Privacy Policy

About This Policy

Edmonton Restaurants & Eatery Directory ("we", "us") operates yegrestaurants.ca, an online directory of independent restaurants, bakeries, cafés and other eateries in Edmonton and area. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

This policy applies to information we collect through this website. We are responsible for the personal information under our control, and we have designated a contact for privacy questions (see Contact Us below).

Information We Collect

Browsing the directory: you can browse without an account. We count anonymized page views and link clicks on business listings (see Listing Analytics). Our hosting provider also keeps standard technical request logs, such as IP address and browser type, for security and operations.

Submitting a listing: we collect the business details you provide (such as name, type of business, cuisines, address, phone, website, menu link, weekly hours, features, description, logo, cover photo and social profiles), plus your name, email address, your relationship to the business and the plan you selected. If you're signed in, we also note your account so you can manage the listing once it's approved. Business details are published if the listing is approved. Your own name and email are not published.

Paying for a listing: if you choose the paid plan, you pay through Stripe, our payment processor. You enter your card details on Stripe's secure checkout page, not on our site, so we never see or store your full card number. Stripe tells us whether the payment and subscription are active, and gives us a customer and subscription reference we store to manage your plan.

Business owner accounts and claims: to sign in, we collect your email address and send you a one-time sign-in code or link. If you claim a listing, we collect your name, job title, email address, phone number, any note you add, and any business documents you choose to attach (such as a business licence or insurance certificate). Documents are stored privately and only our team can see them.

Writing a review: you sign in with your email address, and we collect your star rating, your review text, and the name you choose to show with it. Approved reviews are published with that name; your email address is never shown.

Reporting a listing: we collect the listing, the reason and details you give, and, if you choose to provide them, your name and email address and whether we may follow up.

Contacting us directly: if you email or call us, we keep the information you share so we can respond.

How We Use Information

We use personal information only for the purposes we collected it for:

To publish and maintain accurate business listings, and to review new submissions, claims and reports. To process payments for paid listings, including refunds. To let business owners sign in and manage their listing. To check reviews before publishing them and show approved ones on business listings. To respond to your questions and follow up on reports when you allow it. To understand, in aggregate, how listings are used, and to keep the site secure and prevent spam and abuse.

We do not sell personal information, and we do not use it for advertising profiles.

Listing Analytics

To show businesses and our team how listings are used, we count three things on business listing pages: page views, clicks on a listing's website link, and clicks on a listing's phone number.

We do this without storing your IP address and without cookies. When one of these events happens, our server combines your IP address and browser type and turns them into a scrambled code (a one-way cryptographic hash) using a secret key that changes every day. Only that code is saved, never your IP address, and it can't be turned back into your IP address. Because the key changes daily, the code can't be used to recognize you from one day to the next.

We use the code only to avoid counting the same visit twice: repeat views or clicks of the same kind from the same visitor within 30 minutes are counted once. Traffic from known bots and automated browsers is not counted.

The individual event records are deleted after 35 days. After that we keep only daily totals per listing (for example, "42 views on March 3"), which contain no information about any visitor.

Cookies & Local Storage

We use a small number of cookies and browser storage items, all needed for the site to work: sign-in cookies that keep business owners and our administrators signed in, and a setting in your browser's local storage that remembers your light or dark display preference.

We do not use advertising cookies or third-party tracking cookies, and our listing analytics use no cookies at all. You can clear or block cookies in your browser settings, but signing in requires them.

Sharing of Information

With businesses: approved listing details are public. We may share aggregate listing statistics, such as total views, with the business listed.

With service providers: we use Supabase (database and sign-in), Netlify (website hosting) and Stripe (payment processing) to run the site. They process information on our behalf, under their own security and privacy commitments, and only as needed to provide their services. Their servers may be located outside Canada, including in the United States, where information may be accessible to authorities under local law.

When required by law: we may disclose information where required or permitted by law, or to protect the rights, property or safety of our users or others.

We do not sell or rent personal information.

Data Retention

We keep personal information only as long as needed for the purpose it was collected for, or as required by law, and then delete or anonymize it.

Listing analytics: individual event records are deleted after 35 days; only anonymous daily totals are kept. Listing submissions, claims and reports: kept as a record of our review decisions. Payment records: Stripe keeps payment records as required for tax and accounting; we keep only the references needed to manage your subscription. Hosting request logs: kept by our hosting provider for its standard retention period.

You can ask us to delete your information at any time (see Your Rights).

Consent & Choices

By submitting a form on this site, you consent to us using the information you provide for the purpose described on that form and in this policy. You can withdraw your consent at any time by contacting us, subject to legal or contractual restrictions. Withdrawing consent may mean we can no longer provide a service, for example keeping your listing claimed or published.

Your Rights

You have the right to ask for access to the personal information we hold about you, to ask us to correct it if it is inaccurate or incomplete, and to ask us to delete it. To make a request, contact us using the details below. We will respond within 30 days, and may need to confirm your identity first.

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca).

Security

We protect personal information with safeguards appropriate to its sensitivity, including encrypted connections (HTTPS), database access rules that limit each user to their own data, password-free sign-in with one-time codes or links, and restricted administrator access. No method of transmission or storage is completely secure, but we work to protect your information and will notify affected people and regulators of a breach where the law requires it.

Links to Other Websites

Listings link to businesses' own websites and social media profiles. Those sites have their own privacy practices, which this policy does not cover. Please review their policies before sharing information with them.

Children's Privacy

This site is intended for adults and businesses. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

Changes to This Policy

We may update this policy as our practices change. The current version is always posted on this page with its effective date. If we make significant changes to how we use personal information, we will make that clear on the site.

Contact Us

For privacy questions, or to access, correct or delete your personal information, contact our privacy contact at info@yegrestaurants.ca.