1. Summary
- We collect what we need to prepare, sell, and deliver food, run accounts and plans, plan gatherings and community meal drives, and send messages you ask for.
- We don’t sell your personal information, share it for cross-context behavioral (targeted) advertising, or use advertising or analytics cookies.
- Allergies and dietary answers are used only to suggest food and serve you safely.
- You can see, correct, copy, or delete your information and manage marketing email on Your Privacy Choices.
2. Information we collect and why
We collect information directly from you, from your device when you use the site, and from service providers that process orders and payments for us (for example, Square order and payment status). This section also serves as our notice at collection.
| Category | Examples | Why we use it |
|---|---|---|
| Contact details and identifiers | Name, email, phone number, and account sign-in email. | Orders, subscriptions, account sign-in, bookings, support, and messages you request. |
| Addresses | Delivery, billing, gathering, and meal-drive site addresses; ZIP code. | Delivery, service-area checks, sales-tax calculation, and planning. |
| Orders and preferences | Bowls, salads and sides, choices like dressings and toppings, plan type, pickup or delivery. | Preparing and delivering food, reorders, and suggestions. |
| Pathway quiz answers | Your answers about your days, food preferences, dietary lifestyle, allergies or sensitivities, sides, and optional reflections. | Suggesting a pathway, bowls, and sides, and helping our team support your first order. |
| Payment and transaction details | Payment status, amounts, receipts, and Square order or subscription IDs. Card numbers are entered into and processed by Square; we don’t receive or store them. | Charging for orders and plans, refunds or credits, taxes, and accounting. |
| Gatherings and meal-drive applications | Event date, time, guest count, menu, notes, company; organization, contact role, site, community-need indicators, and logistics. | Estimates, invoices, and planning bookings and community meal drives. |
| Communications and choices | Newsletter status and consent, privacy requests, and messages you send us. | Sending newsletters you’ve confirmed, honoring choices, and keeping required records. |
| Device and technical information | IP address (stored only in hashed form for abuse protection), request logs kept by our host, and browser storage on your device. | Security, preventing abuse, keeping the site working, and remembering your cart. |
We also use information to secure and improve the service, prevent fraud and abuse, keep business and tax records, comply with law, and enforce our Terms of Service. We don’t use it for automated decisions that have legal or similarly significant effects on you.
3. Sensitive personal information
Some answers can be sensitive: food allergies or sensitivities may relate to health, and dietary lifestyles such as halal may reveal religious beliefs. We use them only to suggest food, flag allergens, and prepare what you ask for; we don’t use them to infer characteristics about you, and we never sell or share them. Food-group information on our menu and quiz describes ingredients only and isn’t medical or nutrition advice.
Meal-drive applications ask about organizations and community-level need only. We don’t collect information about people who receive meals, and we don’t ask for demographic or protected-characteristic information.
4. How we share information
We share personal information only as needed to run the service, with providers who are contractually limited to using it for us:
- Square — payments, orders, subscriptions, gathering invoices, customer profiles, and our Take Out menu at checkout.soulgood.kitchen (Square’s own privacy notice also applies there).
- Delivery partners — for Take Out on-demand delivery, couriers such as Uber Direct or DoorDash receive the name, address, phone number, and instructions needed to deliver.
- Resend — sending sign-in codes, order and booking emails, and newsletters you confirm.
- Vercel (hosting) and MongoDB Atlas (database) — running the site and storing records.
- California Department of Tax and Fee Administration — we send a delivery or event address to its public tax-rate service to calculate sales tax.
We may also disclose information to comply with law or valid legal process, to protect the rights and safety of our customers, team, or the public, or as part of a merger, financing, or sale of our business, subject to this policy. We don’t sell personal information, including of anyone under 16.
5. Cookies and browser storage
We use a secure session cookie to keep you signed in to your account and security features to prevent abuse. Your cart, salads and sides, quiz answers, and last order are saved in your browser’s storage so you don’t lose your place; they stay on your device and you can clear them on Your Privacy Choices. We don’t use advertising, analytics, or social-media tracking cookies or pixels. If that ever changes, we’ll update this policy first and respect your choices, including Global Privacy Control.
6. Email and newsletters
The newsletter is opt-in: we email a confirmation link and only send it after you confirm. Every newsletter includes a one-click unsubscribe link and our postal address. Unsubscribing doesn’t stop transactional messages about orders, plans, bookings, sign-in, or applications you make. We don’t send text messages.
7. How long we keep information
- Orders, payments, and invoices: as long as needed for tax and accounting, generally at least four years.
- Accounts: while your account is active, then as required for records.
- Pathway quiz contacts, gathering quotes, community interest, and meal-drive applications: up to 24 months after our last contact, unless they become an order or booking.
- Newsletter: until you unsubscribe; we then keep your address on a suppression list so you aren’t emailed again.
- Privacy requests: at least 24 months, as California law requires.
- Abuse-prevention records: automatically deleted within days.
8. Your privacy rights
If you live in California, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to know what personal information we collect, use, and disclose; to get a copy in a portable format; to delete it; to correct inaccurate information; to opt out of sale or sharing and targeted advertising; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights. Residents of other states may have similar rights, and we extend these choices to all customers.
Make a request on Your Privacy Choices, by email at contact@soulgood.com, or by mail to Soul Goods LLC, 2450 Colorado Ave, Suite 100E, Santa Monica, CA 90404. We’ll verify your identity by matching information we already have, usually by email, and respond within 45 days (or tell you if we need up to 45 more). An authorized agent may submit a request with your signed permission. We honor Global Privacy Control signals as a valid opt-out. If we deny a request, we’ll explain why and how to ask us to reconsider.
California’s “Shine the Light” law lets residents ask whether we disclose personal information to third parties for their direct marketing. We don’t.
9. Children
Our services are for adults 18 and older. We don’t knowingly collect personal information from children under 16. If you believe a child has given us information, contact us and we’ll delete it.
10. Security
We use encryption in transit, access controls, hashed tokens, and trusted providers to protect information. Card details are handled by Square. No system is perfectly secure, so please contact us right away if you suspect misuse of your account.
11. Changes and contact
We’ll post updates here with a new effective date and, for material changes, notify you by email or on the site. Questions: contact@soulgood.com or Soul Goods LLC, 2450 Colorado Ave, Suite 100E, Santa Monica, CA 90404.