Privacy Policy
Last updated: October 23, 2026
Business review required: this policy describes the current website implementation. The business owner must confirm its legal entity name, retention schedule, vendors, and applicable privacy-law thresholds before launch.
1. Information we collect
When you request catering, we collect the information you provide, including your name, phone number, email address, company, event date and time, guest count, fulfillment choice, delivery address, selected menu items, and instructions. Please do not submit payment-card details or sensitive medical information in the notes field.
The site also processes limited technical information needed for security and operation, such as IP-derived rate-limit identifiers, session identifiers, request timestamps, and browser cart data stored locally on your device.
Customer accounts are optional. If you create one, we store your name, email, a password hash, account and email-confirmation timestamps, and references to orders saved to your account. We use this information to let you sign in, view your order history, confirm your email, and recover access. Orders are not automatically added to an account just because its email matches an order; an existing guest order is linked using its secure tracking link.
2. How we use information
- Prepare, price, confirm, fulfill, and support catering requests.
- Communicate about availability, changes, cancellations, and payment arrangements.
- Protect the website, prevent fraud and abuse, and maintain business records.
- Comply with tax, accounting, legal, and regulatory obligations.
3. How information is disclosed
Information may be disclosed to service providers that help operate the business, such as hosting, messaging, payment, tax, accounting, delivery, and professional-advisor providers. They should receive only the information reasonably necessary for their services. We do not currently sell personal information or share it for cross-context behavioral advertising.
4. Payments
You can pay by credit or debit card or in cash. Card payments are processed by Stripe, Inc. on its hosted checkout page: your card details are entered directly with Stripe and are never received or stored by this website. We share with Stripe only your order reference, the amounts to be charged and, if provided, your email address for the receipt. We keep the payment status, amount and Stripe reference numbers with your order. Stripe's handling of payment data is governed by its own privacy policy. If you pay by card, Stripe keeps your card on file for your order so that the confirmed delivery fee and tax can be charged to it; we receive only a reference to it (card brand and last four digits), never the full card number.
5. Cookies and local storage
The website uses an essential session cookie for request security and, if you sign in, access to your account. Browser local storage retains your cart. It does not currently use advertising cookies or behavioral analytics. If analytics or advertising tools are added, this policy and any required consent controls must be updated first.
6. Retention and security
Personal information is encrypted in the application database and access should be limited to authorized personnel. Information should be retained only as long as reasonably necessary for fulfillment, disputes, accounting, tax, security, and legal obligations, then securely deleted or anonymized under the business's documented retention schedule. No system can guarantee absolute security.
7. Your privacy choices
Depending on where you live and whether the business is subject to a particular law, you may have rights to request access, correction, deletion, or information about disclosures, and to receive equal service when exercising those rights. California residents may have additional rights under the CCPA as amended. Because we do not currently sell or share personal information for targeted advertising, there is no sale or sharing to opt out of under the current implementation.
Send privacy requests to patty@terranostramx.org. We may need to verify your identity before completing a request and may retain information when legally permitted or required.
8. Children
The service is intended for adults arranging catering and is not directed to children under 13. We do not knowingly collect personal information from children.
9. Changes
We may update this policy as the service, vendors, or legal requirements change. The updated date above identifies the latest version.
10. Contact
Questions and privacy requests may be sent to patty@terranostramx.org.