Privacy policy

whodo.it is a set of tools that small food businesses (we call them shops) use to take pre-orders. This page explains what information is kept, why, who can see it, and what you can ask for. Plain words, no tricks.

Who is responsible

Each shop is its own business. When you order from a shop, the shop decides how your order details are used, and whodo.it keeps them on the shop's behalf. whodo.it is responsible for its own part: running the service, keeping it secure, and the accounts of the people who run shops.

whodo.it is operated by whodo.it inc., a Canadian company in Truro, Nova Scotia.

What we keep

• When you order: your name, email, phone number if you give it, what you ordered, your pickup time, any note you write, and the payments the shop records (for example "e-Transfer received").
• When you follow a shop: your email and a record of when and how you agreed to hear from it.
• If you run or help run a shop: your name, email, password (stored only as a one-way scramble, never readable), and a record of sign-ins (device type and internet address) to protect your account.
• Every visit: your internet address, briefly, in server logs, to stop abuse such as someone flooding the order form.

Why

• To take your order and let the shop prepare it.
• To email you about your order: the confirmation, when it's ready, and a reminder that includes the pickup address.
• To send a shop's announcements, only if you asked for them. Every announcement has a one-click unsubscribe.
• To keep accounts and the service secure.

What we don't do

We don't sell or rent information, show ads, or use tracking or analytics tools. The only cookie is the one that keeps people signed in to run their shop.

Who can see it

• The business you ordered from, and the staff it adds. Shops can't see each other's customers.
• The person who operates whodo.it, only to fix problems or when the law requires it.
• Emails are sent through whodo.it's own mail server.

Information is stored on servers in Canada and sent over encrypted connections.

How long

• Orders stay with the shop for as long as it uses whodo.it, because shops need their sales records (for taxes, for example).
• When a shop is deleted, its page goes away at once and all its information is erased 30 days later.
• When you delete your account, your name, email and password are erased right away.
• Backups are kept for 14 days, then replaced.

What you can ask for

• See or correct what's kept about you. Shop people can download it themselves from their account page.
• Stop announcements with the unsubscribe link in any announcement.
• Delete your account from your account page. To remove an order, ask the shop, which may need to keep it for its records.

For anything else, or a concern about how your information is handled, write to our privacy officer. We answer within 30 days. You can also contact the Office of the Privacy Commissioner of Canada.

Changes

If this policy changes in a way that matters, shop owners will be told by email before it takes effect.

Last updated: October 27, 2026

Terms of use