Privacy Policy

What we collect, and why

If you send us an inquiry through the contact form, we collect your name, email address, phone number and whatever you write in the message. We use it to answer you. That is the whole purpose.

If you place an order, we collect your name, email address, phone number, the day and half-hour window you chose, whether you want pickup or delivery, what you ordered, and any notes you add. If you choose delivery, we also collect the address we are bringing it to. Notes are the one field people put sensitive things in - an allergy, a gate code - so we keep them only as long as the order needs them.

We never see your card number. Payment happens on Stripe's own checkout page, and what comes back to us is confirmation that it succeeded, the amount, and a reference.

Checking a delivery address

When you type an address into the delivery field, we send what you have typed to Google, to offer the suggestions that appear underneath, and to the United States Census Bureau's geocoder, to work out whether the address is inside our delivery area. We do this to answer one question - can we drive to you - and the address you are typing is not written to our logs.

What we collect without asking

We keep a one-way scrambled form of your network address. It is used to stop one visitor from tying up every delivery slot or hammering the address checker, and it cannot be turned back into your actual address. We do not store the address itself.

We do not use analytics, advertising trackers or third-party pixels. Nobody is following you around the internet on our behalf.

Cookies

Three, all of them necessary, none of them advertising. One remembers the checkout you started, so that if you come back without paying we can show you the time you had picked rather than telling you it is taken. One keeps Chef Jacob signed in to the admin area. One is a short-lived security token used while connecting the kitchen calendar. There is no cookie banner because there is nothing to consent to.

Your basket itself is kept in your own browser, not on our server. Clearing your browser data clears it.

Who else sees your information

We are a two-person business and we use other companies to do things we cannot do ourselves. Each of them sees only what they need:

• Stripe takes the payment. Your card details go to them directly and never pass through this site.
• Resend sends the confirmation emails, so it handles your email address and the contents of the confirmation.
• Google provides the address suggestions, and holds the calendar entry for your order so we know when to cook it.
• The United States Census Bureau's geocoder tells us whether an address falls inside our delivery area.
• Cloudflare serves this website, and Neon stores the orders.

We do not sell your information, and we do not share it with anyone for their own marketing. If we are ever legally required to hand something over, we will.

How long we keep it

Orders are kept as business records, because we need them for accounts and tax. Inquiries sit in our email until they are dealt with, and we clear them out periodically.

If you start a checkout and do not finish it, the notes you had written are deleted within a few days - we hold them only long enough for a slow payment to still come through.

What you can ask us to do

Email us and ask what we hold about you, ask us to correct it, or ask us to delete it. We will do it. The one thing we cannot delete on request is a record we are required to keep for tax purposes, and we will say so if that applies.

You can also just ask us to stop emailing you.

Children

This site is meant for adults ordering dinner. We do not knowingly collect anything from children under 13.

Changes

If we change how any of this works, we will change this page and move the date at the top. There is no mailing list to notify, so the date is the honest signal.

Getting in touch

Anything on this page, or anything you want us to find, correct or delete: contact@riverroadsupperclub.com. A real person reads it.