This storefront is operated by the restaurant, which is responsible for the personal information collected through it and is the business under the California Consumer Privacy Act (CCPA).
Information we collect and why. We collect only the information needed to run your account and to take and fulfill your orders: your name and contact details (email and phone), your delivery or pickup address, your order history and preferences, and device and usage information (such as pages viewed and the approximate location inferred from your network) used to operate and secure the site. Payment card details are handled by our payment processor and are not stored by us. We collect this information directly from you when you create an account, place an order, or contact us, and automatically from your device when you use the site. We use it to process and fulfill orders, maintain your account and provide support, prevent fraud and secure the service, and meet our legal, tax, and accounting obligations.
Who we share it with. We disclose personal information only to service providers who process it for us under contract for the purposes above — for example our payment processor, our ordering or point-of-sale provider, and our hosting and analytics providers. We do not sell your personal information, and we do not share it for cross-context behavioral advertising; we have not done so in the preceding 12 months. We do not knowingly sell or share the personal information of consumers under 16 years of age.
How long we keep it. We retain each category of personal information for as long as your account is active and as needed to provide the storefront, and afterward only as required to complete transactions, resolve disputes, prevent fraud, and comply with our legal, tax, and accounting obligations.
Your California privacy rights. If you are a California resident, you may request to know or access the personal information we hold about you, request that we correct it, and request that we delete it. You also have the right to opt out of the sale or sharing of personal information and to limit the use of sensitive personal information — although we do not sell or share personal information, and we use sensitive information only to take and fulfill your orders, process payment, and prevent fraud. We honor Global Privacy Control (GPC) browser signals as a valid opt-out request. We will not deny you goods or services, charge you a different price, or otherwise discriminate or retaliate against you for exercising any of these rights.
How to exercise your rights. To submit a request to know, correct, or delete, or if you have questions about this policy, contact us by email at frontdesk@laurelsupply.com. We will confirm receipt and respond within 45 days, and may extend once by up to 45 additional days where reasonably necessary, with notice to you. We may need to verify your identity before completing your request, and we will not require you to create an account in order to make one.