Privacy notice · Draft version 0.1
We collect less, on purpose.
This draft explains how Toa Toa would handle information for pickup ordering. Replace every bracketed placeholder and obtain review from a Florida-qualified attorney before public launch.
Who is responsible
[LEGAL OWNER NAME] operates Toa Toa at 4521 N Pine Island Rd, Sunrise, FL 33351. Privacy contact: [BUSINESS PRIVACY EMAIL] and [LEGAL CONTACT / MAILING ADDRESS].
What we collect
- For guest pickup requests: order items, requested pickup time, status, customer name, and either an email address or phone number.
- For optional accounts: name, verified email, optional phone, saved pickup preferences, and account-linked order history.
- For voluntary communications: separate email or SMS preference, the consent wording/version, source, timestamp, and opt-out status.
- Limited security and audit information needed to prevent abuse and review staff access. Sensitive order notes are not intended or requested.
We do not ask for payment data, government identification, precise location, health information, or unnecessary demographic details.
Why we use it
Information is used to receive and fulfill pickup requests, contact the customer about that request, provide optional account history, prevent misuse, respond to support and privacy requests, and keep records for documented operational, accounting, and tax purposes.
Service providers and subprocessors
[HOSTING PROVIDER], [MANAGED AUTH PROVIDER], [TRANSACTIONAL EMAIL PROVIDER], and [OPTIONAL SMS PROVIDER] may process only the data needed for their service. A final vendor/subprocessor list, locations, and contract review are required before launch. Optional analytics is off by default and must not load before applicable consent.
Sale, advertising, and sharing
The intended configuration does not sell personal information, use it for targeted advertising, or share it beyond service providers needed to operate the service. Any future change requires owner and counsel review plus appropriate notice and consent.
Retention
Retention is configurable by data class. Fulfillment contact details should be removed or de-identified when no longer needed, subject to owner-approved accounting, tax, dispute, and legal obligations. Final periods: [ORDER RECORD PERIOD], [CONTACT PERIOD], [AUDIT LOG PERIOD], and [BACKUP EXPIRY].
Your choices and requests
Where applicable, customers may ask to access, correct, delete, or receive a copy of their information. Identity must be verified proportionately before a request is fulfilled. Marketing opt-ins are voluntary, separate, and can be withdrawn at any time.
Security and incidents
The planned controls include managed authentication, encryption in transit, least-privilege staff access, secure cookies, validation, rate limiting, audit logs, encrypted backups, and tested response procedures. No system can promise absolute security. Incident and legally required breach-notice procedures require owner approval before launch.
Children and other jurisdictions
This ordering service is not designed to collect information from children. If the site serves people outside Florida, counsel must assess any additional state, federal, or international obligations.
Effective date and changes
Effective date: [DATE]. Notice version: [VERSION]. Material changes should be documented and communicated as counsel advises.