the address below. We will answer within 30 days. If you are not happy with our answer, you can contact the Office of the Privacy Commissioner of Canada.

8. Children

Our app is not meant for children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date at the top of this page. If the change is important, we will also let you know in the app.

10. Contact us