Privacy notice

What we collect

• When you place an order or a pre-order: your name, email, phone number (required on the weekly order form, optional on a pre-order), your pickup time or day, the dishes and quantities, whether you are eating here or taking it to go, the payment method you plan to use, a tip if you add one, and anything you write in the notes (for example allergies or special requests).
• When you ask for a catering quote: your name, email, phone number and the event details you choose to give (date, type of event, number of guests and your message).
• When you tap the "I paid" link in your confirmation email: we record that you told us you paid, and when.
• Technical data: our hosting service records standard details of each visit (internet address, browser type, time). To slow down spam and abuse, when you send a form or try the staff sign-in we keep a scrambled version (a "hash") of your internet address for a short time, not the address itself; entries older than 48 hours are cleared out.
• In your browser: the site uses no advertising or analytics cookies. It saves small preferences in your browser (for example, that you closed a banner or a promotion). The staff dashboard uses a sign-in cookie, for staff only.
• We do not collect card numbers. The site does not process payments.

What we use it for

The site sends no marketing email, and we do not sell your information.

• Preparing your order and having it ready at your time.
• Calling or texting you to confirm your order.
• Emailing you a confirmation with your order, your code and payment instructions.
• Matching your payment to your order.
• Answering your catering request.
• Keeping the restaurant's sales records and protecting the site from abuse.

Who receives your information

To make the site work, these services receive or store information on our behalf:

• Supabase: the database where orders and pre-orders are stored. Dish photos are also served from Supabase.
• Resend: the service that sends the emails (your confirmation, the order alert to the owners, and catering requests).
• Vercel: the service that hosts the website.
• PFP Endeavors LLC: the company that built and maintains the site; it can access these systems to maintain them.
• Venmo and Zelle: if you pay with them, you do so directly in their app and under their own policies. The Venmo link carries the amount and a note with your order code. The site does not receive your account details.
• Anthropic (artificial intelligence): used only to translate the dish names and descriptions the owners write from Spanish to English. No customer information is sent to it.

What other people can see

For pre-order events, the event window shows how many people have signed up and the first names of some of them. If you place a pre-order, your first name may appear there. Your last name, email and phone number are never shown.

How long we keep it

Orders stay in the restaurant's records until the owners delete them; the site does not delete them on its own. Catering requests are not stored in the database: they arrive by email to the owners. Abuse-prevention entries older than 48 hours are cleared out.

Seeing, correcting or deleting your information

You can ask us to show you, correct or delete the information from your orders. Reach us any of these ways:

• Reply to your order confirmation email (replies go to the restaurant).
• Message us on Instagram at @mama_manaba_ec.

Children

The site is for ordering food and is not directed to children under 13. We do not ask for age or knowingly collect information from children.

Changes to this notice

If the site changes how it handles information, we will update this page and the date above.