Privacy Policy

This Privacy Policy describes how Tatte ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects your personal information when you visit our website at new-tatte.click, place orders, use our digital services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Children's Online Privacy Protection Act (COPPA), and the Federal Trade Commission (FTC) Act.

Please read this Privacy Policy carefully. By accessing or using our website, purchasing our food products or services, or otherwise engaging with us, you acknowledge that you have read, understood, and agree to the terms outlined in this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of our services immediately.

1. Who We Are

Tatte is a food business operating in the United States. We operate the website new-tatte.click and provide food-related products and services to customers across the country. We take our responsibilities regarding your personal data seriously and are dedicated to maintaining a trustworthy relationship with every person who interacts with our brand.

2. Information We Collect

We collect various categories of personal information depending on how you interact with our website and services. The categories of information we may collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, or contact us, we may collect personally identifiable information, including but not limited to:

• Full name (first and last name)
• Email address
• Phone number
• Billing address and shipping address
• Date of birth (where required for age verification purposes)
• Username and password (stored in encrypted format)
• Profile photograph (if voluntarily uploaded)

2.2 Payment and Financial Information

When you make a purchase through our platform, we collect payment-related information necessary to process your transaction. This may include:

• Credit card or debit card number (partial, as full card numbers are handled by our PCI-DSS-compliant payment processor)
• Billing address associated with your payment method
• Transaction ID and order history
• Gift card or promotional code usage

We do not store complete payment card information on our servers. All payment processing is handled by secure, industry-standard third-party processors.

2.3 Usage Data and Behavioral Information

We automatically collect certain information about how you interact with our website. This includes:

• Pages viewed, time spent on each page, and navigation paths
• Search queries entered on our website
• Products or menu items viewed or added to a cart
• Links clicked and buttons interacted with
• Date and time of your visit
• Referral source (how you arrived at our site)
• Session duration and bounce rate data

2.4 Device and Technical Information

We collect technical information about the device and browser you use to access our services, including:

• IP address
• Browser type and version (e.g., Chrome, Safari, Firefox)
• Operating system and version (e.g., Windows 11, macOS, iOS, Android)
• Device type (desktop, tablet, smartphone)
• Screen resolution and language settings
• Mobile device identifiers (IDFA or Android Advertising ID, where applicable)
• Network connection type and internet service provider

2.5 Location Data

With your consent, we may collect general or precise location data to provide location-based features such as finding nearby store locations, offering regional promotions, or estimating delivery areas. You may withdraw your consent for location tracking at any time through your device settings or by contacting us.

2.6 Communications and User-Generated Content

When you contact us for customer support, leave a review, submit a feedback form, participate in a survey, or interact with us via email or social media, we may collect:

• The content of your messages and inquiries
• Reviews, ratings, and testimonials you submit
• Survey responses and feedback
• Social media handles if you tag us or message us on social platforms

2.7 Cookie and Tracking Technology Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. Please see Section 9 of this Privacy Policy for a more detailed explanation of our cookie practices.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. Specifically, we use your information to:

3.1 Provide and Manage Our Services

• Process and fulfill your food orders and reservations
• Create and manage your account on our platform
• Send order confirmations, receipts, and delivery status updates
• Handle returns, refunds, and customer service inquiries
• Authenticate your identity when you log in
• Maintain loyalty program memberships and track reward points

3.2 Improve Our Products and Services

• Analyze website usage patterns to optimize our platform's performance and usability
• Conduct research and development to improve our food products and menu offerings
• Identify technical errors, bugs, or security vulnerabilities on our website
• Test new features and user interface changes

3.3 Marketing and Communications

• Send promotional emails, newsletters, and special offers (with your consent where required)
• Personalize marketing content based on your purchase history and preferences
• Conduct retargeting and advertising campaigns on social media and third-party platforms
• Notify you of new menu items, seasonal specials, or company news
• Administer contests, giveaways, and promotional events

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

3.4 Legal Compliance and Safety

• Comply with applicable federal and state laws and regulations
• Respond to lawful requests from government authorities, law enforcement, or courts
• Enforce our Terms of Service and other legal agreements
• Detect, prevent, and investigate fraudulent transactions, abuse, or security incidents
• Protect the rights, property, and safety of our company, customers, and third parties

3.5 Analytics and Business Intelligence

• Generate aggregate, anonymized statistical reports about website traffic and user behavior
• Measure the effectiveness of our marketing campaigns and promotions
• Forecast inventory needs and understand product demand patterns

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their own independent marketing purposes. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering our services. These providers are contractually obligated to protect your personal information and may only use it for the specific purposes we authorize. Our service providers may include:

• Payment processors (e.g., Stripe, Square, PayPal) — to handle financial transactions securely
• Delivery and logistics companies — to fulfill and ship your food orders
• Email marketing platforms — to send you promotional and transactional communications
• Cloud hosting and infrastructure providers — to store and process our data securely
• Analytics providers (e.g., Google Analytics) — to analyze website traffic and user behavior
• Customer support software providers — to manage and respond to your inquiries
• Advertising networks — to deliver targeted advertisements on our behalf

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Enforce our Terms of Service or other applicable agreements
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our services or the general public

4.3 Business Transfers

In the event of a merger, acquisition, sale of substantially all of our assets, reorganization, or bankruptcy, your personal information may be transferred to the acquiring entity or successor as part of that transaction. We will notify you via email and/or a prominent notice on our website prior to any such transfer, and we will inform you of any choices you may have regarding your information.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information — which cannot reasonably be used to identify you — with third parties for research, marketing, analytics, or other business purposes without restriction.

4.5 With Your Consent

We may share your personal information with other parties when you have given us your explicit consent to do so. You may withdraw such consent at any time by contacting us at [email protected].

5. Data Security

We take the security of your personal information seriously and implement a comprehensive range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

5.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocols.
• Database Encryption: Sensitive data stored in our databases is encrypted at rest using AES-256 encryption.
• Firewalls and Intrusion Detection: We employ firewalls, intrusion detection systems, and regular security monitoring to protect our infrastructure.
• Secure Password Hashing: User passwords are never stored in plain text; they are hashed and salted using industry-standard algorithms.
• Two-Factor Authentication: We offer optional two-factor authentication (2FA) for user accounts to add an extra layer of security.

5.2 Administrative Safeguards

• Access to personal data is restricted on a need-to-know basis among our employees and contractors.
• All staff who handle personal data are required to undergo privacy and data security training.
• We conduct regular internal audits and risk assessments of our data handling practices.
• We maintain and enforce a data breach response plan in accordance with applicable state notification laws.

5.3 Limitations

While we strive to protect your personal information using commercially reasonable safeguards, no method of electronic transmission or data storage is completely secure. We cannot guarantee the absolute security of your information. If you believe your account has been compromised or if you detect any suspicious activity, please contact us immediately at [email protected].

6. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We honor and respect these rights as described below.

6.1 Rights Available to All U.S. Residents

• Right to Know: You have the right to request information about what personal data we have collected about you, the sources of that data, the purposes for which it was collected, and the categories of third parties with whom it has been shared.
• Right to Access: You may request a copy of the specific personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information that we maintain about you.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions (for example, where we are required to retain data for legal compliance, fraud prevention, or contractual obligations).
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. You will not receive inferior service or be denied access to our products as a result of making a privacy request.

6.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know Specific Pieces of Information: You may request specific pieces of personal information we have collected about you in a portable and readily usable format.
• Right to Opt-Out of Sale or Sharing of Personal Information: You have the right to direct us not to sell or share your personal information with third parties. To exercise this right, please contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to only what is necessary to perform our services.
• Right to Correct: You may request that we correct inaccurate personal information that we maintain about you.
• Shine the Light Law (California Civil Code § 1798.83): California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes once per calendar year.

6.3 How to Exercise Your Rights

To submit a privacy rights request, you may contact us by:

• Email: [email protected]
• Website: new-tatte.click

We will respond to verifiable consumer requests within 45 days of receipt. If we require additional time (up to 90 days total), we will notify you in writing of the extension and the reason for the delay. We may require you to verify your identity before processing your request to protect the security of your personal information.

6.4 Authorized Agents

You may designate an authorized agent to submit privacy rights requests on your behalf. To do so, you must provide written authorization to the agent and verify your own identity directly with us. We may deny requests from agents who do not provide proper verification.

7. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. Our general retention practices are as follows:

When personal information is no longer needed for the purposes for which it was collected, we will securely delete, anonymize, or de-identify it in accordance with our internal data retention and disposal procedures.

8. Children's Privacy

Our food ordering platform, loyalty programs, and digital services are designed for adult consumers. We do not knowingly market to, collect information from, or target children under 13 years of age. Our website does not have features specifically directed at children.

In compliance with the Children's Online Privacy Protection Act (COPPA), if we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take immediate steps to delete that information from our systems.

If you are a parent or guardian and you believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. We will investigate the matter and take appropriate action to remove such data promptly.

Additionally, we do not knowingly collect personal information from individuals between the ages of 13 and 17 for commercial purposes beyond what is necessary to provide our services, in accordance with the CPRA's protections for minors.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website, analyze usage patterns, and deliver personalized content and advertisements. Here is a brief overview of the types of cookies we use:

9.1 Types of Cookies We Use

9.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Most browsers allow you to block or delete cookies; however, doing so may affect your ability to use certain features of our website. Additionally, you may opt out of interest-based advertising by visiting:

• Network Advertising Initiative (NAI) Opt-Out
• Digital Advertising Alliance (DAA) Opt-Out

For more detailed information about the cookies we use and how to manage them, please refer to our full Cookie Policy, which is available on our website at new-tatte.click.

10. International Data Transfers

Tatte is a United States-based company, and our primary data processing activities occur within the United States. However, some of our third-party service providers may store or process your personal information in other countries. By using our website and services, you acknowledge that your personal information may be transferred to and processed in countries outside of your country of residence, including countries that may not have the same level of data protection laws as your home country.

When we transfer personal information internationally, we take appropriate safeguards to ensure that your data receives an adequate level of protection consistent with this Privacy Policy and applicable law. These safeguards may include:

• Data processing agreements with our service providers that include standard contractual clauses or equivalent protections
• Ensuring that recipient countries provide an adequate level of data protection as recognized by applicable authorities
• Other legally recognized transfer mechanisms as applicable

If you have questions about the safeguards we apply to international data transfers, please contact us at [email protected].

11. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, embedded content, or other external services that are not operated or controlled by Tatte. This Privacy Policy applies solely to our website and services. We are not responsible for the privacy practices, content, or security of any third-party websites or services.

When you click on a link to a third-party website, that website will have its own privacy policy governing the collection and use of your personal information. We strongly encourage you to review the privacy policies of any third-party sites you visit before providing your personal information.

Common third-party platforms that may have their own policies include social media networks (such as Facebook, Instagram, X/Twitter, and TikTok), Google Analytics, advertising networks, and payment processors.

12. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Currently, there is no universally accepted standard for how companies should respond to DNT signals. At this time, our website does not respond to DNT signals differently than it would respond to any other user. We will continue to monitor developments in this area and update our practices as standards emerge.

13. Your Choices and Opt-Out Options

We respect your right to control how your personal information is used. Here is a summary of the choices available to you:

• Marketing Emails: Click "unsubscribe" in any marketing email or contact us at [email protected] to opt out.
• SMS/Text Messages: Reply "STOP" to any promotional text message from us to unsubscribe.
• Push Notifications: Disable push notifications from our website through your browser or device settings.
• Cookies: Manage cookie preferences through your browser settings or our cookie management tool.
• Location Data: Disable location services for our website through your device or browser settings.
• Account Deletion: Contact us to request deletion of your account and associated personal data, subject to our legal retention obligations.
• Advertising Opt-Out: Use the NAI or DAA tools referenced in Section 9 to opt out of interest-based advertising.

Please note that even if you opt out of marketing communications, we may still send you transactional emails related to your orders, account activity, or important service updates.

14. How to File a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response to your inquiry, you have the right to file a complaint with the appropriate regulatory authority.

14.1 Complaints in the United States

For residents of the United States, you may file a complaint with:

• Federal Trade Commission (FTC): The FTC enforces consumer privacy protections under the FTC Act. You may file a complaint at ftc.gov/complaint or call 1-877-FTC-HELP (1-877-382-4357).
• California Privacy Protection Agency (CPPA): California residents may contact the CPPA regarding CCPA/CPRA-related concerns at cppa.ca.gov.
• State Attorney General Offices: Many states have consumer protection divisions within their Attorney General's office. We encourage you to contact your state's AG if you believe your privacy rights have been violated.

14.2 Internal Complaint Process

Before filing a formal complaint with a regulatory authority, we encourage you to contact us first. Our privacy team will investigate your concern and respond within 30 days. Many issues can be resolved quickly through direct communication. Please reach out to us at:

• Email: [email protected]
• Website: new-tatte.click

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, applicable laws, or industry standards. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised Privacy Policy on our website at new-tatte.click
• Send an email notification to registered users where required by law or where changes materially affect your rights

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

16. Applicable Law

This Privacy Policy is governed by the laws of the United States, including but not limited to:

• Federal Trade Commission Act (FTC Act), 15 U.S.C. § 45: Governs unfair or deceptive acts or practices in commerce, including privacy-related violations.
• Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506: Protects the online privacy of children under 13 years of age.
• California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), Cal. Civ. Code § 1798.100 et seq.: Grants California residents specific rights regarding their personal information.
• CAN-SPAM Act, 15 U.S.C. §§ 7701–7713: Governs commercial email communications.
• Telephone Consumer Protection Act (TCPA), 47 U.S.C. § 227: Governs electronic and SMS marketing communications.

We are also committed to complying with any other state-specific privacy laws applicable to residents of other U.S. states where such laws have been enacted.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team. We are here to help and will do our best to address your concerns in a timely and professional manner.

We aim to respond to all privacy-related inquiries and requests within 30 to 45 days of receipt. For requests that are particularly complex or numerous, we may require additional time, in which case we will notify you of the expected response timeline.

This Privacy Policy was last updated on July 1, 2026. Previous versions of our Privacy Policy are available upon request by contacting us at [email protected].