828 Grill LLC (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what data we collect when you use https://828-grill.vercel.app, how we use it, and your rights with respect to it.
By placing an order or creating an account, you agree to the practices described here.
1. Information We Collect
Account & Order Data
- Full name
- Email address
- Phone number (optional)
- Delivery or pickup address (optional)
- Order history — items ordered, quantities, totals, timestamps
- Password (stored as a bcrypt hash; we never store your plaintext password)
Payment Data
Payment card details are collected and processed by Stripe, Inc. We never store card numbers, CVCs, or expiration dates on our servers. We receive only a payment confirmation reference from Stripe. Stripe's privacy practices are governed by the Stripe Privacy Policy.
Usage & Analytics Data
We use Vercel Analytics to collect anonymised page-view and performance data (page URL, referrer, browser type, country). No personally identifiable information is included in analytics events. Analytics are only collected after you provide cookie consent.
Newsletter
If you subscribe to our newsletter, we store your name and email address for the purpose of sending promotional emails. You can unsubscribe at any time via the link at the bottom of any email.
2. How We Use Your Information
- Process and fulfil your orders
- Send order confirmation and status notifications
- Respond to customer service enquiries
- Send marketing emails (only if you opted in; opt-out available at any time)
- Improve site performance and user experience via analytics
- Comply with legal obligations (e.g., tax records)
We do not sell your personal information to any third party.
3. Third-Party Services
We share data with the following service providers solely as needed to operate the site:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe, Inc. | Payment processing | Card details, order total |
| Resend | Transactional & newsletter email | Name, email address |
| Cloudinary | Menu image hosting | Uploaded images (admin only) |
| Neon (xata.io) | Database hosting | All account and order data |
| Vercel, Inc. | Hosting & analytics | Anonymised page-view data |
Each provider is bound by their own privacy policies and, where applicable, a data processing agreement with us.
4. Cookies & Tracking
We use a single session cookie (828-session) for authentication — this is strictly necessary for the site to function and does not require your consent. We also use Vercel Analytics for performance monitoring, which is only activated after you provide your consent via the cookie banner.
You can withdraw cookie consent at any time by clearing your browser's local storage for this site.
5. Data Retention
- Order records are retained for 7 years for legal and tax compliance
- Account data is retained until you request deletion
- Newsletter subscriptions are retained until you unsubscribe
- Vercel Analytics data is anonymised and governed by Vercel's retention policy
6. Your Rights
Depending on your location, you may have the following rights:
- Access — request a copy of the personal data we hold about you
- Correction — request that inaccurate data be corrected
- Deletion — request that your account and personal data be deleted
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Opt-out (CCPA) — California residents may opt out of the sale of personal information (we do not sell personal information)
To exercise any of these rights, email us at privacy@828grill.com. We will respond within 30 days.
7. Children's Privacy
Our service is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
8. Security
We implement appropriate technical and organisational safeguards: passwords are hashed with bcrypt, all connections are encrypted with TLS, authentication tokens have a maximum age, and rate limiting is applied to login and registration endpoints. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.
10. Contact Us
828 Grill LLC
Asheville, NC 28801
Email: privacy@828grill.com