Privacy policy
Last updated
The short version
- We take only what a booking, a ticket, a message or a job application needs, and use it for that.
- We don’t sell your data or share it for advertising.
- Our public pages set no cookies of their own. Google Analytics is the only one, with ad signals off, and you can turn it off here.
- Staff check a physical ID at the door. We don’t scan or store IDs.
- Questions, a copy of your data, or deletion: charcoalnchill@gmail.com.
1. What we collect, why, and where it goes
- Reserve a table
- What: Name, phone, email, date, time, party size, occasion, notes; card details for a booth deposit
- Why: To hold your table and reach you about it
- Goes to: Our database (Supabase) and staff alerts (Telegram and email); Stripe takes a booth deposit (card details never reach us) and you get a confirmation email
- Private events
- What: Name, phone, email, date, guests, occasion, notes
- Why: To quote and plan your event
- Goes to: Our database (Supabase) and staff alerts (Telegram and email)
- Contact form
- What: Name, email, phone (optional), your message
- Why: To reply
- Goes to: Our database (Supabase) and staff alerts (Telegram and email)
- Event tickets
- What: Name, email, quantity; card details
- Why: To issue your tickets and check them at the door
- Goes to: Stripe takes the card (card details never reach us); our database; the ticket email
- Job applications
- What: Name, email, phone, ZIP (optional), resume (up to 4 MB), how you heard about us
- Why: To consider your application
- Goes to: Our database and private file storage (Supabase); a confirmation email
- The QR code on your table
- What: The table number and your browser type, once per visit (no name or contact details)
- Why: To see which tables use the QR menu
- Goes to: Our database (Supabase)
- Every page
- What: How fast the page loaded and responded (loading time, layout shift, response time), the page address without any search terms, and whether you’re on a phone, tablet or computer. No name, IP address, cookie or identifier
- Why: To keep the site fast for real visitors
- Goes to: Our database (Supabase); never under Global Privacy Control or after you switch analytics off
- Every page
- What: Only if your browser blocks something our security policy doesn’t expect: the page’s address (without search terms) and the blocked resource’s site. No IP address, name or identifier is kept
- Why: To keep the site secure
- Goes to: Our server logs, which are short-lived
- Every page
- What: Pages viewed, device and browser, approximate location, and a few actions: tapping to call, opening an ordering app, a booking or message sent (never what you wrote)
- Why: To improve the site and see which pages bring bookings
- Goes to: Google Analytics, with ad signals off; never under Global Privacy Control or after you switch it off
Online ordering runs on Clover’s own site and follows Clover’s privacy policy. On the gallery, video thumbnails load from YouTube’s image server with the page; the player itself loads only when you tap a video, in YouTube’s privacy-enhanced mode.
2. We don’t sell your data
We don’t sell personal data, and we don’t share it for advertising. We use it to run the bookings, tickets and applications you send us, and to reply to you.
3. The services we use
- Vercel hosts the website.
- Supabase database and private file storage.
- Stripe card payments for tickets and deposits.
- Resend sends confirmation emails and staff alert emails.
- Telegram alerts our staff to new bookings and messages.
- Google Analytics site statistics (ad signals off).
They handle data for us under their own security and privacy terms, only for these purposes.
4. Cookies and browser storage
Our public pages set no cookies of their own. Your theme choice, the table-QR visit flag and your analytics setting are kept in your browser’s own storage, not cookies, and never leave your device. Google Analytics sets its cookies only while analytics is on (below). Staff sign-in pages use a session cookie.
5. Turn off analytics
Analytics helps us see which pages people use. It never runs if your browser sends Global Privacy Control, and you can switch it off for this browser here:
To turn analytics off, switch on your browser’s Global Privacy Control setting; we honour it on every page.
6. How long we keep it
- Reservations, private-event requests and messages: 2 years, then deleted.
- Job applications and resumes: 1 year after we decide, then deleted.
- Ticket orders and payment records: 7 years (tax and accounting records).
- Analytics data: 14 months.
- Page speed measurements: 90 days.
- Table QR scans (table number and browser type): 14 months.
- Prize-draw entries from past promotions: 2 years, then deleted.
7. Age
Charcoal N Chill is for adults 21 and over, at all times. Staff check a physical ID at the door; we don’t scan or store IDs. We don’t knowingly collect personal data from anyone under 21.
8. Your choices
Email us to ask for a copy of the data we hold about you, to correct it, or to delete it. We reply within 30 days. We keep payment records only as long as tax rules require (above).
9. Contact us
Charcoal N Chill (Charcoal N Chill LLC), 11950 Jones Bridge Rd Ste 103, Alpharetta, GA 30005. Email charcoalnchill@gmail.com or call (470) 546-4866.