Platter Management Inc. (Platter, we, us, or our) respects your privacy and is committed to protecting the personal information we handle. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights available to you when you use our website, the Platter point-of-sale (POS) application, the Platter Back Office dashboard, and related services (together, the Services).
By using the Services, you acknowledge the practices described in this Policy. If you do not agree, please discontinue use of the Services.
1.Overview & Scope
Platter provides an all-in-one, cloud-based restaurant management and POS platform to restaurants and hospitality businesses (Clients). This Policy applies to personal information we handle as part of operating our business and Services, including information about:
- Visitors to our website and people who request a demo or contact us.
- Client account owners, administrators, and authorized users (such as managers, servers, cashiers, and kitchen staff).
- Individuals whose information our Clients enter into or process through the Services (for example, guests who place orders or reservations). See Section 7.
We handle personal information in accordance with applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation.
2.Information We Collect
The categories of personal information we may collect include:
Account & contact information
- Name, business name, email address, phone number, and mailing/billing address.
- Login credentials, user roles, and POS access PINs.
- Demo requests, support inquiries, and other communications with us.
Business & operational data
- Restaurant configuration such as menus, items, pricing, floor plans, and locations.
- Orders, transactions, reservations, and takeout/delivery records.
- Inventory, reporting, and analytics data generated through your use of the Services.
Staff & user data
- Employee profiles, assigned roles and permissions, and timekeeping records (such as clock-in/clock-out and scheduling information) entered into the Services.
Payment-related information
- Transaction amounts, dates, and records, and limited card metadata. Full payment card details are processed by our payment providers and are not stored by Platter. See Section 8.
Device, technical & usage data
- IP address, device and browser type, operating system, app version, and device identifiers.
- Log data, feature usage, diagnostic information, and information collected through cookies and similar technologies. See Section 9.
3.How We Collect It
We collect personal information:
- Directly from you - when you request a demo, create or configure an account, contact support, or use the Services.
- Automatically - through your use of our website and applications, via cookies, log files, and similar technologies.
- From our Clients - when a Client adds you as an authorized user or enters information into the Services.
- From third parties - such as payment processors, integration partners, and service providers that support the Services.
4.How We Use Information
We use personal information to:
- Provide, operate, maintain, and improve the Services.
- Set up accounts, authenticate users, and manage roles and permissions.
- Process orders, transactions, and payments through our payment providers.
- Generate reports, analytics, and operational insights for our Clients.
- Provide onboarding, customer support, and respond to inquiries.
- Send service-related communications, updates, and marketing messages where you've opted in. You can opt out at any time.
- Monitor, secure, and troubleshoot the Services, and detect and prevent fraud or misuse.
- Comply with legal obligations and enforce our agreements.
5.Consent
We collect, use, and disclose personal information with your consent, except where collection, use, or disclosure without consent is permitted or required by law. Depending on the sensitivity of the information and the context, consent may be express or implied.
You may withdraw your consent at any time, subject to legal and contractual restrictions and reasonable notice. Withdrawing consent may limit our ability to provide some or all of the Services. To withdraw consent, contact us using the details in Section 17.
7.Data From Our Clients' Customers
When our Clients use the Services to manage their operations, they may enter or process personal information about their own customers and staff (for example, names and contact details for reservations or delivery orders). Platter acts as a service provider that processes this information on the Client's behalf and under the Client's instructions.
8.Payment Information
Card payments through the Services are processed by PCI-DSS-compliant payment providers Moneris and Stripe using the gateway configured by the Client. Full payment card numbers and sensitive authentication data are handled directly by these providers and are not stored on Platter devices or retained by Platter. Platter retains transaction records (amounts, dates, and status) needed to operate the Services and for reporting.
Your use of a payment provider is also subject to that provider's own privacy policy and terms.
9.Cookies & Tracking Technologies
Our website and applications use cookies and similar technologies to operate the Services, remember preferences, maintain sessions, measure performance, and understand usage. Some cookies are necessary for the Services to function; others help us improve them.
You can control or disable cookies through your browser or device settings, though some features may not work properly if you do. Where required by law, we will obtain your consent before placing non-essential cookies.
10.Data Retention
We retain personal information only as long as necessary to fulfill the purposes described in this Policy, to provide the Services, and to meet our legal, accounting, tax, and reporting obligations. Retention periods vary depending on the type of information and how it was collected.
Account information is kept for the duration of your account and for a reasonable period after closure. Transaction records are kept for seven years to meet tax and accounting requirements. When information is no longer needed, we delete or anonymize it.
11.How We Protect Information
We use administrative, technical, and physical safeguards to protect personal information against unauthorized access, use, disclosure, alteration, and loss. This includes encryption in transit, access controls and role-based permissions, secure cloud infrastructure, and monitoring.
No method of transmission or storage is completely secure, and we can't guarantee absolute security. You're responsible for keeping your login credentials and POS access PINs confidential.
12.Where Your Data Is Stored
Platter's infrastructure is hosted on Amazon Web Services, primarily within Canada. When providing the Services or working with service providers, personal information may be processed or stored in other jurisdictions. Where that happens, it may be subject to the laws of those jurisdictions, including lawful access by courts, law enforcement, and government authorities. We take reasonable steps to ensure appropriate protection wherever information is processed.
13.Your Privacy Rights
You may have the right to:
- Access the personal information we hold about you and request a copy.
- Request correction of inaccurate or incomplete information.
- Withdraw consent to our use of your information (subject to legal or contractual limits).
- Ask questions about our handling of your personal information or make a complaint.
To exercise these rights, contact us using the details in Section 17. We may need to verify your identity before responding. If you are an authorized user of a Client account, or a customer of a restaurant that uses Platter, some requests may need to go to the relevant Client directly (see Section 7).
If you're not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your jurisdiction.
14.Children's Privacy
The Services are designed for businesses and are not directed to children. We do not knowingly collect personal information directly from children. If you believe a child has provided us with personal information, please contact us and we'll take appropriate action.
15.Third-Party Links & Services
The Services may contain links to, or integrations with, third-party websites and services that we don't control. This Policy does not apply to those third parties. We encourage you to review their privacy policies before sharing personal information with them.
16.Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we'll update the "Last updated" date above and provide notice where appropriate. Your continued use of the Services after changes take effect means you accept the updated Policy.
17.Contact Us
If you have questions, requests, or concerns about this Policy or your personal information, please contact our Privacy Officer:
- Platter Management Inc.
- 6981 Millcreek Drive, Unit 11, Mississauga, ON, L5N 6B8, Canada
- Email: privacy@plattermanagement.com
- Phone: (833) 944-7587