Autumn 2026Scratch pizzeria · Toronto / GTAOrder at least three days ahead.

Service providers

Who handles your information for us.

Every outside service that receives personal information from this website, what it receives and on what terms.

In effect from . Revision providers-2026-10-24-3.

Stripe: Stripe Checkout (card payments made before October 24, 2026, their refunds and records)

What it does for us
Since October 24, 2026 we take no card payment: every new order is paid by Interac e-Transfer. Stripe keeps the records of the card payments made before then, sends their refunds back to the card and handles any dispute about them.
What it receives
For a card payment made before October 24, 2026, from us: your email address, the dishes, quantities and amounts, the order reference, the service date and whether the order was pickup, delivery, a party deposit or a party remainder. From you, on its page: your card details and billing details. We never received your card number.
Its role
Processed card payments for us until October 24, 2026. Stripe is also responsible in its own right for the card, identity and fraud-prevention information it collects on its page.
Terms
Stripe's services agreement and data processing agreement; Stripe privacy policy

Netlify: Website hosting, the site's server functions and its database (Netlify Database)

What it does for us
Delivers the pages, runs the code that prices and records an order, and stores the order records.
What it receives
Everything you enter in an order, a Pizza Party booking or a privacy request, held in the database; and, to deliver each page, your network address and browser details, as every web host does.
Its role
Our service provider: it handles this information only to run the site for us. Netlify uses infrastructure providers of its own, which it lists in its own sub-processor list.
Terms
Netlify's terms of use and data protection agreement; Netlify privacy policy

Google: Gmail (our business mailbox)

What it does for us
Sends the emails about your order from our business address, and holds the messages you send us.
What it receives
Your email address and the contents of each message: your receipt, a refund notice, the Pizza Party emails. The copy of each order that is emailed to us (the kitchen ticket) also holds your name, phone number, delivery address and instructions.
Its role
A standard Google account under Google's own Terms of Service and Privacy Policy. We have no separate data processing agreement with Google for it. The site holds permission to send email only; it cannot read the mailbox.
Terms
Google privacy policy

Google: Google Calendar (our booking calendar)

What it does for us
Keeps our working calendar, so two bookings are never promised the same time.
What it receives
For a paid order: your name, the order number, the date and time and the dishes. Never your address, phone number, payment details, dietary notes or allergy details.
Its role
A standard Google account under Google's own Terms of Service and Privacy Policy.
Terms
Google privacy policy

Google: Google Maps Platform (route distance)

What it does for us
Measures the driving distance to a delivery address, which sets the delivery fee, and to a Pizza Party address, which sets the drive time in the price of the party.
What it receives
The delivery or party address, and nothing else about you or the order.
Its role
Our service provider under the Google Maps Platform terms.
When
Only when we use it for a delivery or a party. When we do not, the distance is estimated on our own server from the postal code and nothing is sent to Google.
Terms
Google Maps Platform terms

Google: Google Analytics 4 (optional website statistics)

What it does for us
Counts visits and shows us which pages are used.
What it receives
A cookie identifier, the page address without anything after the question mark, the site you came from, the page title and general details of your browser and device. Never your name, contact details, address, order notes or dietary or allergy details.
Its role
Our service provider under the Google Analytics terms, with advertising features switched off.
When
Not switched on. Nothing is loaded from Google Analytics and nothing is sent to it. If we switch it on, it will run only after you accept optional cookies.
Terms
Google privacy policy

Where they process it

These providers may process and store information outside Canada, including in the United States. While it is there it is subject to the laws of that country, and courts, law enforcement and national security authorities there may be able to obtain it.

What is not on this list

Instagram and TikTok are linked from our pages and receive nothing from us: a link opens their website, and nothing from them loads on ours. An order, a Pizza Party and the remainder of a party booked before October 24, 2026 are paid by Interac e-Transfer between your bank and ours, outside this website. We use no advertising network, no email marketing service and no customer database outside the providers above.

Changes to this list

We add a provider to this page before it starts to handle personal information, and we date the change. A business customer with a data protection agreement is told by email first: see business customers. Questions: searandshred@gmail.com.

Contact