Privacy Policy

Last Updated: April 2026

Introduction

Regulars Inc. ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Regulars dining membership, restaurant loyalty platform, and related services (the "Service"), available at regularspass.com and our mobile applications.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service. By accessing and using Regulars, you acknowledge that you have read, understood, and agree to be bound by this entire Privacy Policy.

1. Information We Collect

1.1 Account Information

When you create an account with Regulars, we collect information you provide directly, including your name, email address, phone number, business name (for business accounts), physical address, and payment information. For businesses, core Regulars functionality does not require checkout credentials or access to your existing checkout system.

1.2 Check-in and Location Data

When customers check in through the Regulars platform, we collect check-in timestamps, frequency, and location information from your business account. This data helps us provide guest intelligence and visit tracking services. Location data is aggregated and used solely to support your business operations and provide analytics.

1.3 Transaction Data

When an operator provides house records, we may collect transaction amounts, times, and item details necessary to support reporting, Regulars Pricing records, and visit tracking. Otherwise, Regulars relies on check-ins, operator-configured Regulars Pricing, and platform engagement data. We do not store full payment card information; primary account numbers, CVVs, and full track data remain with the merchant's payment processor and are never transmitted to or stored by Regulars.

1.4 Device and Usage Information

We automatically collect certain technical information about your device when you access our Service, including device type, operating system, browser type, IP address, referring page, and pages visited. We use cookies, beacons, and similar tracking technologies to enhance your experience and gather usage analytics.

1.5 Communications

If you contact us through email, support forms, or customer service channels, we collect and retain your communications to respond to your inquiries and improve our Service.

2. How We Use Your Information

Regulars uses the collected information for the following purposes:

Service Delivery: Operating, maintaining, and improving the dining membership and restaurant loyalty platform, including check-in functionality, Regulars Pricing, and guest analytics. Account Management: Authenticating users, managing accounts, processing payments, and handling customer support requests. Communications: Sending transactional emails, service notifications, updates, and responding to inquiries. Analytics and Improvements: Analyzing usage patterns and trends to enhance our Service, conduct research, and develop new features. Legal Compliance: Fulfilling legal obligations, responding to lawful requests, and enforcing our Terms of Service. Marketing: With your consent, sending promotional content, newsletters, and service updates (you may opt out at any time).

3. Third-Party Sharing and Services

3.1 Third-Party Services

Regulars may work with approved third-party services where access is available and authorized by the business customer. When you authorize a service, the provider receives only the information required to support that connection, and Regulars receives only the minimum data required for the enabled reporting features. Each provider processes your information under its own privacy policy, and we recommend reviewing those practices before enabling a connection.

3.2 Service Providers

We may share information with third-party service providers who assist us in operating our website, conducting our business, and servicing you, such as payment processors, email providers, hosting services, and analytics platforms. These vendors are contractually obligated to use your information only as necessary to provide services to us.

3.3 Legal Requirements

We may disclose your information when required by law, including in response to subpoenas, court orders, or government requests, and to protect our rights, privacy, safety, or property.

3.4 Business Transfers

If Regulars is involved in a merger, acquisition, bankruptcy, dissolution, or similar transaction, your information may be transferred as part of that transaction. We will provide notice and seek consent where required by law.

4. Restaurant Ledger Exports and Retention

A restaurant may export its restaurant-scoped ledger, including visit history, house-authored notes, and Regulars Pricing application history, while its account is active and for 30 days after closure. Exports may be regenerated during that window and reflect diner account deletions up to the moment they are generated. They never include diner contact details, diners' private content, friend activity, or data from other restaurants.

Following the 30-day export window after closure, Regulars deletes the restaurant's tenant data within 90 days, retaining only records required by law or invoicing. Export generation is recorded in an immutable, restaurant-scoped audit log containing the actor, timestamp, restaurant, export type, and row count.

Once a restaurant exports a copy, that restaurant is independently responsible for its copy under applicable privacy law, including Québec's Law 25. Diner deletion requests concerning an exported copy must be directed to and honoured by the restaurant holding it.

5. Your Privacy Rights

5.1 Access and Portability

You have the right to access the personal information we hold about you and, in certain cases, receive a portable copy of your data in a structured, commonly used format.

5.2 Correction and Deletion

You may request correction of inaccurate information or deletion of your account and associated data. We will process requests within the timeframes required by applicable law, though some information may be retained for legal or legitimate business purposes.

5.3 Objection and Opt-Out

You may object to our processing of your information, including for marketing purposes. You can opt out of promotional communications by clicking "unsubscribe" in any marketing email or updating your account preferences.

6. Quebec and Canadian Privacy Laws

Regulars Inc. is based in Montreal, Quebec, and complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) at the federal level, as well as Quebec Law 25 (Bill 64), which modernizes privacy protections in Quebec. Under these laws, you have rights to access, correct, and request deletion of your personal information. Law 25 introduces specific requirements for consent to processing and data security obligations, which we follow. If you believe your privacy rights have been violated, you may file a complaint with the Commission d'accès à l'information (CAI) in Quebec or the Office of the Privacy Commissioner of Canada.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, remember your preferences, and analyze website traffic. Essential cookies are necessary for basic functionality. Analytics cookies help us understand how visitors interact with our Service. Preference cookies remember your settings. You can manage cookie preferences through your browser settings; however, disabling essential cookies may affect Service functionality. For more information, see our Cookie Policy.

8. Security

Regulars implements industry-standard security measures to protect your information, including encryption (TLS 1.2+ for data in transit, AES-256 for data at rest), secure data centers, access controls, and regular security audits. However, no security system is impenetrable. While we strive to protect your information, we cannot guarantee absolute security. Please use a strong password and keep your account credentials confidential.

9. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, which may have privacy laws that differ from your home country. By using Regulars, you consent to the transfer of your information to countries outside your country of residence, including the United States. We implement safeguards to protect your information during such transfers.

10. Children's Privacy

Regulars is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will delete such information and terminate the child's account. If you believe we have collected information from a child under 13, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable laws. We will notify you of material changes by updating the "Last Updated" date and, if required, by obtaining your consent. Your continued use of our Service following notification of changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Regulars Inc.
Email: privacy@regularspass.com
Address: Montreal, Quebec, Canada

We aim to resolve any privacy concerns within 30 days of receipt of your inquiry. If you are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority.