Privacy policy

Last updated: October 2, 2026

This policy explains, in plain language, what personal information Patates 2000 collects through this website, why we collect it, who we share it with, and what you can do about it. It follows Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25.

1. Who we are

This website is operated by Patates 2000, a snack bar and restaurant located at:

2000 Desserte S Autoroute 440, Laval, Quebec H7S 2E7, Canada

We are responsible for the personal information collected through this site. Our activities and this policy are governed by the laws of Quebec and of Canada.

2. What personal information we collect

This is a small informational website, and we deliberately keep collection to a minimum. Here is everything it gathers.

Collected automatically, on every visit

• Technical and security data held in our server logs: your IP address, your browser and device type, the operating system, the pages you open, the date and time, and the page that referred you.
• Your cookie choice, stored in your own browser so that we do not ask you again on every page. Storing it is necessary to provide the service you asked for: we cannot honour your decision without keeping a record of it, so it is stored without separate consent, as the law permits.

Collected only if you turn on analytics cookies

• Audience measurement data: which pages you view, how long you stay, your approximate region (city or region level — your IP address is shortened before it is stored), your device and browser type, and how you arrived at the site. This is collected through Google Analytics 4 and nothing in this category loads until you say yes.

Collected when you open the Contact page

• The interactive map on that page is delivered by Mapbox. To draw the map, Mapbox receives your IP address and basic device information. This happens as soon as the Contact page opens, before and regardless of any cookie choice. Our basis for it is that it is necessary to deliver the page you asked for: the map is part of that page, so it is not treated as optional and no separate consent is asked for it, as the law permits. It is not used for analytics, advertising or tracking, and it only happens on the Contact page.

What this site does not collect

• There is currently no contact form, booking form or newsletter sign-up on this site, so we do not collect your name, email address, phone number or messages through it.
• We do not take orders or payments on this website, and there are no user accounts or passwords.
• There is no way for visitors to post content on the site, so we collect nothing that way.
• We do not use your information for profiling or for any automated decision that affects you.

Children

This site is not aimed at children, and we do not knowingly collect personal information from anyone under 14 without the consent of a parent or guardian. If we learn that we hold personal information about a child under 14 that was given to us without that consent, we delete it. A parent or guardian may contact our person in charge of the protection of personal information, George Polichronis, at patate2000gp@hotmail.com, to ask what information we hold about their child, to have it corrected, or to have it deleted.

3. Why we collect each piece

4. Our legal basis

Under Law 25, we must be able to say why we are allowed to handle each piece of information. The last column of the table in section 3 gives the basis for every single item listed in section 2. The three bases we rely on are:

• Necessary to provide the service you asked for. This covers serving the page you requested and the security and log data that comes with it; the Contact page map, which sends your IP address and basic device information to Mapbox as that page loads; and storing your cookie choice so that we can honour it. All of these are necessary for the site to function, and they are handled without separate consent, as the law permits.
• Your explicit consent. Analytics is entirely optional. It runs only after you switch it on in the cookie banner, and you can switch it back off at any time.
• Legal obligation. Where we are required to keep records — for example accounting and tax records for transactions — we keep them for as long as the law requires.

5. How long we keep it

When a retention period ends, the information is deleted or anonymized.

6. Who we share it with

We do not sell, rent or trade your personal information. We share it only with the service providers below, only for the purpose listed, and only to the extent they need it.

We may also disclose information where the law requires it — for example in response to a valid court order.

7. Transfers outside Quebec

The website itself, and anything submitted through it, is hosted on Nestor's infrastructure in Quebec, Canada. It does not leave the province.

Two optional or functional services do involve providers outside Quebec:

• Google Analytics (United States) — only if you consent to analytics cookies. If you decline, no analytics data leaves Quebec, because none is collected at all.
• Mapbox (United States) — receives your IP address when the Contact page map loads.

Before using a provider outside Quebec, we consider whether the information receives protection equivalent to what Quebec law requires, taking into account how sensitive the information is, how it will be used, and the safeguards the provider commits to. The data involved here is limited to technical and audience-measurement information.

8. Cookies and tracking

When you first arrive, a banner asks what you allow. It offers two categories, and this is exactly how it behaves:

• Essentials — always active. These are needed for the site to work at all: remembering your cookie choice, keeping the site secure, and delivering pages. They cannot be switched off, because without them the site does not function.
• Analytics — off until you turn it on. This covers Google Analytics. We have confirmed on the live site that no analytics request is made before you choose. If you decline, or simply ignore the banner, nothing in this category ever loads.

The banner gives you three buttons: Accept all, Reject all, and Save my preferences for a mix. Refusing is as easy as accepting.

You can change your mind at any time using the cookie preferences button that stays available on the site. If you withdraw consent for analytics, the related cookies are cleared.

9. Your rights

Under Law 25 you have the right to:

• Access the personal information we hold about you, and be told what we do with it.
• Correct anything inaccurate, incomplete or out of date.
• Ask for deletion of information we no longer have a valid reason to keep.
• Portability — receive the computerized information you gave us in a structured, commonly used technological format.
• Withdraw your consent to analytics at any time, without having to explain why.
• Complain if you believe we have handled your information improperly.

To exercise any of these rights, contact our person in charge of the protection of personal information:

10. If there is a privacy breach

If we confirm a confidentiality incident involving personal information, and it presents a risk of serious injury, we will notify the Commission d'accès à l'information du Québec and the people affected within 72 hours of confirming it, with reasonable diligence. We also keep a register of confidentiality incidents, as the law requires, and we take steps to reduce the risk of harm and to prevent a repeat.

11. How to make a complaint

Please come to us first — write to George Polichronis at patate2000gp@hotmail.com and we will do our best to put things right.

If you are not satisfied with our answer, you may file a complaint with Quebec's privacy regulator:

12. Changes to this policy

If we change how we handle personal information — for example if we add a contact form or start taking orders online — we will update this page and change the date below before the change takes effect.

Last updated: October 2, 2026