Legal

Privacy Policy

Effective date: [Date]

Last updated: [Date]

This is a boilerplate scaffold. It is not legal advice. Have a qualified attorney review and customize this document for your business, the data you actually collect, and the jurisdictions where your users live before you rely on it.

Inglorious Bagels (“we,” “us,” or “our”) operates ingloriousbagels.com (the “Site”). This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data.

1. Information We Collect

Information you give us

  • Account information — name and email address if you create an account via Microsoft Entra External ID.
  • Contact form / sign-up form submissions — whatever information you choose to send us.
  • Order information — online orders are handled by Toast POS on their platform; we do not receive your payment details.

Information collected automatically

  • Essential cookies — sign-in session, anti-forgery token, and basic session state. Required for the Site to function.
  • Server logs — IP address, browser type, pages visited, referrer. Used for security and debugging; retained for [N] days.
  • Optional cookies — functional, analytics, and marketing cookies only run after you consent via our cookie banner.

2. How We Use Your Information

  • To run the Site and keep it secure.
  • To respond to inquiries you send via the contact form.
  • To process online orders (via Toast POS).
  • With your consent, to understand how the Site is used (analytics) or to improve marketing reach.
  • To comply with legal obligations.

3. How We Share Your Information

We don't sell your personal information. We share information only with the service providers that make the Site work:

  • Microsoft Entra External ID — authentication and account management.
  • Toast POS — online ordering.
  • Hosting provider[Azure / AWS / etc.].
  • Analytics[none currently / Google Analytics / Plausible / etc.].

We may also disclose information when required by law, to enforce our terms, or to protect the safety of our users.

4. Cookies & Tracking

We use the cookie categories described above. Manage your preferences at any time via the link in our footer.

5. Your Rights — EU/UK (GDPR)

If you're in the European Economic Area or United Kingdom, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion (“right to be forgotten”).
  • Restrict or object to processing.
  • Request a copy of your data in portable form.
  • Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at info@ingloriousbagels.com.

6. Your Rights — California (CCPA / CPRA)

California residents have the right to:

  • Know what personal information we collect, use, disclose, and sell or share.
  • Access and receive a copy of your personal information.
  • Delete your personal information.
  • Correct inaccurate personal information.
  • Opt out of the sale or sharing of your personal information.
  • Limit use of sensitive personal information.
  • Non-discrimination — we won't deny service or charge more if you exercise your rights.

Do Not Sell or Share My Personal Information

We do not sell your personal information. To opt out of sharing for targeted advertising (if we ever enable it), click and turn off Marketing.

We also honor the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we automatically treat it as an opt-out of any sharing or sale of personal information, as required under California law.

7. Data Retention

We keep personal information only as long as necessary for the purposes described above or as required by law. Session data is cleared when you sign out. Account data is retained while your account is active; you may request deletion at any time. Server logs are retained for [N] days.

8. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is 100% secure, but we work to keep your data safe.

9. Children's Privacy

This Site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. If we make material changes, we'll update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Site after changes constitutes acceptance of the revised policy.

11. Contact

Questions about this policy or your personal information? Reach us at:

  • Email: info@ingloriousbagels.com
  • Phone: (760) 444-0434
  • Mail: Inglorious Bagels, 6955 El Camino Real, Suite 105, Carlsbad, CA 92009, USA