This policy explains what personal information Karma Indian Bistro collects, why we collect it, who we share it with and what you can ask us to do with it. It covers this website, our reservation and ordering systems, and the enquiries you send us. We've written it in plain English rather than legal boilerplate, because a policy nobody reads protects nobody.
Karma Indian Bistro is a restaurant at 2741 West 4th Avenue, Vancouver, British Columbia V6K 1P9, operating as [LEGAL BUSINESS NAME]. We are responsible for the personal information we collect about you.
Because we're a private-sector business in British Columbia, we're governed by the province's Personal Information Protection Act (PIPA). Where your information crosses provincial or national borders - which it does when a reservation or delivery order is processed - the federal Personal Information Protection and Electronic Documents Act (PIPEDA) applies too.
Only what we need in order to feed you, answer you, or run the restaurant. Three ways it reaches us.
Information you give us directly
Booking a table
Name, phone number, email address, party size, date and time, and any note you add - including dietary requirements and allergies.
Using our contact form
Name, email, phone if you give it, the subject you select, and whatever you write in the message.
Ordering pickup or delivery
Name, contact details, order contents, and - for delivery - your address. Payment is handled by the ordering platform; we never see or store your full card number.
Group & event enquiries
Everything above, plus event date, guest numbers and any requirements you tell us about.
Buying a gift card
[CONFIRM - are gift cards sold online? If so, name the payment processor and state that Karma does not store card details. If they're only sold in the restaurant, say that instead and delete this row.]
A note on allergies and dietary information. If you tell us about an allergy or a dietary requirement, we treat it as health information and handle it carefully. We pass it to the kitchen and the floor team so your food is cooked correctly, we keep it on the booking record, and we don't use it for anything else.
When you visit this website we collect standard technical information: your IP address, browser and device type, the pages you view, how long you stay, and the site that referred you. This is used to understand how the site is performing, not to identify you personally.
Our reservation and ordering partners pass us the details of your booking or order so we can prepare for it. We also see aggregate, non-identifying data from analytics and from our social accounts.
- To take and confirm your reservation, and to contact you if something changes.
- To prepare and fulfil pickup and delivery orders.
- To cook safely around allergies and dietary requirements.
- To answer the enquiry you sent us.
- To quote for, plan and run group bookings and private events.
- To understand how the website is used and improve it.
- To meet our legal, tax and accounting obligations.
We do not sell your personal information. We never have and we won't.
In most cases you give us your information directly - you fill in a booking, send a message, place an order - and that's your consent for us to use it for that purpose. Where the law requires it, we'll ask you expressly.
You can withdraw your consent at any time by contacting us, subject to legal and contractual limits and reasonable notice. Withdrawing consent may mean we can't hold a booking or complete an order.
Essential
Makes the site work - page loading, security, remembering your cookie choice.
No. The site won't function without these
Analytics
Tells us which pages are read and how people move through the site. [CONFIRM which analytics you run - Google Analytics 4? Something else? Nothing at all? Name it here.]
Yes, through the cookie banner or your browser settings.
Advertising
[CONFIRM - is there a Meta Pixel or any ad tracking on the site? If there is none, replace this row with "We don't run advertising or retargeting cookies." That is a genuinely good thing to be able to say.]
Yes.
Your browser can block or delete cookies at any time. Doing so may affect how parts of the site behave.
Some pages embed content from other services - a Google Map, for example. Those services set their own cookies and are governed by their own privacy policies.
We share personal information only with the service providers who help us run the restaurant, and only with what they need to do their job.
Tock
Reservations and booking management.
TouchBistro / TBDine
Online pickup orders.
DoorDash
Delivery orders across Kitsilano and the West Side.
Our website host and email provider
Running the site and receiving enquiries.
Analytics provider
[As named in section 5.]
Accountants, and professional advisers
Where required for tax, audit or legal purposes.
We may also disclose information where the law requires it - a court order, a legal obligation, or to protect someone's safety.
We don't sell, rent or trade your information to anyone for marketing.
[CONFIRM - is there CCTV in the restaurant? If yes, this policy needs a short section saying where the cameras are, why they're there, how long footage is kept and who can see it. BC PIPA is specific about video surveillance. If there are no cameras, ignore this note and delete it.]
Some of the services above store data on servers outside Canada, mainly in the United States. When your information is held in another country it is subject to that country's laws, and may be accessible to its courts and authorities.
We tell you this because BC law requires it, and because you should know. If you'd rather not have your details go through those systems, call us on 604-559-1666 and we'll take your booking by phone instead.
Only as long as we need it for the purpose we collected it, or as long as the law requires - whichever is longer.
- Reservation and order records: [CONFIRM - how long does Tock hold these, and how long do you keep your own copies?]
- Contact form enquiries: [CONFIRM - e.g. "kept for 12 months after the enquiry is closed".]
- Financial and tax records: as required by Canadian tax law, generally six years.
When we no longer need your information, we delete it or make it anonymous.
We take reasonable steps to keep your information secure: the website runs over an encrypted connection, access to booking and enquiry systems is limited to staff who need it, and our service providers are chosen partly on their own security practices.
No system is perfectly secure, and we won't pretend otherwise. If a breach ever affects your information in a way that could cause you real harm, we will tell you and notify the authorities as the law requires.
Under BC's Personal Information Protection Act you can:
- Ask what we hold. Request access to the personal information we have about you, how we've used it, and who we've given it to.
- Correct it. Ask us to fix anything inaccurate or incomplete.
-Withdraw consent. Tell us to stop using your information, subject to legal and contractual limits.
- Ask us to delete it, where we have no legal reason to keep it.
- Complain. To us first, so we can put it right - and to the Office of the Information and Privacy Commissioner for British Columbia if you're not satisfied.
Write to the address in section 14. We'll respond within 30 days, as the law requires, and we may need to verify who you are before we hand anything over.
[CONFIRM - does Karma run a mailing list? If YES: name the provider, state that people only receive email if they opt in, and confirm every message carries an unsubscribe link. Canada's anti-spam law (CASL) requires express consent and a working unsubscribe in every message. If NO: replace this whole section with a single line - "We don't run a mailing list. If you contact us, we reply to your enquiry and that's the end of it." That is the better answer if it's true.]
We won't add you to any list simply because you booked a table or sent us a question.
This website isn't directed at children and we don't knowingly collect personal information from anyone under 13. Bookings are made by adults. If you believe a child has given us information, contact us and we'll delete it.
We'll update this page if how we handle information changes, and the date at the top will change with it. If a change is significant, we'll say so clearly rather than quietly editing the text.
Questions about this policy, or a request about your information, go to our privacy contact:
We'll update this page if how we handle information changes, and the date at the top will change with it. If a change is significant, we'll say so clearly rather than quietly editing the text.
Karma Indian Bistro
2741 W 4th Ave, Vancouver, BC V6K 1P9
Email: info@karmaindianbistro.ca