Privacy Policy

This policy explains what personal information Cups of Pasta (“we”, “us”) collects through cupsofpasta.com, how we use it, who we share it with, and the choices you have. It applies to our website, online ordering, and the Cups of Pasta Rewards program.

Information we collect

• Orders. Your name, phone number, email address, the items you order, the shop you pick up from, and any coupon or Rewards points you use.
• Payments. Card and wallet details (including Apple Pay and Google Pay) are entered into a payment form run by our payment processor, Stripe. We do not see or store your full card number.
• Rewards account. Your name, email address, optional phone number, and your points balance and activity. We email you a sign-in link and send verification codes by text message or email so we can confirm it is you.
• Messages and forms. What you send us through our contact, catering and franchising forms, such as your name, email, phone, and the details of your request.
• Device and usage information. Pages visited, items viewed, what you add to your cart, approximate location from your IP address, browser and device type, how you arrived on our site (for example an ad or a creator’s link), and errors you run into.
• Precise location. Only if you tap “Use my location” and allow it in your browser. We use it to sort our shops by distance, and you can refuse it.

How we use it

• To take, prepare and confirm your order, and to contact you about it.
• To run Rewards: tracking points, applying discounts and sending sign-in links.
• To answer your questions and handle catering and franchising enquiries.
• To keep the site working, secure and free of fraud and abuse.
• To understand how the site is used and improve it.
• To measure and run our advertising (see below).

Who we share it with

We do not sell your personal information for money. We share it with:

• Service providers that help us run the business: Stripe (payments); our online ordering and loyalty platform provider, which stores orders and Rewards accounts; Resend (email delivery); and our hosting provider.
• Analytics providers. We use PostHog for product analytics, error tracking and session replay (form fields are masked so what you type is not recorded), and Google Analytics.
• Advertising partners. We use Meta (Facebook and Instagram) and Google Ads to measure and run our ads. They receive information about your visit and actions on our site, such as page views, items added to cart and purchases, and may receive your email address or phone number in a hashed (scrambled) form so they can match it to their own users. Under some state laws this may count as “sharing” information for advertising; see “Your choices” below.
• Legal and safety. Authorities or others when the law requires it, or to protect our rights, customers or staff, and a buyer if the business is sold.

Cookies and similar technologies

We and our partners use cookies, pixels and similar tools. Your browser’s local storage also keeps your cart, your selected shop, and, if you choose to trust a device, a token so you can look up your orders without a new code. You can clear these from your browser settings; the site may not work as expected if you block them.

Your choices

• Ads. You can manage ad personalization in your Meta and Google account ad settings, and limit tracking in your browser or device settings.
• Access, correction and deletion. You can ask what personal information we hold about you, ask us to correct it, or ask us to delete it, subject to what we need to keep for legal or accounting reasons.
• California and other state residents. Depending on where you live, you may also have the right to opt out of the sharing of your information for advertising, and not to be treated differently for using these rights.

To make a request, contact us. We may need to confirm your identity before acting on it.

How long we keep it

We keep information for as long as we need it to run your account and orders, meet tax and legal obligations, and resolve disputes, then delete or de-identify it.

Security

We use reasonable measures to protect your information, but no website or service is completely secure.

Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows when it last changed.

Contact us

Questions about this policy or your information? Contact us. You can also read about accessibility on our site.