Privacy Policy

At Sachetgourmet (sachetgourmet.rest), accessible from 540 Culinary Way, Suite 300, San Francisco, CA 94107, USA, we take the confidentiality and security of our epicurean client data seriously. This Privacy Policy outlines how personal details, delivery parameters, and subscription metrics are gathered, protected, and processed under GDPR, CCPA, and applicable state regulations.

1. Information We Collect

We collect information required to fulfill orders and provide tailored culinary recommendations:

• Personal Identifiers: Name, delivery address, contact telephone number, and email address.
• Financial Data: Encrypted payment tokenization through TLS 1.3 secured third-party payment gateways (we do not store raw credit card numbers on our servers).
• Preferences & Telemetry: Dietary choices, allergen declarations, interaction behavior with sachet cards, and cookie parameters.

2. Legal Basis & Data Usage

We utilize your information strictly to:

• Dispatch pre-portioned culinary sachet orders and custom spice kits.
• Manage recurring subscription schedules and renewal notifications.
• Comply with food safety traceability laws and FDA import regulations for foreign spice components.
• Optimize web app performance and tailor seasonal flavor drops.

3. Data Retention & Security Protocols

All client data is encrypted at rest using AES-256 standards and in transit using TLS 1.3 protocol. Order history records are retained for 30 days post-fulfillment unless extended retention is explicitly requested or legally required for tax compliance.

4. Your GDPR & CCPA Consumer Rights

Regardless of residency, Sachetgourmet provides all users with rights to:

• Request access to stored personal data files.
• Demand correction or complete deletion of data ("Right to be Forgotten").
• Opt-out of non-essential cookie tracking or personalized marketing emails.

To exercise any of these rights, contact our Data Privacy Officer at [email protected].

5. Third-Party Processor Declarations

We do not sell, rent, or trade your personal information. Limited data sharing occurs solely with essential logistics partners (e.g., FedEx, UPS for temperature-controlled transit) and secure checkout facilitators.