How Onyx Enterprises collects, uses and protects personal information across the OnyxDine platform, in line with PIPEDA and Québec's Law 25.
Restaurant users — owners and staff who sign up for OnyxDine. For them, Onyx is the organisation responsible for their personal information.
Restaurant guests — people who order through a restaurant's QR menu, join a waitlist, or make a reservation. For them, the restaurant is the organisation responsible; Onyx processes the information on the restaurant's behalf under our terms of service.
To provide and secure the Service; to process orders, reservations and payments; to send service messages (order updates, billing reminders, security alerts); to answer support requests; to improve the product using aggregated, de-identified usage data; and, with your consent or where permitted, to tell you about OnyxDine features and offers. You can opt out of marketing at any time using the link in any email or by writing to us.
Aria, our ordering assistant, uses a third-party large-language-model provider to interpret guest messages and suggest menu items. Messages sent to Aria are processed to generate a reply and are not used by us to train models. Restaurants can turn Aria off at any time.
We do not sell personal information and we do not share it with advertisers.
Data is hosted on servers in Canada and may be processed by service providers in the United States, the European Union and India. Where information leaves Québec or Canada we assess the transfer and rely on contractual protections, as Law 25 and PIPEDA require.
Account and operational data for as long as the account is active, then 30 days for export, after which it is deleted from live systems and rotated out of backups within 90 days. Billing records are kept as long as tax law requires (generally 7 years). Marketing leads that don't sign up are deleted after 12 months.
Encryption in transit (TLS) and at rest, role-based access so staff see only what their role needs, daily backups, logging and monitoring, and staff access limited to what support requires. No system is perfectly secure; if a breach creates a risk of serious injury we will notify affected people and the Commission d'accès à l'information / Privacy Commissioner as the law requires.
Our website uses necessary cookies to work, and — only with your consent — analytics and advertising cookies to understand traffic and measure campaigns. You can change your choice any time via "Cookie settings" in the footer. The platform itself uses only session and security cookies.
You can ask to access, correct, or delete your personal information, withdraw consent, ask how it is used, and — for restaurant users — receive a copy in a structured format. Guests should contact the restaurant first; we will help the restaurant respond. Write to hello@onyxdine.com with the subject "Privacy". We respond within 30 days. You may also complain to the Office of the Privacy Commissioner of Canada or, in Québec, the Commission d'accès à l'information.
The Service is for businesses and is not directed at children under 14. We do not knowingly collect their information; if you believe we have, contact us and we will delete it.
Onyx Enterprises has designated a person responsible for the protection of personal information, reachable at hello@onyxdine.com, subject "Privacy".
We'll post updates here and, for material changes, notify account holders by email. The date at the top tells you the current version.