Privacy policy

Last updated: 6 October 2026

1. Who we are

Salumi Vino is a restaurant at 358 Notre-Dame St. East, Montreal, Quebec H2Y 1C7, telephone (514) 759-0505. We operate this website and we are responsible for the personal information collected through it.

This policy is governed by the laws of Quebec and of Canada. It follows Quebec’s Act respecting the protection of personal information in the private sector, as amended by Bill 25.

Our privacy officer is Mario Iannitto. Write to him at salumivino@gmail.com about anything on this page.

2. What personal information we collect

  • What you send us through a form on this site. Every page of this site carries a contact form, and our events and private-dining pages carry enquiry forms. They collect your name, your email address, the message you write and any file you choose to attach. We also record which page the message came from and the date and time it arrived.
  • Standard visit information. Our host records server logs: your IP address, your browser and device type, and the pages you request.
  • Spam protection on forms. Before a form is accepted, Cloudflare Turnstile checks that the request comes from a real browser. That check sees your IP address and some technical details about your browser.
  • Visit statistics — only if you accept analytics cookies. Google Analytics then records the pages you view, how long you stay, the approximate region you are in, your device type and how you arrived at the site.
  • Orders, if you order food through this site. What you ordered, the amount, your name and the contact details you give us for the order, and the confirmation our payment processor returns. We never receive or store your full card number.

We do not ask for sensitive information such as health or financial details. This site has no user accounts, no comments and no reviews, so there is nothing you can publish here.

3. Why we collect each piece

  • Your name, email and message: so we can read your message and reply to it.
  • Attached files: only to look at what you chose to send us — a menu request, an event brief, a document.
  • The page and time of a message: so we know which enquiry it is and can answer in context.
  • Server logs: to keep the site online, to find faults and to detect attacks.
  • The spam check: to stop automated form submissions from flooding the restaurant’s inbox.
  • Visit statistics: to see which pages people actually use, so we can improve them. These are read as totals, never to build a profile of you.
  • Order details: to prepare and deliver your order, to take payment, and to keep the accounting records the law requires.

4. Our legal basis

Under Bill 25, every collection needs a reason. Ours are:

  • Your consent: analytics cookies (you decide in the banner, and can change your mind at any time) and the message you choose to send us through a form.
  • Performing a contract with you: taking, preparing and confirming an order you place.
  • A legal obligation: keeping sales and tax records.
  • Necessary to provide and protect the site: server logs and the spam check on forms. These are the minimum needed for the site to work safely, and we do not use them for anything else.

We do not sell your personal information, we do not rent it, and we do not use it for automated decision-making or profiling.

5. How long we keep it

  • Form submissions (your message, your contact details, any attachment): 365 days from the day we receive them, then deleted.
  • Order and transaction history: 7 years, because tax and accounting rules require it.
  • Analytics data: 14 months, after which Google Analytics deletes it automatically.
  • Server logs: kept only for the short period our host needs for security and troubleshooting.
  • Your cookie choice: stored in your own browser so we do not ask again on every page. Clearing your browser data clears it.

6. Who we share it with

We share only what each service needs to do its job, and none of them may use your information for their own purposes.

  • Nestor Suite — hosts this website and holds the form submissions we receive. Hosted on Quebec infrastructure, in Beauharnois, Quebec (Canada).
  • Cloudflare Turnstile (Cloudflare, Inc.) — checks form submissions for spam. Runs on a worldwide network, so the check may happen outside Canada.
  • Google Analytics (Google) — visit statistics, and only after you accept analytics cookies. Processed on Google servers outside Canada, including in the United States.
  • Google Maps (Google) — the map picture in our footer is an image stored on our own server, so Google receives nothing while you simply read the page. If you click it for directions, you leave our site and Google’s own privacy policy applies to what happens next.
  • LibroReserve — our reservation widget. The “Reserve” link opens their booking page; anything you type there is collected by LibroReserve under their own privacy policy, and we receive the resulting booking.

We may also share information if the law requires it — for example a court order — or with our accountant for the order records described above.

7. Cross-border transfers

This website and the messages you send through its forms are stored in Quebec, Canada.

Two services do involve information leaving Quebec: the spam check on our forms (Cloudflare) and, if you accept analytics cookies, our visit statistics (Google Analytics), which are processed outside Canada, including in the United States. Before using them we assessed, as Bill 25 requires, whether the information would receive adequate protection, taking into account how little is involved — technical data and anonymous visit counts, not your order or your message. Information outside Quebec may be subject to the laws of the country where it is held. If you would rather not take part in the analytics transfer, decline analytics cookies in the banner; nothing else on the site changes.

8. Cookies and tracking

On your first visit, a consent banner appears at the bottom of the page and asks before anything optional is loaded. These are the categories:

  • Necessary (always on, cannot be switched off): the cookie that remembers your language, the cookie that remembers your cookie choice, and the short-lived spam-protection check on forms. No tracking happens through them.
  • Analytics (off until you accept): Google Analytics. We confirmed on this site that the Google Analytics script is not loaded and sets no cookie until you accept — declining it means it never runs at all.

You can change your choice at any time using the cookie button the banner leaves on the page, or by clearing your browser’s cookies for this site. We do not use advertising or social-media tracking pixels.

9. Your rights

Quebec law gives you the right to:

  • Know and see what personal information we hold about you;
  • Correct anything inaccurate, incomplete or ambiguous;
  • Ask us to delete information we no longer need;
  • Receive a copy of the information you gave us, in a structured, commonly used technical format, or have it sent to someone else (portability);
  • Withdraw your consent at any time, including for analytics cookies;
  • Ask that we stop spreading information about you, or de-index a link, where the law allows.

To use any of these rights, email our privacy officer Mario Iannitto at salumivino@gmail.com, or write to us at 358 Notre-Dame St. East, Montreal, Quebec H2Y 1C7. We will answer within 30 days, as Bill 25 requires. We may need to confirm who you are first, so that we do not hand your information to someone else. Our answer, and the reasons for it, are free of charge.

10. Children and young people

This site is meant for a general, adult audience. It presents a restaurant, its menus and its events — we do not aim it at children and we do not market to them.

We only collect personal information about a child under 14 with the consent of the person having parental authority over them (a parent, or a tutor). A person aged 14 or over may give that consent themselves.

Anyone who visits can use the contact and enquiry forms on this site. If we receive a message that appears to come from a child under 14, and the person having parental authority has not consented, we use it only to answer the question or to reach the parent, we do not add the child to any list, and we delete the message once we have replied instead of keeping it for the usual 365 days. We never ask a child for more information than the question needs.

A parent, tutor, or anyone else having parental authority over a child can write to our privacy officer, Mario Iannitto, at salumivino@gmail.com to see, correct or have deleted any information we hold about their child. The same 30-day answer applies.

11. If there is a privacy breach

If we confirm a breach of confidentiality that presents a risk of serious injury, we will notify the Commission d’accès à l’information du Québec (CAI) within 72 hours of confirming it, and notify the people affected promptly, with what happened and what they can do about it. We keep a register of any such incident, as the law requires.

12. How to make a complaint

Start with our privacy officer at salumivino@gmail.com — most questions are settled quickly that way. If you are not satisfied with our answer, you may complain to the Commission d’accès à l’information du Québec, the authority that oversees this law: cai.gouv.qc.ca, 1-888-528-7741.

13. Changes to this policy

If we change how we handle personal information, we will update this page and change the date below. Significant changes will be announced on the site.

This privacy policy was last updated on 6 October 2026.

Terms of use