Privacy Policy

This Privacy Policy describes how Tatte ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at tatte-food.click, place orders, use our services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal information in a transparent, fair, and lawful manner.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please discontinue your use of our website and services immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a revised effective date. Your continued use of our website and services after the posting of any changes constitutes your acceptance of those changes.

1. Who We Are

Tatte is a food business operating in the United States. We are dedicated to providing high-quality food products and services to our customers. For the purposes of this Privacy Policy, Tatte acts as the data controller responsible for your personal information.

For any questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact us using the details provided in Section 14 of this policy.

2. Information We Collect

We collect various types of information in connection with your use of our website, services, and interactions with our business. The categories of information we collect include the following:

2.1 Personal Identification Information

When you register an account, place an order, subscribe to our newsletter, contact us, or otherwise use our services, we may collect personal identification information, including but not limited to:

• Full name
• Email address
• Phone number
• Postal address and delivery address
• Date of birth (where required for age verification purposes)
• Username and password (stored in encrypted form)
• Profile photo or avatar (if voluntarily provided)

2.2 Payment and Financial Information

When you make a purchase through our website, we collect payment-related information necessary to process your transaction. This may include:

• Credit or debit card details (processed securely through third-party payment processors)
• Billing address
• Transaction history and order details
• Payment method preferences

Please note that we do not store your full credit or debit card numbers on our servers. All payment processing is handled by reputable, PCI-DSS-compliant third-party payment processors.

2.3 Usage Data and Interaction Information

We automatically collect certain information about how you interact with our website and services. This usage data may include:

• Pages visited and time spent on each page
• Links clicked and features used
• Search queries entered on our website
• Items added to cart or wish lists
• Order history and browsing behavior on our platform
• Frequency and duration of visits to our website
• Referral source (how you arrived at our website)

2.4 Device and Technical Information

When you visit our website, we may automatically collect certain technical information from your device, including:

• IP address
• Browser type and version
• Operating system and device type
• Screen resolution
• Language settings
• Time zone settings
• Unique device identifiers
• Mobile network information (if applicable)

2.5 Communications and Correspondence

If you contact us directly via email, phone, or through any contact form on our website, we may collect and retain records of your communications, including:

• The content of your messages or inquiries
• Email correspondence
• Customer service records and notes
• Feedback, reviews, and survey responses

2.6 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. Please refer to Section 9 of this Privacy Policy for detailed information about our use of cookies and how you can manage your cookie preferences.

2.7 Information from Third Parties

We may also receive information about you from third parties, including:

• Social media platforms (if you connect your social media account or interact with our social media pages)
• Analytics providers
• Advertising partners
• Payment processors
• Delivery and logistics partners

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. Specifically, we use your information for the following purposes:

3.1 Providing and Managing Our Services

• Processing and fulfilling your orders, including coordinating delivery or pickup
• Managing your account and providing you with access to our platform
• Processing payments and preventing fraudulent transactions
• Communicating with you about your orders, inquiries, and requests
• Providing customer support and resolving disputes
• Sending order confirmations, receipts, and delivery notifications

3.2 Improving Our Website and Services

• Analyzing usage patterns and trends to improve our website's functionality and user experience
• Conducting research and development to enhance our food offerings and services
• Testing new features, products, and services
• Diagnosing and fixing technical issues on our website
• Monitoring website performance and security

3.3 Marketing and Promotional Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required)
• Personalizing marketing messages based on your preferences and behavior
• Administering loyalty programs, contests, promotions, and surveys
• Displaying targeted advertisements on our website and third-party platforms
• Retargeting campaigns based on your browsing and purchase history

You have the right to opt out of marketing communications at any time. Please see Section 11 for more information about your rights and how to exercise them.

3.4 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal obligations
• Responding to legal requests, court orders, and government inquiries
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Tatte, our customers, and others
• Preventing fraud, abuse, and other harmful or illegal activities

3.5 Legal Bases for Processing (Under Applicable Law)

Under applicable United States privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act), we process your personal information based on the following lawful grounds:

• Performance of a Contract: To fulfill your orders and provide you with the services you have requested
• Legitimate Business Interests: To improve our services, prevent fraud, and conduct marketing activities
• Legal Obligation: To comply with applicable laws and regulations
• Consent: Where you have given us explicit consent to process your information for specific purposes, such as receiving marketing communications

4. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our website and delivering our services. These service providers may have access to your personal information only to the extent necessary to perform their functions on our behalf. They include:

• Payment Processors: To securely process your payments
• Delivery and Logistics Partners: To fulfill and deliver your orders
• Cloud Hosting and Technology Providers: To host and maintain our website and data infrastructure
• Email Marketing Platforms: To send you promotional and transactional communications
• Analytics Providers: To help us understand website usage and improve our services (e.g., Google Analytics)
• Customer Support Tools: To manage and respond to your inquiries
• Fraud Prevention Services: To detect and prevent fraudulent transactions

All third-party service providers are required to maintain the confidentiality and security of your personal information and are contractually prohibited from using it for any purpose other than providing services to us.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or other legal process
• Respond to lawful requests from government authorities, including law enforcement agencies
• Protect and defend our legal rights or property
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our services or the public

4.3 Business Transfers

In the event that Tatte undergoes a merger, acquisition, reorganization, bankruptcy, dissolution, or sale of all or part of its assets, your personal information may be transferred to the acquiring entity or successor organization. We will notify you of any such transfer through a notice on our website or via email, and you will have the opportunity to exercise your rights with respect to your personal information.

4.4 With Your Consent

We may share your personal information with third parties when you have given us your explicit consent to do so, or when you direct us to share your information with specific third parties.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

5.1 Technical Safeguards

• Encryption of data in transit using Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols
• Encryption of sensitive data at rest, including passwords and payment information
• Secure, PCI-DSS-compliant payment processing through trusted third-party processors
• Regular security testing, including vulnerability assessments and penetration testing
• Firewalls, intrusion detection systems, and access controls
• Multi-factor authentication for access to sensitive systems

5.2 Administrative Safeguards

• Limiting access to personal information to authorized employees and contractors on a need-to-know basis
• Regular employee training on data privacy and security best practices
• Data handling policies and procedures that comply with applicable laws
• Data breach response plan to address and mitigate the impact of any security incidents

5.3 Important Disclaimer

In the event of a data breach that is likely to result in harm to your rights and freedoms, we will notify you and, where required, the relevant authorities, in accordance with applicable law, including the requirements of the FTC Act and applicable state breach notification laws.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Our data retention practices are as follows:

When personal information is no longer needed for its intended purpose and no legal obligation requires its further retention, we will securely delete or anonymize the information in accordance with our data disposal procedures.

7. Your Privacy Rights

Depending on your state of residence and applicable law, you may have various rights regarding your personal information. We are committed to honoring these rights in accordance with applicable United States privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable state privacy laws.

7.1 Rights Available to All Users

• Right to Know / Right of Access: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which we use it, and the third parties with whom we share it.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete the personal information we have collected about you, subject to certain exceptions (such as where we need to retain data to comply with a legal obligation or complete a transaction you requested).
• Right to Portability: You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to transmit that information to another controller where technically feasible.
• Right to Opt-Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time. You can do so by clicking the "unsubscribe" link in any marketing email, or by contacting us directly at [email protected].

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the CCPA/CPRA, including:

• Right to Know About Sale or Sharing of Personal Information: You have the right to know whether we sell or share your personal information and to whom.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell your personal information as defined under the CCPA/CPRA.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of your sensitive personal information to only those purposes necessary to provide the services you requested.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide you with a different level or quality of service because you exercised your privacy rights.

7.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a request to us using one of the following methods:

• Email: [email protected]
• Website: tatte-food.click (via our contact form)

We will verify your identity before processing your request to protect the security of your personal information. We aim to respond to all verifiable consumer requests within 45 days of receipt. If we require more time, we will inform you of the reason and extension period in writing. We will not charge a fee for processing your request, unless your request is manifestly unfounded or excessive.

8. Children's Privacy

In compliance with the Children's Online Privacy Protection Act (COPPA) and other applicable laws, we do not knowingly collect personal information from children under the age of 13. If we discover that we have inadvertently collected personal information from a child under 13, we will promptly delete that information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected], and we will take steps to remove that information from our systems as quickly as possible.

We also strongly encourage parents and guardians to monitor their children's online activities and to teach children about safe internet practices. If you believe a minor has used our website or services, please contact us so we can address the situation appropriately.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website, analyze website traffic and usage, and deliver personalized content and advertising. This section provides a brief overview of our cookie practices.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the operation of our website and cannot be disabled. They enable core functionality such as security, network management, and account access.
• Performance and Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use tools such as Google Analytics for this purpose.
• Functional Cookies: These cookies allow our website to remember choices you make (such as your language preference or region) to provide enhanced, personalized features.
• Marketing and Advertising Cookies: These cookies track your browsing activity across websites to deliver targeted advertisements that are relevant to your interests. They may be set by us or by trusted third-party advertising partners.

9.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings at any time. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before cookies are stored. Please note that disabling certain cookies may affect the functionality of our website and your ability to use some of its features.

You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance's opt-out portal at optout.aboutads.info or the Network Advertising Initiative's opt-out page at optout.networkadvertising.org.

For detailed information about the specific cookies we use, their purposes, and their retention periods, please refer to our Cookie Policy, which is available on our website.

10. International Data Transfers

Tatte operates primarily within the United States. However, some of our third-party service providers and technology partners may be located in other countries, which means that your personal information may be transferred to, stored in, and processed in countries outside of the United States.

When we transfer your personal information internationally, we take appropriate steps to ensure that your information receives an adequate level of protection, consistent with the requirements of applicable law. These steps may include:

• Entering into data transfer agreements with third parties that incorporate standard contractual clauses or other appropriate safeguards
• Transferring data only to countries that have been recognized as providing an adequate level of data protection
• Implementing technical and organizational measures to protect transferred data

By using our website and services and providing us with your personal information, you acknowledge and consent to the potential transfer of your information to countries outside of the United States, including countries that may have different data protection laws than those in your country of residence.

11. Your Communication Preferences and Opt-Out Rights

We may send you the following types of communications:

11.1 Transactional Communications

We send order confirmations, shipping notifications, receipts, and other service-related communications that are necessary for the performance of our contract with you. You cannot opt out of transactional communications while you have an active account or pending order with us, as these are essential to providing our services.

11.2 Marketing Communications

With your consent (where required by law), we may send you promotional emails, newsletters, special offers, and information about new products and services. You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email we send you
• Contacting us at [email protected] with your opt-out request
• Updating your communication preferences in your account settings (if applicable)

Please allow up to 10 business days for your opt-out request to be processed. Even after opting out of marketing communications, you will continue to receive transactional and service-related emails.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Tatte. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices or content of any third-party websites or services.

We encourage you to review the privacy policies of any third-party websites or services you visit through links on our website. The inclusion of a link on our website does not constitute an endorsement of the linked website or its privacy practices.

13. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to websites. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our website does not currently respond to DNT signals from web browsers. However, you can manage your tracking preferences through our cookie settings and the opt-out mechanisms described in Section 9 of this Privacy Policy.

14. How to File a Complaint

If you have concerns about how we handle your personal information, we encourage you to contact us first using the contact information provided below. We take all privacy complaints seriously and will work to resolve your concern in a timely and effective manner.

14.1 Filing a Complaint with Us

To file a complaint or raise a concern about our privacy practices, please contact us at:

Please include your full name, contact information, and a detailed description of your concern so that we can address it appropriately. We aim to acknowledge all complaints within 5 business days and to provide a substantive response within 30 days of receipt.

14.2 Filing a Complaint with a Regulatory Authority

If you are a California resident and believe we have violated your rights under the CCPA/CPRA, you may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency (CPPA): cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

Additionally, if you believe our data processing practices violate the FTC Act's prohibition on unfair or deceptive acts or practices, you may file a complaint with the Federal Trade Commission (FTC):

• FTC Complaint Assistant: reportfraud.ftc.gov
• FTC Website: www.ftc.gov

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. Our team is available to assist you with any privacy-related matters.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on our website at tatte-food.click
• Update the "Last Updated" date at the top of this page
• Notify registered users by email where the changes are significant
• Display a prominent notice on our website for a reasonable period following the update

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our website and services following the posting of any changes to this Privacy Policy constitutes your acceptance of those changes. If you do not agree with the updated Privacy Policy, you should discontinue your use of our website and services and, if applicable, close your account.