Privacy
Last updated September 2026
No child is named in this system
Meals are ordered as counts per room. Where a child needs something different, the centre records the requirement against the room and the number of children it applies to, for example 1 Preschool, no dairy. There is no field anywhere in this system for a child's name, initials, date of birth, photograph or any other identifier, and none is collected.
Who runs this
This ordering system is operated by Little Ones Lunches Ltd, which supplies catering to the childcare centres that use it. Questions about this notice, or a request to see or correct what is held about you, go to [contact email] or [registered address].
What is collected
About the people who sign in
- Email address, used as the sign-in name and to send order confirmations and reminders.
- Role (centre, kitchen, driver, administrator) and which centres an account may order for.
- A record of changes made to orders, settings and accounts, with the account that made each one.
- For drivers: the name recorded against a delivery sign-off.
About orders and deliveries
- Meal counts per centre, per room, per day, and any note the centre adds for the kitchen.
- Dietary requirements and allergies, recorded against a room and a count of children, never a child.
- Delivery records: time of arrival, hot and cold temperatures, the printed name and signature of whoever received the food, and any note about a short or failed delivery.
The receiver's name and signature are collected because food-safety inspection requires a traceable record of who took custody of the food and at what temperature.
Who can see it
- A centre sees its own orders, its own rooms and its own deliveries, and nobody else's.
- Kitchen staff see what has been ordered across every centre, because they cook it.
- A driver sees the stops on the run they are covering.
- Administrators at Little Ones Lunches Ltd see everything.
These limits are enforced by the database itself rather than by the screens, so an account cannot reach another centre's data by changing a web address.
Where it is held, and who else touches it
Data is stored with Supabase and the site is served by Vercel. Order confirmations and reminders are sent through Resend. Each of those processes data on our instructions only. Nothing here is sold, and nothing is used for advertising.
How long it is kept
- Orders and delivery records, including temperatures and signatures, are kept for [retention period, e.g. 3 years], which is set by food-safety record-keeping requirements rather than by us.
- The record of changes is deleted automatically once it is 24 months old.
- An account that is deactivated stops working immediately; its past actions stay in the change log.
Cookies
One cookie, which keeps you signed in. There is no analytics, advertising or third-party tracking on this site, so there is nothing to consent to and no banner asking you to.
Your choices
You can ask what is held about you, ask for it to be corrected, or ask for your account to be closed. Write to [contact email]. If you are unhappy with the answer, you can complain to the Office of the Privacy Commissioner of Canada.
Changes
If this notice changes in a way that affects you, the date at the top changes and centres are told by email.