Last updated: March 6, 2026
Introduction
Steak Avenue inc. ("Steak Avenue", "we", "our" or "us"), a brand of Groupe Limonade, operates the website steakavenue.com and its two locations in Quebec City (Lebourgneuf and Vieux-Québec). We are committed to protecting your personal information in accordance with Law 25 modernizing legislative provisions relating to the protection of personal information in Quebec.
This policy describes how we collect, use, disclose and protect your personal information when you browse our website or interact with our services.
1. Personal Information We Collect
We only collect the personal information necessary for the purposes for which it is collected. This may include:
- Identification information: first name, last name, email address
- Reservation data: phone number, desired date, chosen location, number of guests
- Communication data: messages sent through our contact form (inquiry, job application, franchise request, complaint)
- Browsing data: IP address, browser type, pages visited, visit duration, cookies and similar technologies
- Anti-bot verification data: behavioral data collected via Google reCAPTCHA v3 to protect our forms against automated submissions
1.1. Protection of Minors
Our forms are not intended for persons under 14 years of age. We do not knowingly collect personal information from minors under 14 without the express consent of a parent or legal guardian. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected] so we can delete this information.
2. Use of Your Information
We use your personal information for the following purposes:
- Process your table reservation requests and confirm your reservation
- Respond to your inquiries through the contact form (questions, job applications, franchise requests, complaints)
- Send you promotional communications (with your consent)
- Improve our website through statistical analysis
- Protect our forms against abuse via Google reCAPTCHA v3
- Display the location of our restaurants
- Comply with our legal obligations
2.1. Consent
By voluntarily providing us with your personal information through one of our forms, or by browsing our website, you consent to the collection, use and disclosure of your information in accordance with this Policy.
Your consent is only valid for the time necessary to fulfill the purposes for which it was requested.
Can I withdraw my consent? Yes, at any time by contacting our Personal Information Protection Officer at [email protected]. Please note that withdrawing your consent may limit our ability to provide certain communications or services.
2.2. Cookies and Similar Technologies
We use cookies and similar technologies to improve your experience, analyze our traffic and offer you relevant content. Cookies are small text files stored on your device.
Types of cookies used:
- Essential cookies: Necessary for the website to function (language preferences, consent banner) — cannot be disabled
- Analytics cookies: To understand how you use our site and improve it
- Marketing cookies: To offer you personalized communications
You can manage your cookie preferences at any time via our cookie management banner accessible at the bottom of the page.
3. Sharing and Processing of Your Data
We never sell your personal information.
We only share your data with service providers necessary for the operation of our website and services. Access to your personal information is limited to the staff, agents and representatives of Groupe Limonade who need it in the performance of their duties.
Google LLC (United States)
| Service | Use |
|---|---|
| Google reCAPTCHA v3 | Protection of our contact and reservation forms against automated submissions |
Safeguards: Standard Contractual Clauses, EU-U.S. Data Privacy Framework certification
Documentation: Google Privacy Policy
Klaviyo Inc. (United States)
| Service | Use |
|---|---|
| Klaviyo | Management of marketing communication lists and sending promotional emails (with your consent, upon submission of our forms) |
Safeguards: Standard Contractual Clauses
Documentation: Klaviyo Privacy Policy
PrimeReply (hosted in the United States)
| Service | Use |
|---|---|
| PrimeReply | Virtual assistant chatbot to answer your questions in real time. Conversations may be processed and retained to improve the service. |
Documentation: Please consult the PrimeReply privacy policy directly through the chatbot.
Microsoft Corporation (United States)
| Service | Use |
|---|---|
| Microsoft 365 (Office 365 SMTP) | Routing of emails generated by our contact and reservation forms |
Safeguards: Standard Contractual Clauses, EU-U.S. Data Privacy Framework certification
Documentation: Microsoft Privacy Statement
Transfers Outside Quebec
The service providers mentioned above (Google, Klaviyo, PrimeReply, Microsoft) process data on servers located primarily in the United States. In accordance with Section 17 of the Act respecting the protection of personal information in the private sector, we ensure that these transfers are governed by adequate contractual safeguards (standard contractual clauses, recognized certifications).
4. Your Privacy Rights
In accordance with Law 25, you have the following rights regarding your personal information:
- The right to request access to the personal information we hold about you
- The right to request rectification of inaccurate, incomplete or ambiguous information
- The right to request deletion of your information in cases provided for by law
- The right to withdraw your consent previously given
- The right to object to the processing of your information in certain circumstances
- The right to data portability: receive your information in a structured, commonly used technological format
- The right to request cessation of dissemination of your personal information
To exercise these rights, contact our Personal Information Protection Officer at [email protected]. We are committed to responding within 30 days of receiving your request. If your request is complex, this deadline may be extended by an additional 30 days with prior notice.
Right to File a Complaint
If you believe we have not adequately addressed your concerns, you have the right to file a complaint with:
5. Security of Your Information
We take the security of your data very seriously. Our protective measures include:
Technical measures:
- Data encryption in transit (TLS v1.2+)
- HTTPS protocols across the entire website
- Secure authentication and role-based access controls
- Regular data backups
Organizational measures:
- Access to information limited to authorized personnel
- Staff training on personal data protection
- Internal access control policies
- Security incident response procedures
- Documentation of all privacy incidents for 5 years
Data Breach Notification
In the event of a security breach involving your personal data that presents a serious risk of harm, we commit to:
- Notify you as soon as possible (within 72 hours of discovery)
- Notify the Commission d'accès à l'information du Québec (CAI)
- Record the incident in our privacy incident register
No method of transmission over the Internet or electronic storage is completely secure. Although we take every measure to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, or resolve potential disputes.
| Type of Data | Retention Period |
|---|---|
| Contact requests | 2 years following our last interaction |
| Reservation requests | 1 year following the reservation date |
| Marketing communications (Klaviyo) | Until unsubscription |
| Browsing data | Maximum 13 months |
When your information is no longer necessary, we delete or anonymize it securely, in accordance with the requirements of Law 25 and industry best practices.
7. Amendments to This Policy
We may update this Policy periodically to reflect changes in our practices or applicable legislation. We will inform you of any significant changes by posting the new version on this page with an updated revision date.
Your continued use of our site after the publication of a modified version constitutes your acceptance of the changes.
7.1. Personal Information Protection Officer
Groupe Limonade has designated a Personal Information Protection Officer (PIPO) who oversees our privacy practices and ensures compliance with applicable laws.
8. Contact Us
For any questions regarding this Policy or to exercise your rights, please contact us:
Steak Avenue — Groupe Limonade
Quebec, Canada
General email: [email protected]
Privacy email: [email protected]
For any request for access, rectification or deletion, we are committed to responding within 30 days in accordance with Law 25. If your request is complex, we may extend this deadline by 30 additional days with prior notice.
9. Applicable Legislation
We are committed to complying with the following legislative provisions:
- Act respecting the protection of personal information in the private sector (CQLR c P-39.1), as amended by Law 25
- Personal Information Protection and Electronic Documents Act (PIPEDA) — applicable to interprovincial activities
Steak Avenue — Groupe Limonade | Quebec, Canada
Last updated: March 6, 2026