Bánh Mì Foxboro logo

Legal

Privacy Policy

Last updated: May 27, 2026

We're a family-run restaurant. We only collect what we need to take your order, charge you correctly, and get your food to you. We don't sell your data, and we don't use it to advertise. This page explains what we keep and why.

1. What we collect

When you place an order we keep:

  • Your name, phone number, and email — so we can contact you if there's a question about the order.
  • Your delivery address (only if you choose delivery) — so we know where to drop off the food.
  • Order details — what you ordered, when, and the total.
  • Basic device info from your browser (IP, user agent) — used for security and to spot abuse.

We do not store your credit card number, CVV, or full payment details. Those go directly from your browser to Square.

2. Who we share it with

The only third parties that touch your information are the services that make ordering possible:

  • Square — processes your card and sends you a receipt. Their privacy policy governs the card data they handle.
  • Mapbox — used to convert your delivery address into a distance quote. We send the address; they return coordinates.
  • Supabase & Cloudflare— host our database and menu images. Your order data lives on Supabase's US-region servers.
  • Sentry — collects anonymous crash reports if the site breaks. No personal data, just error stacks.

We don't sell, rent, or trade your information with anyone else. Period.

3. Cookies & local storage

We use a tiny amount of browser storage: your cart sits in local storage so you don't lose it on refresh, and we keep a session cookie for staff logins. No third-party tracking, no advertising pixels, no analytics that follow you around the web.

4. How long we keep it

Order records stay in our database for as long as we need them for tax and bookkeeping (typically 7 years in the US). If you want yours deleted sooner — or want a copy — just email us and we'll handle it.

5. Your rights

You can ask us to:

  • Show you everything we have on file about you.
  • Correct anything that's wrong.
  • Delete your records (subject to tax-record rules).

Email hello@banhmiexpress.co from the address tied to your order and we'll respond within a few business days.

6. Children

Our site isn't aimed at children under 13 and we don't knowingly collect data from them. If you think a minor placed an order with their own information, let us know and we'll delete it.

7. Changes to this policy

If we change how we handle data we'll update this page and bump the “last updated” date. Big changes get a banner at the top of the site for a few weeks.

8. Contact

Looking for our terms of service? Read them here →