I am a retailer but have restaurant seating, so am following regional contact tracing requirements to capture contact information from seated diner groups. Any best practice tips?

Generally, collect as little information as possible and keep it for as short a time as possible. Read the order closely. If it says something like, ‘Gather name and phone number from one person per party,” take only that.
Store the contact information you collect somewhere secure. ‘Analogue’ methods include writing the information in a book and storing that book behind lock and key overnight. If you choose to use a digital method of collection and storage, such as a reservation app, do some quick research to understand more about how this third party will treat your customer information: will they keep it safe without using it for additional purposes? (Generally, retailers can still be held accountable for what happens to personal information that they collect and then share with other companies).
Delete the information after the required time period.
If someone asks you for this information for contact tracing purposes, make sure you get some evidence from them that they are from a public health authority with the power to make this request. If and when you do share information you’ve collected, it’s wise to document why you did so and who you shared it with. There are privacy regulators empowered to make inquiries if someone complains that you mishandled their personal information, in which case having records and demonstrating good practice could help you.

City of Victoria single-use bylaw update