Privacy Policy

This Privacy Policy describes how Tatte ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at sweet-tatte.click, place orders, interact with our digital services, or otherwise engage with our food business. We are committed to protecting your privacy and ensuring transparency in how your data is handled.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please discontinue use of our website and services immediately.

This Privacy Policy is governed by applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant consumer protection regulations.

1. Who We Are

Tatte is a food business operating in the United States. We operate the website located at sweet-tatte.click and offer food-related products, services, and information to our customers and website visitors.

For all privacy-related inquiries, questions, or requests, you may contact us directly at [email protected]. We strive to respond to all legitimate privacy inquiries within 30 days of receipt.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we collect include the following:

2.1 Personal Identification Information

When you interact with our website, create an account, place an order, or contact us, we may collect personal identification information, including but not limited to:

• Full name
• Email address
• Phone number
• Billing and shipping address
• ZIP code and city/state information
• Username and password (for registered accounts)
• Date of birth (where applicable for age verification)
• Payment information (processed securely through third-party payment processors)

2.2 Order and Transaction Information

When you place an order or make a purchase through our website or services, we collect information related to your transaction, including:

• Order history and details
• Items purchased and quantities
• Transaction amounts and payment method type
• Delivery instructions and preferences
• Special dietary requests or food preferences you provide
• Loyalty program participation and reward points

2.3 Usage and Behavioral Data

We automatically collect certain technical and behavioral data when you access and navigate our website. This includes:

• Pages visited and time spent on each page
• Clickstream data and navigation paths
• Search queries entered on our website
• Products viewed, added to cart, or purchased
• Referring URLs (how you arrived at our website)
• Date and time of your visit
• Session duration and frequency of visits

2.4 Device and Technical Information

We collect technical information about the device and software you use to access our website, including:

• IP address and approximate geographic location derived from IP
• Browser type and version
• Operating system and platform
• Device type (desktop, mobile, tablet)
• Device identifiers and hardware model
• Screen resolution and language settings
• Internet service provider (ISP)

2.5 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect data about your browsing behavior and preferences. For detailed information about our use of cookies, please refer to the Cookie section of this policy (Section 8).

2.6 Communications Data

When you contact us via email, contact forms, live chat, or other communication channels, we collect:

• The content of your messages and inquiries
• Your contact details as provided in communications
• Records of your correspondence with us
• Customer service interaction history
• Feedback, reviews, and survey responses you submit

2.7 Information You Provide Voluntarily

You may voluntarily provide us with additional information such as food allergies, dietary restrictions, preferences, reviews of our food products, or participation in promotions, contests, and surveys. We use this information solely for the purposes described in this Privacy Policy.

2.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you connect your social accounts or interact with our social pages)
• Third-party delivery platforms that facilitate food orders
• Analytics providers and advertising networks
• Payment processors confirming transaction status
• Publicly available databases and directories

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. Specifically, we use your information to:

3.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders and reservations
• Manage your account and account preferences
• Process payments and send transaction confirmations
• Coordinate delivery or pickup logistics
• Communicate with you regarding your orders, including updates and confirmations
• Handle returns, refunds, and complaints related to orders
• Provide customer support and respond to your inquiries

3.2 Website Operations and Improvement

• Maintain and improve the functionality and performance of our website
• Personalize your user experience and display relevant content
• Monitor website traffic and analyze usage patterns
• Detect and prevent technical errors, bugs, and security issues
• Conduct A/B testing and website optimization experiments
• Develop new features and services based on user behavior

3.3 Marketing and Communications

• Send you promotional emails, newsletters, and special offers about our food products and services (with your consent where required by law)
• Notify you about new menu items, seasonal specials, and events
• Administer loyalty programs, discounts, and reward offers
• Run targeted advertising campaigns on third-party platforms
• Conduct market research and customer satisfaction surveys
• Personalize marketing messages based on your preferences and purchase history

3.4 Analytics and Business Intelligence

• Analyze purchasing trends and popular menu items
• Understand customer demographics and preferences
• Generate internal business reports and performance metrics
• Improve our food offerings and menu development
• Forecast demand and optimize supply chain management

3.5 Legal and Compliance Purposes

• Comply with applicable laws, regulations, and legal obligations
• Respond to legal requests, court orders, or government inquiries
• Enforce our Terms of Service and other agreements
• Protect against fraudulent transactions and unauthorized access
• Maintain records as required by food safety regulations and applicable law

4. Legal Basis for Processing (United States)

In the United States, we collect and process your personal information based on the following lawful grounds:

California residents are additionally protected under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). Please refer to Section 9 for specific rights available to California residents.

5. Sharing Your Information with Third Parties

We do not sell, trade, or rent your personal information to unaffiliated third parties for their own marketing purposes. However, we may share your information with trusted third parties in the following circumstances:

5.1 Service Providers and Business Partners

We engage third-party companies and individuals to perform functions on our behalf. These service providers have access to personal information only as necessary to perform their specific functions and are contractually obligated to maintain the confidentiality and security of your data. Our service providers include:

• Payment Processors: To securely handle credit card and other payment transactions
• Delivery and Logistics Partners: To coordinate food delivery and fulfillment
• Email and Communication Providers: To send transactional and marketing emails
• Cloud Hosting Providers: To store and manage our website and customer data
• Analytics Providers: Including Google Analytics and similar platforms, to analyze website usage
• Customer Support Platforms: To manage customer service interactions and ticketing
• Marketing and Advertising Platforms: To deliver targeted advertising across digital channels
• Loyalty Program Administrators: To manage rewards and promotional programs

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Respond to valid subpoenas, court orders, or law enforcement requests
• Protect the rights, property, or safety of Tatte, our customers, or the public
• Enforce our Terms of Service or investigate potential violations
• Detect, prevent, or address fraud, security breaches, or technical issues

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website if your personal information becomes subject to a different privacy policy as a result of such a transaction.

5.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so, such as when you choose to participate in joint promotions with our partners or enable social media sharing features.

5.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, analytics, marketing, and business development purposes.

6. Data Security

We take the security of your personal information very seriously and implement a variety of technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction.

6.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) or Transport Layer Security (TLS) technology
• Data Encryption at Rest: Sensitive data stored in our databases is encrypted using industry-standard encryption protocols
• Secure Payment Processing: We use PCI-DSS compliant payment processors and do not store full credit card numbers on our servers
• Firewalls and Intrusion Detection: We employ firewalls and intrusion detection systems to monitor and protect our network infrastructure
• Access Controls: We implement strict role-based access controls, ensuring employees can only access data necessary for their job functions
• Regular Security Audits: We conduct regular security assessments and vulnerability testing of our systems

6.2 Administrative Security Measures

• Employee privacy and security training programs
• Confidentiality agreements with all personnel who handle personal data
• Data access logging and monitoring
• Incident response plan for data breaches
• Vendor security assessments for third-party service providers

6.3 Limitations

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your personal information. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and relevant authorities in accordance with applicable law, including applicable state breach notification laws in the United States.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When your personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention schedule and applicable law.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly. These cookies enable core functionality such as security, account authentication, and shopping cart management. You cannot opt out of these cookies.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, including pages visited, time spent, and error messages encountered. We use this data to improve website performance.
• Functional Cookies: These cookies remember your preferences (such as language settings, location, and remembered login) to provide enhanced functionality and personalization.
• Marketing and Advertising Cookies: These cookies track your browsing habits to deliver targeted advertising relevant to your interests on our website and third-party platforms. They may be set by our advertising partners.

8.2 Third-Party Cookies

We may allow third-party services such as Google Analytics, Facebook Pixel, and other advertising networks to set cookies on our website. These third parties may collect information about your online activities across different websites over time. Their use of cookies is governed by their own privacy policies.

8.3 Managing Cookie Preferences

You have the right to accept or decline non-essential cookies. You can manage your cookie preferences through:

• Our cookie consent banner displayed upon your first visit to our website
• Your browser settings (most browsers allow you to refuse or delete cookies)
• Opt-out tools provided by specific third-party services (e.g., Google Analytics Opt-out Browser Add-on)
• Industry opt-out platforms such as the Digital Advertising Alliance's opt-out tool at optout.aboutads.info

Please note that disabling certain cookies may affect the functionality and user experience of our website.

9. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights and making it easy for you to exercise them.

9.1 General Rights (All Users)

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request correction of inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions.
• Right to Data Portability: You have the right to receive your personal information in a structured, machine-readable format.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in our emails or by contacting us directly.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 California Residents — CCPA/CPRA Rights

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to know what categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions under applicable law.
• Right to Correct: You have the right to request correction of inaccurate personal information maintained by us.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information with third parties. To exercise this right, please contact us at [email protected] or use the "Do Not Sell or Share My Personal Information" link on our website.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to only what is necessary to perform the services requested.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality because you exercised your privacy rights.

To exercise any California privacy rights, you may submit a verifiable consumer request by:

• Emailing us at [email protected] with the subject line "California Privacy Rights Request"
• Visiting our website at sweet-tatte.click and using the contact form

We will respond to verifiable requests within 45 days of receipt. If we require more time, we will inform you of the reason and extension period in writing.

9.3 How to Submit a Privacy Request

To exercise any of your privacy rights, please contact us using the information below. To protect your security and prevent unauthorized access, we may need to verify your identity before processing your request. This may involve confirming account information, providing identification, or completing a verification process.

You may submit privacy requests to:

• Email: [email protected]
• Website: sweet-tatte.click

You may also designate an authorized agent to submit requests on your behalf. The authorized agent must provide written authorization from you or a valid power of attorney, and we may still require you to verify your identity directly with us.

10. Children's Privacy

Our website, services, and food offerings are intended for individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, and we do not direct our services to minors under the age of 18.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verifiable parental consent. If you are under 18 years of age, you must not use our website or provide us with any personal information.

If we discover that we have inadvertently collected personal information from a child under 13 without proper consent, we will take immediate steps to delete that information from our systems. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

11. International Data Transfers

Tatte is based in the United States, and our primary operations, data storage, and processing activities occur within the United States. If you are accessing our website from outside the United States, please be aware that your personal information may be transferred to, stored in, and processed in the United States.

Data protection laws in the United States may differ from those in your home country. By using our website and services, you acknowledge and consent to the transfer of your personal information to the United States and its processing in accordance with this Privacy Policy.

We take appropriate safeguards to ensure that any international transfers of personal information comply with applicable laws and that your information receives adequate protection regardless of where it is processed.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, platforms, social media pages, or other online services. These links are provided for your convenience and information only. We have no control over the content, privacy practices, or data collection activities of third-party websites.

We strongly encourage you to review the privacy policies of any third-party websites you visit. Our Privacy Policy applies only to our website at sweet-tatte.click and does not extend to any third-party websites or services, even if you access them through links on our website.

Common third-party services we may link to or integrate with include:

• Social media platforms (Facebook, Instagram, Twitter/X, TikTok)
• Food delivery platforms (DoorDash, Uber Eats, Grubhub)
• Review platforms (Yelp, Google Reviews, TripAdvisor)
• Map and navigation services (Google Maps, Apple Maps)

13. Do Not Track Signals

Some web browsers may transmit "Do Not Track" (DNT) signals to websites and online services. Currently, there is no universal standard for how websites should respond to DNT signals. At this time, our website does not respond to DNT browser signals in a standardized way.

However, you can manage your privacy preferences through your browser settings, our cookie consent tool, and by contacting us directly. We will continue to monitor developments in DNT technology and may update our practices accordingly.

14. Marketing Communications and Opt-Out

With your consent where required by applicable law, we may send you marketing emails, newsletters, promotional offers, and updates about our food products and services. You have the right to opt out of receiving marketing communications at any time.

14.1 How to Opt Out

• Click the "Unsubscribe" link located at the bottom of any marketing email we send you
• Log in to your account on sweet-tatte.click and update your communication preferences
• Contact us directly at [email protected] with "Unsubscribe" in the subject line

Please note that even if you opt out of marketing communications, we may still send you transactional and service-related emails, such as order confirmations, receipts, account notifications, and important updates about changes to our policies.

Opt-out requests are typically processed within 10 business days. After this period, you should no longer receive marketing communications from us, unless you subsequently re-subscribe.

15. Complaints and Dispute Resolution

We take privacy concerns seriously and are committed to resolving any complaints or concerns about our privacy practices promptly and fairly.

15.1 How to File a Complaint with Us

If you believe we have mishandled your personal information or violated your privacy rights, we encourage you to contact us first so we can attempt to resolve the issue directly:

• Email: [email protected]
• Subject Line: "Privacy Complaint"
• Website: sweet-tatte.click

We will acknowledge receipt of your complaint within 5 business days and aim to provide a substantive response within 30 days.

15.2 Filing a Complaint with Regulatory Authorities

If you are not satisfied with our response or believe we are processing your personal information in violation of applicable law, you have the right to file a complaint with the appropriate regulatory authority:

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website informing users of the changes
• Send an email notification to registered users if the changes are significant

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

If we propose changes that significantly affect how we use your personal information, we will provide you with a reasonable opportunity to review and, where applicable, consent to or opt out of such changes before they take effect.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact us. We are committed to addressing your privacy inquiries in a timely and thorough manner.

When contacting us about a privacy matter, please include:

• Your full name and email address associated with your account (if applicable)
• A clear description of your inquiry, concern, or request
• The specific right you wish to exercise (if submitting a privacy rights request)
• Any relevant information that may help us identify your records and respond appropriately

We will make every reasonable effort to respond to your privacy inquiries within 30 days of receipt. For complex requests, we may require additional time and will notify you of any extension within the initial 30-day period.