Privacy Policy
What we collect when you order or message us, why we need it, who else sees it, and how to get it deleted.
Last updated: 10 September 2026
On this page
1. The short version
We collect the details we need to cook your food and get it to your door: your name, contact details, delivery address, what you ordered and anything you tell us about allergies. We do not sell your data, we do not run advertising trackers, and we never see your card number.
2. What we collect
Information you give us
- Order details — name, email, phone number, delivery point (including building, command or squadron), delivery date and window, dishes ordered, rice or noodle preference, payment method and the payment code issued for the order.
- Notes to the kitchen — anything you write in the notes field, including allergy or dietary information. Health-related details are only ever used to prepare your food safely.
- Messages — the content of contact form submissions, emails, phone calls and catering enquiries.
Information collected automatically
- Server logs from our hosting provider: IP address, browser type, pages requested and timestamps, kept for security and troubleshooting.
- Anti-spam signals captured by our form processor when you submit a form.
We do not ask for and do not want: card numbers, government ID numbers, or any special category data beyond the dietary information you volunteer.
3. Why we use it
| Purpose | Data used | Basis |
|---|---|---|
| Cook and deliver your order | Name, contact, address, order, notes | Performance of a contract |
| Confirmations and driver updates | Email, phone | Performance of a contract |
| Answer your enquiry | Contact form contents | Legitimate interests |
| Prepare food safely | Allergy and dietary notes | Explicit consent |
| Accounting and tax records | Order and invoice records | Legal obligation |
| Prevent fraud and abuse | Logs, anti-spam signals | Legitimate interests |
| Marketing emails | Name, email | Consent, opt-in only |
We do not use your data for automated decision-making or profiling.
4. Forms and Formspree
The order form and contact form on this site are processed by Formspree, a third-party form backend. When you submit a form, the information in it — along with technical data such as your IP address, used for spam filtering — is transmitted to Formspree's servers, stored there, and forwarded to our kitchen inbox.
Formspree acts as a data processor on our behalf. Their handling of that data is governed by their own privacy policy and terms, which we recommend reading if you would like the full technical detail. If you would rather not use the forms at all, you can order or ask a question by phone on (619) 730-8655.
5. Who else sees your data
- Our kitchen and delivery team — the minimum needed to prepare and deliver your order. Drivers see your name, address, phone number and delivery instructions.
- Formspree — form transmission and storage, as described above.
- Our email and hosting providers — who necessarily store messages and serve the website.
- Your payment app — a Zelle, Venmo, Cash App or Apple Pay transfer happens entirely inside your own app. We see only what our account shows us about an incoming payment: the sender name or handle, the amount and the memo code. We never receive or store your card or account numbers.
- Professional advisers and authorities — accountants, or a public authority where we are legally required to disclose.
We never sell your personal data, and we do not share it with advertisers or data brokers.
6. Cookies and analytics
This website does not set advertising or tracking cookies. Any cookies present are strictly necessary ones used by our host or by Formspree's spam protection when you submit a form. Fonts are loaded from Google Fonts, which means your browser makes a request to Google's servers and Google receives your IP address as part of that request.
If we add analytics in future, we will use a privacy-respecting, cookie-free tool and update this page before doing so.
7. How long we keep it
- Order records — kept for as long as tax and accounting law requires, generally seven years.
- Contact form messages — up to 24 months, so we have context if you come back to us.
- Allergy notes — kept with the order record so we can repeat it safely, and deleted on request.
- Marketing subscriptions — until you unsubscribe, plus a short suppression record so we do not email you again by accident.
- Server logs — typically 30 to 90 days.
8. Your rights
Depending on where you live, you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted where we have no ongoing legal reason to keep it;
- object to or restrict certain processing;
- withdraw consent at any time, including for marketing emails;
- receive your data in a portable format;
- complain to your local data protection authority.
To exercise any of these, email privacy@teriboy.com. We will respond within 30 days and will not charge you or treat you differently for asking.
9. Security
The site is served over HTTPS. Access to order records is limited to staff who need it, protected by individual accounts and multi-factor authentication where the tool supports it. Paper prep sheets containing customer names and addresses are destroyed at the end of each service day.
No system is perfectly secure. If a breach ever affects your personal data and creates a real risk to you, we will tell you and the relevant authority without undue delay.
10. Children
Teriboy is not aimed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has given us their details, contact us and we will delete them.
11. Changes to this policy
When this policy changes we update the date at the top of the page. Significant changes — a new processor, a new purpose — will be announced on the site before they take effect.
12. Contact us
Teriboy — Privacy
676 Siena Way, Lemoore, CA 93245
privacy@teriboy.com · (619) 730-8655
Related: Terms of Service · FAQs · Contact us