Privacy Policy

Heaffles ("we", "us") is a waffle and espresso bar in Pickering, Ontario. We are responsible for the personal information described here, under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Heaffles, 1550 Kingston Rd, Pickering, Ontario L1V 1X6. Email info@heaffles.com or call +1 (647) 207-0709.

For anything about your information, write to the email above with "Privacy" in the subject line.

Only what you choose to give us, plus a little technical information to keep the site working.

• Fika Club and newsletter: your name, email address, and optionally your birthday.
• Notify me requests: your email address and what you asked to hear about.
• Visit requests and space enquiries: your name, email or phone, the date, party size and anything you tell us about your occasion.
• Messages: your name, email and message.
• Coffee Pong: the player name you type and your score. The top scores are shown publicly, so do not use your real full name.
• Technical data: your IP address is used briefly to prevent abuse (for example, too many form submissions) and is not stored against your profile. Our hosting provider keeps standard server logs.

We do not ask for payment details on this site. Ordering and gift cards are handled by Toast, under Toast's own terms and privacy policy.

• To run the Fika Club: your birthday waffle, member invitations and perks.
• To send you emails you asked for. See "Emails and your consent" below.
• To answer your visit requests, enquiries and messages.
• To keep the site secure and working, and to understand in general terms how it is used.

We do not sell your information. We do not use it for advertising profiles.

We only send marketing emails (events, offers, news) to people who have actively agreed. When you join the Fika Club or subscribe, you tick a box that says so. We never pre-tick it.

Every email we send names Heaffles as the sender, includes our address, and has a one-click unsubscribe link. You can withdraw consent at any time, and we will stop within 10 business days (in practice, straight away). Under Canada's Anti-Spam Legislation (CASL) your consent is recorded with the date and the wording you agreed to.

Requests that are not marketing, such as a one-time "notify me when this is back" or replying to your message, are used only for that purpose.

Only our team, and the service providers that run the website for us. They may only use your information to provide their service to us:

• Our website host and database provider, which store the data described above.
• Our email provider, which delivers the emails you have asked for.
• Toast, if you go to order or buy a gift card.

Some of these providers store data outside Canada, including in the United States, where it may be accessed under local laws. We choose providers that protect data in line with industry standards.

We may disclose information if the law requires it.

This site does not use advertising or tracking cookies. It remembers one small thing in your browser: if you close the top banner, so it stays closed for that visit. If we add analytics later, we will use a privacy-friendly tool and update this page.

Staff who log in to manage the site receive a secure session cookie. Visitors never do.

Club and newsletter details are kept until you unsubscribe or ask us to delete them. Messages and enquiries are kept for up to two years, then deleted. Pong scores stay on the board until you ask us to remove them.

Access to the admin area is password protected, connections to the site are encrypted, and we collect as little as we can. No system is perfectly secure; if a breach ever puts you at real risk of harm, we will tell you and the Privacy Commissioner of Canada as the law requires.

You can ask us to show you what we hold about you, correct it, or delete it, and you can withdraw your consent whenever you like. Email us at the address above. We will reply within 30 days. If you are not happy with our answer, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

The Fika Club and newsletter are for people 16 and over. If you are younger, please ask a parent or guardian to sign up for you. We do not knowingly collect information from children.

If we change this policy, we will update the date at the top. If a change is significant, we will tell Fika Club members by email.