Privacy Policy

1. Overview

La Bandera Kitchen ("we," "us," or "our") is a Dominican-owned catering and meal-prep business based in Oakland, California. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at labanderakitchen.com or interact with our services.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our site. By using our website, you consent to the practices described in this policy.

2. Information We Collect

We may collect the following types of personal information:

• Contact information: Name, email address, phone number, and mailing address
• Order information: Food preferences, delivery address, order history, and special requests
• Event information: Event type, date, guest count, venue details, and catering requirements
• Payment information: Billing details processed securely through third-party payment processors (we do not store full card numbers)
• Communication preferences: Whether you have opted in to receive marketing communications
• Usage data: IP address, browser type, pages visited, time spent on our site, and referring URLs
• Device information: Browser type, operating system, and screen resolution

3. How We Use Your Information

• To process and fulfill your catering orders and meal plan subscriptions
• To respond to your inquiries, quote requests, and event bookings
• To send order confirmations, event reminders, and service updates
• To send occasional marketing communications — only if you have provided explicit consent
• To improve our website, services, and customer experience
• To comply with legal obligations under California and federal law
• To send review request emails following completed orders (you may opt out at any time)

4. Text Message & Email Consent

We will only send you marketing text messages or emails if you have explicitly opted in by checking the consent box on our forms. You may opt out at any time by:

• Replying STOP to any text message
• Clicking "Unsubscribe" in any email
• [email protected]

Transactional messages (order confirmations, event details, review requests) are sent regardless of marketing preferences as they relate to services you have requested.

5. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies. You will be asked for your consent before any non-essential cookies are set. Here is what we use:

Essential Cookies (always active)

• Session cookies: Keep you logged in during your visit
• Consent cookie (c2_analytics_consent): Stores your cookie preference so we don't ask again
• Language preference (lbk_lang): Remembers your chosen language

Analytics Cookies (consent required)

• Site analytics: We use first-party analytics to understand how visitors use our site. No data is shared with advertising networks.

Third-Party Services (consent required)

• Google Translate: If you use the "More Languages" feature, Google's translation service may set cookies and collect usage data per Google's Privacy Policy. This service only activates after you accept cookies.

You can manage or withdraw cookie consent at any time by clearing your browser cookies or using the cookie settings in your browser. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.

6. Information Sharing

We do not sell, trade, or rent your personal information to third parties for their marketing purposes. We may share your information with:

• Payment processors: To securely process transactions (e.g., Stripe, GoDaddy Payments)
• Email service providers: To deliver transactional and marketing emails you have consented to receive
• Service providers: Who assist in operating our website and business, under confidentiality agreements
• Legal authorities: When required by law, court order, or to protect our rights and the safety of others

7. Data Security

We implement industry-standard security measures to protect your personal information. Payment information is processed through secure, PCI-compliant payment processors. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. We will notify affected users in the event of a data breach as required by California law (California Civil Code § 1798.82).

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications at any time
• Withdraw consent for cookie-based tracking at any time
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at [email protected]. We will respond within 45 days as required by California law.

California Residents: You have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). See Section 9 for full details.

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Right to Know

You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.

Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.

Right to Correct

You have the right to request correction of inaccurate personal information we maintain about you.

Right to Opt Out of Sale or Sharing

We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising. If this changes, we will update this policy and provide a "Do Not Sell or Share My Personal Information" link.

Right to Limit Use of Sensitive Personal Information

We do not use sensitive personal information (such as precise geolocation, racial or ethnic origin, or health data) for purposes beyond providing our services.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge different prices, or provide a different level of service because you exercised your privacy rights.

Shine the Light (California Civil Code § 1798.83)

California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes without your consent. To make a request, contact us at [email protected].

10. Do Not Sell My Personal Information

If you have questions about how your data is used or wish to submit a data request, email us at [email protected] with the subject line "Privacy Request." We will respond within 45 days.

11. Children's Privacy

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated "Last updated" date. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

For privacy-related questions, data requests, or to exercise your rights, contact us at: