This Privacy Policy explains how NextWave Online (“NextWave”, “we”, “us”, “our”) collects, uses, discloses, and safeguards personal information when you visit nextwaveonline.pro, create an account, place online food orders, or otherwise interact with our services (together, the “Services”).
NextWave provides online ordering and related digital tools for restaurants and their customers. This policy applies to personal information we process as a “controller” (e.g., your account/profile, contact details, and order information). When we process information on behalf of a restaurant (for example, facilitating an order), we may act as a “service provider” or “processor” to that restaurant, which may have its own privacy policy.
Order details (items, special instructions, pickup/delivery time, restaurant, order history).
Payment information (billing address and payment method details handled by our payment processor). We do not store full credit/debit card numbers; payments are processed by PCI DSS–compliant providers.
Communications you send us (support requests, feedback, survey responses) and your marketing preferences.
Restaurant partner data (if you manage a venue), such as store locations, menus, hours, and staff contact info.
B. Information we collect automatically
Device & usage (browser type, device identifiers, IP address, language, referring/exit pages, clickstream, app and site events).
Approximate location based on IP or with your consent via device settings (for delivery radius, store discovery, and fraud prevention).
Payment processors for payment status and fraud signals.
Restaurant partners & delivery providers for order fulfillment, status, and support.
Analytics, advertising, and customer support tools that help us operate and improve the Services.
3) How we use information
Provide and operate the Services (account creation, place/track orders, payments, receipts).
Customer support and to respond to requests, questions, or disputes.
Personalize content, store preferences, and recommend restaurants or items.
Marketing (with consent where required) including emails or SMS about deals, new restaurants, and features. You can opt out at any time.
Analytics & service improvement to understand usage and enhance reliability and performance.
Security & fraud prevention, including account protection and misuse detection.
Legal compliance and to enforce our terms or protect our rights and users.
4) How we share information
Restaurants & delivery providers: We share the details needed to prepare and deliver your order (items, name, contact, addresses, and instructions).
Payment processors: To process payments and prevent fraud.
Service providers: Hosting, email/SMS, analytics, error monitoring, customer support, and marketing tools that process data under contract.
Business transfers: Your information may be transferred in connection with a merger, acquisition, financing, or sale of assets.
Legal & safety: When required by law or to protect you, us, restaurants, or the public.
We do not sell your personal information. We may use or allow partners to use cookies or similar tools for interest-based advertising; see Analytics & advertising and Your rights & choices for opt-out options.
5) Cookies & similar technologies
We use:
Essential cookies for core functions like secure login, shopping cart, and order flow.
Performance cookies to measure and improve site/app performance.
Functional cookies to remember preferences (e.g., address, language, past restaurants).
Advertising cookies to deliver and measure ads and to limit repeats.
You can manage cookies via browser settings and, where provided, our cookie preferences. Disabling certain cookies may impact functionality.
6) Analytics & advertising
We use analytics to understand usage and improve the Services. We may work with advertising partners to show relevant promotions. These partners may set cookies or read device identifiers to measure ad performance and personalize ads across sites and apps.
Your choices: You can opt out of marketing emails via the unsubscribe link, opt out of SMS by replying STOP, adjust ad settings on your device, and restrict ad cookies in your browser.
7) Our legal bases for processing (EEA/UK/Switzerland)
Contract: To provide the Services you request (placing and fulfilling orders, account management).
Legitimate interests: To secure, improve, and market our Services in ways that respect your privacy.
Consent: For certain marketing, location, or non-essential cookies (you may withdraw consent at any time).
Legal obligations: To meet tax, accounting, and regulatory requirements.
8) Your rights & choices
Access & update your account information in your profile or by contacting us.
Delete account by contacting us; we’ll delete or anonymize data unless we must retain it (e.g., for legal, tax, or fraud prevention reasons).
Marketing choices: Unsubscribe from emails via the link in the message; for SMS, reply STOP. Message/data rates may apply.
Cookie controls: Use browser/device settings and our cookie tools where available.
EEA/UK/Swiss users: You may have additional rights (portability, objection, restriction, and lodging a complaint with a supervisory authority).
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and ongoing monitoring. No system is 100% secure; please use a strong, unique password and keep your account credentials confidential.
10) Data retention
We retain personal information only as long as necessary to provide the Services and for legitimate business needs (e.g., accounting, fraud prevention), and to meet legal obligations. For example, order and transaction records may be retained for up to seven (7) years to comply with tax and audit requirements, unless a longer period is required or permitted by law.
11) International data transfers
We primarily process data in Canada, but our service providers may operate in other countries (including the United States). Where required, we take steps to protect personal information subject to applicable transfer requirements.
12) Children’s privacy
Our Services are not intended for children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.
13) Changes to this policy
We may update this Privacy Policy from time to time. The “Effective date” above shows when it was last revised. Material changes will be communicated by posting the updated policy on this page and, where appropriate, by additional notice.
15) Canada-specific information (PIPEDA & Alberta PIPA)
As a Canadian business, we handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, in Alberta, the Personal Information Protection Act (PIPA). We collect, use, and disclose personal information for reasonable purposes that a reasonable person would consider appropriate in the circumstances. We also comply with Canada’s Anti-Spam Legislation (CASL) for commercial electronic messages.
Your Canadian rights include the right to request access to and correction of your personal information in our custody or control, and to withdraw consent (subject to legal or contractual restrictions and reasonable notice). You may also complain to the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada if you are not satisfied with our response.
To exercise your rights or raise a concern, contact us at support@nextwaveonline.pro. We will respond in a timely manner.