Inglorious Bagels (“we,” “us,” or “our”) operates ingloriousbagels.com (the “Site”). This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data.
1. Information We Collect
Information you give us
- Contact form submissions — your name, email, and any message you choose to send us.
- Newsletter sign-ups — the email address you submit so we can send you discounts, new menu drops, and event announcements.
- Order information — online orders are handled by Toast POS on their platform; we do not receive or store your payment details.
Information collected automatically
- Essential cookies — anti-forgery token and basic session state. Required for the Site to function.
- Server logs — IP address, browser type, pages visited, referrer. Used for security and debugging; retained for 90 days, then deleted.
- Optional cookies — functional, analytics (Google Analytics), and marketing cookies only run after you consent via our cookie banner.
2. How We Use Your Information
- To run the Site and keep it secure.
- To respond to inquiries you send via the contact form.
- To process online orders (via Toast POS).
- To send you marketing email if you sign up for our newsletter (you can unsubscribe at any time via the link in any email).
- With your consent, to understand how the Site is used (analytics).
- To comply with legal obligations.
3. How We Share Your Information
We don't sell your personal information. We share information only with the service providers that make the Site work:
- Toast POS — online ordering. Toast handles your order details, payment, and any account you create with them. See Toast's privacy policy.
- Microsoft Azure — web hosting. Azure stores Site files and processes traffic on our behalf. See Microsoft's privacy statement.
- Mailchimp (Intuit) — newsletter delivery and marketing email. If you sign up for our discount list, your email address is stored on Mailchimp's servers. See Mailchimp's privacy notice.
- Google Analytics — aggregate Site usage analytics. Only loads after you grant analytics consent. See Google's privacy policy.
- Cloudflare Turnstile — bot protection on the contact form. Cloudflare receives your IP address and browser environment to score the request.
We may also disclose information when required by law, to enforce our terms, or to protect the safety of our users.
4. Cookies & Tracking
We use the cookie categories described above. Manage your preferences at any time via the Cookie Preferences link in our footer.
5. Your Rights — EU/UK (GDPR)
If you're in the European Economic Area or United Kingdom, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion (“right to be forgotten”).
- Restrict or object to processing.
- Request a copy of your data in portable form.
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at info@ingloriousbagels.com.
6. Your Rights — California (CCPA / CPRA)
California residents have the right to:
- Know what personal information we collect, use, disclose, and sell or share.
- Access and receive a copy of your personal information.
- Delete your personal information.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of your personal information.
- Limit use of sensitive personal information.
- Non-discrimination — we won't deny service or charge more if you exercise your rights.
Do Not Sell or Share My Personal Information
We do not sell your personal information. To opt out of sharing for targeted advertising (if we ever enable it), click Cookie Preferences and turn off Marketing.
We also honor the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we automatically treat it as an opt-out of any sharing or sale of personal information, as required under California law.
7. Data Retention
We keep personal information only as long as necessary for the purposes described above or as required by law:
- Newsletter subscribers — until you unsubscribe (one-click via any email we send) or request removal.
- Contact form messages — up to 24 months for follow-up and support, then deleted unless retention is required by law.
- Server logs — 90 days, then deleted.
- Analytics data — subject to Google Analytics' default retention (currently 14 months at the property level).
You may request deletion of any personal information we hold about you at any time by emailing info@ingloriousbagels.com.
8. Security
We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is 100% secure, but we work to keep your data safe.
9. Children's Privacy
This Site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
10. Changes to This Policy
We may update this policy from time to time. If we make material changes, we'll update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Site after changes constitutes acceptance of the revised policy.
11. Contact
Questions about this policy or your personal information? Reach us at:
- Email: info@ingloriousbagels.com
- Phone: (760) 444-0434
- Mail: Inglorious Bagels, 6955 El Camino Real, Suite 105, Carlsbad, CA 92009, USA