Privacy policy

This Privacy Policy describes how The Affogato Cart™ ("The Affogato Cart", "we", "us", "our"), based in Orlando, Florida, collects and uses information when you visit our website or book our services.

If you have any questions about this policy or your data, please email info@affogatocarts.com.

We collect information you give us directly when you:

• Submit a booking or quote request: name, email, phone, event date, event type, venue ZIP code, guest count, dietary requirements, and the booking selections you make in our calculator
• Contact us through any form: name, email, phone, and the content of your message
• Apply for a position: name, contact details, work history, and any documents you upload
• Apply to partner with us: business name, contact details, and partnership information
• Join the waitlist: name, contact details, and date preferences
• Make a payment: payment information is handled by Stripe (see Section 4) — we receive a confirmation only, never your card number

We also collect limited technical information automatically when you visit our site, including your approximate location (based on IP), browser type, and pages viewed. This is used to maintain and improve the site.

We use your information for the following purposes only:

• To prepare and deliver the catering services you've booked
• To respond to enquiries, quote requests, and applications
• To process payments and refunds
• To send service-related communications (booking confirmations, event reminders, follow-ups)
• To accommodate dietary needs and allergies safely
• To meet our legal and tax obligations
• To measure our advertising and improve our website and service quality

We do not sell your information to anyone. We do not send promotional emails unless you explicitly opt in.

We use a small number of trusted service providers to operate our business. Each has its own privacy practices, which we recommend reviewing.

Supabase (database and backend). Your booking and form submission data is stored on Supabase's infrastructure. Supabase processes data on our behalf and is bound by data protection commitments. See supabase.com/privacy.

Stripe (payment processing). When you pay a deposit or balance, you enter your payment information directly into Stripe's secure form. We receive a transaction confirmation only — we never see or store your card number. See stripe.com/privacy.

Resend (transactional email). When we send you a booking confirmation, quote, or reply, we use Resend to deliver the email. Resend processes the recipient address and message content. See resend.com/legal/privacy-policy.

Netlify (website hosting). Our website is hosted on Netlify, which receives standard web request data when you visit pages. See netlify.com/privacy.

Google Analytics and Meta (Facebook) (analytics and advertising measurement). See Section 6 for how these work and how to opt out.

Beyond these service providers, we do not share, sell, rent, or trade your personal information with anyone — ever. We may disclose information if compelled by law (e.g. a court order), but we will resist requests that appear improper.

We keep your information for as long as needed to provide services and meet our legal obligations, typically:

• Booking and event records: 7 years (for tax and accounting purposes)
• Contact form messages: 2 years
• Job applications: 1 year after the application is closed
• Partner program applications: 2 years
• Waitlist entries: until the relevant event date passes, then 90 days

You can ask us to delete your data sooner — see Section 7.

Our website uses essential cookies for core functionality (e.g. remembering your booking progress mid-form and your light/dark mode preference). These don't track you and can't be turned off without breaking the site.

We also use two analytics services to understand how visitors find and use our site, and to measure our advertising:

• Google Analytics — aggregated statistics about pages visited and how visitors arrived. See policies.google.com/privacy.
• Meta (Facebook) Pixel — tells us when a visit or booking came from one of our ads, so we know our advertising works. See facebook.com/privacy/policy.

These services may set cookies and receive standard technical data about your visit. We use them to measure and improve — never to sell or trade your information. You can block them with standard browser privacy settings or ad-blockers without affecting your ability to browse or book.

You have the right to:

• Know what information we have about you — just ask
• Correct any inaccurate information
• Delete your personal information from our records (subject to legal retention obligations described in Section 5)
• Object to how we use your information
• Export the information you've provided us in a portable format
• Opt out of any optional communications (we don't do unsolicited marketing anyway)

To exercise any of these rights, email info@affogatocarts.com. We'll respond within 30 days.

If you are a California, Colorado, Connecticut, Virginia, Utah, or other applicable U.S. state resident, additional privacy rights may apply under your state's law. We honour those rights for all our clients regardless of location.

We take reasonable measures to protect your information:

• All data is transmitted over encrypted HTTPS connections
• Database access is restricted and authenticated
• Payment information is never stored on our systems — Stripe handles it under PCI-DSS compliance
• We follow the principle of least access: only people who need to see your booking to deliver your event can see it

No system is perfectly secure, but we will notify you promptly if we ever become aware of a breach that affects your information.

Our services are intended for adults aged 18 and older. We do not knowingly collect information from children under 13. If you believe a child has provided information through our site, please contact us and we will remove it.

Children are of course welcome guests at the events we cater — we just don't collect information directly from them.

If we update this policy, we'll change the "Last updated" date at the top. For significant changes that affect how we use your data, we'll notify clients with active bookings by email.

Privacy questions, requests, or concerns? Email info@affogatocarts.com — mark your message as "Privacy" and we'll route it appropriately.

The Affogato Cart™
Orlando, Florida
United States of America