Privacy Policy

1. Introduction

Little Ones Lunches Ltd (“Little Ones Lunches”, “we”, “us” or “our”) operates an online ordering portal (the “Portal”) for the childcare centres we cater to (each, a “Centre”) and for our own staff. This Privacy Policy explains what personal information we collect through the Portal, how we use and protect it, and the choices available to you. We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.

2. Information We Collect

Account information

• Your name and email address.
• Your role (Centre, kitchen, driver or administrator) and the Centres your account may access.
• The date and time you last signed in.

Order information

• Meal quantities for each Centre, room and day, and any notes added for the kitchen.
• Allergy and dietary requirements, recorded at the room level as a number of meals. This information does not identify individual children.

Delivery records

• The time of each delivery and the food temperatures recorded on arrival.
• The printed name and signature of the person who received the delivery at the Centre.
• The name of the driver and any note regarding a shortage, delay or missed delivery.

Activity records

• A record of changes made to orders, settings and accounts, including the account that made each change.

3. How We Use Your Information

We use the information described above to:

• provide access to the Portal and verify the identity of users;
• prepare, schedule and deliver the meals ordered;
• invoice Centres in accordance with their Catering Agreement;
• maintain the delivery and temperature records required for food-safety compliance and inspection;
• send service emails, including account setup and password links, order reminders and weekly order summaries; and
• maintain the security and integrity of the Portal.

We do not use personal information for marketing or advertising, and we do not sell personal information.

4. Access Within the Portal

Access to information is limited according to each user's role:

• Centre staff can view only the orders, rooms and deliveries of the Centres their account is assigned to.
• Kitchen staff can view orders across all Centres in order to prepare them.
• Drivers can view delivery routes, meal quantities and delivery confirmations, so that any driver can cover any route.
• Administrators at Little Ones Lunches can view all information in the Portal.

These restrictions are enforced at the database level, independently of the Portal's screens.

5. Service Providers

We rely on the following service providers to operate the Portal: Supabase (database and authentication), Vercel (website hosting) and Resend (email delivery). These providers process personal information only on our behalf and in accordance with our instructions. Their servers may be located outside Ontario or outside Canada, including in the United States, where the information may be subject to the laws of that jurisdiction. We may also disclose personal information where required by law.

6. Security

We use reasonable administrative, technical and physical safeguards to protect personal information, including encrypted connections, role-based access controls and individual user accounts. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

7. Retention

• Order and delivery records, including temperatures and signatures, are retained for the period required by applicable food-safety, tax and record-keeping obligations.
• Activity records are deleted automatically 24 months after they are created.
• When an account is deactivated, it can no longer be used to sign in. Records of actions taken with that account are retained as described above.

8. Cookies and Device Storage

The Portal uses a single essential cookie to keep you signed in. It also stores a small amount of information on your device for convenience: the email address last used to sign in, your display preference (light or dark mode), and drafts of orders not yet submitted. On drivers' devices, the day's delivery runs and confirmations are stored locally until they can be uploaded. The Portal does not use analytics, advertising or third-party tracking technologies.

9. Your Rights

You may request access to the personal information we hold about you, ask us to correct it, or ask us to close your account, by contacting us using the details below. We will respond within the time required by law. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the most recent revision, and Centres will be notified by email of any material change.

11. Contact Us

Questions or requests regarding this Privacy Policy may be directed to: