The Canadian and Québec rules that apply to a restaurant platform and its customers — and how OnyxDine handles each one.
OnyxDine collects personal information only for identified purposes, keeps it no longer than needed, protects it with the safeguards on the Security page, and gives individuals access and correction rights. We have designated a person responsible for personal information, keep a register of what we hold and why, assess cross-border transfers, and notify the Commission d'accès à l'information and affected people of any breach that risks serious injury. Full detail in the Privacy Policy.
On your subscription: Paddle, our merchant of record, is registered for Canadian taxes and collects GST/HST and QST on each invoice, shown separately with registration numbers.
On your guests' bills: the POS calculates GST and QST as parallel taxes on the pre-tax subtotal (the correct Québec method), supports HST provinces, separates voluntary tips from the tax base, and treats mandatory service charges as taxable. Receipts show each tax and your registration numbers.
Québec restaurants must issue receipts from a sales recording system that meets Revenu Québec's requirements (the WEB-SRM program). OnyxDine's receipt format and transaction records are built to support this. Confirm your obligations with Revenu Québec or your accountant; we'll provide any technical documentation they ask for.
Every guest-facing surface — QR menu, receipts, order status messages, kiosk — is available in French. Staff apps, the dashboard and support are bilingual. Restaurants in Québec can set French as the default language for guests.
Marketing messages from OnyxDine are sent only with express or implied consent, identify us, and carry an unsubscribe that works within 10 days. SMS and WhatsApp messages you send to your own guests through the platform are your responsibility under CASL; the platform records consent and includes opt-out handling to help you comply.
Where the Act applies to a subscription, we meet its rules for automatically renewing contracts: clear disclosure of price and renewal terms before you subscribe, a written reminder before the first charge and before each annual renewal, and cancellation at any time without penalty beyond the current period.
Cardholder data is handled entirely by PCI DSS Level 1 processors (Paddle for subscriptions; Stripe, PayPal or your chosen gateway for guest payments). OnyxDine never stores full card numbers and is out of scope for PCI beyond standard integration practices.
Guest-facing screens follow WCAG 2.1 AA guidance: readable contrast, keyboard and screen-reader support, and text that scales. Report anything that gets in your way and we'll fix it.
hello@onyxdine.com, subject "Compliance". We provide data-processing terms, sub-processor lists and security questionnaires on request.