Privacy Policy

Last updated August 4, 2026

Canadian Privacy Policy

This Privacy Policy explains how Lunchdrop Canada Inc. ("Lunchdrop", "we", "us", or "our") collects, uses, discloses, retains, and protects personal information in connection with Lunchdrop's Canadian websites, applications, ordering and delivery services, gift cards, customer support, and related services (collectively, the "Services"). It also explains the choices and rights available to you. This policy applies to personal information under Lunchdrop's control. A restaurant, employer, workplace administrator, payment processor, or other organization may separately control information and have its own privacy practices.

1. Accountability

Lunchdrop is responsible for personal information under its control and has designated a Privacy Officer to oversee compliance with applicable Canadian privacy law. Contact information for the Privacy Officer appears in section 13. Lunchdrop remains accountable for personal information transferred to a service provider for processing and uses contractual or other appropriate measures to require suitable protection.

2. Personal Information We Collect

Depending on how you use the Services, we may collect:

  • identity and contact information, including your name, email address, telephone number, and address;
  • account information, login credentials, preferences, workplace, group, and delivery-location information;
  • order, restaurant, delivery, gift-card, promotion, refund, and transaction history;
  • payment-related information, such as a payment token, card type, and limited card details received from a payment processor;
  • communications with Lunchdrop, support requests, survey responses, and feedback;
  • device, browser, IP address, cookie, log, and usage information;
  • approximate or precise location information when needed for a location-based feature and permitted by your device settings; and
  • fraud-prevention, security, and compliance information.

If you apply to or work with Lunchdrop as a driver, delivery provider, restaurant representative, contractor, or employee, additional notices or agreements may describe the information collected for that relationship. Lunchdrop does not intentionally collect more personal information than is reasonably necessary for the identified purposes.

3. How We Collect Information

We collect information directly from you when you create an account, place an order, buy or redeem a gift card, contact us, participate in a promotion, or otherwise use the Services. We also collect information automatically from devices and browsers and may receive information from your workplace or account sponsor, restaurants, delivery providers, payment and fraud-prevention providers, marketing and analytics providers, or another person who sends you a gift card or invitation. If you give us another person's information, you must have authority to do so and should direct that person to this policy where appropriate.

4. Why We Use Personal Information

We use personal information to:

  • create and administer accounts and authenticate users;
  • process orders, payments, gift cards, deliveries, cancellations, refunds, credits, and promotions;
  • coordinate with restaurants, workplaces, delivery providers, and other parties needed to provide the Services;
  • send transactional messages and provide customer support;
  • operate, personalize, troubleshoot, analyze, secure, and improve the Services;
  • detect and prevent fraud, misuse, security incidents, and violations of our agreements;
  • maintain business and financial records and comply with legal, tax, accounting, and regulatory requirements;
  • establish, exercise, or defend legal claims; and
  • send marketing communications where we have consent or another lawful basis to do so.

If we wish to use personal information for a materially new purpose that is not compatible with the purpose for which it was collected, we will identify that purpose and obtain additional consent when required by law.

5. Consent and Your Choices

Lunchdrop obtains consent in a form appropriate to the sensitivity of the information and the circumstances, unless collection, use, or disclosure without consent is permitted or required by law. You may withdraw consent, subject to reasonable notice and legal or contractual restrictions. Withdrawing consent for information essential to an account, order, payment, delivery, or security function may prevent us from providing the related Service. Device and browser settings may allow you to control location access and some cookies.

6. When We Disclose Personal Information

We may disclose personal information as reasonably necessary to:

  • restaurants, delivery providers, workplaces, and account sponsors involved in fulfilling or funding an order;
  • payment processors, cloud-hosting providers, communications vendors, analytics providers, customer-support providers, professional advisers, and other service providers acting for Lunchdrop;
  • detect fraud, protect the Services, enforce agreements, or protect the rights and safety of Lunchdrop, users, or others;
  • comply with a subpoena, court order, lawful request, or other legal obligation;
  • complete a proposed or completed financing, merger, acquisition, reorganization, sale, or transfer of all or part of the business, subject to appropriate protections; or
  • fulfil another purpose disclosed to you with your consent.

We do not permit service providers to use personal information for their own unrelated purposes. We may use and disclose information that has been aggregated or de-identified so that it is no longer reasonably capable of being associated with an identifiable individual, subject to applicable law.

7. Processing Outside Your Province or Canada

Lunchdrop and its service providers may process or store personal information outside your province or outside Canada, including in the United States. Information in another jurisdiction may be subject to that jurisdiction's laws and may be accessible to courts, law-enforcement agencies, or other authorities in accordance with those laws. You may contact our Privacy Officer for information about our use of service providers outside Canada.

8. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to provide the Services, maintain transaction and tax records, resolve disputes, enforce agreements, meet legal obligations, and maintain security and fraud-prevention records. Retention periods vary according to the type of information and applicable requirements. When information is no longer required, we delete, destroy, or de-identify it using appropriate measures.

9. Safeguards

We use administrative, technical, and physical safeguards appropriate to the sensitivity and amount of personal information and the risks to it. No system is completely secure. If a breach of security safeguards occurs, we will investigate and provide notices to individuals and regulators when required by applicable law. You are responsible for keeping your credentials confidential and should notify us promptly if you suspect unauthorized account access.

10. Cookies, Analytics, and Communications

We and our service providers use cookies and similar technologies to keep you signed in, remember preferences, operate and secure the Services, understand usage, measure performance, and support communications and marketing. Some cookies are necessary for the Services to function. Browser settings may block or delete cookies, but doing so can affect functionality.

We send order, account, safety, and service messages when needed to provide the Services. We send commercial electronic messages only with consent or other authority permitted by law. Marketing messages include an unsubscribe mechanism, and we will action an unsubscribe request without delay and no later than 10 business days. Unsubscribing from marketing does not prevent necessary transactional or account communications.

11. Access, Correction, and Complaints

Subject to limited exceptions under applicable law, you may request access to personal information under Lunchdrop's control, ask how it has been used or disclosed, and request correction of inaccurate or incomplete information. You may also ask a question, withdraw consent, or make a privacy complaint. We may need to verify your identity before responding. If we cannot fulfil a request, we will explain why where required by law. You may also have the right to complain to the Office of the Privacy Commissioner of Canada or an applicable provincial privacy regulator.

12. Children and Changes to This Policy

The Services are not directed to children under 18, and we do not knowingly create purchasing accounts for them. Contact the Privacy Officer if you believe a child has provided personal information without appropriate authority.

We may update this policy prospectively to reflect changes in our practices, technology, or legal obligations. We will post the revised policy and update the date above. If a change is material, we will provide additional notice or obtain consent where required by law.

13. Contact the Privacy Officer

Privacy requests and questions may be sent to privacy@lunchdrop.com, by telephone at 737-377-5810, or by mail to:
Lunchdrop Canada Inc.
Attn: Privacy Officer
2967 Dundas St. W. #1601
Toronto, Ontario M6P 1Z2
Canada