Privacy Policy

1. Introduction

Zestia ("Zestia," "we," "us," or "our") values your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our online ordering website (the "Website"), which is operated on our behalf by Zorgo Inc. ("Zorgo"), our third-party technology provider.

By using the Website and placing orders, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Website.

2. Information We Collect

Information You Provide

When you place an order through our Website, we collect the following personal information:

• Name (first and last name)
• Email address
• Phone number
• Order details, including the food and beverage items you select, quantities, customizations, and order preferences
• Payment information, which is processed securely by Stripe (our third-party payment processor) and is not stored on our servers
• Promotional preferences, specifically whether you have opted in to receive marketing text messages

Information Collected Automatically

When you visit our Website, general usage data such as page views and site performance metrics may be collected by Cloudflare, our hosting and analytics provider. This data is aggregated and is not used to identify you personally.

Local Storage

Our Website uses your browser's local storage to keep your shopping cart contents and selected location between visits. This data stays on your device and is not sent to our servers until you place an order.

3. How We Use Your Information

We use your personal information for the following purposes:

• Order processing and fulfillment: To process, prepare, and manage your food orders.
• Customer communication: To contact you about your order status, confirm orders, and respond to inquiries.
• Order history: Your food selections and order history are saved in our database and associated with your name and phone number so we can provide a better ordering experience.
• Food recommendations: We may use your past order data and food selections to develop and improve a food recommendations algorithm designed to suggest menu items you may enjoy. This is based on your ordering patterns and preferences.
• Promotional messages (only with your consent): If you voluntarily opt in by checking the SMS marketing consent box during checkout, we may send you promotional offers, coupons, and cart reminders via text message. This consent is entirely optional and is never required to place an order.
• Payment processing: To securely process your payment through Stripe.
• Website improvement: To analyze usage patterns and improve the performance and functionality of our Website.

4. Data Storage and Third-Party Services

Zorgo Inc. (Technology Provider)

Our Website is built and maintained by Zorgo Inc.. Your personal information, including your name, phone number, email address, and order history, is stored and processed by Zorgo Inc. using Supabase, a secure cloud database platform. This data is stored to facilitate order fulfillment, customer service, and the features described in this Privacy Policy.

Stripe (Payment Processing)

Payment information is processed securely by Stripe. We do not store your credit card numbers, debit card numbers, or other sensitive payment details on our servers. Stripe's handling of your payment data is governed by their own privacy policy, available at stripe.com/privacy.

Cloudflare (Hosting and Analytics)

Our Website is hosted on Cloudflare, which processes anonymous, aggregated usage metrics on our behalf and does not receive your order or contact details.

5. Text Message Marketing

SMS marketing is completely optional and is never required to place an order or use the Website.

If you choose to opt in during checkout, you consent to receive recurring automated marketing messages from Zestia at the phone number you provide. These messages may include promotions, special offers, coupons, and cart reminders.

• Message and data rates may apply.
• You may opt out at any time by replying STOP to any marketing message.
• For help, reply HELP to any marketing message.
• Consent is not a condition of purchase.

We do not share your phone number with third parties for their own marketing purposes.

6. Data Sharing

We do not sell your personal information to third parties. We share your information only with the following parties, and only as necessary to operate the Website and fulfill your orders:

• Zorgo Inc.: Our technology provider, which stores and processes your data for order fulfillment and website operation.
• Stripe: Our payment processor, which receives only the payment information necessary to complete your transaction.
• Cloudflare: Our hosting provider, which may process anonymized analytics data.

We may also disclose your information if required by law, regulation, legal process, or governmental request.

7. Data Retention

We retain your personal information, including your name, phone number, email address, and order history, for as long as necessary to provide our services, improve your ordering experience, and comply with legal obligations. If you would like to request deletion of your data, please contact us using the information provided below.

8. Data Security

We take reasonable measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Data is stored in secure cloud infrastructure, payment processing is handled by PCI-compliant providers such as Stripe, and access to personal data is restricted to authorized personnel. No method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete personal information.
• Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Opt-out of marketing: You may opt out of SMS marketing at any time by replying STOP or by contacting us directly.

To exercise any of these rights, please contact us using the information in the Contact section below.

10. Children's Privacy

Our Website is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13 without parental consent, we will take steps to delete that information.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. When we make changes, we will update the "Last Updated" date at the top of this page. Your continued use of the Website after any changes are posted constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, or if you wish to exercise your data rights, please contact us at any of the phone numbers listed in the footer of this website.