Introduction
Welcome to East End Bagel ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website eastendbagel.com, use our services, or interact with us in any way.
By accessing or using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access our website or use our services.
We Protect Your Data
Industry-standard encryption and security measures
We Never Sell Data
Your personal information is never sold to third parties
You Control Your Info
Access, update, or delete your data anytime
Transparent Communication
We'll always let you know how we use your data
Information We Collect
We collect information that you provide directly to us, information we collect automatically when you use our services, and information from third-party sources. The types of information we collect depend on how you interact with us.
2.1 Personal Information You Provide
We may collect the following personal information when you place an order, create an account, subscribe to our newsletter, or contact us:
- Identity Data: First name, last name, username or similar identifier
- Contact Data: Billing address, shipping address, email address, phone numbers
- Payment Data: Credit card details, payment information (processed securely through our payment providers)
- Account Data: Username, password, purchase history, preferences, loyalty program information
- Communication Data: Records of correspondence when you contact us, feedback, reviews
- Order Data: Order details, delivery instructions, dietary preferences, special requests
2.2 Information Collected Automatically
When you visit our website, we may automatically collect certain information about your device and usage, including:
- Device Information: IP address, browser type and version, device type, operating system
- Usage Data: Pages visited, time spent, referring URLs, click patterns
- Location Data: General geographic location (for delivery availability)
- Cookies & Similar Technologies: See Section 5 for details
2.3 Information from Third Parties
We may receive information about you from third parties, including:
- Payment Processors: Transaction confirmations and payment status
- Delivery Partners: Delivery confirmation and status updates
- Social Media Platforms: Information when you interact with us on social media
- Marketing Partners: Information from joint promotions or campaigns
| Data Type | Purpose | Retention |
|---|---|---|
| Order Information | Process and fulfill your orders | 7 years (tax requirements) |
| Contact Information | Customer service, communications | Until account deletion |
| Payment Information | Process payments securely | Not stored on our servers |
| Marketing Preferences | Send relevant promotions | Until preference change |
| Technical Data | Improve website experience | 26 months |
How We Use Your Information
We use the information we collect for the following purposes. We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason compatible with the original purpose.
3.1 Primary Uses
- Order Processing: To process, fulfill, and deliver your orders, including sending order confirmations and updates
- Customer Service: To respond to your inquiries, resolve issues, and provide support
- Account Management: To manage your account, process payments, and maintain your order history
- Communication: To send you important information about your orders, account, or our services
- Marketing: To send you promotional materials, special offers, and newsletters (with your consent)
- Service Improvement: To analyze usage patterns and improve our website, products, and services
- Security: To protect against fraud, unauthorized access, and other security threats
- Legal Compliance: To comply with legal obligations and enforce our terms
3.2 Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract Performance: Processing necessary to fulfill our contract with you (e.g., order processing)
- Legitimate Interests: Processing necessary for our legitimate business interests (e.g., service improvement)
- Consent: Processing based on your explicit consent (e.g., marketing communications)
- Legal Obligation: Processing required to comply with legal requirements (e.g., tax records)
Information Sharing & Disclosure
We do not sell your personal information to third parties. We may share your information only in the limited circumstances described below:
4.1 Service Providers
We share information with trusted third-party service providers who help us operate our business, including:
- Payment Processors: To securely process your payments (e.g., Stripe, PayPal)
- Delivery Partners: To fulfill delivery orders (e.g., DoorDash, UberEats, local couriers)
- Technology Providers: Website hosting, analytics, email services
- Marketing Services: Email marketing platforms, loyalty program providers
All service providers are contractually obligated to protect your information and use it only for the specified purposes.
4.2 Legal Requirements
We may disclose your information when required by law, such as:
- To comply with a legal obligation, court order, or government request
- To protect the rights, property, or safety of East End Bagel, our customers, or others
- In connection with a business transaction (merger, acquisition, sale of assets)
- To enforce our Terms of Service or other agreements
4.3 With Your Consent
We may share your information with third parties when you give us explicit consent to do so.
Cookies & Tracking Technologies
We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies are small text files stored on your device that help us provide and improve our services.
5.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for website functionality (shopping cart, login) | Session |
| Functional Cookies | Remember your preferences (language, location) | 1 year |
| Analytics Cookies | Track website usage and performance | 26 months |
| Marketing Cookies | Deliver personalized advertisements | 1 year |
5.2 Managing Cookies
You can control and manage cookies through your browser settings. Please note that removing or blocking cookies may impact your user experience and some features may not function properly.
- Browser Settings: Most browsers allow you to refuse or accept cookies
- Opt-Out Tools: Use tools like AboutAds or Your Online Choices
- Analytics Opt-Out: Install the Google Analytics Opt-Out Browser Add-on
Data Security
We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction.
6.1 Security Measures
- Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS (HTTPS)
- Payment Security: We use PCI DSS-compliant payment processors; we never store full credit card numbers on our servers
- Access Controls: Employee access to personal data is limited to those who need it for their job functions
- Regular Audits: We conduct regular security assessments and vulnerability scans
- Secure Infrastructure: Our servers are hosted in secure, certified data centers
- Employee Training: All team members receive regular privacy and security training
6.2 Data Breach Protocol
In the unlikely event of a data breach that affects your personal information, we will:
- Investigate the breach immediately
- Notify affected individuals without undue delay
- Notify relevant regulatory authorities as required by law
- Take steps to mitigate the breach and prevent future incidents
Your Rights
Depending on your location, you may have certain rights regarding your personal information. We respect these rights and make it easy for you to exercise them.
🔍 Right to Access
Request a copy of the personal information we hold about you.
✏️ Right to Rectification
Request correction of inaccurate or incomplete information.
🗑️ Right to Erasure
Request deletion of your personal information ("right to be forgotten").
⏸️ Right to Restrict
Request restriction of processing in certain circumstances.
📦 Right to Portability
Receive your data in a structured, machine-readable format.
🚫 Right to Object
Object to processing of your data for specific purposes.
📧 Marketing Opt-Out
Opt out of marketing communications at any time.
🔒 Right to Withdraw Consent
Withdraw consent at any time where we relied on it to process your data.
7.1 How to Exercise Your Rights
To exercise any of these rights, please contact us using the details in Section 13. We will respond to your request within 30 days. Please note that some rights may be subject to exceptions under applicable law.
7.2 Account Management
If you have an account with us, you can also:
- View and update your personal information in your account settings
- Manage your marketing preferences
- Download your order history
- Request account deletion through your account settings or by contacting us
Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to delete that information as quickly as possible.
Third-Party Links & Services
Our website may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you visit or use.
We are not responsible for the privacy practices or content of third-party websites or services, including but not limited to:
- Delivery partner apps (DoorDash, UberEats, Grubhub)
- Social media platforms (Instagram, Facebook, TikTok)
- Payment processors
- Review platforms
- Any other linked websites
Your use of any third-party website or service is subject to the privacy policy of that third party.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
| Data Category | Retention Period | Reason |
|---|---|---|
| Order Records | 7 years | Tax and legal requirements |
| Account Information | Until account deletion + 30 days | Service provision |
| Marketing Data | Until consent withdrawn | Marketing purposes |
| Communication Records | 3 years | Customer service, legal |
| Website Analytics | 26 months | Service improvement |
| Cookie Data | Varies (see Section 5) | Website functionality |
When personal information is no longer needed, we will securely delete or anonymize it. Some information may be retained in backup systems for disaster recovery purposes but will be deleted according to our backup retention schedule.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and its amendments. These rights include:
11.1 Right to Know
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months.
11.2 Right to Delete
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions.
11.3 Right to Opt-Out of Sale
We do not sell your personal information. However, if we were to do so in the future, you would have the right to opt out of the sale of your personal information.
11.4 Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights.
11.5 How to Exercise California Rights
To exercise your California privacy rights, please contact us at [email protected] or call us at (212) 555-0100. You may also designate an authorized agent to make a request on your behalf.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will:
- Update the "Last Updated" date at the top of this page
- Notify you through prominent notice on our website
- For significant changes, send an email to the address associated with your account
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our services after any changes constitutes acceptance of those changes.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please don't hesitate to contact us. We're here to help.
Privacy Questions?
Our Privacy Officer is here to help with any questions or concerns about your data.
Our Privacy Officer
East End Bagel — Privacy Officer
123 East End Avenue
New York, NY 10028
United States
Response Time
We aim to respond to all privacy-related inquiries within 5 business days. For urgent matters, please call us directly.
Data Protection Authority
If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the relevant data protection authority:
- United States: Federal Trade Commission (FTC)
- European Union: Your local Data Protection Authority
- California: California Attorney General's Office