Effective August 11, 2026
Privacy Notice
This notice explains how Amberdo Cafe handles personal information through its website, customer accounts, gift cards, and online ordering service.
Information we collect
When you create an account, we collect your name, email address, password hash, email-verification and terms-acceptance records, and a Google account identifier if you choose Google sign-in. We store orders, item notes, pickup estimates, order status, and gift cards connected to your account. Security records can include session identifiers, password-reset records, rate-limit records, and bot-verification results.
How we use it
We use personal information to create and secure your account, verify your email, reset passwords, receive and prepare orders, show order and gift-card history, prevent abuse, troubleshoot the service, and meet applicable legal or business-record obligations. We do not currently process online payments or sell personal information.
When information is shared
Authorized café staff can access the information needed to prepare and manage orders. Service providers support hosting and databases (Cloudflare), optional Google sign-in, transactional email (Resend), bot protection (Cloudflare Turnstile), and staff order alerts (OneSignal). Staff alerts use a public order identifier and do not include a customer name or email. Providers handle information for these services under their own terms, and information may also be disclosed when required by law.
Cookies and device storage
Essential HTTP-only cookies keep you signed in and protect the Google sign-in flow. Your browser stores your current cart and display preferences locally on your device. We do not use advertising cookies in the current service.
Retention and account deletion
Account information is kept while your account is active. When you use the self-service deletion control, sign-in credentials, direct profile identifiers, verification/reset records, sessions, and order-item notes are removed or anonymized. Completed order and gift-card records remain linked only to an anonymized customer record for café, accounting, dispute, and legal recordkeeping. Backups may retain prior data until they age out under the backup and recovery process.
Security
We use access controls, hashed passwords and session tokens, secure production cookies, rate limits, security headers, encrypted HTTPS transport, staff roles, audit records, and managed infrastructure safeguards. No internet service can guarantee absolute security.
Your choices and rights
From your account settings, you can update your name, download a JSON copy of your account, gift-card, and order data, or delete your account. You can also ask to access or correct other personal information, or raise a privacy concern, by contacting the Privacy Contact at Amberdo Cafe, 1328 W Georgia St, Vancouver, BC V6E 4N9. British Columbia residents can learn about their rights or make a complaint through the Office of the Information and Privacy Commissioner for BC.
Changes to this notice
We may update this notice as the service or our practices change. The effective date above identifies the current version.