Privacy Policy

Privacy Policy — The Straw

Last updated: November 21, 2025

This Privacy Policy explains how The Straw (“we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit or place an order at https://thestrawcafe.com (the “Site”) or otherwise interact with our services. By using the Site or placing an order you accept the practices described below.

1. Who we are & contact

The Straw operates a café in Hermitage, Tennessee and an online ordering site at thestrawcafe.com. For privacy questions or requests, contact:
Phone: (615) 852-5285
Email: TheStrawCafe@gmail.com

2. Information we collect

A. Information you provide directly

Name, email address, phone number
Billing & shipping address
Order history and items purchased
Payment information entered at checkout (card number, expiry, CVV) — note: we do not store full card numbers on our servers (see Section 5).

B. Information we collect automatically

IP address, device and browser type, pages visited, referring URL, timestamps, and analytics data (via cookies and similar tech).

C. Information from third parties

Delivery/fulfilment partners (DoorDash, Grubhub, etc.), payment processors, or advertising platforms may provide information to support order fulfillment or advertising. DoorDash and Grubhub links appear on our site.

3. How we use your information

We use personal data to:

Process and fulfill orders and payments.
Communicate order confirmations, updates, and customer service replies.
Improve and personalize the Site and marketing (only if you opt in).
Prevent fraud and comply with legal obligations.

4. Lawful bases (for EU/UK users)

If applicable (for visitors in the EU/UK), we rely on lawful bases such as: contract performance (processing your order), consent (marketing cookies), and our legitimate interests (fraud prevention and site analytics).

5. Payment processing & card data

All payments are processed through third-party, PCI-compliant payment processors. We do not store full credit card numbers or CVV codes on the Site. Your card details are submitted directly to the payment processor and handled under that processor’s privacy and security policies.

6. Cookies & tracking

We use cookies and similar technologies for essential site functionality (cart, login), analytics, and optional marketing. See our Cookie Policy (below) for details.

7. Sharing & disclosures

We may share your information with:

Payment processors and banks (to complete transactions).
Delivery & order partners (DoorDash, Grubhub, third-party couriers) for order fulfilment.
Service providers (hosting, email, customer support).
Law enforcement or if required by law. We do not sell personal data.

8. Data retention

We retain order information and related records for tax and accounting purposes and for as long as necessary to provide services and comply with legal obligations.

9. Your rights

Depending on your jurisdiction you may have the right to: access, correct, delete, or receive a portable copy of your data, or object to certain processing. To exercise rights email TheStrawCafe@gmail.com.

10. Children

The Site is not intended for children under 13. We do not knowingly collect data from children.

11. Security

We use industry standard safeguards (SSL/TLS, secure hosting, PCI-compliant processors). No internet transmission is 100% secure; absolute guarantees are not possible.

12. International transfers

Data may be processed by third parties located outside the user’s country. We use appropriate safeguards required by law.

Email Marketing & Promotions When you provide your email address on our website—for example, to receive a discount, join our mailing list, or complete an online order—we may send you promotional messages, special offers, product updates, and other marketing communications. You may unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in any message or by contacting us at TheStrawCafe@gmail.com. We do not sell or share your email address with third parties for their own marketing.