Privacy Policy

1. Scope of this Policy

This Privacy Policy describes how The Crooked Cup (“The Crooked Cup,” “we,” “us” or “our”) collects, uses and discloses personal information when you visit our Website, place an order, contact us, request catering or private-event information, apply for a position, participate in a promotion or loyalty opportunity, or otherwise interact with us online.

“Personal information” means information that identifies, relates to or can reasonably be linked with a person or household. It does not include information that has been aggregated or deidentified so that it cannot reasonably identify you.

This Policy does not govern the independent practices of a third-party ordering, payment, delivery, social-media or other provider. Please review the privacy notice presented by that provider.

2. Information we collect

Information you provide

Depending on how you interact with us, we may collect:

• Contact information: name, email address, telephone number and mailing or delivery address.
• Order information: selected products, customizations, pickup or delivery details, transaction amount, purchase history and receipt information.
• Payment-related information: payment status, card type, last four digits, transaction identifier and related records supplied by our payment provider. Complete payment-card information is generally entered directly into the provider’s system rather than stored by The Crooked Cup.
• Account, gift-card or loyalty information: login or profile details, reward activity, gift-card information and communication preferences, if those features are offered.
• Communications: messages, feedback, reviews and information included in contact, catering, private-event or customer-service requests.
• Dietary information: allergies, dietary preferences or special requests that you choose to provide in connection with an order or event.
• Employment information: resume, work history, availability and other information voluntarily submitted with an application.
• Promotion information: information needed to administer a giveaway, survey, discount or other promotion.

Information collected automatically

When you use the Website, we and our service providers may automatically collect technical and usage information such as:

• Internet Protocol address and approximate location derived from it.
• Browser type, device type, operating system, language and referring page.
• Pages viewed, links selected, visit dates, session duration and general interaction data.
• Cookie identifiers and similar technical information used for security, preferences, analytics or advertising, depending on the tools enabled.

Information received from others

We may receive information from ordering and payment providers, loyalty or gift-card platforms, delivery services, website hosts, analytics providers, social networks and other vendors that support our operations. We may also receive information that you make public, such as a public review or social-media interaction.

3. How we use information

We may use personal information to:

• Process orders, payments, refunds, gift cards and loyalty activity.
• Prepare products and provide pickup, delivery, catering or private-event services.
• Send order confirmations, receipts, service notices and requested information.
• Respond to questions, feedback, complaints and customer-service requests.
• Maintain customer preferences and improve future interactions.
• Operate, secure, troubleshoot, measure and improve the Website and our services.
• Prevent fraud, misuse, security incidents and other unlawful activity.
• Send marketing communications when permitted by law and consistent with your choices.
• Review employment applications and communicate with applicants.
• Comply with legal, tax, accounting, food-safety and recordkeeping obligations.
• Establish, exercise or defend legal claims and enforce our Terms of Service.

4. How we disclose information

We may disclose personal information in the following circumstances:

• Service providers: vendors that provide website hosting, forms, email, analytics, online ordering, payments, delivery, gift cards, loyalty tools, marketing, data storage, security and technical support.
• Payment and financial participants: payment processors, card networks, banks and fraud-prevention providers involved in a transaction.
• Professional advisers: accountants, attorneys, insurers and other advisers when reasonably necessary.
• Legal and safety purposes: government authorities or other parties when required by law or reasonably necessary to protect rights, safety, property, customers, employees or the public.
• Business transactions: parties involved in an actual or proposed sale, merger, financing, reorganization or transfer of some or all of the business.
• At your direction: another person or organization when you ask us or consent to the disclosure.

We may disclose aggregated or deidentified information that does not reasonably identify you.

We do not sell personal information for money. We do not knowingly use personal information for profiling that produces legal or similarly significant decisions. If our practices change or applicable law treats a particular advertising activity as a “sale,” “sharing” or targeted advertising, we will provide any notice and choice required by law.

5. Online ordering and payment providers

Online orders and payments may be handled by Square or another provider identified during checkout. The provider may collect contact, transaction, payment, device and fraud-prevention information directly from you. Its privacy notice and terms govern its independent processing.

The Crooked Cup generally receives the information needed to fulfill and support the transaction, such as your name, contact information, order details, payment status, transaction identifier and limited card details. We do not need your card security code to prepare an order, and you should never send complete payment-card information through email or a general website form.

6. Cookies, analytics and similar technologies

Cookies are small files placed on your browser or device. The Website and its service providers may use cookies, pixels, tags, local storage and similar technologies for the purposes below.

You can configure most browsers to block or delete cookies. Blocking necessary cookies may prevent parts of the Website or online checkout from working correctly. Browser “Do Not Track” settings are not interpreted consistently across the industry. We process legally recognized opt-out signals when required and technically supported by the tools in use.

7. Marketing communications

If you subscribe to promotional emails or text messages, we may use the contact information you provide to send offers, news and updates. You may unsubscribe from promotional emails using the link in the message and may opt out of marketing texts by replying STOP, when applicable.

Opting out of marketing does not prevent transactional or service messages, such as order confirmations, receipts, responses to your inquiry or important notices about a service you requested.

8. How long we retain information

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including completing transactions, maintaining appropriate business and tax records, providing requested services, resolving disputes, preventing fraud and complying with law.

Retention periods vary depending on the type of information, the service involved and legal requirements. When information is no longer reasonably needed, we may delete it, deidentify it or retain it only as required or permitted by law. Third-party providers apply their own retention schedules to information they control.

9. Information security

We use reasonable administrative, technical and physical safeguards designed to protect personal information. We also rely on specialized providers for services such as hosting and payment processing.

No website, transmission method or storage system can be guaranteed completely secure. You should use caution when sending information online and should not transmit passwords, complete payment-card numbers, government identification numbers or other highly sensitive information through ordinary email or general forms.

10. Your choices and privacy requests

Depending on your location and applicable law, you may have the right to request access to, correction of or deletion of certain personal information; obtain a portable copy; or opt out of certain processing.

To make a request, email info@thecrookedcup.com with the subject “Privacy Request.” Describe the request and provide enough information for us to identify the relevant records. We may verify your identity before completing a request and may retain information necessary to document and comply with it.

An authorized agent may submit a request where permitted by law. We may require proof of the agent’s authority and may ask you to verify your identity directly. Rights may be limited by exceptions in applicable law, including where information must be retained for transactions, security, legal obligations or legal claims.

11. Colorado privacy rights

If the Colorado Privacy Act applies to our processing and you are a Colorado resident acting in an individual or household context, you may have rights to:

• Confirm whether we process your personal data and access that data.
• Correct inaccuracies in your personal data.
• Delete certain personal data.
• Obtain a portable copy of certain personal data.
• Opt out of the sale of personal data, targeted advertising and certain profiling.

Submit a request using the process in Section 10. If we deny a request, you may appeal by replying to our decision or emailing us with the subject “Privacy Appeal” and explaining why you believe the decision should be reconsidered. We will respond within the time required by applicable law.

If an appeal is denied, you may contact the Colorado Attorney General. These rights do not apply to information or circumstances excluded from the law, including certain employment-context information.

12. Children’s privacy

The Website and online ordering services are not directed to children under 13, and we do not knowingly collect personal information directly from a child under 13 without appropriate authorization. If you believe a child under 13 has submitted personal information, please contact us so we can review and delete it when required.

13. Third-party links, embeds and services

The Website may contain links to or embedded content from ordering platforms, payment providers, maps, social networks, review sites and other third parties. Clicking a link or interacting with embedded content may allow that provider to collect information directly from your browser or device.

We do not control the privacy or security practices of independent third parties. Review their privacy notices before providing personal information. A link does not mean The Crooked Cup endorses every practice of the linked provider.

14. Business transfers and processing locations

Personal information may be included in a business transaction such as a merger, financing, reorganization, sale or transfer of some or all of The Crooked Cup’s assets, subject to applicable law.

We and our service providers may process information in the United States and other locations where providers operate. Those locations may have privacy laws different from the place where you live.

15. Changes to this Privacy Policy

We may update this Policy to reflect changes in our Website, providers, practices or legal obligations. The updated version will be posted on this page with a revised effective date. If required by law, we will provide additional notice or obtain consent before applying a material change.

16. Contact us

For privacy questions, requests or appeals, contact us using the information below. Please do not include complete payment-card information or other highly sensitive information in your email.