1Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service.
• Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of shares or equity interest.
• Application refers to Pattykulcha, the software program provided by the Company.
• Company (referred to as "the Company", "We", "Us" or "Our") refers to Pattykulcha Ltd., 7159 Magistrate Terrace, Mississauga, ON L5W 1E3.
• Cookies are small files placed on Your computer or mobile device containing browsing details and session state.
• Country refers to: Ontario, Canada.
• Device means any device that can access the Service such as a computer, smartphone, or digital tablet.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the Application, the Website, or both.
• Service Provider means any natural or legal person who processes data on behalf of the Company.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure.
• Website refers to Pattykulcha, accessible from https://www.pattykulcha.com.
• You means the individual accessing or using the Service, or the legal entity on behalf of which such individual is accessing the Service.

2Collecting Your Personal Data

Types of Data Collected

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You:

• First name and last name
• Phone number (used for secure SMS verification and order updates)
• Address, State, Province, Postal code, and City

Usage Data

Usage Data is collected automatically when using the Service. This may include Your Device's Internet Protocol (IP) address, browser type and version, the pages of our Service that You visit, time and date of visits, time spent on pages, unique device identifiers, and diagnostic data. When accessing via a mobile device, We may also collect device model, operating system, and mobile browser type.

Information Collected while Using the Application

With Your prior permission, We may collect location data to help You find nearby Patty Kulcha food truck locations, estimate delivery times, or navigate to our restaurants. You can enable or disable location access at any time through Your device settings.

3Brand Ambassador & Affiliate Partner Program

The Patty Kulcha Ambassador Program enables approved community partners to refer customers using an official QR Code Pass and custom referral links, earning referral commissions. The following privacy terms apply specifically to registered ambassadors and applicants:

1. Applicant Identity & Canadian Driver's License Verification

When registering at our ambassador portal, We collect your legal name, phone number, email address, mailing address, province/city, marketing fleet category, and Canadian Driver's License number (formatted as A1234-67890-12345). This information is collected strictly for identity verification, fraud prevention, confirming one account per individual, and regulatory eligibility. Driver's license numbers are encrypted at rest with restricted administrative access and are never displayed publicly. On all ambassador dashboard views, IDs display only the prefix and the last 6 characters (e.g. PK-dbg472).

2. Referral Tracking, Attribution Cookies & 10% Customer Discount

Each ambassador receives an official pass with a unique referral link (e.g. pattykulcha.com/r/PK-xxxxxx) and QR Code. When a customer scans the QR code or clicks the referral link, an attribution cookie is stored on their device. This grants the customer an instant 10% discount on their order and attributes the referral commission to the ambassador's ledger.

3. Banking Details & Direct Stripe Connect Payouts

Referral commissions are paid directly in Canadian Dollars (CAD) to the ambassador's verified Canadian bank account through Stripe Connect (Stripe Express). Banking credentials (transit, institution, and account numbers) are submitted directly to Stripe under PCI-DSS Level 1 compliance. Pattykulcha Ltd. does not store unencrypted raw bank account passwords or full banking routing secrets on its servers.

4. Leaderboard Transparency & Customer Confidentiality

The Ambassador Dashboard features a Network Leaderboard displaying only the ambassador's display name, city (e.g. Calgary, AB), and cumulative referral earnings. Driver's license numbers, contact details, and bank account numbers are strictly confidential. Ambassadors only see aggregated referral counts and commissions; they do not have access to individual customer names, home delivery addresses, phone numbers, or payment card details.

5. Independent Contractor Status & CRA Compliance

Ambassadors act as independent contractors and are solely responsible for declaring referral earnings and remitting applicable income taxes in accordance with the Canada Revenue Agency (CRA) and provincial tax regulations. Pattykulcha Ltd. retains referral transaction logs as mandated by Canadian financial reporting laws.

4Tracking Technologies and Cookies

We use Cookies and similar tracking technologies (beacons, tags, and scripts) to track activity on Our Service and maintain preferences.

• Necessary / Essential Cookies (Session): Essential to authenticate users, manage orders, and prevent fraudulent use of accounts.
• Cookies Notice Acceptance Cookies (Persistent): Identifies if users have accepted cookie usage on the Website.
• Functionality Cookies (Persistent): Remembers choices You make (such as login preferences or language) for a personalized experience.
• Tracking and Performance Cookies (Third-Party): Used to understand traffic patterns, popular menu items, and optimize site usability.

5Using Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide, maintain, and monitor the usage of our Service.
• To manage Your Account and enable access to member functionalities and loyalty rewards.
• For the performance of a contract, such as processing food preparation, delivery orders, or in-restaurant reservations.
• To contact You by email, SMS, or telephone for order tracking, security updates, or customer service inquiries.
• To provide You with news, special culinary offers, and event announcements (unless You have opted out).
• To attend to and manage customer inquiries and support requests.
• For business transfers, mergers, or reorganizations where customer records form part of transferred assets.
• For internal data analysis, identifying dining trends, and evaluating promotional campaigns.

6Retention & Transfer of Your Data

Data Retention

The Company retains Your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy, including complying with legal, accounting, and dispute resolution requirements. Usage Data is generally retained for shorter analytical periods unless required for security enhancements.

Data Transfer

Your information may be processed at Company operating facilities and secure cloud data centers located in Canada and other jurisdictions. We ensure adequate controls, encryption, and contract standards are in place to safeguard Your data across any cross-border transfers.

7Disclosure & Security of Your Data

Your Rights to Delete or Correct Data

You have the right to request deletion or correction of the Personal Data We hold about You. You can manage profile details directly within Your account settings or by contacting our support team.

Legal Disclosures & Law Enforcement

Under certain circumstances, We may be required to disclose Your Personal Data in response to valid requests by public authorities, courts, or law enforcement agencies, or in good faith to protect property, investigate fraud, or defend against legal liability.

Data Security

The security of Your Personal Data is important to Us. We implement commercial and technical safeguards, including SSL/TLS encryption, secure database access rules, and tokenized payment processing. However, no method of transmission over the internet is 100% secure, and absolute security cannot be guaranteed.

8Third-Party Services & Analytics

We may employ third-party service providers to monitor and analyze service usage:

Google Analytics

Google Analytics tracks and reports website traffic. You can opt out of having Your activity available to Google Analytics by installing the Google Analytics opt-out browser add-on. For full details on Google's privacy practices, visit https://policies.google.com/privacy.

9Children's Privacy & Regional Rights

Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If You believe a child has provided Us with personal data, please contact Us immediately so We can remove it.

California Privacy Rights (Shine the Light & Minors)

Under California Civil Code Section 1798 (Shine the Light), California residents may request information regarding third-party direct marketing sharing. Under California Business and Professions Code Section 22581, registered California users under 18 may request removal of publicly posted content by contacting Us.

10In-Restaurant Event Policies & Guidelines

To ensure a smooth, professional experience for all community events (such as Baithak open mics and live performances) hosted at our venue, participants and performers must adhere to the following guidelines:

1. Equipment & Setup: The venue provides basic equipment (stage, speakers, microphone). Any specialized instruments or gear must be arranged by performers at their own cost.
2. Financial Terms: No upfront payment is provided by the venue. Cash tips received during performance belong entirely to the performer. For online ticket sales, a 50/50 revenue split applies between the company and the performer.
3. Code of Conduct & Content: Performers must maintain respectful, family-friendly behavior. Vulgarity, hate speech, and discriminatory content are strictly prohibited.
4. Time Management: Assigned performance slots must be respected. Late arrivals may lead to slot cancellation.
5. Safety, Liability & Cancellations: Performers are responsible for personal gear and safety. The venue reserves the right to reschedule in cases of unforeseen emergencies.

11Practice Materials & Accuracy Disclaimer

Our online driver practice resources (including G1, M1, and driver test prep questions) are provided solely for educational and practice purposes.

Accuracy Disclaimer: While we strive to maintain accurate materials, users should always consult official Ministry of Transportation (MTO) handbooks and official government portals for current regulations. Pattykulcha is an independent entity and is not affiliated with, endorsed by, or connected to any government agency.

12Policy Updates & Contact Us

We may update Our Privacy Policy periodically. We will notify You of material changes by posting the updated Privacy Policy on this page and revising the "Last updated" date at the top.

If you have any questions or concerns regarding this Privacy Policy or your data, please reach out to us:

• Online Help & Contact Form: https://www.pattykulcha.com/contact-us
• Mailing Address: Pattykulcha Ltd., 7159 Magistrate Terrace, Mississauga, ON L5W 1E3, Canada