GDPR Information

Last Updated: September 9, 2026

Our Commitment to Data Protection

Although Alpha Transit Diner & Grill operates in Canada, we recognize the importance of data protection standards established by the General Data Protection Regulation (GDPR) for guests who may be visiting from the European Union or European Economic Area. We are committed to protecting your personal data and respecting your privacy rights.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contractual necessity: Processing is necessary to fulfill a reservation or service agreement with you
• Legitimate interests: We have a legitimate business interest in maintaining customer records and improving our services
• Consent: For marketing communications or optional data collection, we obtain your explicit consent
• Legal obligation: We may process data to comply with legal or regulatory requirements

Data Controller

Alpha Transit Diner & Grill is the data controller responsible for your personal information. You can contact us at [email protected] for any questions or requests regarding your personal data.

Your Rights Under GDPR

If you are an EU or EEA resident, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for marketing purposes
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. Include your full name, email address, and a clear description of your request. We will respond within 30 days of receiving a valid request.

We may need to verify your identity before processing certain requests to ensure the security of your personal data.

Data Transfers

Your personal data is stored and processed in Canada. If you are located in the EU or EEA, please be aware that Canada has been recognized by the European Commission as providing an adequate level of data protection for certain commercial transfers.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, typically:

• Reservation records: 2 years
• Marketing consent records: Until consent is withdrawn
• Accounting records: 7 years as required by law

Automated Decision-Making

We do not use automated decision-making or profiling that would produce legal effects or similarly significantly affect you.

Children's Data

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children without parental consent.

Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local supervisory authority. For EU residents, you can find your data protection authority at https://edpb.europa.eu/about-edpb/board/members_en

Updates to This Information

We may update this GDPR information periodically. Any changes will be posted on this page with a revised date.