Privacy Policy

This Privacy Policy explains how The Escobar Kitchen LLC, doing business as The Escobar Kitchen ("Escobar," "we," "us"), collects, uses and protects information when you visit our restaurants or our website, use The Escobar Kitchen mobile app, order online, make a reservation or catering request, join a rewards program when we offer one, or receive our texts and emails (together, the "Services"). By using the Services you agree to this Policy.

1. Information We Collect

Information you give us

• Account details (app and online ordering): first and last name, a mobile phone number and/or an email address, a password (stored only in encrypted, hashed form) and, optionally, your birthday (month and day). A mobile number is required before your first pickup order so the restaurant can reach you.
• Mobile number confirmation: we text a one-time code to confirm the number belongs to you.
• Orders: items, options, special instructions, pickup time, tips and the location you order from.
• Reservations: your name, mobile number, email, party size, date and time, and any occasion or special request you add.
• Catering requests: your name, phone, email, company (optional), event date, time, guest count, location, dishes, dietary needs, budget and notes.
• Communication choices: whether you agree to receive text messages, emails and app notifications.
• Messages you send us: questions, feedback and support requests by phone, email, text or our website forms.

Information created when you use the Services

• Order history: orders placed in the app or online, and restaurant purchases that are linked to your account.
• What we learn from your orders: for example your favorite dish, the day and time you usually order, and how much you have spent with us in the last 12 months.
• Items left in your bag: if you are signed in, we save your bag so it is there when you come back.
• App use: whether you use our iPhone or Android app and the date you last opened it while signed in; a member number; and, if you allow notifications, a device notification token.
• Website use: browser type, device type, pages visited and general (city/region-level) location, collected through standard web analytics and cookies (see section 6).
• Basic technical information needed to keep you signed in and the Services working.

Payments: we do not receive or store your full card number. Card payments are taken and processed by Clover, our point-of-sale and payment provider: in the app and on our website you enter your card in Clover's secure payment fields, and your card details go directly to Clover. Apple Pay and Google Pay payments are also processed by Clover. If you choose "Save this card," Clover stores the card for that restaurant location; we keep only the card brand, last 4 digits, expiration date and Clover's reference to it. To prevent card fraud, Clover's payment fields use Google reCAPTCHA, which collects device and usage information under Google's Privacy Policy and Terms of Service. Orders placed for our Hunters Creek location online, gift cards and delivery orders are handled by Toast and delivery partners such as Uber Eats under their own privacy policies.

Location: if you allow it (only while you use the app, never in the background), your location is used on your device to show our restaurants nearest-first and to show an order-ahead tip when you are at one of our restaurants. Your location is not sent to us, stored or shared.

We do not use advertising identifiers or track you across other companies' apps or websites, and we do not collect government IDs or health information.

2. How We Use Your Information

• To create and manage your account, and to run rewards programs when we offer them.
• To take, prepare and support your orders, reservations and catering requests, and to send order updates and receipts by email and text.
• To process payments, prevent fraud and keep the Services secure.
• To send marketing texts, emails or app notifications only if you opted in, including offers based on what you order, reminders about items left in your bag and app-only offers. You can opt out at any time (see section 7).
• To add verified members to our restaurants' point-of-sale customer list, so our staff can find you at the register.
• To answer your questions and feedback, understand sales, and improve our menu, service and Services.
• To comply with the law and enforce our Terms of Service.

3. Text Messages (SMS) & Email

Transactional messages: when you place an order, confirm your number or make a reservation, we text and/or email you about it (for example your order confirmation, receipt or a one-time code). These are not marketing.

Marketing messages: if you opt in, you may receive offers, news and event announcements by text and/or email. Consent is not required to buy anything. Message frequency varies; message and data rates may apply. Reply STOP to any text to stop, or HELP for help, or call (407) 743-8827. Use the unsubscribe link in any marketing email.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are not shared with any third parties.

4. How We Share Your Information

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We share information only with:

• Service providers that run the Services for us, under contracts that limit how they use your data: our customer-relationship and messaging platform, our point-of-sale and payment provider (Clover), Toast (for our Hunters Creek location), cloud hosting and encrypted storage, push-notification delivery (Google Firebase) and website analytics.
• Marketing and technology partners that operate our app and communications on our behalf (for example, our marketing agency).
• Delivery partners (for example Uber Eats or DoorDash), only when you choose to order delivery through them.
• Authorities or others when required by law, or to protect rights, safety and property.
• A buyer or successor if our business is sold or reorganized, under this Policy.

5. How Long We Keep Information

We keep account information while your account is active. If you delete your account, we delete your app profile and app order history. We may keep limited records (such as transaction records, for up to three years) where required for tax, accounting, fraud-prevention or legal reasons, and data in routine encrypted backups that expire on their normal schedule (about 30 days).

6. Cookies & Website Analytics

Our website may use cookies and similar technologies to keep it working, remember your preferences and understand how visitors use our pages. You can control or disable cookies in your browser settings. Disabling cookies may limit some website features but will not affect your ability to order or contact us by phone.

7. Your Choices & Rights

• Text messages: reply STOP to any message.
• Email: use the unsubscribe link in any marketing email.
• App notifications: in the app, Account → Notifications (order updates and offers are separate), or in your phone's settings.
• Location: optional; deny or change it anytime in your phone's settings.
• Access and correction: update your details in the app (Account → Account settings) or contact us.
• Delete your account: in the app (Account → Privacy & data → Delete my account) or on our account-deletion page. You can also email us.

Depending on where you live, you may have rights to request access to, correction of, or deletion of your personal information, and to opt out of certain uses. To make a request, contact us below. We will verify your request and will not discriminate against you for exercising your rights.

8. Security

We use reasonable safeguards, including encrypted connections (HTTPS), hashed passwords and encrypted storage. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. We will notify affected individuals of a data breach as required by law.

9. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

10. Changes to This Policy

We may update this Policy. If changes are material, we will tell you in the app or by other reasonable means before they take effect. The date at the top of this page shows the latest version.

---