Privacy policy
Last updated: October 1, 2026
1. Who we are
Ugo Pizzeria (“we”, “us”, “our”) runs this website and the pizzerias behind it. Our address is 1100 Blvd. De Maisonneuve Ouest, Montreal, Quebec H3A 1T1.
We are responsible for the personal information collected through this site. This policy is governed by the laws of Quebec and Canada, including Quebec’s Law 25 (the Act to modernize legislative provisions as regards the protection of personal information).
The person in charge of protecting your information is John Cheliotis. You can reach him any time at info@ugopizzeria.com.
2. What personal information we collect
When you send us a catering or event enquiry
The catering form asks for: your first name, last name, phone number, email address, the number of guests, the type of event, the event date, a description of your event, any allergies or dietary restrictions, your budget, and any file you choose to attach.
Allergy and dietary information can say something about your health, so we treat it as sensitive. You only give it to us because you choose to, we use it only to plan your event safely, and you can leave the field blank.
When you place an order on this site
Your name, email address, phone number, the pickup or catering time you choose, any notes you add, the items you order, and the tip you leave. Card details are typed into Square’s payment field and go straight to Square — we never see or store your card number.
Automatically, while you browse
Your IP address is recorded with any form or order you send, as a record against spam and fraud. If — and only if — you accept analytics cookies, we also receive the pages you visited, roughly which region you are in, your browser and device type, and the page that sent you to us.
What we do not collect
This site has no accounts, no comments or reviews you can post, and no newsletter sign-up. We do not build profiles of visitors and we make no automated decisions about you.
3. Why we collect each piece
| What | Why we need it |
|---|---|
| Name, email, phone | To answer your enquiry and to reach you about your event or your order. |
| Guests, event type, event date, description, budget | To work out whether we can cater your event, and to quote you a realistic price. |
| Allergies and dietary restrictions | To prepare food that is safe for your guests to eat. |
| Files you attach | Only to read the detail you wanted to send us (a menu, a floor plan, a quote). |
| Order items, pickup time, notes, tip | To prepare and hand over the right order at the right time, and to charge the right amount. |
| Card payment | To take payment for your order. Handled by Square; we receive only a confirmation. |
| IP address | To block spam and fraudulent submissions, and to keep the site secure. |
| Analytics (pages, region, device) | To see which pages people actually use, so we can improve the site. Never used to identify you personally. |
4. Our legal basis under Law 25
- Your consent — the catering form, the allergy and dietary field (express consent, because it is sensitive), and analytics cookies. You can say no, and you can change your mind later.
- Performing our contract with you — everything needed to take, prepare and hand over an order you placed.
- A legal obligation — keeping records of sales and transactions for tax and accounting law.
- Our legitimate interest in a working site — spam protection and security logging, kept to the minimum that does the job.
If we ever want to use your information for a new purpose, we will ask you first.
5. Children and young people
This site is meant for adults. We do not aim it at children, and we do not knowingly collect personal information about a child under 14.
Children under 14
Under Law 25, information about a child under 14 may only be collected with the consent of a parent or guardian. That is how our forms are meant to be used in practice: a catering enquiry or an order must be placed by the parent or guardian themselves, in their own name and with their own contact details — not by the child. When the enquiry you send us mentions a child, as a birthday party or a dietary restriction for a young guest would, we treat the submission you made as the parent’s or guardian’s consent for the details you chose to include.
If we realise we have received information about a child under 14 without that consent, we delete it as soon as we notice.
A parent or guardian can ask us at any time to see, correct or delete the information we hold about their child. Use the same contact details as everyone else: John Cheliotis, info@ugopizzeria.com. We answer within 30 days, free of charge.
Young people aged 14 to 17
Someone aged 14 to 17 can consent for themselves. Where they do, we will only ever use their information in their own interest — to answer their question or to hand over their order — and for nothing else. They have exactly the same rights as an adult, including the right to see, correct and delete their information, to withdraw their consent, and to ask that information about them be de-indexed so that it no longer appears in search results.
6. How long we keep it
| Category | How long |
|---|---|
| Form submissions (catering and event enquiries, including attachments) | 365 days from the day you send them |
| Order and transaction history | 7 years, because tax and accounting law requires it |
| Analytics data | 14 months |
Once a period ends, the information is deleted or permanently anonymized so it can no longer be linked back to you.
7. Who we share it with
We share your information only with the service providers we need to run the site and the business. Each one may use it only for the job we hired them for.
| Who | What they do for us | Where they handle it |
|---|---|---|
| Nestor | Hosts this website and holds the form and order submissions we receive | Quebec, Canada |
| Google (Google Analytics) | Counts page visits so we can see what people use. The script is served from Google’s googletagmanager.com domain. Loads only if you accept analytics cookies | United States and other countries |
| Google (Google Maps) | Shows the maps on our location pages | United States and other countries |
| Cloudflare (Turnstile) | Checks that a form was filled in by a person and not a bot | Global network, including the United States |
| Square | Processes card payments for online orders | Canada and the United States |
| UEAT | Runs the online ordering page the “Order online” button takes you to | Quebec, Canada |
| Uber Eats | Runs the delivery store pages we link to | United States and other countries |
When you click through to UEAT or Uber Eats you leave our site, and from that point their own privacy policy applies to what you do there.
We may also have to hand over information if the law requires it — a court order, for example. Other than that, we never sell your personal information and we never share it for advertising.
8. Transfers outside Quebec
This website and the enquiries and orders you send through it are hosted on Nestor’s infrastructure in Quebec, Canada.
Some of the providers listed above do handle data outside Quebec, mainly in the United States: Google (Analytics and Maps), Cloudflare, Square and Uber. Before using them we assessed whether the information would get an adequate level of protection, taking into account the sensitivity of the data, how it is used, the protections written into our contracts with them, and the legal framework of the country concerned.
If you would rather no analytics data about you leaves Quebec, simply decline analytics cookies. Everything on this site works normally without them.
9. Cookies and tracking
The first time you arrive, a banner at the bottom of the screen asks what you allow. It offers two categories:
- Essential — always on. These remember your cookie choice, keep the forms and ordering working, and run the spam check. They do not track you and cannot be switched off, because the site cannot work without them.
- Analytics — off until you turn it on. Google Analytics, which tells us which pages get used. Nothing in this category runs until you accept: the analytics script sits switched off in the page and is only started once you say yes.
You can accept everything, refuse everything, or pick just the categories you want, and you can change your mind at any time using the cookie settings on the banner. Refusing analytics does not limit anything on the site.
We do not use advertising or marketing cookies on this site.
10. Your rights
Under Law 25 you can ask us to:
- See the personal information we hold about you;
- Correct anything that is wrong, incomplete or out of date;
- Delete information we no longer have a good reason to keep;
- Send it on — give you a copy in a structured, commonly used technology format, or pass it to another organization (portability);
- Withdraw your consent at any time, including for analytics cookies and for the sensitive allergy information;
- Stop sharing or de-index information about you where the law allows it.
Write to our privacy officer, John Cheliotis, at info@ugopizzeria.com, or by mail at 1100 Blvd. De Maisonneuve Ouest, Montreal, Quebec H3A 1T1.
We will answer you within 30 days, as Law 25 requires, and it costs you nothing. We may need to confirm who you are first, so that we do not hand your information to someone else. If we have to say no to part of a request, we will tell you why and how to challenge it.
11. If there is ever a breach
If we confirm a confidentiality incident involving your personal information that presents a risk of serious injury, we will report it to the Commission d’accès à l’information (CAI) within 72 hours of confirming it, and we will tell the people affected as quickly as we can, with what happened and what they should do. We keep a register of any such incident, as the law requires.
12. How to make a complaint
Please come to us first — contact John Cheliotis at info@ugopizzeria.com and we will try to put it right.
If you are not satisfied with how we handled it, you have the right to complain to Quebec’s privacy regulator, the Commission d’accès à l’information du Québec (CAI). Their current contact details and complaint form are at www.cai.gouv.qc.ca.
13. Changes to this policy
If we change this policy we will post the new version on this page and update the date below. If the change matters to you, we will say so on the site rather than leave you to find it.
Last updated: October 1, 2026