Privacy Policy

Last updated: September 23, 2026

This Privacy Policy explains how (“Norvella Cuisine”, “we”, “us”, “our”) collects, uses, discloses, keeps and protects personal information when you visit this website, send us an enquiry, or contact us to reserve a table. We have written it to reflect how this website actually works: it is an informational restaurant website, it does not use cookies, analytics or advertising tools, and it does not store the messages you write on our servers.

We handle personal information in accordance with the Act respecting the protection of personal information in the private sector (Québec), the Personal Information Protection and Electronic Documents Act (PIPEDA, Canada) and, where it applies to visitors located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR).

1. Who We Are

The organisation responsible for your personal information (the “controller” within the meaning of the GDPR) is:

E-mail: info@norvellacuisine.com

Telephone: +1 (418) 527-9364

You can contact us about anything in this Privacy Policy using the details above. Please note that the telephone number and e-mail address are provided for information; the website itself does not open calls or messages automatically.

2. Scope of This Policy

This policy applies to personal information processed through this website and to enquiries and reservation requests you send us as a result of visiting it, whether by e-mail or by telephone. It does not apply to other websites that you may reach through links on our pages (for example, a map service); those websites are governed by their own privacy policies.

3. Personal Information We Collect

3.1 Information you choose to give us

When you use one of the enquiry forms on the About or Contact page, or write to us directly, we receive the information you decide to include, typically:

  • your name;
  • your e-mail address;
  • the content of your message, for example the preferred date and time of a visit, the number of guests, a private dining or event request, or a question about our menu;
  • your confirmation that you agree to the collection of your details for the purpose of answering you (Contact page form);
  • any other details you voluntarily add, such as a telephone number for a call-back.

If you tell us about allergies or dietary requirements, this information may reveal sensitive personal information. We only ask for it in order to prepare your meal safely, we only use it for that purpose, and we only record it with your express consent. You are never required to share it through the website; you may also tell our team in person.

3.2 Reservations made by telephone or in person

When you reserve a table by telephone or in person, we record the details needed to hold the table for you: your name, a way to reach you, the date and time, the number of guests and any special request you mention.

3.3 Technical information

Like any website, our pages are delivered by a web server. When your browser requests a page, the server receives technical information that your browser sends automatically: your IP address, the date and time of the request, the page or file requested, the referring page, and your browser and operating system type. This information is used only to deliver the pages, to keep the website secure and to troubleshoot technical problems. We do not use it to identify you or to build a profile.

3.4 What we do not collect

  • We do not use cookies, web beacons, tracking pixels or device fingerprinting.
  • We do not use analytics, advertising, retargeting or social media tools.
  • We do not offer user accounts, online payments or online ordering through this website.
  • All fonts, images, style sheets and scripts are served from our own website, so your visit does not send data to third-party content networks.

4. How Our Enquiry Forms Work

Our enquiry forms do not transmit your message to a database or to a third-party form service. When you press “Send Message”, the website prepares an e-mail containing the information you entered and opens it in your own e-mail application. Nothing is sent until you choose to send that e-mail. The message then travels through your own e-mail provider to our mailbox, in the same way as any other e-mail you send us.

Because the message is sent from your own e-mail account, your e-mail provider’s privacy terms also apply to it. Once we receive it, we treat it as described in this policy.

We use personal information only for the following purposes:

  • Answering enquiries — replying to your questions and requests. Legal basis: your consent and, under the GDPR, steps taken at your request before entering into a contract (Art. 6(1)(a) and (b)).
  • Managing reservations and private dining requests — holding your table, confirming or changing your booking and preparing your visit. Legal basis: performance of a contract or pre-contractual steps (GDPR Art. 6(1)(b)); consent under Québec and Canadian law.
  • Accommodating allergies and dietary requirements — only with your express consent (GDPR Art. 9(2)(a)), which you may withdraw at any time.
  • Operating and securing the website — delivering pages and preventing misuse, based on our legitimate interest in running a safe and reliable website (GDPR Art. 6(1)(f)).
  • Complying with the law — for example keeping accounting records or answering a lawful request from an authority (GDPR Art. 6(1)(c)).

We do not use your personal information for marketing unless you have asked us to keep you informed, and we never sell or rent it. We do not make decisions about you based exclusively on automated processing.

6. Sharing and Disclosure

Your personal information is accessible only to the members of our team who need it to answer you or to prepare your visit. We may share it with the following categories of recipients, strictly for the purposes described above:

  • our e-mail and website hosting providers, which store our mailbox and deliver the website on our behalf;
  • IT service providers that maintain our systems, when their intervention requires access;
  • public authorities, courts or other parties where the law requires it or where it is necessary to establish, exercise or defend legal claims;
  • a successor organisation in the event of a sale, merger or transfer of our business, subject to the protections required by law.

Service providers act on our instructions, are bound by written confidentiality and security obligations, and may not use your information for their own purposes.

7. Transfers Outside Québec and Canada

Some of our service providers, such as an e-mail provider, may store or process information on servers located outside Québec or outside Canada. Before communicating personal information outside Québec, we assess whether it will receive adequate protection, as required by Québec law. Where the GDPR applies, transfers rely on appropriate safeguards such as an adequacy decision (the European Commission recognises Canada’s PIPEDA as providing adequate protection for commercial organisations) or standard contractual clauses. Information held abroad may be accessible to authorities of that country under local law.

8. How Long We Keep Information

  • Enquiries : up to 24 months after our last exchange, so that we can follow up on your request and answer related questions.
  • Reservation details : up to 12 months after the date of the reservation.
  • Allergy and dietary information : deleted after your visit, unless you ask us to keep it for future visits.
  • Accounting and tax records (for example, invoices for private events): for the period required by applicable law, generally six years.
  • Server log data : kept only as long as needed for security and troubleshooting, and deleted routinely.

When information is no longer needed, we delete it securely or anonymise it so that it can no longer identify you.

9. How We Protect Information

We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the information, including access limited to authorised staff, password protected accounts, up-to-date software, and encrypted connections (HTTPS) when the website is served over the internet. No transmission over the internet or method of storage is completely secure, but we work to protect your information and we review our practices regularly.

If a confidentiality incident presents a risk of serious injury, we will notify you and the competent authority as required by law, and we keep a register of such incidents.

10. Your Rights

Depending on the law that applies to you, you have the right to:

  • be informed about the personal information we hold about you and obtain a copy of it (access);
  • have inaccurate, incomplete or outdated information corrected (rectification);
  • have your information deleted when it is no longer necessary or was collected unlawfully, and ask that it stop being disseminated (erasure and de-indexation);
  • withdraw your consent at any time, without affecting processing carried out before the withdrawal;
  • object to processing based on our legitimate interests, or ask us to restrict processing;
  • receive information you provided in a structured, commonly used technological format (portability);
  • file a complaint with a supervisory authority (see section 15).

11. How to Exercise Your Rights

Send your request by e-mail to info@norvellacuisine.com or by post to the address in section 1. We may ask for information to confirm your identity before answering, so that we never disclose your information to someone else. We respond within 30 days. Exercising your rights is free of charge, except where the law allows a reasonable fee for transcription, reproduction or transmission; we will tell you about any fee in advance.

12. Person in Charge of Personal Information

In accordance with Québec law, the person with the highest authority within acts as the person in charge of the protection of personal information, unless this function has been delegated in writing. This person can be reached at info@norvellacuisine.com (subject line: “Privacy”) or at the postal address in section 1.

13. Children

This website is intended for adults. We do not knowingly collect personal information from children under 14 without the consent of a parent or guardian. If you believe a child has sent us personal information, please contact us and we will delete it.

Our Contact page offers a link that opens the restaurant’s location in an external map service. That service is only contacted if you choose to follow the link, and it then processes your data under its own privacy policy. We are not responsible for the practices of external websites.

15. Complaints

If you have a concern, please contact us first; we will do our best to resolve it. You may also complain to the Commission d’accès à l’information du Québec, to the Office of the Privacy Commissioner of Canada, or, if you are located in the European Union or European Economic Area, to the data protection authority of your country of residence or work.

16. Changes to This Policy

We may update this Privacy Policy when our practices or the law change. The date at the top of this page shows when it was last revised. If we make a significant change, for example by introducing a new category of service provider or a tool that collects additional information, we will publish the updated policy here before the change takes effect and, where required, ask for your consent.

See also our Cookie Policy and our Terms & Conditions .