Privacy Policy

1. Introduction

This Privacy Policy explains how [BUSINESS ENTITY NAME](“Carlyle’s Catering,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information when you visit order.carlyles.com or use our catering services (the “Services”). By using the Services you agree to the practices described here.

Our Services are primarily directed at business and consumer customers located in the United States. If you are accessing the Services from outside the United States, including from the European Economic Area or the United Kingdom, please read Section 9 below.

2. Information We Collect

We collect the following categories of information:

• Account & contact information: name, email address, phone number, company name, and billing/delivery addresses you provide when creating an account, placing an order, or requesting a quote.
• Order information: menu selections, event date, guest count, delivery instructions, dietary notes, and order history.
• Payment information: processed directly by our payment processor (Stripe, Inc.). We do not store full card numbers on our systems. We retain limited payment metadata (last four digits, brand, transaction ID) for receipt and fraud-prevention purposes.
• Usage & device data: IP address, browser type, pages viewed, referring URLs, and timestamps, collected through standard server logs and analytics.
• Communications: the contents of emails, chat messages, and phone records when you contact us.

3. How We Use Information

We use the information we collect to:

• provide, fulfill, and deliver catering orders;
• process payments, refunds, and chargebacks through Stripe;
• send transactional messages (order confirmations, delivery updates, receipts, and policy updates);
• respond to inquiries, quote requests, and customer-support tickets;
• operate, secure, and improve the Services, including preventing fraud and abuse;
• comply with legal obligations and enforce our Terms of Service.

We do not sell personal information, and we do not use personal information for cross-context behavioral advertising.

4. Sharing & Disclosure

We share information only as needed to operate the Services:

• Service providers (payment processing, infrastructure, email delivery, analytics, identity, and PDF generation) acting under written contracts that limit use of personal information to the services they provide to us.
• Legal & safety:when required by law, subpoena, or to protect the rights, property, or safety of Carlyle’s Catering, our customers, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to customary confidentiality protections.

5. Cookies & Similar Technologies

We use a small number of strictly-necessary cookies (for authentication and security) and basic, aggregated analytics cookies. We do not currently use advertising cookies. You can control cookies through your browser settings; disabling strictly-necessary cookies may break parts of the Services.

6. Data Retention

We retain personal information for as long as your account is active, as needed to provide the Services, and as required to comply with our legal, tax, and accounting obligations (typically up to seven years for order and payment records). When information is no longer needed, we delete or de-identify it.

7. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), least-privilege access controls, and audit logging. No system is perfectly secure; you use the Services at your own risk.

8. Your Choices & U.S. State Rights

You may update or correct account details by signing in, or by emailing us at the address below. Depending on where you live (including California, Colorado, Connecticut, Virginia, and other U.S. states with consumer-privacy laws), you may have the right to:

• request access to, or a copy of, the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of personal information;
• opt out of the “sale” or “sharing” of personal information (we do not sell or share personal information as those terms are defined under U.S. state law); and
• appeal a denial of a privacy request, where required by state law.

To exercise any of these rights, email us using the contact details in Section 10. We will verify your request using the information already on file.

9. EEA / UK Visitors

For visitors located in the European Economic Area or the United Kingdom: we process personal information on the lawful bases of (a) contract performance, (b) our legitimate interests in operating and securing the Services, and (c) your consent where required. You have the rights of access, rectification, erasure, restriction, portability, and objection under the EU/UK GDPR. You may also lodge a complaint with your local supervisory authority. We are not currently established in the EEA or UK and transfer data to the United States under standard contractual safeguards where applicable.

10. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by emailing account holders.

12. Contact Us

Questions, requests, or complaints about this Privacy Policy should be sent to: