Privacy Policy

Effective September 10, 2026 · Sweetfin Holding LLC · Replaces the version dated December 31, 2025

The short version

We collect what we need to take your order, run Sweetfan Rewards, answer your questions, and improve our restaurants. We share information with advertising platforms so we can show you Sweetfin ads — California law calls that selling and sharing, and you can turn it off at any time on our Your Privacy Choices page or by sending a Global Privacy Control signal. We do not sell your text-message opt-in. We never charge you more or serve you worse for exercising a privacy right.

Who we are and what this covers

This Privacy Policy explains how Sweetfin Holding LLC (“Sweetfin,” “we,” “us”) collects, uses, discloses, and retains personal information. It covers sweetfin.com, our restaurants, our catering and gift-card programs, Sweetfan Rewards, our email and text messaging, our social media accounts, and our recruiting.

Some things happen on platforms our partners run. Online ordering and Sweetfan Rewards run on Thanx, catering on Olo and Spoonfed, gift cards on inKind, and merchandise payment through PayPal. When you are on one of those pages, that provider’s privacy notice applies alongside this one.

This policy also serves as the notice at collection required by California law. It is provided before or at the point we collect personal information, and it is linked from every page of our website.

Categories of personal information we collect

In the last 12 months we have collected the following categories, using the labels California law uses:

Identifiers — your name, email address, phone number, postal address, IP address, and the unique device and advertising identifiers described in our Cookie Policy.
Customer records — contact and billing details you give us when you order, and payment card details, which go directly to our payment processors. We do not store full card numbers ourselves.
Commercial information — your orders, order history, favorite items, catering enquiries, gift-card purchases and balances, rewards activity, and merchandise purchases.
Internet and network activity — the pages you view on our site, how you got here, what you clicked, how our emails performed, and how you interacted with our ads.
Approximate location — the general area your IP address suggests, so we can show you nearby restaurants. If you press “use my location” in our store locator, your browser asks your permission first and your coordinates stay in your browser; we never receive them.
Audio, visual and similar information — photos or video you send us, or that you post publicly and tag us in.
Professional and employment information — whatever you include when you apply for a job with us.
Inferences — conclusions we draw from the above about what you like, so we can send you offers that are actually relevant.
Sensitive personal information — account log-in credentials for Sweetfan Rewards, which are held by our rewards provider. We use these only to give you access to your account and never to infer characteristics about you.

We do not knowingly collect protected classification characteristics, biometric information, genetic data, education records, or precise geolocation. We do not use personal information for automated decision-making that produces legal or similarly significant effects, and we do not use it to train machine-learning models.

Where we get it

From you — when you order, sign up for rewards, buy a gift card, join our email or text list, fill in our contact or catering form, apply for a job, or talk to us in a restaurant.
Automatically — from your device as you use our website, through the cookies and similar technologies listed in our Cookie Policy.
From our service providers — our ordering, rewards, catering, gift-card, payment, email, and text-message platforms pass us information about your transactions with us.
From advertising and social platforms — measurement and audience information about how our campaigns performed.
From public sources — your public social media posts when you tag or mention us.

Why we use it

To take, prepare, and fulfil your orders, including catering, and to handle refunds.
To run Sweetfan Rewards and apply the credits and offers you have earned.
To sell and service gift cards.
To answer your questions, resolve complaints, and provide support.
To send you marketing emails and, if you opted in, text messages — including cart reminders when you leave an order unfinished.
To measure and improve our website, menu, and restaurants.
To advertise Sweetfin on other platforms and to see whether that advertising works.
To keep our site and business secure, detect and prevent fraud, and debug problems.
To consider your job application.
To meet our legal, tax, accounting, and food-safety obligations, and to establish or defend legal claims.

If we ever want to use your personal information for a materially different purpose than the one we collected it for, we will update this policy and, where the law requires it, ask you first.

Who we disclose it to

In the last 12 months we disclosed personal information for business purposes to these categories of recipients:

Ordering, rewards and catering platforms — Thanx, Olo, Spoonfed.
Gift-card platform — inKind.
Payment processors — including PayPal for online merchandise.
Website hosting and infrastructure — Webflow and Cloudflare.
Analytics providers — Google Analytics.
Advertising platforms — Meta, Snap, and Google.
Email and text-message providers, and our accessibility and mapping providers.
Professional advisers — lawyers, accountants, insurers and auditors, where they need it.
Government authorities — where we are legally required to, or where it is necessary to protect our rights or someone’s safety.
A buyer or successor — if Sweetfin is involved in a merger, acquisition, financing, or sale of assets, personal information may be among the assets transferred. We will tell you if that happens and if this policy would change.

Our service providers may use personal information only to perform services for us. We require them by contract not to sell it, share it, or use it for their own purposes.

Selling and sharing your information

California law defines “selling” and “sharing” broadly enough to include disclosing identifiers to advertising platforms for cross-context behavioural advertising. We do that: when you allow advertising cookies, information about your visit — identifiers, the pages you viewed, and whether you ordered — goes to Meta, Snap, and Google. We do not receive money for it; we do it so we can advertise to you and measure the result. Under California law it still counts, so we treat it as a sale and share, and you can switch it off.

The categories we sell or share are identifiers, internet and network activity, commercial information, approximate location, and inferences. The categories of recipients are the advertising platforms named above.

To turn it off, use the Your Privacy Choices page or send a Global Privacy Control signal from your browser. No account, no form, no verification.

We do not sell or share the personal information of anyone we know to be under 16. We do not sell, share, rent, or disclose text-message opt-in data or consent to anyone for any purpose, except where the law requires it.

Cookies and tracking

No analytics, advertising, or non-essential convenience technology runs on this site until you make a choice. Our Cookie Policy lists every cookie and storage key we use, who sets it, what it does, and how long it lasts, and you can change your settings at any time.

How long we keep it

We keep each category only as long as we need it for the purpose we collected it for, then delete or de-identify it. In practice that means:

Order and payment records — for as long as tax, accounting, and audit rules require us to keep them.
Rewards account information — while your account is active, and for a reasonable period afterwards in case you come back.
Marketing contact details — until you unsubscribe or opt out, plus the time we need to keep a suppression record so we do not contact you again by mistake.
Support and contact-form messages — until the matter is resolved, and afterwards for as long as it may be relevant to a dispute.
Website analytics and advertising identifiers — for the periods set out in our Cookie Policy.
Job applications — for the recruiting cycle and any period required by employment law.

Where a legal claim, investigation, or regulatory requirement means we have to keep something longer, we do, and only for that reason.

Your privacy rights

If you are a California resident you have the right to know, get a copy, delete, and correct your personal information, to opt out of its sale or sharing, and not to be discriminated against for using any of those rights. Residents of other US states have similar rights, and we honor them the same way.

Everything you need — the opt-out control, the cookie settings, how to submit a request, how we verify it, how long we take, and how to appeal — is on our Your Privacy Choices page.

You can also submit a request through our contact form, by emailing info@sweetfin.com, or by calling (888) 820-3885.

Opt-out preference signals

We recognise the Global Privacy Control signal and treat it as a valid request to opt out of the sale and sharing of your personal information for the browser that sends it. You do not need to give us your name or verify anything for this to work, and our cookie notice will confirm when we have detected the signal.

We will not treat you differently

Using a privacy right will never mean a higher price, a lower level of service, or losing rewards you have earned. If we ever offer a loyalty benefit that depends on personal information, we will explain the terms and the reasonable value of that benefit up front.

Children

Our website is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child under 13 has given us information, email info@sweetfin.com and we will delete it. We do not knowingly sell or share the personal information of anyone under 16.

Security

We use reasonable administrative, technical, and physical safeguards suited to the sensitivity of the information we hold, including encryption in transit, access controls, and vetting of the providers we work with. No system is perfectly secure, so we cannot promise absolute security — but if a breach affects your personal information we will notify you as the law requires.

Other websites

Our site links to services run by others, including our ordering, catering, gift-card, delivery, and social media partners. We do not control how they handle your information. Please read their privacy notices before giving them anything.

Where your information is handled

Sweetfin operates in the United States, and our service providers process personal information in the United States. If you use our website from outside the US, you are sending your information to a country whose data protection rules may be different from your own.

Text messages: Mobile Terms of Service

The Sweetfin mobile message service (the “Service”) is operated by Sweetfin. Your use of the Service constitutes your agreement to these terms and conditions (the “Mobile Terms”). We may modify or cancel the Service or any of its features without notice. To the extent permitted by applicable law, we may also modify these Mobile Terms at any time, and your continued use of the Service following the effective date of any such changes constitutes your acceptance of those changes.

By consenting to Sweetfin’s SMS/text messaging service, you agree to receive recurring SMS/text messages from and on behalf of Sweetfin through your wireless provider to the mobile number you provided, even if your mobile number is registered on any state or federal Do Not Call list. Text messages may be sent using an automatic telephone dialing system or other technology. Promotional messages may include promotions, specials, and other marketing offers, such as cart reminders.

You understand that you do not have to sign up for this program in order to make any purchases, and your consent is not a condition of any purchase with Sweetfin. Your participation in this program is completely voluntary.

We do not charge for the Service, but you are responsible for all charges and fees associated with text messaging imposed by your wireless provider. Message frequency varies. Message and data rates may apply. Check your mobile plan and contact your wireless provider for details.

You may opt out of the Service at any time. Text the single keyword command STOP to +1 (866) 718-4598, or click the unsubscribe link where available in any text message, to cancel. You will receive a one-time opt-out confirmation text message. No further messages will be sent to your mobile device unless initiated by you. If you have subscribed to other Sweetfin mobile message programs and wish to cancel, except where applicable law requires otherwise, you will need to opt out separately from those programs by following the instructions provided in their respective mobile terms.

For Service support or assistance, text HELP to +1 (866) 718-4598 or email info@sweetfin.com.

We may change any short code or telephone number we use to operate the Service at any time and will notify you of these changes. You acknowledge that any messages, including any STOP or HELP requests, you send to a short code or telephone number we have changed may not be received, and we will not be responsible for honoring requests made in such messages.

The wireless carriers supported by the Service are not liable for delayed or undelivered messages. You agree to provide us with a valid mobile number. If you get a new mobile number, you will need to sign up for the program with your new number. To the extent permitted by applicable law, you agree that we will not be liable for failed, delayed, or misdirected delivery of any information sent through the Service, any errors in such information, or any action you may or may not take in reliance on the information or the Service.

Mobile communications and SMS privacy

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of personal information described in this Privacy Policy expressly exclude text messaging originator opt-in data and consent. SMS opt-in information and consent provided by users will not be shared, sold, rented, or disclosed to any third parties under any circumstances, except as required by law or to comply with valid legal process.

Changes to this policy

We review this policy at least once a year and update it whenever our practices change. The effective date at the top of this page shows the last revision. If a change is significant, we will make it obvious on the site rather than quietly editing this page.

Contact us

Sweetfin Holding LLC
Email: info@sweetfin.com
Toll-free: (888) 820-3885
Web form: sweetfin.com/contact-us
Privacy controls: sweetfin.com/legal/your-privacy-choices