Privacy Policy

Version 1.0 · Last updated 2026-10-05

1. Overview

Cater Market is a catering marketplace operating in Ontario, Canada. This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the controls you have. We apply data minimization: we only collect information reasonably required to operate the platform.

2. Information We Collect

Account information (name, email, phone, role), event and delivery details, saved addresses, order history, payment tokens (never raw card data), photos you upload for reviews or refund evidence, and device and usage information for security and reliability.

3. How We Use Your Information

To create and manage your account, process orders and payments, coordinate delivery, send order confirmations and updates, provide customer support, prevent fraud and abuse, comply with legal obligations, and send marketing communications only when you have separately opted in.

4. Role-Based Sharing (Data Minimization)

Restaurants and caterers receive only the information needed to prepare and fulfill your order. Drivers receive only the information needed to complete the delivery, such as pickup address, delivery address, and contact phone, and only for the duration of the active delivery. Customers never see private driver or restaurant account information. Partners never see your full payment method.

5. Payment Information

Payment details are tokenized by our payment provider. Cater Market never receives or stores full credit card numbers, CVV codes, or Apple Pay or PayPal credentials. We store only masked, display-safe labels.

6. Marketing Communications

Promotional email and SMS consent is separate from mandatory legal acceptance and is never required to create an account. You can unsubscribe at any time. Transactional messages, order updates, payment receipts, refund updates, and security alerts are not marketing and will continue to be sent as needed.

7. Data Retention

We retain your information for as long as your account is active and as needed to provide services. Certain transaction, tax, fraud-prevention, dispute, and legally required records may be retained even after account deletion.

8. Your Privacy Rights

You can view and correct eligible account information, manage marketing preferences, request a copy of your data, and request account deletion from Settings. Account deletion requires identity verification and may not be immediate where records must be retained by law.

9. Security

We use technical and organizational safeguards including encrypted transmission, secure password hashing, server-side payment verification, webhook signature verification, idempotency protection, role-based access controls, and audit logging. See the Security Policy for details.

10. Cookies & Analytics

We use essential cookies for authentication and optional analytics to improve the platform. Analytics data is aggregated and does not identify you personally.

11. Third-Party Services

We use payment, mapping, email, and cloud infrastructure providers who process data on our behalf under contractual safeguards. They are bound by their own privacy and security practices.

12. Children

Cater Market is not directed to children under 18 and we do not knowingly collect their personal information. Contact us to remove any such data.

13. Changes to This Policy

We may update this Privacy Policy. Material changes will prompt a renewed acceptance where required by law.

14. Contact

For privacy questions or data requests, contact Cater Market support through the in-app Help Center.