0
Privacy Policy
What we collect
To take and deliver catering orders we collect: your name, email, phone number, delivery addresses, order contents, and any notes you provide. Passwords are stored only as cryptographic hashes. We do not store card numbers on this site; when online card payment is enabled it is processed natively by Clover, our point of sale provider.
How we use it
Your information is used to prepare and deliver your orders, send transactional emails (account verification, password reset, order confirmation and status updates), provide your order history, and comply with legal obligations. We send marketing messages only if you opt in, and you can withdraw that consent at any time.
Sharing
Order details are shared with the Winfield Street Coffee store preparing your order and with the driver assigned to deliver it. We use service providers for hosting, email delivery and payment processing under contractual safeguards. We do not sell your personal information.
Storage and security
Data is stored on access controlled servers located in the United States and encrypted in transit over HTTPS. Backups are encrypted and retained to protect against data loss. Access is limited to the people who need it to operate the service.
Your rights
You may access, correct or delete your account data, export your order history, and object to marketing at any time. Residents of states with privacy laws (such as the CCPA in California) and users covered by Brazil's LGPD have the rights those laws provide, including deletion and portability. To exercise any right, email catering@winfieldcoffee.com.
Retention
Account data is kept while your account is active. Order records are retained as required for accounting and tax purposes, then deleted or anonymized. Password reset and verification links expire automatically and are single use.
Contact
Questions about this policy: catering@winfieldcoffee.com.