1. Person in Charge of Processing

Aki Sushi ("we," "us," or "our") operates this website and is responsible for the personal information collected through it. We are subject to An Act to modernize legislative provisions as regards the protection of personal information (Quebec Law 25) and are committed to handling your personal information in a transparent, lawful, and secure manner.

Our website is hosted in Quebec, Canada, through Horizon-Cumulus (OVH Beauharnois). Your personal information collected and stored on our servers remains on Quebec soil.

2. Personal Information Collected

We collect personal information in the following categories, depending on how you interact with our website:

2.1 Identification and Contact Information

• Full name
• Email address
• Phone number
• Mailing or delivery address

2.2 Transaction and Order Information

• Order history and details
• Payment information (processed securely; we do not store full card numbers)
• Billing and delivery address

2.3 Technical and Navigation Information

• IP address
• Device identifiers and browser type
• Pages visited and session duration
• Navigation behavior and click patterns
• Approximate geolocation (derived from IP address)

2.4 Advertising Identifiers

• Advertising and social identifiers (collected by Meta Pixel and Google Ads when you consent to marketing cookies)

2.5 Employment Application Information

If you apply for a position with us, we collect the personal information you voluntarily provide in your application, which may include your resume, work history, education, and references.

2.6 Consent Preferences

• Your cookie consent choices, recorded by our consent management platform (Moelleux by Horizon-Cumulus) and stored in Quebec

3. Purposes of Processing

We collect and use your personal information only for the purposes described below. The legal basis for each purpose is indicated in parentheses.

3.1 Operating Our Online Store

We use your identification, contact, and transaction information to process your orders, arrange delivery or pickup, send order confirmations, and handle returns or refunds. This is carried out through WooCommerce. (Legal basis: performance of a contract)

3.2 Website Analytics and Performance

We use Google Analytics 4 and WooCommerce Analytics to understand how visitors use our website, measure traffic, and improve our content and online ordering experience. These services collect device identifiers, IP addresses, pages visited, session duration, and navigation behavior, and transfer that information to the United States. (Legal basis: consent)

3.3 Advertising and Remarketing

With your consent, we use Meta Pixel (Facebook) and Google Ads / Conversion to track conversions from our advertising campaigns and to show you relevant ads on other platforms. These services collect device identifiers, IP addresses, advertising identifiers, transaction data, and social identifiers, and transfer that information to the United States. (Legal basis: consent)

3.4 Functional Services

We use the following tools to provide core website functionality:

• Google Maps — to display our restaurant location on an interactive map. Your IP address and approximate location are transmitted to Google in the United States.
• Google Fonts — to render website typography. Your IP address is transmitted to Google in the United States.
• Google reCAPTCHA — to protect our forms from automated abuse. Your IP address, device identifiers, and navigation behavior are transmitted to Google in the United States.

(Legal basis: legitimate interest in providing a functional and secure website)

3.5 Consent Management

We use Moelleux (by Horizon-Cumulus, Joliette, Quebec) to record and manage your cookie consent choices. A preference cookie named moelleux_{site_key} is stored in your browser for up to 13 months. Consent records and this privacy policy are hosted in Quebec. (Legal basis: legal obligation under Quebec Law 25)

3.6 Transactional Email Communications

We use Microsoft 365 (operated in the United States) to send order confirmations, receipts, and other transactional messages related to your purchases or inquiries. Your email address and name may be processed on servers located in the United States. (Legal basis: performance of a contract / legitimate interest)

3.7 Employment Applications

We use the personal information in your job application solely to evaluate your candidacy and contact you regarding the position. (Legal basis: consent / pre-contractual steps)

4. Third Parties and Processors

The following third-party services are active on our website. We share only the personal information each service needs to fulfill its specific function.

5. Transfers Outside Quebec

Several of the third-party services we use transfer personal information to the United States. Under section 17 of Quebec Law 25, we are required to inform you of these transfers and to take steps to ensure your personal information receives a comparable level of protection.

5.1 Destination Countries

• United States — Google Analytics 4, WooCommerce Analytics, Meta Pixel (Facebook), Google Ads / Conversion, Google Maps, Google Fonts, Google reCAPTCHA, and Microsoft 365 all process personal information on servers located in the United States.

5.2 Contractual Safeguards

Before transferring personal information outside Quebec, we rely on the contractual safeguards offered by each provider, which may include standard contractual clauses, data processing agreements, or equivalent mechanisms recognized under applicable law. Each provider listed above maintains published data processing terms and privacy commitments.

5.3 Privacy Impact Assessment (PIA)

As required by Quebec Law 25, we conduct or rely on a Privacy Impact Assessment (PIA — also referred to as an évaluation des facteurs relatifs à la vie privée, or EFVP) before communicating personal information outside Quebec. These assessments evaluate the sensitivity of the information, the purpose of the transfer, and the legal protections available in the destination jurisdiction. If you would like more information about a specific transfer, please contact our Person responsible for the protection of personal information (see Section 8).

5.4 Email Infrastructure

Our transactional emails are sent through Microsoft 365, which operates in the United States. Your name and email address may be processed on Microsoft servers located outside Canada. Microsoft's data processing terms and privacy commitments apply to this transfer.

6. Retention Period

We keep your personal information only as long as necessary for the purpose for which it was collected, or as required by law.

When the retention period expires, personal information is securely deleted or anonymized so that it can no longer be linked to you.

7. Your Rights

Quebec Law 25 gives you the following rights regarding your personal information. To exercise any of these rights, please contact our Person responsible for the protection of personal information (see Section 8). We will respond within 30 days of receiving your request.

7.1 Right of Access

You have the right to ask us whether we hold personal information about you, and to receive a copy of that information in a clear and understandable format.

7.2 Right of Rectification

If any personal information we hold about you is inaccurate, incomplete, or ambiguous, you have the right to ask us to correct it. If the information has been shared with third parties, we will notify them of the correction where feasible.

7.3 Right of Erasure (Right to be Forgotten)

You may ask us to delete personal information about you when it is no longer necessary for the purpose for which it was collected, when you withdraw your consent (where consent was the legal basis), or when the information was collected unlawfully. Certain legal obligations may require us to retain some information even after a deletion request.

7.4 Right to Data Portability

Where technically feasible, you have the right to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format, and to have it transmitted to another organization of your choice.

7.5 Right to Withdraw Consent

Where we rely on your consent to process personal information (for example, for analytics or marketing cookies), you may withdraw that consent at any time by updating your preferences through our cookie consent banner or by contacting us directly. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

7.6 Right to File a Complaint

If you believe your rights under Quebec Law 25 have not been respected, you have the right to file a complaint with the Quebec Information Access Commission (CAI). You can reach the CAI at www.cai.gouv.qc.ca.

8. Person Responsible for the Protection of Personal Information

In accordance with section 3.1 of Quebec Law 25, Aki Sushi has designated a Person responsible for the protection of personal information. This person is your primary point of contact for any question, request, or concern related to how we handle your personal information.

• Name: Papatsorn Siribarameetum
• Title / Role: --
• Email: info@akisushi.ca
• Phone: 1 866 377-0571

We will acknowledge your request promptly and provide a full response within 30 days, as required by Quebec Law 25. If your request is complex or voluminous, we may extend this period by an additional 30 days and will notify you accordingly.

9. Effective Date and Versioning

This privacy policy takes effect on 10 juin 2026 and supersedes any prior version.

Version: 1

We may update this policy from time to time to reflect changes in our practices, the services we use, or applicable law. When we make material changes, we will update the effective date above and, where appropriate, notify you through our website or by email. We encourage you to review this policy periodically.

This policy was generated and is hosted by Moelleux, a consent management and privacy policy platform operated by Horizon-Cumulus (9322-8310 Québec inc.), Joliette, Quebec. Consent records are stored in Quebec (OVH Beauharnois).