Privacy Policy

1. Introduction

LunchPad ("we", "us", "our", or "Company") operates the LunchPad website and service. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our service and the choices you have associated with that data.

2. Information Collection and Use

We collect several different types of information for various purposes to provide and improve our service to you.

Types of Data Collected:

• Personal Data: Email address, name, order preferences, dietary restrictions, and school/restaurant information
• Payment Information: Credit card and billing information processed securely through Stripe
• Usage Data: Browser type, IP address, pages visited, and time spent on pages
• Device Information: Device type, operating system, and device identifiers

3. Use of Data

LunchPad uses the collected data for various purposes:

• To provide and maintain our service
• To notify you about changes to our service
• To allow you to participate in interactive features of our service
• To provide customer support and respond to your requests
• To gather analysis or valuable information for service improvement
• To monitor the usage of our service
• To detect, prevent and address technical and security issues

4. Security of Data

The security of your data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. We use industry-standard encryption (HTTPS) and secure data storage practices.

5. Third-Party Service Providers

We may employ third party companies and individuals to facilitate our service ("Service Providers"), provide the service on our behalf, perform service-related services or assist us in analyzing how our service is used.

These third parties may have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. We work with the following types of service providers:

• Payment Processing: Stripe (PCI-DSS compliant)
• Email Communication: Resend
• Database and Hosting: Vercel and PostgreSQL providers

6. Links to Other Sites

Our service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

7. Children's Privacy

Our service does not address anyone under the age of 13 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove such information and terminate the child's account.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at our contact page.

10. Legal Basis for Processing

We process your personal data on the following legal bases:

• Performance of Contract: Processing necessary to provide our services to you
• Consent: Where you have given explicit consent for specific processing activities
• Legitimate Interests: Where processing is necessary for our legitimate business interests
• Legal Obligations: Where required by law or regulation