Privacy notice · Draft version 0.1
We collect less, on purpose.
This draft describes the current menu-and-phone website. The site does not accept customer orders or customer accounts. Replace every bracketed placeholder and obtain review from a Florida-qualified attorney before public launch.
Who is responsible
[LEGAL OWNER NAME] operates Toa Toa at 4521 N Pine Island Rd, Sunrise, FL 33351. Privacy contact: [BUSINESS PRIVACY EMAIL] and [LEGAL CONTACT / MAILING ADDRESS].
What we collect
- You do not need to provide a name, email address, phone number, or payment information to browse the website.
- A device-local preference remembers your cookie choice. It stays in your browser and is not sent as a customer profile.
- The hosting provider may process limited technical request data, such as IP address, browser details, timestamps, and security events, to deliver and protect the site.
- The embedded OpenStreetMap may send technical request data, such as your IP address and browser details, to the OpenStreetMap Foundation when it loads.
The privacy-request form is a local preview and does not transmit its contents. Do not enter passwords, payment data, government IDs, health information, or other sensitive information.
Why we use it
Limited technical data may be used to deliver the pages, prevent abuse, diagnose errors, and protect the website. Information shared directly with restaurant staff by phone is handled outside this website.
Service providers and subprocessors
[HOSTING PROVIDER] may process only the technical data needed to host and secure the site. The OpenStreetMap Foundation provides the embedded location map and processes map requests under its own privacy terms. A final vendor/subprocessor list, processing locations, and contract review are required before launch. Optional analytics is not configured.
Sale, advertising, and sharing
The intended configuration does not sell personal information, use it for targeted advertising, or share it beyond providers needed to operate the site. Any future change requires owner and counsel review plus appropriate notice and consent.
Retention
Browser preferences remain until you clear them. Hosting and security logs must follow documented minimum retention periods. Final periods: [SECURITY LOG PERIOD] and [BACKUP EXPIRY].
Your choices and requests
Where applicable, visitors may ask to access, correct, delete, or receive a copy of their information. Identity must be verified proportionately before a request is fulfilled.
Security and incidents
Planned controls include encryption in transit, least-privilege access, validation, rate limiting, log review, and tested response procedures. No system can promise absolute security. Incident and legally required breach-notice procedures require owner approval before launch.
Children and other jurisdictions
This website is not designed to collect information from children. If it serves people outside Florida, counsel must assess any additional state, federal, or international obligations.
Effective date and changes
Effective date: [DATE]. Notice version: [VERSION]. Material changes should be documented and communicated as counsel advises.