Privacy policy

Last updated: October 24, 2026

The French version is the reference version for the site. This English version is a faithful translation.

In short

• You can browse our website without giving us any personal information.
• We collect information only if you fill out a form (contact, franchise or jobs), write to our chat assistant, or accept optional cookies.
• Our audience-measurement and advertising tools (Google Analytics and the Meta Pixel) are off by default. They run only if you accept them, and you can change your mind at any time with the “Cookie preferences” link at the bottom of every page.
• We do not sell your personal information.
• You cannot order or pay on this site. “Order” buttons lead to our online ordering platform, which a third-party vendor operates under its own terms and policies.
• Questions: mike@pokemonster.com.

1. Who we are

The website pokemonster.com is operated by Poke Monster Canada Inc. (“Poke Monster”, “we”, “us”), franchisor of the Poke Monster restaurants and owner of the Boba & Moi bubble tea (thé aux perles) brand.

Most of our restaurants are operated by independent franchisees. This policy covers our website only. It does not cover information a franchisee collects directly in its restaurant.

2. Person in charge of the protection of personal information

For any question, request or complaint about your personal information, write to:

Person in charge of the protection of personal information: Mike Annan
Poke Monster Canada Inc.
Email: mike@pokemonster.com

3. What this policy covers

This policy explains how we collect, use, share, keep and destroy personal information obtained through our website, its forms and its chat assistant.

It does not apply to the third-party sites we link to, including:

• the online ordering platform pokemonster.order-online.ai, operated by a third-party vendor;
• other platforms where our restaurants are listed, such as Uber Eats;
• YouTube, TikTok, Instagram, Facebook, Google Maps and OpenFreeMap.

Those sites have their own policies.

4. What we collect and why

4.1 Contact form

• Information: name, email address, phone number, restaurant concerned (optional), subject and message.
• Why: to answer your question, comment or complaint, and to follow up.
• Where it goes: your message is emailed to our customer service mailbox (customerservice@pokemonster.com) and our marketing team’s mailbox (marketing@pokemonster.com). Head office answers it; we do not forward your message to the restaurant you name.

4.2 Franchise form

• Information: name, email address, phone, region of interest, investment capacity range, desired timeline, experience and message.
• Why: to assess your interest in a Poke Monster franchise and to contact you about it.
• Where it goes: our franchise mailbox (franchise@pokemonster.com).
• Note: your investment capacity is financial information. We use it only to assess your franchise inquiry, and only the team concerned can access it.

4.3 Job application form

• Information: name, email address, phone, preferred restaurant(s), position, availability and message. The form does not allow file uploads.
• Why: to review your application and contact you.
• Where it goes: your application is emailed to each restaurant you choose. Most of these restaurants are operated by franchisees, who are responsible for hiring and receive applications in their own mailbox. If a restaurant has no application address, your application goes to our marketing team (marketing@pokemonster.com), which forwards it.
• Minimum age: you must be at least 14 to apply.
• Please do not send us information we do not need at this stage (for example, your social insurance number, date of birth or health information).

4.4 Chat assistant

• Our assistant answers your questions using the information published on our website: menu, restaurants, hours, ordering links, openings, franchise and contact information.
• Your messages are processed by our host Cloudflare’s artificial intelligence service (Workers AI), only to generate an answer.
• We do not keep the content of conversations. We keep only overall counters that do not identify you (for example, the number of questions asked). According to Cloudflare, messages are not kept after processing and are not used to train artificial intelligence models.
• When the service’s usage quota is reached, the assistant shows prepared answers (frequently asked questions) instead.
• Please do not share personal information in the assistant (name, phone, email, health information, etc.).
• The assistant makes no decision about you. Its answers may contain errors. Always confirm allergens directly in the restaurant.
• For a complaint or an unanswered question, write to customerservice@pokemonster.com.

4.5 Technical information and security

• Our website is hosted by Cloudflare. To display pages and protect the site against attacks and bots, Cloudflare processes technical data such as your IP address, browser type and device.
• Our forms are protected by Cloudflare Turnstile, an anti-spam tool. Turnstile analyzes technical signals (for example, IP address, browser headers and device characteristics) to tell humans from bots. According to Cloudflare, these signals are used only to detect and block bots and to improve that detection. Cloudflare carries out that last use on its own behalf, under its own policy.
• We do not store your IP address in our database. To limit abusive submissions, we keep an irreversible “salted” hash derived from the IP address for 24 hours, and then it is deleted.

4.6 Cookies and similar technologies

We use:

• strictly necessary technologies, to remember your cookie choices and keep the site secure;
• preference technologies, stored in your browser: the last restaurant you chose.

With your consent only, we also use:

• Google Analytics (audience measurement);
• the Meta Pixel (advertising measurement and targeting).

Details (provider, purpose and duration) are in our cookie notice.

4.7 Geolocation (optional)

• If you click “Near me”, your browser first asks for your permission.
• Your location is used only to sort restaurants by distance and to show where you are on the map of locations. It all happens in your browser: your location is not sent to us or to OpenFreeMap, and is not stored.

4.8 Embedded content (videos and maps)

• YouTube, TikTok and Instagram videos and Google Maps load only if you click to display them.
• Once the content has loaded, its provider (Google, TikTok or Meta) may set cookies and collect data under its own privacy policy.
• The map on the Locations page loads with the page. Its base map comes from OpenFreeMap (Hungary), which sets no cookies. Your browser sends it your IP address to get the map images; according to its policy, OpenFreeMap does not keep it in its access logs.
• The Google ratings shown on restaurant pages are retrieved from Google (Google Maps Platform) by our server each time the page loads. Your browser does not contact Google to show them, and no information about you is sent to Google.

5. Technologies that can identify you, locate you or profile you

Our website may use the following technologies. All of them are off by default.

• Meta Pixel (Meta Platforms): used for profiling for advertising purposes. It measures visits and actions on our site so that we can assess our ads and show you relevant ads on Facebook and Instagram.
  • To turn it on: click “Accept all” in the banner, or switch on “Advertising – Meta Pixel” under “Customize”.
• Google Analytics (Google): can identify you as a returning visitor, using a random identifier, to produce traffic statistics. Google signals and ad personalization are turned off.
  • To turn it on: click “Accept all”, or switch on “Audience measurement – Google Analytics” under “Customize”.
• Geolocation: can locate you.
  • To turn it on: click “Near me” and accept your browser’s request. Your location stays in your browser (see 4.7).

You can turn these features off at any time with the “Cookie preferences” link at the bottom of every page.

6. Your consent

• Forms: by sending us your information after reading the notice shown with the form, you consent to its use for the purposes stated. We do not use it for other purposes without your consent, except where the law allows.

• Optional cookies:

  • We ask for your consent separately, for each purpose and each provider.
  • Your choice is kept in your browser for 12 months. After that, we ask you again.
  • Refusing has no effect on your access to the site.

• Withdrawal: you can withdraw your consent at any time:

  • for cookies, with the “Cookie preferences” link;
  • for anything else, by writing to mike@pokemonster.com.

  Withdrawal applies going forward. If you withdraw your application or inquiry, we will destroy your information unless the law requires us to keep it.

• Newsletter: we do not send a newsletter. We never add you to a promotional mailing list from our forms.

7. Who can access your information at Poke Monster

Only people who need it for their work can access your information:

• the customer service team;
• the marketing team (contact form messages);
• the people who handle franchise inquiries;
• the people responsible for hiring (job applications);
• management.

8. Sharing with third parties

We share your information only in the following cases.

Service providers (they act on our behalf, under written agreements that govern confidentiality and the use of the information):

• Cloudflare, Inc. (United States): hosting, content delivery network, security (including Turnstile), backup database for form submissions (D1), email delivery and the chat assistant (Workers AI);
• Google LLC (United States): our business email (Google Workspace).

Providers used only with your consent:

• Google LLC (United States): Google Analytics;
• Meta Platforms, Inc. (United States): the Meta Pixel. Meta also uses this data for its own purposes, under its own policy.

Franchised restaurants: your job application is sent to the restaurants you choose (see 4.3). Each franchisee receives it in its own mailbox (for example Gmail or Outlook) and is responsible for it under its own practices. We do not send them contact form messages.

Other cases:

• when the law requires or allows it, for example to comply with a court order;
• as part of a business transaction (sale or merger), under the conditions set by law.

We do not sell or rent your personal information.

9. Information processed outside Quebec

Our providers (Cloudflare, Google and, if you consent, Meta) may store or process your information outside Quebec, including in the United States and, for Cloudflare, in data centres elsewhere in the world.

• Our backup database for form submissions (Cloudflare D1) is hosted in eastern North America. Our mailboxes are hosted by Google.
• Once abroad, your information is subject to the laws of that country and may be accessible to that country’s courts, law enforcement and national security authorities.

10. How long we keep your information

• These periods apply to the backup database and to the copies received in our mailboxes. The copy of an application received by a franchised restaurant is kept by that restaurant under its own practices.
• We may keep some information longer if the law requires it, or while a complaint or dispute is ongoing. For example, a franchise inquiry that leads to an agreement becomes part of the franchisee’s file.

11. Security

We take reasonable measures to protect your information:

• encrypted connections (HTTPS);
• access limited to authorized people;
• bot protection and submission limits;
• automatic deletion according to the periods above.

No system is perfectly secure. If a confidentiality incident presents a risk of serious injury, we will notify the Commission d’accès à l’information and the people concerned, as the law requires.

12. Your rights

You can:

• ask for access to the personal information we hold about you and get a copy;
• receive the information you gave us in a structured, commonly used technological format, or have it sent to a person or organization you designate;
• have inaccurate, incomplete or ambiguous information corrected;
• withdraw your consent (see section 6);
• in certain cases set out by law, ask us to stop disseminating information about you or to de-index a hyperlink attached to your name;
• ask which categories of people can access your information and how long it is kept.

How:

• Write to mike@pokemonster.com.
• We may ask you to confirm your identity.
• We will answer in writing within 30 days.
• Access is free. However, reasonable fees may be charged for transcription, reproduction or transmission; we will tell you the approximate amount in advance.

Complaints:

• You can first complain to our person in charge (see section 13).
• You can also contact the Commission d’accès à l’information du Québec (www.cai.gouv.qc.ca).
• If you live outside Quebec, you can contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca).

13. Our governance rules and complaint handling

• Roles: our person in charge of the protection of personal information approves our internal rules and oversees how they are applied. Employees who handle personal information are informed of their obligations.
• Retention and destruction: we apply the periods in section 10. At the end of each period, information is securely destroyed or anonymized.
• Projects: we assess privacy factors for every new system or electronic service project involving personal information, and before any communication of personal information outside Quebec.
• Incidents: we keep a register of confidentiality incidents and act promptly to reduce the risks.
• Complaints:
  • Write to mike@pokemonster.com and describe your concern.
  • We acknowledge receipt, review your complaint and answer you in writing within 30 days.
  • If you are not satisfied with our answer, you can contact the Commission d’accès à l’information.

14. Minors

• Our website is not intended for children.
• We do not knowingly collect personal information from children under 14 without the consent of a parent or tutor (legal guardian).
• If you believe a child has sent us information, write to us and we will destroy it.
• You must be at least 14 to apply through our job application form.

15. Changes to this policy

• We may change this policy, for example if we add a tool.
• The last-updated date appears at the top of the page.
• If we make a significant change, we will post a visible notice on the site and, where needed, ask for your consent again.

16. Contact us

• Privacy: mike@pokemonster.com
• Customer service: customerservice@pokemonster.com