Legal

Privacy Policy

Effective date: October 7, 2026

This policy explains what personal information [pending: legal business name], doing business as Pollería Las Brujas (“we” or “us”), collects when you visit lasbrujaspollos.com, order from us or contact us, and what we do with it. It does not cover other websites we link to.

Information we collect

Information you give us

Your name, phone number and email address.
For delivery: your street address, apartment or suite, ZIP code and delivery instructions.
Your order: the items, your choice of sides and sauces, notes for the kitchen, the tip, and whether you chose delivery or pickup.
For catering: the date and time of your event, the number of guests and anything else you write in the catering form.
Anything you tell us when you email, call or text us.

Payment information

When you pay by card, Apple Pay or Google Pay, our payment processor, Stripe, collects your card details directly. We never see or store your full card number. Stripe tells us the card brand, the last four digits and whether the payment went through. Stripe handles your data under its own privacy policy. When you pay in cash, we record only the amount and that you paid it.

Information collected automatically

When you visit the site, our server records technical data such as your IP address, browser and device type, the pages you open and the time of your visit. The site also uses cookies, explained below.

We do not ask for Social Security numbers, health information or your device’s location.

How we use your information

To prepare, deliver and charge for your order.
To send you your order confirmation, status updates, tracking link and receipt.
To call or text you if we have a question about your order or our driver can’t find your address.
To answer catering requests and other messages.
To handle cancellations, refunds and complaints.
To keep the site running and secure, and to prevent fraud.
To see how people use the site and improve it, if you accept analytics cookies.
To measure our ads and show them to people who visited the site, if you accept advertising cookies.
To keep the records that tax, accounting and other laws require.

We do not sell your personal information.

Texts and emails

We use your phone number and email address to send messages about the order you placed, such as the confirmation, status updates, the tracking link and the receipt. These messages have no advertising in them. You can reply STOP to any text from us to stop getting texts; we will keep sending order updates by email.

We will not send you marketing texts unless you give us your express written consent, separately from placing an order. You never have to agree to marketing texts to buy from us. If we start a text program, each message will tell you how to opt out (reply STOP) and get help (reply HELP), and message and data rates may apply.

Every marketing email we send will identify us, include our mailing address and include a link to unsubscribe. We process unsubscribe requests within 10 business days. Unsubscribing from marketing does not stop emails about an order you placed.

Cookies and similar technologies

Cookies are small files that your browser stores for a website. We use two kinds:

Necessary cookies keep your cart, your delivery or pickup choice and the checkout working, and help protect the site from abuse. The site can’t take orders without them, so they are always on.
Analytics and advertising cookies, such as those set by Google Analytics, Google Tag Manager and the Meta Pixel, tell us how people find and use the site and measure our ads. They load only if you accept them.

If you accept analytics or advertising cookies, you can change your mind at any time through the cookie settings link at the bottom of every page. You can also block or delete cookies in your browser settings, but the cart and checkout will stop working if you block necessary cookies.

Global Privacy Control and Do Not Track

If your browser sends a Global Privacy Control signal, we treat it as a refusal of analytics and advertising cookies in that browser. There is no common standard for Do Not Track signals, so the site does not respond to them; you can refuse those cookies in the cookie banner instead.

Who we share it with

We share personal information only as needed to run the business:

Stripe, to process card payments.
Our email and text message providers, to deliver order messages.
Our website hosting provider, which stores the site and its data on its servers.
Google and Meta, only if you accept analytics or advertising cookies. They use the data under their own privacy policies.
Our accountants and lawyers, when they need it to advise us.
Government authorities and courts, when the law requires it, for example in a tax audit or under a subpoena.
A buyer of our business, if we sell it. The buyer must handle your information under this policy.

Our delivery drivers are part of our team. They see your name, phone number, address and delivery instructions so they can bring you your order.

How long we keep it

Orders, including the contact and delivery details on them: for as long as tax and accounting laws require us to keep sales records. After that we delete them or remove the details that identify you.
Catering requests and messages that don’t turn into an order: up to 2 years after we last hear from you.
Server logs: up to 90 days, unless we need them longer to look into a security problem.

How we protect it

The site uses an encrypted (HTTPS) connection. Only the staff who need your order details can see them. Stripe, which handles card payments, is certified under the payment card industry’s security standard (PCI DSS). No system is completely secure, so we cannot promise that your information will never be accessed without permission.

If a data breach affects your personal information, we will notify you as section 501.171 of the Florida Statutes requires: as fast as we can and no later than 30 days after we determine, or have reason to believe, that the breach happened, unless the law allows a delay, for example at the request of law enforcement.

Children

This site is not meant for children under 13, and we do not knowingly collect their personal information, as the Children’s Online Privacy Protection Act (COPPA) requires. If you believe a child under 13 has given us personal information, contact us and we will delete it.

Your choices and requests

You can ask us to:

tell you what personal information we have about you and send you a copy;
correct information that is wrong;
delete your information, except records the law requires us to keep, such as sales records;
stop sending you marketing messages.

Email your request to [pending: contact email]. To protect your information, we will confirm your identity first, usually by checking the email address or phone number on your orders. We answer within 45 days and will not treat you differently for making a request.

Florida’s Digital Bill of Rights (sections 501.701 to 501.722 of the Florida Statutes) applies only to companies with more than $1 billion in yearly revenue that meet other conditions. We are a local restaurant and do not meet them, but we honor the requests above for every customer. If you live in a state whose privacy law gives you other rights, tell us and we will respond as that law requires.

Other websites

The site links to services such as Google Maps, Instagram, Facebook and WhatsApp. When you use them, their privacy policies apply, not this one.

Changes to this policy

When we change this policy, we will post the new version on this page with a new effective date. If a change affects how we use information we already have, we will also post a notice on the site.

Contact us

[pending: legal business name]
1230 E Highway 50, Clermont, FL 34711
Email: [pending: contact email]
Phone: [pending: phone number]