Privacy Policy

1. Introduction

We value your privacy. This Policy describes the types of information we collect, how we use it, the choices you have, and our commitments under applicable laws, including U.S. state laws (e.g., California) and, where applicable, the GDPR for users in the EEA/UK.

2. Information We Collect

• Account & Profile: name, email, phone number, password (hashed), and preferences.
• Order & Delivery: items ordered, delivery address, contact details, delivery instructions.
• Communications: SMS content limited to verification codes and service notifications; email correspondence; chat messages with support.
• Device & Usage: IP address, browser type, device identifiers, pages viewed, links clicked, referring/exit pages, and timestamps.
• Cookies & Similar Tech: to remember preferences, enable core features, and analyze usage.
• Payments: we use third-party processors; card data is handled by them and not stored by us.

3. How We Use Information

• Provide and improve our services, fulfill orders, and facilitate delivery.
• Authenticate users and send one-time passcodes (OTP) for verification.
• Send transactional updates (e.g., order confirmations, status, and delivery notifications).
• Respond to inquiries, provide support, and prevent fraud or abuse.
• Comply with legal obligations and enforce our Terms.
• With your consent, send non-transactional communications (you can opt out at any time).

4. SMS Text Messaging Terms

Opt-In

You may opt in by entering your phone number during checkout or account creation and submitting the form on our website or app. The opt-in request clearly explains that you will receive SMS related to verification and order updates.

Opt-Out

You can opt out at any time by replying STOP to any message from us. You may also contact us at privacy@cutlet.us to request removal. After you send STOP, you may receive a confirmation message.

Help

Reply HELP for assistance, or contact support@cutlet.us.

Eligibility & Responsibilities

You must provide a valid mobile number and be the account holder or have permission from the account holder. You are responsible for charges imposed by your carrier.

5. How We Share Information

We do not sell your personal information. We may share limited data with:

• Service providers who process data on our behalf (e.g., cloud hosting, analytics, customer support, email/SMS delivery). We require them to safeguard your data and use it only for our instructions.
• Payment processors to complete transactions.
• Delivery partners to fulfill your orders.
• Law enforcement or regulators when required by law or to protect rights, safety, and security.
• Business transfers in connection with a merger, acquisition, or asset sale, subject to this Policy.

6. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, to comply with legal obligations, resolve disputes, and enforce our agreements. OTP codes are short-lived and not stored beyond what is needed for security and audit.

7. Security

We implement administrative, technical, and physical safeguards appropriate to the nature of the data we process. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Your Privacy Rights

EEA/UK (GDPR)

Where GDPR applies, you may request access, correction, deletion, restriction, portability, or object to processing. Our legal bases include performance of a contract, legitimate interests, legal obligations, and consent (where applicable). To exercise rights, contact privacy@cutlet.us.

California (CPRA)

California residents may request to know, delete, correct personal information, and opt out of certain sharing. We do not sell personal information. To make a request, email privacy@cutlet.us.

We will not discriminate against you for exercising your privacy rights.

9. Children’s Privacy

Our services are not directed to children under 13 (or the relevant age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal data, contact us and we will take appropriate steps to delete it.

10. International Transfers

If you access our services from outside the United States, your information may be transferred to and processed in the U.S. and other countries that may have different data protection laws than your country of residence. Where required, we use appropriate safeguards for such transfers.

11. Changes to This Policy

We may update this Policy from time to time. We will post the updated version on this page and update the “Effective date” above. If changes materially affect your rights, we will provide additional notice as required by law.

12. Contact Us

If you have questions about this Privacy Policy or our practices, contact us: