Privacy Policy

What we collect

To take and deliver catering orders we collect: your name, email, phone number, delivery addresses, order contents, and any notes you provide. Passwords are stored only as cryptographic hashes. We do not store card numbers on this site; when online card payment is enabled it is processed natively by Clover, our point of sale provider.

How we use it

Your information is used to prepare and deliver your orders, send transactional emails and text messages (account verification, password reset, order confirmation and status updates), provide your order history, and comply with legal obligations. We send marketing messages only if you opt in, and you can withdraw that consent at any time.

To suggest the cafe closest to you on the home page, we look up the approximate location of your IP address in a copy of the DB-IP Lite database kept on our own server. Your IP address is not sent to anyone for this, and the suggestion is only a preselected option you can change. IP geolocation by DB-IP, licensed under CC BY 4.0.

Text messages (SMS)

If you select the optional SMS checkbox at checkout, we may send transactional text messages about that order only: a notice when your driver is on the way with a tracking link. You can place an order without choosing SMS and receive order updates by email. One-time access codes may be sent by text when you separately request them during sign-in or account verification. Our delivery staff receive their app sign-in codes the same way. We do not send marketing text messages unless you separately opt in to them.

Message frequency varies by order. Message and data rates may apply. Reply STOP to opt out at any time: you will receive one final message confirming the opt out and no further texts, and we will keep you informed about an order in progress by email instead. Reply HELP for help, or email catering@winfieldcoffee.com.

Your phone number is never sold and is never shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with anyone. Your number is used only to fulfill your order and is disclosed only to the store preparing it, the driver delivering it, and the messaging provider that transmits the texts on our behalf.

Sharing

Order details are shared with the Winfield Street Coffee store preparing your order and with the driver assigned to deliver it. We use service providers for hosting, email and text message delivery, and payment processing under contractual safeguards. We do not sell your personal information.

Storage and security

Data is stored on access controlled servers located in the United States and encrypted in transit over HTTPS. Backups are encrypted and retained to protect against data loss. Access is limited to the people who need it to operate the service.

Your rights

You may access, correct or delete your account data, export your order history, and object to marketing at any time. Residents of states with privacy laws (such as the CCPA in California) and users covered by Brazil's LGPD have the rights those laws provide, including deletion and portability. To exercise any right, email catering@winfieldcoffee.com.

Retention

Account data is kept while your account is active. Order records are retained as required for accounting and tax purposes, then deleted or anonymized. Password reset and verification links expire automatically and are single use.

Contact

Questions about this policy: catering@winfieldcoffee.com.