Privacy Policy

Information We Collect

Account information

When you create an account you provide your name and email address, and either a password you choose or your Google account. You may also add a phone number to your account. Accounts and sign-in are run by our authentication provider, Clerk, which stores your password in hashed form; we never see it. If you sign in with Google, we receive only the profile information Google shares — typically your name, email address, and profile photo — and never your Google password. We keep your name, email address, and profile photo with your account so we can show your order history and prepare your orders.

Order information

When you place an order we record your name, email address, the items ordered (including any customizations or kitchen notes), subtotal, tax, and total amount. If you choose to receive an SMS pickup notification, our payment processor, Stripe, collects the phone number you provide and passes it to us solely for that purpose. We also record the date and time of your SMS consent.

Payment information

Credit and debit card details are entered directly into Stripe’s secure payment form and are never transmitted to or stored on our servers. We retain only the Stripe session ID, payment intent ID, and payment status associated with each order.

Cart contents

Before you check out, your cart is stored only in your browser’s local storage. It is never sent to our servers until you begin checkout.

Session and usage data

When you sign in, Clerk creates a session and records security information such as your IP address, your browser and device type, and when you signed in. This information is used only to keep you signed in and to protect your account, for example by blocking repeated failed sign-in attempts and asking for a code when you sign in from a new device. We do not currently use any third-party analytics or advertising tracking on this site.

How We Use Your Information

• To create and manage your account and authenticate you when you sign in.
• To process and fulfill your pickup orders and calculate the correct Indiana sales tax.
• If you opt in, to send you a single text message notifying you when your order is ready for pickup (see SMS section below).
• To communicate with you about your order if there is a problem.
• To operate and improve the reliability and security of this website.

We do not use your information for advertising, sell it to data brokers, or share it with any party except as described in this policy.

Text Message (SMS) Notifications

SMS notifications are optional. You consent only when you affirmatively check the SMS consent box during checkout; the box is unchecked by default. Placing an order, providing a phone number, or accepting our Terms does not by itself constitute SMS consent. If you opt in, you agree to receive one automated text message from El Charro De Jalisco when that order is ready for pickup. This is a transactional message only — we do not send marketing or promotional texts.

• Message content: Your order number and a ready-for-pickup notice with our address.
• Frequency: One message per order.
• Message and data rates may apply depending on your carrier plan.
• To opt out: Reply STOP to any message we send and you will receive no further texts. You may also contact us directly (see below) to request removal.
• Help: Reply HELP for assistance or contact us directly.
• Consent is not a condition of purchase. You can complete your order without checking the SMS consent box.

Text messages are delivered through Telnyx LLC. Your phone number, order number, and the content of the notification are shared with Telnyx solely to deliver and operate this messaging service.

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. We will not share your SMS opt-in or consent status with third parties for purposes unrelated to providing the messaging service. We may share that information with Telnyx, phone carriers, and other vendors only as needed to deliver the messages you requested.

Third Parties We Share Data With

We share the minimum information necessary with the following service providers to operate this website:

We may also disclose your information if required by law, court order, or government authority, or to protect the rights and safety of our customers, staff, or the public.

Cookies and Local Storage

Clerk sets a small number of cookies that keep you signed in and protect your session, such as a short-lived session token. These cookies are strictly necessary for sign-in and do not track you across other websites. We do not use advertising cookies, analytics cookies, or any third-party tracking cookies.

Your cart is stored in your browser’s local storage (not a cookie) and remains entirely on your device until you proceed to checkout.

Data Retention

We retain account information and order history for as long as your account is active, or as needed for tax, accounting, and legal compliance. When your account is deleted, it is removed from Clerk, and we remove your name, email address, and profile photo from your account record. Orders you placed are kept, including the name and email address recorded on each order, for as long as tax, accounting, and legal obligations require.

Deleting Your Account

You can ask us to delete your account and the personal information connected to it at any time, including information we received when you signed in with Google.

1. Contact us using the details under Contact Us below and ask us to delete your account. Include the email address you use to sign in. We may ask you to confirm the request.
2. Within 30 days, we delete your account from Clerk and remove your name, email address, phone number, and profile photo from our records. You can no longer sign in, and any staff access is removed. Order records are kept as described under Data Retention.
3. If you signed in with Google, you can also disconnect El Charro De Jalisco from your Google account: open your Google Account’s “Your connections to third-party apps & services” page, select El Charro De Jalisco, and remove its access. Disconnecting stops Google from sharing information with us in the future; it does not delete what we already hold, so send the request in step 1 as well.

Children’s Privacy

This website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently done so, we will promptly delete that information.

Your Rights and Choices

You may request to access, correct, or delete the personal information we hold about you at any time by contacting us using the information below. We will respond within a reasonable timeframe. To delete your account, follow the steps under Deleting Your Account. Note that deleting your account will not delete historical order records that may be required for tax or legal purposes.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Continued use of the site after a change constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, please reach out to us: