This is the privacy policy for papabrasa.com, operated by El Tucan Group, LLC(doing business as “Papa Brasa”). We’re a small Maryland restaurant company. We collect what we need, share what we have to, and tell you about it plainly.
What we collect
Right now, the website only collects:
- Your email address, when you give it to us through the “notify me” or “be first in the door” forms. We also record which form you used and the date.
- Anonymous usage datavia a privacy-first, cookieless analytics service. It does not identify you. It tells us things like “menu page loaded in 1.2 seconds” — not who loaded it.
- Standard server logs like IP address and browser type, kept briefly for security and debugging.
Once we open and online ordering is live, we’ll also collect order details, payment information (handled by a PCI-compliant payment processor — we never see your card numbers), and a phone number if you opt into order-ready text messages. We’ll update this page before that goes live.
How we use it
- Send you a one-time email when we open, plus occasional updates if you stay on the list.
- Improve the site (page speed, broken links, what people actually look at).
- Operate the business — when ordering is live: take orders, fulfill them, send order-ready notifications, handle refunds.
We will never sell your information to third parties for advertising. Period.
Who else sees your data
We use third-party services to run the website and the business. They process some of your data on our behalf under their own privacy policies:
- Hosting and content delivery — serves the website and runs cookieless analytics
- Database and storage — keeps your email signup secure
- Backend infrastructure — runs supporting services
When ordering goes live we’ll add a payment processor, an SMS delivery service, an email delivery service, and third-party delivery marketplaces. We may also use AI services to help draft customer-facing replies; a human reviews anything before it’s sent to you.
For a current list of specific service providers and their privacy policies, email privacy@papabrasa.com and we’ll send it to you.
Cookies
Right now this site sets no marketing cookies and no third-party tracking cookies. Our analytics provider is cookieless by design. If we ever change that, we’ll update this section and add a banner before any tracking cookies fire.
Your rights
You can ask us at any time to:
- See what data we have about you.
- Correct anything that’s wrong.
- Delete your data entirely. (For email signups, this means we remove your address from our list and our database.)
- Opt out of marketing emails. Every email we send you will include a one-click unsubscribe link.
Email privacy@papabrasa.com and we’ll handle the request within 30 days.
Maryland, California (CCPA), and EU/UK (GDPR) residents have additional rights under their respective laws. We’ll honor any rights granted to you under those laws — same email above.
Children
This site is not directed at children under 13, and we do not knowingly collect data from anyone under 13. If you think a child has given us their email by mistake, contact us and we’ll delete it.
Security
We use standard industry practices: HTTPS everywhere, service-role separation between the public website and our database, encrypted credentials, audit logging. No system is perfectly secure, but we work to keep your data safe and we’ll tell you promptly if there’s ever a material breach affecting your information.
Changes to this policy
We’ll update this page as the site grows — when ordering goes live, when we add SMS, when we change vendors. The “last updated” date at the top of the page tells you when it changed. For material changes that affect how we use your data, we’ll email everyone on the list before the change takes effect.
Contact
Privacy questions, data requests, or just curious:
El Tucan Group, LLC, a Maryland limited liability company.