Privacy Policy

1. Information We Collect

Business Owner Information

• Business name, address, phone number, email
• Menu items, descriptions, pricing, photos
• Business hours and operational details
• Website customization preferences

Customer Order Information

• Name and phone number (for order notifications only)
• Order details (items, quantities, special instructions)
• Pickup/delivery preferences
• Order timestamps and status

Technical Information

• Website usage analytics (page views, popular items)
• Device and browser information
• IP addresses and general location data

2. How We Use Information

Business Data: To create and maintain your business website, display menus/services, and provide platform features.

Customer Orders: To send order notifications to business owners via SMS. We do not store customer payment information.

Analytics: To improve service quality, identify popular features, and provide basic business insights.

Communications: To send service updates, support responses, and important account notices.

3. Information Sharing

We do NOT sell, rent, or trade your information to third parties.

Limited Sharing:

• Order notifications sent to business owners (customer name, phone, order details)
• Technical service providers (hosting, SMS services) under strict privacy agreements
• Legal compliance when required by law or valid legal process

4. SMS Privacy

We use Twilio for SMS message delivery. When an order is placed:

• The customer's phone number and order details are sent to the business owner via SMS
• The customer receives an order confirmation text
• Phone numbers are used solely for order-related communications
• We do not share phone numbers with any third parties for marketing purposes
• Customers can opt out of SMS by replying STOP to any message

5. Data Storage and Security

Storage: Data is stored on secure cloud servers in the United States (Cloudflare infrastructure).

Security: We use industry-standard encryption, secure connections (HTTPS), and access controls.

Retention: Business data retained while account is active. Customer order data retained for 90 days for business reporting, then automatically deleted.

6. Your Rights and Choices

Business Owners

• Update business information anytime by contacting us
• Request data export or account deletion
• Opt out of non-essential communications

Customers

• No account required for ordering
• Minimal data collection (name, phone for notification only)
• Data automatically deleted after 90 days
• Opt out of SMS by replying STOP

7. Cookies and Tracking

We use minimal cookies for:

• Website functionality (cart contents via localStorage)
• Basic analytics (anonymized)
• Security and fraud prevention

We do not use third-party advertising cookies or cross-site tracking.

8. Third-Party Services

SMS Notifications: Powered by Twilio — subject to Twilio's privacy policy for message delivery.

Website Hosting: Powered by Cloudflare — subject to Cloudflare's privacy policy.

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information is collected
• Request deletion of personal information
• Opt out of sale of personal information (we don't sell data)
• Non-discrimination for exercising privacy rights

To exercise these rights, contact us at the address below.

11. Data Breach Notification

In the event of a data breach affecting personal information, we will:

• Notify affected users within 72 hours
• Report to appropriate authorities as required
• Take immediate steps to secure the breach

12. Changes to Privacy Policy

We may update this policy periodically. Material changes will be communicated via website notice with at least 30 days advance notice. Continued use of our Service constitutes acceptance of updates.

13. Contact Information

For privacy questions, data requests, or concerns:

Privacy Officer — NewWin Works
Email: privacy@purposedrivenmarketplace.com
Los Angeles, California

Response Time: We respond to privacy requests within 30 days.