Privacy policy

How Cafe Gentile collects, uses and protects your personal information. Written to meet Quebec's Law 25 (Bill 25).

1. Who we are

Cafe Gentile is the business responsible for the personal information collected through this website.

• Legal entity: Cafe Gentile
• Address: 4126 Rue Sainte-Catherine, Westmount, Quebec H3Z 1P4, Canada
• Website: www.cafegentile.ca
• Governing law: the laws of Quebec and of Canada apply to this policy.
• Person in charge of protecting your information (privacy officer): Anthony Gentile — anthony@cafegentile.ca

2. What personal information we collect

We only collect what you give us through the forms on this site, plus limited technical information from your visit.

Information you type into our forms

• Catering request form: first name, last name, email address, phone number, event date, type of event, number of guests, budget range and anything you write in the event description.
• Events & groups enquiry form: name, email address, phone number, preferred date and time, number of guests, the kind of event you are planning, and your message.
• Careers / job application form: name, email address, phone number, the position you are applying for, your resume or CV file, anything you write in the message field, and your consent to be contacted about the role.

Information collected automatically

• Technical visit data: IP address, browser and device type, the pages you view, the page that referred you, and the date and time of your visit.
• Spam protection signals: when you submit a form, our spam-protection service checks the submission and receives your IP address and basic browser signals.

Information handled by our partners

• Table reservations: if you book a table, you do so on Resy. Resy collects the booking details you enter (name, contact details, party size, date and time) under its own privacy policy, and shares the reservation with us.
• Online ordering and delivery: if you order through Uber Eats, Uber collects your order, payment and delivery information under its own privacy policy and passes us what we need to prepare the order.

We do not ask for, and we do not want, sensitive information such as health details. Please don't include any in a form message.

3. Why we collect each piece of information

Information	Why we need it
Name, email address, phone number	To reply to your catering, event or group enquiry and to confirm arrangements with you.
Event date and time, type of event, number of guests, budget	To tell you whether we can host your event, quote a price and plan staffing and food.
What you write in a message field	To understand and answer the specific request you made.
Resume or CV, position applied for, consent to be contacted	To evaluate your application and to contact you about the job.
IP address, browser and device type, spam-protection signals	To block automated spam and abusive form submissions and to keep the site secure.
Pages viewed, referring page, visit date and time	If (and only if) you accept analytics cookies: to count visits and see which pages people use, so we can improve the site.
Reservation details (via Resy)	To hold your table and prepare for your arrival.
Order and delivery details (via Uber Eats)	To prepare and hand off the food you ordered.

We do not sell your personal information, and we do not use it for anything other than the purposes listed above.

4. Why we are allowed to collect it: your consent

Under Quebec's Law 25 the starting point is simple — we collect your personal information because you agree to it. We ask for that agreement separately for each specific purpose, in clear everyday words, at the moment it matters. We never bundle several purposes into one blanket "I accept", and consent you gave for one thing is never treated as consent for another.

• One purpose, one choice. The consent box on the job application form covers reviewing your application — nothing else. In the cookie banner, analytics and marketing are two separate switches: accepting one does not accept the other.
• Marketing and measurement only ever happen with your consent. Google Analytics, Google Tag Manager and the Meta Pixel stay switched off until you accept the matching category, and they switch off again as soon as you withdraw.
• You can withdraw at any time. For cookies, reopen the banner from the cookie settings link and change your choice. For anything else, write to anthony@cafegentile.ca and we will stop. Withdrawing does not undo what was lawfully done before you withdrew.
• Saying no costs you nothing. Refusing analytics or marketing cookies does not block any part of this site, and it does not affect the service you get from us — browsing, menus, enquiries, bookings and applications all work exactly the same.

In a few specific situations the law lets us use information without asking for separate consent. These are the only ones that apply here:

• The information is necessary to carry out the service or the step you asked us for. When you send a catering request, an event enquiry, an order or a job application, we need the details you entered to do the very thing you asked for — quote the event, hold the booking, prepare the order, review your application — and we need the minimum technical data that comes with the submission (your IP address and basic browser signals) to deliver it to us safely and free of automated spam. Without these we could not provide what you requested.
• Keeping records is required of us by law. We keep order and transaction records for the period Quebec and Canadian tax and accounting rules impose on a business like ours.
• The law otherwise requires or authorises it — for example responding to a court order.

That is the whole list. We do not rely on a general "business interest" to collect anything from you.

5. Children and teenagers

Our restaurants welcome families, but this website is written for adults and our forms are not meant to be filled in by children.

• Under 14: Law 25 requires that consent be given by the parent or by the person having parental authority. We therefore do not collect personal information directly from a child under 14 through the forms on this site. If your child's details are needed — for a birthday booking, say — the parent fills in the form.
• 14 to 17: consent may be given either by the young person or by their parent or guardian.
• If we receive information about a child under 14 anyway, we delete it promptly once we notice, unless we must keep it to answer the parent who sent it.
• Parents and guardians: you may ask to see, correct or delete the information we hold about your child. Write to our privacy officer, Anthony Gentile, at anthony@cafegentile.ca. We answer within 30 days and may first ask you to confirm your identity and that you hold parental authority.

Applying for a job if you are under 18. Quebec law does not allow us to employ a child under 14 in a restaurant, so please do not send us an application if you are under 14. If you are 14 or 15, you may apply, and before you could start we would need written consent from your parent or guardian, along with the limits Quebec sets on hours worked during the school year. If you are 16 or 17, you may apply and consent for yourself. We only use an application to assess you for the job you applied for.

6. Automated checks, and who actually makes decisions

We do not profile you, and no software makes a decision about you. We do not build a profile of your habits, tastes or characteristics, and we do not use automated processing to decide anything that affects you.

There is one automated step on this site, and we want to be straightforward about it. When you submit a form, an automated spam check (Cloudflare Turnstile, together with a hidden field that only a robot would fill in) decides whether the submission looks automated or abusive, and can block it before it reaches us. That check looks only at technical signals — browser and device signals, your IP address and how the form was submitted. It does not read the content of your enquiry, your message or your resume, it does not consider who you are, and it is never used to assess you, your application or your custom.

If a genuine submission of yours is blocked, you have not lost your chance: email us at anthony@cafegentile.ca and a person will look at it and take your request from there. You can also simply call or visit the restaurant.

Every real decision is made by a person at Cafe Gentile — whether we can take your catering job, confirm your event or group booking, and whether we invite you to an interview. A human being reads your enquiry or your application and decides. The site also does not let visitors post their own content, so there is nothing of yours for us to moderate automatically.

7. How long we keep it

• Form submissions (catering, events, careers): 365 days from the day you send them, then deleted.
• Order and transaction history: 7 years, because tax and accounting rules require it.
• Analytics data: 14 months, then deleted or aggregated so it no longer identifies anyone.

If a file is still needed for an active conversation with you — an open catering booking, for example — we keep it until that is finished, and then the clock above applies.

8. Who we share it with

We share personal information only with the service providers below, only for the purpose named, and only with what they need to do that job.

Provider	What they do for us	Where they process the data
Nestor (website platform and hosting)	Hosts this website, receives form submissions and delivers them to us	Quebec, Canada (shared production, ca-qc-bhs)
Google Analytics (Google LLC)	Counts visits and page views — only after you accept analytics cookies	United States and other countries where Google operates
Google Tag Manager (Google LLC)	Loads our measurement tags in the browser — only after you accept	United States and other countries where Google operates
Meta Pixel (Meta Platforms, Inc.)	Measures how our social media ads perform — only after you accept marketing cookies	United States and other countries where Meta operates
Resy (Resy Network, Inc.)	Takes and manages table reservations	United States
Uber Eats (Uber Technologies, Inc.)	Takes online orders and arranges delivery	Canada and the United States
Google Maps (Google LLC)	Shows the map of our locations	United States and other countries where Google operates
Form spam protection (Cloudflare, Inc. — Turnstile)	Checks that form submissions come from a real person, not a bot	Global network, including Canada and the United States

We may also share information if the law requires it — for example a court order — or to protect our rights, our staff or our guests.

9. Transfers outside Quebec

Your form submissions and the website itself are hosted in Quebec, Canada, on Nestor's Quebec infrastructure. They are not moved outside Quebec for hosting.

Some of the partners listed above do process information outside Quebec, mostly in the United States: Google (Analytics, Tag Manager, Maps), Meta, Resy, Uber and Cloudflare. Before using them we assessed, as Law 25 requires, whether the information would receive adequate protection where it is processed, taking into account the sensitivity of the data, the purpose, the protections in place and the legal framework of the receiving country. These providers are bound by contract to protect your information and to use it only for the service they provide us. Analytics and marketing tools only ever run — and therefore only ever transfer anything — after you accept those cookie categories.

10. Cookies and tracking

When you first arrive, a consent banner appears at the bottom of the page and asks what you allow. You can open it again at any time from the cookie settings link in the banner to change or withdraw your choice.

• Essential — always on, and cannot be switched off. These remember your cookie choice, keep forms working and protect the site against spam. They do not track you.
• Analytics — off until you accept. Google Analytics and Google Tag Manager, used to count visits and see which pages are popular.
• Marketing — off until you accept. Meta Pixel, used to measure how our ads perform.

We checked the behaviour of this site as published: with the banner showing and no choice made, no analytics or marketing request was sent. Those tools stay dormant until you accept the matching category.

Pages that embed Resy, Uber Eats or Google Maps load content from those companies, and your browser contacts them when such a page is displayed. Their own cookies and privacy policies apply to that content.

11. Your rights

Under Law 25 you can ask us at any time to:

• Access the personal information we hold about you and get a copy of it;
• Correct anything inaccurate, incomplete or out of date;
• Delete information we no longer have a reason to keep;
• Receive it in a portable format — a structured, commonly used computerised file you can take elsewhere;
• Withdraw your consent — for cookies, through the banner; for anything else, by writing to us;
• Ask us to stop sending you messages about events or offers.

12. If there is a security breach

If personal information we hold is lost, exposed or accessed without authorisation and that creates a risk of serious harm, we will notify the Commission d'accès à l'information du Québec (CAI) and the people affected within 72 hours of confirming the breach, and sooner if we can. We keep a register of any such incident, as the law requires, and we tell you plainly what happened and what to do about it.

13. How to make a complaint

Please come to us first — write to anthony@cafegentile.ca and we will try to put it right.

If you are not satisfied with our answer, you can file a complaint with Quebec's privacy regulator:

14. Changes to this policy

If we change how we handle personal information, we update this page and change the date below. Significant changes are announced on the site.

Last updated: October 5, 2026