Electric Diner (“we,” “us,” or “our”) is committed to protecting the privacy and personal information of every person who visits our restaurant, uses our website, places an order, or contacts us. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information in compliance with Canada’s federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy standards.

By using our website at www.electricdinerhamilton.com, making a reservation, placing an order, or otherwise interacting with us, you acknowledge that you have read and agree to the practices described in this Privacy Policy.

1. Accountability

Electric Diner is responsible for personal information under our control. For overseeing compliance with this Policy, our team can be reached at:

Privacy Contact — Electric Diner

28 James Street North, Hamilton, Ontario

info@electricdinerhamilton.com

(289) 389-3929

We require all staff, contractors, and third-party service providers who handle personal information on our behalf to adhere to equivalent privacy standards.

2. What Personal Information We Collect

We collect only the information that is reasonably necessary for the purposes identified in this Policy. Depending on how you interact with us, we may collect:

2.1 Information You Provide Directly

Delivery address and payment details (online orders through tbdine.com or SkipTheDishes — processed by those platforms, not stored by us)

Name, phone number, and email address (reservations, contact form, gift card purchases, event inquiries)

Party size, preferred dining date and time, and special occasion notes (OpenTable reservations)

Messages or inquiries submitted through our Contact page or sent by email

Gift card recipient information provided at the time of digital gift card purchase

2.2 Information Collected Automatically

• Website usage data: pages visited, time on site, browser type, referring URL, and device information (collected via Google Analytics as described below in Section 5.4)
• IP address and general geographic location
• Social media interactions: comments, tags, direct messages, and engagement metrics when you interact with our Facebook, Instagram, TikTok, or Twitter/X accounts

2.3 Information We Do Not Collect

We do not intentionally collect sensitive personal information such as financial account numbers, health data, government-issued identification, or information about children under the age of 13. If you believe we have inadvertently received such information, please contact us immediately so we can delete it.

3. Why We Collect Personal Information

We collect and use personal information only for the following identified purposes:

• To process and manage reservations, table bookings, and special event requests
• To fulfil online takeout and pickup orders
• To facilitate the purchase and redemption of digital gift cards
• To respond to customer inquiries, feedback, and complaints
• To send promotional communications (only with your consent, and you may unsubscribe at any time)
• To operate, maintain, and improve our website and digital platforms
• To comply with our obligations under the Liquor Licence and Control Act, 2019 (Ontario), including age verification requirements where applicable
• To comply with other applicable legal or regulatory obligations
• To detect, prevent, and investigate fraud or other misuse of our services

We will not use your personal information for any purpose other than those described above without first obtaining your consent, unless otherwise required or permitted by law.

4. Consent

We obtain your consent before or at the time we collect personal information. Consent may be expressed (such as completing a reservation form or opting into our email list) or implied (such as voluntarily providing your contact details when placing a pick-up order).

You may withdraw your consent at any time by contacting us at info@electricdinerhamilton.com, subject to legal or contractual restrictions. Withdrawing consent to certain uses (e.g., order processing) may limit our ability to provide you with our services.

5. Third-Party Platforms and Service Providers

We use the following third-party platforms to deliver services to you. Each platform operates its own privacy policy and is independently responsible for data collected through their systems:

5.1 Reservation Management

OpenTable (opentable.ca): Reservations made through OpenTable are subject to OpenTable’s Privacy Policy. We receive your name, contact information, party size, and reservation details from OpenTable in order to seat and serve you.

5.2 Online Ordering

tbdine.com: Pickup orders placed at order.tbdine.com are processed by tbdine. Payment and order data are governed by their privacy policy.

SkipTheDishes: Delivery orders placed through SkipTheDishes are processed by that platform and are subject to their privacy practices.

5.3 Gift Cards

TableUp (app.tableup.com): Digital gift card purchases and redemptions are processed through TableUp. Their privacy policy applies to transactions completed through their platform.

5.4 Website Hosting and Analytics

Hosting: Our website is hosted on private servers through Giant Shoe Creative. The server may collect technical and usage data as part of hosting, which is not stored and is anonymized as per Canadian regulations.

Analytics: Our website processes data through Google Analytics. For more information, review Google’s Privacy and Terms and their article on Safeguarding Your Data.

5.5 Social Media Platforms

If you interact with our profiles on Facebook, Instagram, TikTok, or Twitter/X, your interactions are governed by the respective platform’s terms of service and privacy policy. We do not control the personal information those platforms collect.

We do not sell or trade personal information to any third party for their own marketing purposes.

6. Disclosure of Personal Information

We do not disclose your personal information to third parties except in the following circumstances:

• To the third-party service providers described in Section 5, strictly for the purposes of delivering your requested services
• To law enforcement, regulatory authorities, or courts when required by law, court order, or valid legal process
• To protect the rights, safety, or property of Electric Diner, our guests, or the public
• In connection with a business transaction (e.g., sale, merger, or acquisition), in which case we will notify you of any material change in how your information is handled

Any third party to whom we disclose personal information is bound by equivalent privacy protections.

7. Limiting Collection, Use, and Retention

We collect only the minimum amount of personal information necessary for the purposes identified in this Policy. We do not use personal information for any purpose beyond what was collected for.

We retain personal information only for as long as necessary to fulfill its intended purpose, or as required by applicable law. When personal information is no longer needed, we securely destroy, anonymize, or delete it. In general:

• Reservation and order records: retained for up to two (2) years for service continuity and tax compliance
• Marketing contact lists: retained until you withdraw consent or unsubscribe
• Website usage data: retained in accordance with Wix’s standard data retention practices
• Correspondence records: retained for up to one (1) year after the matter is resolved

8. Accuracy

We make reasonable efforts to ensure that personal information in our possession is accurate, complete, and current as required for the purposes for which it is used. If you believe your personal information is inaccurate or out-of-date, please contact us so we can correct it.

9. Safeguards

We protect personal information against loss, theft, unauthorized access, disclosure, copying, use, and modification through security measures appropriate to the sensitivity of the information. These measures include:

• Use of encrypted third-party payment and reservation platforms (we do not store payment card numbers on our own servers)
• Limiting access to personal information to authorized staff with a legitimate need to know
• Password-protected administrative access to digital systems
• Regular review of our privacy and data handling practices

No data transmission over the internet or electronic storage is completely secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security. In the event of a privacy breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

10. Cookies and Website Tracking

Our website uses cookies and similar tracking technologies to improve your browsing experience and to analyze site traffic. Cookies are small data files stored on your device.

Types of cookies we or our hosting provider (Wix) may use:

• Essential cookies: required for the site to function properly
• Analytics cookies: used to understand how visitors use our site (e.g., pages visited, time on site)
• Preference cookies: used to remember your preferences

You may disable cookies through your browser settings; however, some features of our site may not function as intended if cookies are disabled. By continuing to use our website, you consent to our use of cookies as described in this Policy.

11. Your Right to Access and Correct Your Information

Under PIPEDA, you have the right to:

• Request access to the personal information we hold about you
• Request that we correct inaccurate or incomplete information
• Know how your personal information has been used or disclosed
• Withdraw consent to certain uses of your personal information

To exercise these rights, please submit a written request to:

info@electricdinerhamilton.com

Electric Diner — Privacy Request

28 James Street North, Hamilton, Ontario

We will respond to your request within 30 days. In some circumstances, we may ask you to verify your identity before we release or correct information. There is no charge for a first access request within any 12-month period.

12. Minors

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will delete the information.

In accordance with Ontario’s Liquor Licence and Control Act, 2019, we may verify the age of guests ordering or consuming alcohol on our premises.

13. Openness and Updates to This Policy

This Privacy Policy is publicly available on our website at www.electricdinerhamilton.com. We will notify you of material changes by posting the updated Policy on our website with a revised effective date. We encourage you to review this Policy periodically.

If you have any concerns about our privacy practices, please contact us in the first instance. You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or 1-800-282-1376.

14. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us:

Electric Diner — Privacy Contact

28 James Street North (Lister Block)

Hamilton, Ontario

Phone: (289) 389-3929

Email: info@electricdinerhamilton.com

Website: www.electricdinerhamilton.com