Privacypolicy

The business responsible for your personal information is Mythos Ouzeri Estiatorio, a restaurant located at 5318 Avenue du Parc, Montréal, Quebec H2V 4G7, Canada. You can reach us at (514) 270-0235 or info@mythos.ca.

We are the business that decides what information this website collects and what is done with it. This policy and your use of this website are governed by the laws of Quebec and the laws of Canada that apply in Quebec.

The person accountable for protecting personal information at Mythos is Voula Galanis, who holds the role of Privacy Officer. She is the person to contact with any question about this policy, any request about your own information, and any complaint.

We only collect what you type into one of our forms, plus limited technical information about your visit. We do not ask for identity documents, and we never ask for sensitive information such as health or financial details through this website.

Contact form

On our contact page we collect your name, your email address, your telephone number (optional), the subject you choose and the message you write.

Group enquiry and group function request forms

On our groups pages we collect your first and last name, email address, telephone number, the type of event, the date and time you would like, the number of guests, the group menu you are interested in, and any comments you add. The group function request form also records the consent checkbox you tick.

All of our forms are protected by a spam-prevention check, which looks at technical signals from your browser (such as your IP address) to confirm that a person, and not a robot, is filling in the form. We never see the content of that check.

Table reservations

Our reservations page uses an online booking tool provided by a third party. When you request a table there, you give that tool your name, contact details, the date, time and size of your party, and any note you add to the booking.

Orders and purchases

If you place an order or make a purchase, we hold a record of the transaction: what was ordered, the amount, the date, and the name and contact details attached to it. Card numbers are handled by our payment processor and are never stored on this website.

Technical and website-use information

With your consent, our analytics tools record your approximate location (city level), the pages you view, how long you stay, the device and browser you use, and the site or advert that sent you here. Without your consent, none of this is collected.

Our server also keeps short-lived security logs of requests made to the website, including IP addresses, so that we can keep the site available and investigate abuse.

Each piece of information has a specific purpose, and we do not use it for anything else without asking you first.

• Your name and contact details — so that we can answer your message, confirm a reservation, or discuss your group event.
• Your telephone number — so we can reach you quickly if we cannot confirm a booking by email or if plans change on the day.
• Event details (type, date, time, guest count, menu) — so we can tell you whether we can host your event and prepare a quote and a menu.
• Your message or comments — so we understand what you are asking for, including any allergy or accessibility need you choose to tell us.
• Order and transaction records — so we can fulfil the order, handle refunds and disputes, and meet our bookkeeping and tax obligations.
• Spam-prevention signals — only to tell human visitors apart from automated abuse, so that our inbox stays usable.
• Analytics information — only to understand, in aggregate, which pages people find useful so we can improve the site. We do not use it to make decisions about you individually.
• Security logs — only to keep the website running and to investigate attacks.

We do not sell your personal information, we do not rent it, and we do not trade it.

Under Quebec law we must tell you, for each purpose, why we are allowed to collect your information. Here is our basis, purpose by purpose.

• Answering your enquiry, taking a reservation, organising a group event, fulfilling an order — necessary to provide the service you asked us for. Giving us this information is part of asking for the service; if you prefer not to use a form, you can simply phone us.
• Keeping order, invoice and tax records — a legal obligation. Quebec and federal tax and bookkeeping rules require us to keep these records for a set number of years, so we cannot delete them early.
• Protecting our forms from spam and our website from attack — necessary for the security and integrity of the service.
• Website analytics — your consent, asked for separately in the cookie banner, and off until you turn it on.
• Measuring our advertising and building a profile of visitors' interests — your consent, asked for separately in the cookie banner, and off until you turn it on. This is never bundled into a reservation or an enquiry.
• Sending you news or offers by email — your express consent, given at the moment you sign up, never assumed because you booked a table or sent us a message.

Consent must be freely given, clear and informed, and it must be given for a specific purpose. We ask for it separately for anything that goes beyond delivering the service you asked for — analytics, advertising measurement, profiling of interests and marketing email each need their own yes. Saying no to any of them does not stop you from eating with us, booking a table or using this website.

You can change your mind at any time. To withdraw consent to analytics, advertising measurement or profiling, reopen the cookie banner with the "Cookie preferences" button that sits in the corner of every page and switch the category off; you can also clear cookies in your browser. To stop marketing email, use the unsubscribe link in any message we send. To withdraw any other consent, write to info@mythos.ca. Withdrawing consent does not affect what we had already done lawfully before you withdrew it, and it does not reach records we are legally required to keep.

We keep each kind of information only for the period below, counted from our last exchange with you. At the end of the period it is deleted from our systems, or stripped of everything that could identify you so that only anonymous counts remain.

• Contact form messages, group enquiries and group function requests — kept for 365 days (one year), then deleted. We keep them for a year so that we can pick up a conversation about a repeat event or resolve a dispute about what was agreed.
• Reservation details — kept for 365 days in the same way as form submissions, then deleted.
• Order and transaction history (including invoices) — kept for 7 years. This period is not our choice: it is set by our bookkeeping, sales-tax and income-tax obligations under Quebec and Canadian law. At the end of it the records are destroyed.
• Website analytics information — kept for 14 months, then deleted by the analytics tool. Only aggregate, non-identifying reports remain after that.
• Newsletter contacts — kept for as long as you stay subscribed. If you unsubscribe, we delete the subscription and keep only the minimum record needed to make sure we do not email you again by mistake.
• Security logs — kept for up to 90 days, then deleted.

If a legal proceeding, a tax audit or an insurance claim is under way, we may keep the relevant records until it is finished, and no longer.

We do not sell or trade your personal information. We do rely on a small number of service providers to run the restaurant and this website. We describe them here by what they do rather than by brand, because providers can change; the current list of named providers is available on request from our privacy officer.

• Website hosting and form handling — our website platform hosts this site, receives what you submit through our forms and emails it to us. It receives everything you type into a form. Held in Quebec, Canada.
• Online reservation tool — the booking widget on our reservations page. It receives your name, contact details, party size, date, time and any booking note. Held in Canada.
• Payment processing — used when you pay us online. It receives your card details and the amount; we receive only a confirmation and the last digits of the card. Held in Canada and the United States.
• Website analytics (Google Analytics and Google Tag Manager, provided by Google) — receives, only with your consent, your approximate city-level location, the pages you view and your device and browser details. Held in the United States.
• Advertising measurement (Meta Pixel, provided by Meta) — receives, only with your consent, the fact that a visit or action occurred on our site and technical identifiers associated with your browser. Held in the United States.
• Maps (Google Maps, provided by Google) — when the map on our contact page loads, it receives your IP address and the technical details needed to serve the map. Held in the United States.
• Form spam protection — receives technical signals from your browser, including your IP address, to confirm you are a person. Held in the United States and other regions where the provider operates.
• Email delivery — delivers our replies and, if you subscribe, our newsletter. It receives your email address and the content of the message. Held in Canada and the United States.

Every one of these providers is bound by a written agreement that limits them to doing only what we instruct, forbids them from using your information for their own purposes, requires them to protect it to the standard Quebec law requires, and requires them to delete or return it at the end of the contract.

We may also disclose personal information without your consent where the law requires it — for example in answer to a valid court order, warrant or subpoena — or where it is needed to protect someone's safety. If we are ever involved in a sale or reorganisation of the business, any information transferred would be covered by a confidentiality agreement and used only as described in this policy.

To ask for the current list of our providers, write to info@mythos.ca.

Some of your information stays in Quebec and some of it leaves. Here is the honest picture.

Stays in Quebec. This website and everything you submit through our forms are hosted on our website platform's Quebec infrastructure, in a data centre in Beauharnois, Quebec (region ca-qc-bhs). Your form messages, reservation requests and group enquiries are stored there.

Leaves Quebec. Four things involve information being handled outside Quebec:

• Website analytics — page-view and device information, with your consent, handled in the United States.
• Advertising measurement — browser identifiers and the fact that a visit occurred, with your consent, handled in the United States.
• Maps — your IP address when the contact-page map loads, handled in the United States.
• Form spam protection, email delivery and payment processing — technical signals, your email address or your payment details, handled in the United States and, for some providers, in other countries where they operate.

Before we send any personal information outside Quebec, we carry out a privacy impact assessment: we look at how sensitive the information is, what it will be used for, what protections the provider offers and the legal framework of the country it goes to, and we satisfy ourselves that the information will receive protection comparable to what Quebec law requires. Each transfer is covered by a written agreement on those terms. If we cannot reach that conclusion about a provider, we do not use it.

A cookie is a small file a website leaves in your browser. When you arrive on this site for the first time, a consent banner appears and asks which categories you will allow. Once you have chosen, a "Cookie preferences" button stays in the corner of every page: use it to reopen the banner at any time and change your mind in either direction.

What we measured on this site: on a fresh visit, the banner appears before anything else and no tracking request is sent before you give consent. Until you choose, only the cookies needed to make the site work are set.

The categories you can turn on and off are:

• Essential (always on, cannot be switched off) — remembers your language, keeps your form session together, records your cookie choice and protects our forms from spam. Without these the site does not work.
• Analytics (off until you turn it on) — Google Analytics and Google Tag Manager, used to count visits and see which pages are useful.
• Marketing (off until you turn it on) — the Meta Pixel, used to measure whether our advertising works. This is the category that would build a profile of your interests, and it stays off unless you switch it on.

Anything that profiles your interests, or that could be used to identify or locate you, is off by default on this site and only runs if you switch it on. Turning a category off stops new collection through this website straight away; to remove cookies already stored, clear them in your browser settings. Most browsers also let you refuse cookies altogether or warn you before accepting one.

The embedded map on our contact page and the booking tool on our reservations page may set their own cookies when you interact with them. They are governed by their providers' own privacy policies.

Quebec law gives you real control over the information we hold about you. You may:

• See it — ask us to confirm whether we hold personal information about you and to give you a copy, together with what we use it for and who we have given it to.
• Correct it — ask us to fix it if it is inaccurate, incomplete or ambiguous, or to remove anything we collected that we did not need.
• Have it deleted or de-indexed — ask us to delete it, or to stop circulating it and to have a link to it de-indexed, where the law allows — for instance where keeping or spreading it causes you serious injury and that injury clearly outweighs the public interest in the information. Where a legal obligation forces us to keep a record (such as the seven-year tax records in section 05), we will tell you so and delete it when that obligation ends.
• Receive it in a portable form — ask for the computerised information you gave us in a structured, commonly used technological format, or ask us to send it to another organisation you name.
• Withdraw your consent — at any time, as described in section 04.
• Ask about automated processing — as described in section 11.

How to make a request

Write to our privacy officer:

• Voula Galanis, Privacy Officer
• Email: info@mythos.ca (please put "Privacy request" in the subject line)
• Telephone: (514) 270-0235
• Post: Mythos Ouzeri Estiatorio, attn. Privacy Officer, 5318 Avenue du Parc, Montréal, QC H2V 4G7
• Or use our contact form

Tell us what you want (access, correction, deletion, portability or withdrawal of consent) and enough detail for us to find your information, such as the email address or telephone number you used. We may need to confirm your identity before we act, and we will only ask for what is necessary to do that. There is no charge, although we may charge a reasonable fee for transcription or reproduction, and we will tell you the amount before we do the work.

We will answer you in writing within 30 days of receiving your request. If we refuse all or part of it, we will tell you in writing why, point to the section of the law we rely on, tell you what information you can ask about to challenge our decision, and explain that you may ask the Commission d'accès à l'information du Québec to review the decision — normally within 30 days of our answer. We keep the information in question for as long as it takes to deal with any such review.

This website is written for adults making a reservation or an enquiry, and we do not aim any part of it at children. We do not knowingly collect personal information from a child in order to market to them.

Children are of course welcome in the restaurant, and a booking may include them. If you tell us the age of a child in a booking note, we use it only to prepare for your visit and delete it with the rest of the booking.

• Under 14. We do not collect personal information about a person under 14 unless the consent comes from their parent or guardian — or unless collecting it is clearly for the child's benefit, such as noting an allergy so that we can feed them safely.
• Aged 14 to 17. We consider the circumstances before relying on a young person's own consent: how sensitive the information is, what it will be used for and whether the young person can reasonably understand what they are agreeing to. Where there is any doubt, or where the matter is significant, we ask the parent or guardian instead.

If we learn that we hold information about a child without the consent we needed, we delete it promptly, and we stop any use of it in the meantime. If you believe we hold information about your child, write to info@mythos.ca and we will deal with it within 30 days.

We do not make any decision about you exclusively by automated means. Every reservation, group booking and enquiry is read and answered by a person on our team. No algorithm decides whether you get a table, what price you are quoted or how we answer you.

If that ever changes, Quebec law obliges us to tell you at the time the decision is made, and we commit to doing so. We would tell you which personal information was used, the main reasons and the principal factors behind the decision, and that you may ask us to correct the information used. You would also be able to send us your own observations and ask a member of our team to review the outcome.

Profiling

"Profiling" means collecting and using your information to assess your characteristics, interests or behaviour. On this website, the only thing that could do that is the advertising-measurement tracking described in section 08. In line with Quebec law, every technology on this site capable of profiling you, or of identifying or locating you, is turned off unless you turn it on.

To turn it on or off, open the cookie banner with the "Cookie preferences" button in the corner of any page and switch the "Marketing" category on or off. You can change this as often as you like, and you lose nothing on this website by leaving it off.

We protect your information with measures that match how sensitive it is: encrypted connections (HTTPS) across the whole website, accounts and passwords limited to the few people at Mythos who need them, hosting on infrastructure with physical and network controls, written confidentiality terms with every provider, and deletion of information once its retention period has passed. Paper notes taken from bookings are kept out of public view and destroyed when no longer needed.

If something goes wrong

A privacy incident means unauthorised access to, use of, or disclosure of personal information, its loss, or any other breach of its protection. If one happens, we commit to:

• Act immediately to stop the incident and take reasonable steps to reduce the risk of harm to anyone affected.
• Assess the risk of serious injury, considering how sensitive the information is, what it could be used for, how likely misuse is and how many people are affected.
• Notify promptly. Where the incident presents a risk of serious injury, we will notify the Commission d'accès à l'information du Québec and each affected person with diligence — that is, as quickly as the circumstances allow once we have confirmed the incident — and tell them what happened, what information was involved, what we are doing about it and what they can do to protect themselves. Where notifying an individual could hinder an investigation, we may notify them as soon as that risk has passed.
• Keep a register. We maintain a record of every privacy incident, including those that do not require notification, and we provide it to the Commission on request.
• Prevent a repeat by reviewing what failed and changing our practices accordingly.

No system is perfect, and we cannot promise that information sent over the internet is absolutely secure. Please do not send us financial details, health information or identity documents by email or through a website form.

If you are unhappy with how we have handled your personal information or your request, please tell our privacy officer first — Voula Galanis, info@mythos.ca or (514) 270-0235. We will look into it and answer you in writing within 30 days. Most problems are a misunderstanding we can fix quickly.

If you are not satisfied with our answer, you can take the matter to Quebec's privacy regulator, the Commission d'accès à l'information du Québec, which can review our decision and investigate our practices:

• Montréal office: 500, boulevard René-Lévesque Ouest, bureau 18.200, Montréal (Québec) H2Z 1W7
• Québec office: 525, boulevard René-Lévesque Est, bureau 2.36, Québec (Québec) G1R 5S9
• Telephone: 1 888 528-7741 · Website: www.cai.gouv.qc.ca

You normally have 30 days from our answer, or from the end of the 30-day period if we did not answer, to ask the Commission for a review.

We review this policy at least once a year, and whenever we change a form, add a provider or start using a new tool. When we make a change, we update this page and change the date below. If a change is significant — a new purpose, a new category of information, or a new provider outside Quebec — we will give notice on this website before it takes effect, and we will ask for your consent again where the law requires it.

This policy applies to this website and to the information we collect through it. Other websites we link to, including the booking tool and the map, have their own policies.

Last updated: October 14, 2026.