Privacy Policy
Last updated: August 16, 2026
This Privacy Policy explains how The Zesty Lemon ("The Zesty Lemon", "we", "us") collects, uses and protects information through the application at thezestylemon.ca (the "Service"). The Service supports our restaurant, catering, delivery, employee time-tracking and accounting operations.
1. Who we are
The Zesty Lemon is a restaurant and catering business based in Saint John, New Brunswick, Canada, and operates the Service for its own staff, contractors and customers. Contact: catering@thezestylemon.ca.
2. Information we collect
Customer information
- Name, email, phone, delivery and billing addresses submitted during catering, online-ordering and estimate flows;
- Order contents, notes, delivery instructions, and payment references from our payment processors (payment card numbers are handled by the processor, not stored by us);
- Communications you send us, including catering emails processed by our inbox.
Employee and staff information
- Staff profile data (name, role, assigned locations, PIN hash);
- Time-clock punches, shifts and roles imported from Square for payroll purposes;
- Checklists, deliveries and other operational actions performed by identified staff.
3. How we use information
- To operate catering, ordering, delivery, kitchen-display and receipt features;
- To compute payroll reports from Square time punches for manual review and bookkeeping;
- To send transactional emails (order confirmations, receipts, portal invitations, invoice notifications);
- To secure the Service, prevent abuse and comply with legal obligations.
We do not sell personal information, employee data, or customer data. Access to production data is restricted to authorized staff who need it to operate the Service.
4. Sharing
We share data only with service providers who process it on our behalf:
- Square (POS, time punches, catalog);
- Payment processors (for online catering payments);
- Google (Maps, Places, Gmail for the catering inbox where connected);
- Our hosting and database providers used to run the Service.
5. Retention
Customer order and invoice records are retained for as long as required for tax and business record-keeping. Employee time records are retained per applicable employment-standards law.
6. Security
The Service uses HTTPS in transit, role-based access controls, row-level security in the database, and encryption of sensitive third-party credentials. No system is perfectly secure; you should use a strong password and enable multi-factor authentication where offered.
7. Your choices
- You may request access to, correction of, or deletion of your personal information by emailing us;
- Customers may unsubscribe from marketing emails via the link in each message;
- Employees may request a copy of their time records held in the Service.
8. Changes
We may update this Policy. Material changes will be posted at this URL with a new "Last updated" date.
9. Contact
Privacy questions or requests: catering@thezestylemon.ca