Privacy Policy

Shekho's Shawarma ("we", "us", "our") operates this website and online ordering system for our restaurant at 17 St. Paul Street, Thunder Bay, ON. This policy explains what information we collect when you visit the site or place a pickup order, how we use it, and the choices you have. By using the site or placing an order you agree to this policy.

1. Who we are

Shekho's Shawarma is a family-run restaurant located at 17 St. Paul Street, Thunder Bay, ON. You can reach us by phone at (807) 630-3800, by email at shekho8@gmail.com, or in person during our posted hours.

2. What we collect

When you place an online pickup order, we collect only what we need to make and hand off your food:

• Name — so we know whose order it is at pickup.
• Mobile phone number — so we can text you order updates and reach you if there is a problem.
• Email address (if you provide one) — for the order receipt.
• Pickup time and any order notes (allergies, prep requests) you type in.
• Order details — the items you selected and the subtotal.

When you pay online, payment is processed by Stripe. Stripe collects your card details directly — we never see or store your full card number, CVC, or expiry. We only receive a confirmation that the payment succeeded and a Stripe reference for the order.

We also automatically collect basic technical information any website receives: your IP address, browser type, device type, pages visited, and referring site. This is used to keep the site working and secure.

3. How we use it

• Prepare your order and hand it to the right person at pickup.
• Send order confirmation, "ready for pickup," and status text messages to the phone number you provided.
• Contact you if something is wrong with your order (out of an item, unclear notes, etc.).
• Take payment and, if needed, issue a refund.
• Keep the site running, prevent abuse, and comply with tax and food-service record-keeping laws.

We do not sell your information. We do not use your data for advertising and we do not send marketing texts or emails unless you ask us to.

4. Text messages (SMS)

By entering your mobile number at checkout you agree to receive transactional SMS messages about your order (confirmation, ready-for-pickup, and problem notifications) sent through our SMS provider, Twilio. Message and data rates from your carrier may apply. Reply STOP at any time to opt out of further messages about that order. Opting out may mean we cannot notify you when your food is ready.

5. Who we share information with

We share the minimum necessary information with the service providers that help us run the site and take orders:

• Stripe — payment processing.
• Twilio — sending and receiving order-related text messages.
• Lovable Cloud / Supabase — hosting the site, database, and order records.

These providers may process data outside Ontario or Canada, including in the United States, and may be required to disclose data to their local authorities. We may also disclose information when required by law (for example a court order or a lawful request from Canadian tax or health authorities).

6. How long we keep it

We keep order records (name, phone, items, totals, pickup time) for as long as we need them to run the business and to meet Canada Revenue Agency and Ontario record-keeping obligations — generally at least six years. Technical logs are kept for a shorter period.

7. Security

Orders and customer details are stored in our hosted database with access restricted to the restaurant and our service providers. Payments are handled by Stripe over an encrypted connection. No system is perfectly secure — you provide your information at your own risk, and we ask you not to send us credit-card numbers by text, email, or the notes field.

8. Your rights (PIPEDA)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) you may ask us to confirm what personal information we hold about you, ask us to correct it, or ask us to delete it (subject to any legal record-keeping we must follow). Email shekho8@gmail.com to make a request. We will respond within a reasonable time.

9. Children

The site is intended for a general audience. We do not knowingly collect personal information from children under 13 without a parent or guardian placing the order.

10. Changes

We may update this policy. When we do we will change the "Last updated" date at the top of this page. Continued use of the site after a change means you accept the updated policy.

11. Contact

Questions? Email shekho8@gmail.com, call (807) 630-3800, or come by 17 St. Paul Street, Thunder Bay, ON.