Privacy & Cookie Policy

WSFOOTERCAS Smoke Cafe ("we", "us") operates this website and is the business responsible for the personal information described here. You can reach us by email at hello@restaurant.com, by phone at (415) 555-0123, or by post at 123 Culinary Street, San Francisco, CA 94102, San Francisco, CA. The website is provided and hosted on our behalf by a website platform that acts as our data processor (service provider). This Privacy & Cookie Policy explains what we collect, why we collect it, how long we keep it, who we share it with, and the choices and rights you have.

Information you provide: when you send us a message or request a reservation, we collect your name, email address, phone number, and whatever you put in the message. A reservation request also includes the date, time and party size you ask for. Information we record automatically for security and record-keeping: when you submit a form, we record technical information including your IP address, browser user-agent, and the date and time, which we use to operate the site, keep a record of your request, and prevent spam and abuse. Usage analytics: we collect anonymous usage data — page views, site performance metrics (Core Web Vitals), and client-side error diagnostics — sent from your browser via a first-party analytics beacon. To count unique visits without cookies, we derive a privacy-preserving hash from your IP address and browser user-agent; we do not retain your raw IP address for analytics and do not use analytics to personally identify you.

Our analytics is first-party only and sets no third-party tracking cookies. Your browser’s local storage holds your privacy consent choice and your per-provider embedded-content choices, so we do not have to ask you again. You can clear this data at any time in your browser settings.

Some pages can include content from other services — for example an interactive map (Google Maps), a video (YouTube in privacy-enhanced mode, or Vimeo), an appointment scheduler, or a giving/donation form. This content loads only after you choose to view it: until you select the load button, nothing is requested from the provider and no provider cookies are set. Once you choose to load it, the provider may set cookies and process your IP address under its own privacy policy, and we remember your choice for that provider in your browser so you are not asked again. You can clear that choice at any time in your browser settings.

Where EU, EEA, UK, or Swiss data-protection law applies, we rely on these legal bases to process your information: your consent (for analytics where required, and for marketing communications); performance of a contract (to process and fulfil your orders, bookings, and requests); our legitimate interests (to secure the site, prevent fraud and abuse, and understand and improve how the site is used); and compliance with our legal obligations. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.

We use the information we collect to provide and improve our services, process and fulfil transactions and requests, send communications you ask for, maintain the security of the site, and comply with our legal obligations.

We do not sell or share your personal information for cross-context behavioral advertising. We share data only with providers that process it on our behalf under data-processing agreements. The categories of provider we use are: website hosting, content delivery, security and bot protection, and analytics ingestion; transactional email — the notifications sent when you submit a form or place an order; infrastructure and developer tooling — the build, deployment, backup and operational systems that run this website on our behalf. A current list of the individual providers behind these categories is available on request — contact us using the details in this policy. Where the business uses a customer-communications service, contact form and booking submissions and completed order details (name, contact details, booking information, and the order reference and total) may also be processed by a customer-relationship-management platform acting on the business's behalf, under the same no-marketing-sharing commitments described in this policy.

The service providers described above operate infrastructure in more than one country, so your information may be processed outside your own country, including in the United States and in the European Union. Where personal data is transferred out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (or the UK equivalent), or transfers to countries recognized as providing an adequate level of protection.

We keep personal information only for as long as necessary for the purposes described in this policy. As a general guide, we retain order and transaction records for as long as required by applicable tax and accounting law (often several years); contact-form and enquiry messages for up to 24 months unless you ask us to delete them sooner; and analytics data in aggregated or pseudonymized form. When information is no longer needed, we delete or anonymize it.

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

Visitors in the EU, EEA, UK, and Switzerland are asked to opt in before any analytics runs. Visitors in the United States can opt out at any time using the "Your Privacy Choices" control on this site; visitors elsewhere may opt out as well. We honor the Global Privacy Control (GPC) and Do Not Track browser signals — when present, analytics is disabled automatically.

Depending on where you live, you have rights over your personal information, which may include the right to access it, correct it, delete it, receive a copy, restrict or object to certain processing, and withdraw consent. To exercise any of these rights, email us at hello@restaurant.com or call us at (415) 555-0123; we will respond within the time required by applicable law and will not discriminate against you for exercising your rights. If you are in the EU, EEA, UK, or Switzerland and believe we have not handled your data properly, you also have the right to lodge a complaint with your local data protection supervisory authority.

What we collect. We may collect these categories of personal information: identifiers (such as your name, email address, phone number and IP address) and internet or other electronic activity (such as analytics). We collect it directly from you and automatically from your device, for the purposes described above, and we disclose it only to the categories of service provider described above. What we do not do. We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use it for automated decision-making or profiling. We do not use sensitive personal information for any secondary purpose, so there is nothing here for a request to limit the use of sensitive personal information to restrict. What you can ask for. Whether or not a privacy law in your state applies to a business our size, we will honor a request to know what we hold about you, to receive a copy of it, to correct it, or to delete it — and we will not treat you differently for asking. To make a request, email us at hello@restaurant.com or call us at (415) 555-0123. We honor Global Privacy Control (GPC) signals as an opt-out, and you can opt out of analytics at any time using the "Your Privacy Choices" control on this site.

This site is not directed to children, and we do not knowingly collect personal information from children under 16 (or the minimum age of digital consent in your country), and not from children under 13 in the United States. If you believe a child has provided us with personal information, please contact us and we will delete it.

This Privacy & Cookie Policy, and any dispute arising from it, is governed by the laws of the jurisdiction in which our business operates, without regard to conflict-of-laws rules, and without limiting any mandatory consumer-protection rights you have under the law of your own country or state.

We may update this policy from time to time. When we do, we will post the updated version here and revise the "last updated" date shown above; where changes are significant, we will take reasonable steps to highlight them.

If you have questions about this Privacy & Cookie Policy or wish to exercise your privacy rights, you can reach us by email at hello@restaurant.com, by phone at (415) 555-0123, or by post at 123 Culinary Street, San Francisco, CA 94102, San Francisco, CA. You can also use the form on our Contact page.