Privacy Policy.

Latte Booth

Privacy Policy
Nitro Espresso Bar Corp., operating as Latte Booth

Effective Date: July 30th, 2026
Last updated: Aug 5th, 2026

Introduction

This Privacy Policy describes how Nitro Espresso Bar Corp., operating as Latte Booth (“we,” “us,” or “our”), collects, uses, discloses, retains, and protects your personal information when you use our website (the “Site”) or interact with us in connection with our mobile espresso bar services (the “Services”). We are committed to handling your personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, for individuals in Quebec, the Act respecting the protection of personal information in the private sector (as amended by Law 25).


Who Is Responsible for Your Information (Privacy Officer)

We have designated a Privacy Officer who is responsible for our compliance with this policy and with applicable privacy laws. You may contact our Privacy Officer with any question, request, or complaint about your personal information:

  • Privacy Officer: Alyssa Faller, Fractional HR Experts.

  • Email: office @lattebooth. ca.

  • Mailing address: 20 Bermondsey Rd, Unit 102B, East York, ON M4B 1Z5, Canada.


Information We Collect

We collect the following types of information when you use the Site or our Services:

  • Contact information: name, email address, phone number, and company name (if applicable).

  • Request information: details you provide when you request a quote or contact us, such as the date, time, and location of your event, and any specific requests.

  • Usage information: information about how you interact with the Site, such as pages visited and forms submitted, collected through cookies and similar technologies (see “Cookies and Tracking Technologies” below).

We do not knowingly collect sensitive personal information (such as health, biometric, or financial account information) through the Site. Please do not send us such information unless we specifically request it for a defined purpose.


How your quote link works

When we send you a quote, the web address of that link carries your details — such as your name, your email address, the company you are booking for, your event date and your venue's location — so that the page opens already filled in. A web address is not a private place. It is written into your browser's history, it is kept in the records of the systems it passes through, and it does not expire. Anyone who has the link can open that quote and read its pricing — there is no password on it. Please treat it as you would any private document, and forward it only to people you are happy to show your pricing. The choices you make inside the quote — packages, add-ons, and whether you have agreed to the terms — are saved by your own browser, on that device, so you can leave a quote half-finished and come back to it. Clearing your browser's data for the site removes them. Those choices stay on your device until you accept and sign; that is the point at which they reach us.


How We Use Your Information

We use the personal information we collect only for the purposes for which it was provided and for related purposes you would reasonably expect, including to:

  • provide, operate, and improve the Services;

  • process your requests, prepare quotes, and respond to your inquiries;

  • administer and service your event bookings;

  • send you marketing or promotional communications about our Services, promotions, and events — only where you have consented, and you can withdraw consent at any time (see “Your Consent and Your Choices”);

  • analyze how the Site and Services are used; and

  • comply with our legal and regulatory obligations.

We identify the purposes for which we collect personal information at or before the time of collection. If we intend to use your information for a new purpose not identified here, we will obtain your consent unless the law permits otherwise.


Your Consent and Your Choices

We collect, use, and disclose your personal information with your consent, which may be express or implied depending on the sensitivity of the information and the circumstances. For individuals in Quebec, we rely on your express, opt-in consent where required by Law 25, including for the use of tracking technologies that identify, locate, or profile you.

Marketing communications. We send commercial electronic messages only in accordance with Canada’s Anti-Spam Legislation (CASL). Every marketing email identifies us and includes a working unsubscribe link. You may withdraw your consent to marketing communications at any time by using the unsubscribe instructions in our emails or by contacting our Privacy Officer.

Withdrawing consent. Subject to legal or contractual restrictions and reasonable notice, you may withdraw your consent to our collection, use, or disclosure of your personal information at any time. We will explain the consequences of doing so. Withdrawing consent may mean we can no longer provide certain Services.


Cookies and Tracking Technologies

Two different things may be stored on your device, and only one of them is a cookie.
The first is your browser's local storage, which keeps a quote you have started so you can
leave it half-finished and come back to it. It stays on your device, is not readable by other
websites, and we do not ask your permission for it — without it, a quote in progress would be
lost every time you reloaded the page. The same applies to the cookies that simply keep the
Site working.
The second is measurement. We use Google Analytics to understand how the Site and the quotes
we send are used, and that does set a cookie — so we ask you first. Nothing is stored, and
nothing is sent to Google, until you answer. Everything is switched off by default, and
declining costs you nothing: your quote works exactly the same either way.
If you accept, Google Analytics is sent which pages you opened, roughly which region your
request came from (worked out from your IP address), and the reference number of the quote you
are viewing. That reference identifies the quote rather than you — it carries no name and no
email address.
We do not use cookies to build advertising profiles of you across other websites. The
advertising features of our analytics are switched off and are never enabled by your consent.
If that ever changes, we will update this policy and ask for your consent first.
If you accept and later change your mind, clearing this site's data in your browser settings
withdraws your consent and puts the question back. You can also manage or disable cookies
through your browser settings; disabling some cookies may affect how the Site functions.
Where required by law 0 including for visitors in Quebec — we obtain your consent before
activating non-essential cookies and tracking technologies, and technologies that collect
personal information are configured with the highest level of confidentiality by default.


Sharing and Disclosure of Your Information

We may share your personal information with:

  • Service providers who help us operate the Site and deliver the Services. These include Stripe Payments Canada, Ltd. and its parent Stripe, LLC, which process payments and store your card details; Google Cloud and Firebase, which host the Site and store your quote and booking records; and Google Analytics, which measures how the Site is used where you have consented to it. We also use providers for email delivery and scheduling. Each is given only what it needs for its job, is contractually required to keep your information confidential, protect it, and use it only for the purposes we specify.

  • Legal and regulatory authorities, where required or permitted by law, or to protect our rights, safety, or property.

  • Parties to a business transaction, such as a merger, acquisition, or sale of assets, subject to appropriate confidentiality protections.

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes without your consent.


Transfers Outside Quebec and Canada

Your quote and booking records — everything you tell us, and everything you sign — are stored
in Canada, on Google Cloud servers in the Toronto region.

Storing them in Canada is not the same as putting them beyond the reach of foreign law. Google
is based in the United States, and information it holds on our behalf may be subject to that
country's legal process, including lawful access requests, wherever in the world it is stored.
It may also be accessed from outside Canada in order to operate, support and maintain the
service.

Three parts of the service sit outside Canada, all in the United States: your payment details,
held by Stripe, LLC under the agreement our payment processor Stripe Payments Canada, Ltd. has
with us; the servers that deliver this website, whose logs record your IP address and which
pages you opened; and, where you have consented to it, the website measurement described under
"Cookies and Tracking Technologies" above, which Google processes on our behalf and which is
sent your IP address in order to work out roughly which region you are in.

Information held in, or accessible from, another country is subject to that country's laws and
may be accessible to its courts, government and law enforcement, including through lawful
access requests.

Before transferring personal information outside Quebec, we assess the protection it will
receive and put appropriate contractual and other safeguards in place, consistent with Law 25
and PIPEDA. You may contact our Privacy Officer at any time for more information about these
transfers or the safeguards we use.


How Long We Keep Your Information (Retention and Destruction)

We keep your personal information only for as long as necessary to fulfill the purposes described in this policy, to provide the Services, and to meet our legal, accounting, or reporting obligations. When personal information is no longer required, we securely destroy, delete, or anonymize it.

Our retention periods are:

  • Inquiries and quotes that do not become bookings — 24 months from your last contact with us.

  • Booking, invoice and tax records — 7 years, the period Canadian tax law requires.

  • Marketing contact details — until you unsubscribe or ask us to remove them.

  • Website analytics — 14 months, in aggregate form wherever possible.


Your Privacy Rights

Subject to applicable law, you have the right to:

  • Access the personal information we hold about you and be informed of how it is used and disclosed;

  • Correct or update inaccurate or incomplete information;

  • Withdraw consent or object to certain uses, including marketing;

  • Request deletion of your personal information where the law permits (Quebec’s “right to be forgotten”); and

  • Request portability — for individuals in Quebec, to receive certain computerized personal information you provided to us in a structured, commonly used technological format.

To exercise any of these rights, contact our Privacy Officer using the details above. We may need to verify your identity before responding. We will respond within the timelines required by law (generally within 30 days under PIPEDA and Quebec Law 25) and will explain the reasons if we are unable to fulfill a request in whole or in part.


Complaints

If you have a concern about how we handle your personal information, please contact our Privacy Officer first so we can try to resolve it. You also have the right to make a complaint to the applicable regulator:

  • Office of the Privacy Commissioner of Canada (OPC) — www.priv.gc.ca; and

  • For Quebec residents, the Commission d’accès à l’information du Québec (CAI) — www.cai.gouv.qc.ca.


Data Security

We take reasonable technical, organizational, and physical measures to protect your personal information against loss, theft, and unauthorized access, disclosure, alteration, or destruction, appropriate to the sensitivity of the information. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. If we experience a confidentiality incident (a breach) that presents a risk of serious injury or a real risk of significant harm, we will notify affected individuals and the applicable regulator as required by law and keep a record of the incident.


Children’s Privacy

The Site and Services are directed to businesses and adults and are not intended for children. We do not knowingly collect personal information from a minor under the age of 14 without the consent of a parent or guardian, except where the collection is clearly for the minor’s benefit. If you believe a minor has provided us with personal information without appropriate consent, please contact our Privacy Officer and we will take steps to delete it.


Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on the Site and revise the “Last updated” date above. Where changes are significant, we will take additional steps to notify you as required by law. We encourage you to review this policy periodically.


Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact our Privacy Officer at office @lattebooth. ca.