Privacy Policy

SūBó Sushi Burritos ("SūBó," "we," "our," or "us") operates eatsubo.com and catering.eatsubo.com. This policy explains what information we collect, how we use it, and who we share it with.

1. Information we collect

We collect information you provide directly when you place an order, submit a catering request, or contact us:

• Name — to address your order and confirm identity
• Email address — to send order confirmations and receipts
• Phone number — for order coordination and staff alerts
• Delivery address — for delivery orders only
• Order contents — items, modifiers, quantities, and special instructions

Payment card data is never collected or stored by SūBó. All payment processing is handled entirely by Square, Inc. Card details go directly from your browser to Square's servers. We receive only a payment confirmation and an order reference — never your card number, CVV, or billing address.

2. How we use your information

• Fulfil and confirm your order (pickup, delivery, or catering)
• Send transactional receipts and order updates by email
• Send staff notifications by SMS when a catering order is placed
• Follow up on incomplete catering inquiries (see Section 5)
• Respond to questions and catering requests you send us

We do not use your information for marketing without your consent, and we do not sell it to anyone.

3. Third-party services that receive your data

To operate the site and fulfil orders, we share data with the following services. Each link leads to their own privacy policy.

• Square, Inc. — payment processing, order management, and our point-of-sale system. Your name, email, and order details are sent to Square to create and track orders. Square's privacy policy is at squareup.com.
• Resend — transactional email delivery. Your name, email address, and order summary are sent to Resend to deliver receipts and notifications. Resend's privacy policy is at resend.com.
• Shipday / DoorDash Drive — delivery dispatch for pickup and delivery orders. Your name, phone, delivery address, and order details are shared with our delivery dispatch provider when a delivery order is placed.
• Cloudflare Turnstile — bot-protection widget on order and inquiry forms. Turnstile runs a challenge in your browser to verify you're a human. No personal data is collected by Turnstile; Cloudflare's privacy policy is at cloudflare.com.
• Plausible Analytics — cookieless, privacy-friendly website analytics. Plausible collects anonymized page views and referrers. It sets no cookies and collects no personal data; we cannot identify individual visitors through Plausible. Plausible's data policy is at plausible.io.
• Amazon SNS — when staff SMS alerts are enabled, order summaries (event date, fulfillment type, item count, customer name) are sent via Amazon Simple Notification Service to staff phone numbers. No financial data is included.

4. Cookies and local storage

We do not use tracking cookies. The site stores two small items in your browser's localStorage:

• Location preference — which SūBó location you selected (Whiteaker or Willamette), so you skip the picker on return visits.
• Cart contents — items you've added to your order, so they persist if you navigate away before checking out.

This data lives only in your browser, is never transmitted to our servers, and is cleared when you clear your browser data.

5. Incomplete catering orders

When you begin a catering inquiry and provide contact information (name, email, and phone) before completing payment, we log that information for internal follow-up. This lets us reach out in case you had trouble completing your order.

Retention: Incomplete inquiry records are purged automatically after 90 days. Records associated with completed orders are retained for the life of that order in our Square dashboard.

6. We do not sell your data

SūBó does not sell, rent, or trade your personal information to any third party for marketing purposes, and never has.

7. Data retention

Order records (name, email, phone, address, order contents) are retained in Square's dashboard for as long as needed for accounting, tax, and order-history purposes — typically the life of the business. Resend delivery logs are subject to Resend's own retention policy. Incomplete catering inquiry records are purged after 90 days as described above.

8. Your rights

You may contact us at any time to:

• Request a copy of the personal data we hold about you
• Ask us to correct inaccurate information
• Ask us to delete your contact information from our catering inquiry log

Some data (for example, completed order records in Square) may be subject to legal retention requirements and cannot always be deleted on request.

9. Children's privacy

Our site is not directed at children under 13. We do not knowingly collect information from children under 13.

10. Changes to this policy

We may update this policy from time to time. When we do, we'll update the effective date at the top. Continued use of the site after a change constitutes acceptance of the updated policy.

11. Contact

Questions about this policy or requests to access or delete your data:

SūBó Sushi Burritos
541 Blair Blvd · Eugene, OR 97402
[email protected]
(541) 735-1051