Privacy Policy

Scope and our approach

H & A Deli & Groceries, Inc., doing business as H&A Deli (H&A, we, us, or our), operates hadeliroc.com, the H&A Deli customer app, and the H&A Order Manager app. This Privacy Policy describes the personal information we collect through these services, why we use it, who receives it, and the choices available to customers and authorized staff. It does not govern DoorDash, Uber Eats, Grubhub, Google Maps, Apple Maps, or another service you choose to visit.

H&A uses personal information to run the deli, handle orders, protect the website, and keep necessary business records. H&A does not sell personal information or use the website for targeted advertising.

Optional customer accounts and saved items

An optional customer account lets you save delivery addresses and Favorites and view orders securely linked to your account. We process your account email, optional display name, authentication information, saved items, and account activity. You can sign in with email and password or use Apple or Google when the relevant option is offered. Accounts are optional; you can browse and order as a guest. Supabase provides authentication and storage through H&A's existing infrastructure.

Guest Favorites remain on the browser or device where you save them and may be visible to other people using that device. Importing them into an account requires your choice. Signing in does not automatically save a guest delivery address or claim older orders based on matching contact details. Linking a guest order requires its original secure access capability.

You can delete a customer account from Account settings in the app or My account on the website. Deletion removes the login, saved addresses, personal Favorites and account links to orders. Restaurant transaction records and historical purchase details remain for operational and recordkeeping needs. Deletion also clears local Favorites, authentication, cart, delivery drafts and saved order access on the device making the request. Signing out clears private account data, cart, delivery drafts and order access on that device; guest Favorites remain until you delete them.

Account history and synchronized saved items are not kept as a persistent offline account cache. Native authentication credentials use secure device storage. The website uses separate, protected customer session cookies.

Signing in with Apple or Google

If you choose Continue with Apple or Continue with Google, that provider authenticates you and shares a provider account identifier, verified email address, and any name or profile information permitted by your provider settings. Apple may provide a private relay email address when you choose Hide My Email. H&A does not receive your Apple or Google password and does not request access to your email messages, contacts, photos, calendar, or cloud files.

Our authentication provider, Supabase, uses the identity information and authentication tokens to establish and protect your H&A customer session. A successful provider sign-in ordinarily does not require a separate H&A email-verification code. Apple or Google may still require their own security checks. Loading their sign-in controls connects your browser or app to the provider, which processes technical and sign-in information under its own privacy policy.

An existing customer identity may be linked to a provider when our authentication service verifies the same email address. An Apple relay address or another email may create a separate customer account. Staff identities remain separate from customer accounts. Signing in does not automatically associate past guest orders with your account.

You can manage H&A's connection in your Apple or Google account settings. Disconnecting a provider does not by itself delete your H&A account or restaurant order records. To delete the H&A account, use Account settings and confirm your identity. If Apple cannot be disconnected automatically during deletion, follow the instructions shown to remove H&A from your Apple Account settings. Deleting H&A does not delete your Apple or Google account.

Information we collect

Information you provide

• Your name, phone number, and optional email address.
• Pickup or delivery selection; delivery address, apartment or unit, and delivery instructions when delivery is selected.
• Food items, sizes, quantities, toppings, sauces, modifiers, special instructions, and voluntary allergy or safety notes.
• Order number, status, prices, tax, delivery fee, optional staff-tip selection and amount, total, preparation or delivery estimates, timestamps, and the history of staff actions on the order.

Please do not enter a payment-card number, password, Social Security number, or other unrelated sensitive information in an instruction or notes field.

When address suggestions are available, text you type into the delivery-address search is sent through H&A to Apple Maps to find nearby matches. We send only the address search text and the store location used to prioritize results; we do not include the separate apartment field, your name, contact details, cart, or order instructions. Suggestions are not a guarantee of delivery eligibility. After you choose a suggestion or enter an address manually, the service-area check described below runs separately. You may enter the full address manually if suggestions are unavailable.

The delivery address check sends your address and current cart selections to H&A's server to check the food minimum, delivery availability and fee. H&A sends the street address, city and ZIP code to the U.S. Census Bureau geocoding service to check the 1.5-mile delivery radius. We do not send the separate apartment/unit field, your name, phone, email, instructions or cart to that service. Coordinates are used for the distance calculation and are not kept by H&A. The payment record retains the distance result, verification time and a coded address fingerprint so the paid order can be reconciled. Checking an address does not create an order or charge a card. The address can remain in your browser or app draft so you do not need to enter it again at checkout.

Website, device, and security information

When a browser requests the website, H&A's hosting and security providers may process ordinary request information such as IP address, browser or device type, operating system, requested page, referrer, approximate location, timestamps, and network or security signals. The order application converts IP and phone information into coded, keyed identifiers for rate limiting. Raw IP addresses are not stored in the customer order record by H&A's order application.

Vercel Web Analytics records aggregate page-use information such as page URL, referrer, approximate location, browser, operating system, device type, and timestamp. H&A does not configure custom analytics events to send order-form values. Vercel BotID uses a browser challenge on the order endpoint to help identify automated or abusive submissions.

iPhone and iPad order updates and location

If you choose to enable order notifications, the app and H&A's service providers process an Expo push token, a coded app-installation identifier, an order association, notification delivery status, and a private random tracking reference. Notifications are transactional and may report that an order was confirmed, is preparing, is ready, is out for delivery, is completed, was canceled, or is ready for delivery payment. Notification links do not contain your name, phone number, address, card information, or order contents.

While an order is active, supported Apple devices may also show its status as a Live Activity on the Lock Screen or Dynamic Island. Apple provides a temporary ActivityKit update token, which H&A stores with a coded installation identifier and the related order only to update or end that activity. The activity shows the order number, pickup or delivery, a short status, and an estimate when available; it does not show your name, phone number, address, payment information, order contents, allergy notes, or special instructions.

The app does not request location access at launch. If you tap Use My Location in a delivery-address form, iOS provides the app with your current location so the device can suggest a street address for you to review. H&A does not store the raw latitude or longitude through this feature. The suggested address becomes ordinary order information only if you submit it. The app does not request background or Always location access.

Authorized staff information

For staff who use the private dashboard, H&A and Supabase process account email, display name, role, active status, authentication and multi-factor authentication information, session information, password-reset activity, staff actions, internal notes, and security or audit events. Failed-login security records use coded email and IP identifiers.

Cookies, browser storage, and app storage

On eligible Apple mobile browsers, the website may suggest the free H&A Deli app. Device compatibility is checked in your browser. A session-storage flag limits this suggestion to once per browser tab session. If you dismiss it or select Download, a local-storage expiry time hides it for 30 days on that browser; an expired preference no longer prevents display. These preference values are not sent to H&A or used for advertising or cross-site tracking. Clearing browser storage resets them. If browser storage is unavailable, the suggestion can still appear. Its display and dismissal are remembered until the page is reloaded or closed.

The public ordering interface uses local storage to keep cart items, quantities, customizations, and pickup or delivery choice in your browser. A checkout draft, including your optional tip choice, may also be retained so edits or a page reload do not erase your selections. Session storage temporarily holds confirmation details and, when online card payment is offered, the checkout identifiers needed to resume or verify the same Stripe PaymentIntent. You can clear these records through your browser; session storage normally ends when the browser session ends.

The iPhone and iPad app stores the cart, checkout draft including any optional tip choice, and a limited last-known order status on the device so an interrupted order can be recovered. Sensitive order-access and payment-recovery tokens are stored using the iOS and iPadOS secure storage system. The app does not store full payment-card numbers or security codes.

Vercel Web Analytics is designed to operate without third-party analytics cookies. The site does not contain Google Analytics, Google Ads, Meta Pixel, TikTok Pixel, or another advertising pixel. Authorized staff authentication uses necessary Supabase session cookies, and the staff dashboard can save a sound preference in local storage.

The location section contains a lazily loaded Google Maps embed. When the map loads, your browser connects to Google, which may receive technical information such as your IP address, browser or device details, and the referring page, and may use cookies or similar technologies under Google's own policies. The map is for displaying H&A's location only and is not used to decide delivery eligibility or price.

How we use information

• Receive, price, confirm, prepare, fulfill, deliver, update, or cancel submitted orders.
• Calculate and record optional tips, reconcile payments, and handle requests for corrections or refunds.
• Estimate preparation and delivery times using kitchen settings and active order volume, and record staff changes to an order's estimate.
• Send requested transactional app notifications and update an Apple Live Activity about a current order, then safely open its live status.
• Call customers to confirm eligible cash or delivery requests, communicate about problems, and tell them when an order is ready.
• Handle allergy or safety notes and other instructions supplied for an order.
• Prevent spam, fake orders, fraud, abuse, security incidents, and technical errors.
• Run staff accounts, role-based access, availability controls, audit records, and store reporting.
• Understand aggregate website use and improve reliability and usability.
• Maintain records, resolve disputes, enforce terms, and meet legal or business obligations.

Food recommendations

The website and customer app use the items in your current cart and current menu availability to suggest accompanying food. These suggestions are calculated in your browser or app. They do not use your account identity, past order history or activity on other websites, and the recommendation feature does not send your cart to an advertising or recommendation provider. You may dismiss or ignore the suggestions. An item you choose to add becomes part of the ordinary cart and order information described in this policy.

Payment-card information

When online card payment is offered, Stripe hosts the payment fields and receives card data directly. H&A does not receive or store the card number, expiration date, or security code. H&A stores PaymentIntent and charge references, payment status, amount, order snapshot, and audit history so it can verify payment and prevent duplicate orders.

If you add a staff tip, including through round-up, H&A records its amount with the order and includes it in the payment total sent to Stripe for an online payment. Authorized staff can see tip amounts in order details and reports for payment reconciliation, tip handling and customer support. These amounts follow the order and payment record retention practices below.

Cash pickup is initially submitted without a card charge. Eligible direct delivery offers Stripe checkout after the address passes the 1.5-mile check, with the fee and tax shown before payment. Older unpaid delivery requests may still require staff confirmation before payment on the private order-status page.

Refund requests are handled manually by H&A after the customer calls the store. If H&A issues a card refund through Stripe, Stripe and the customer's financial institution process the return to the applicable payment method.

Do not put card information in special instructions, delivery instructions, allergy notes, or any other website text field.

Allergy and safety notes

Allergy and safety information is optional and is used to handle the order, alert authorized staff, and document related actions. It may reveal health-related information, so provide only what H&A needs for the order.

Customers with severe food allergies should also tell H&A Deli staff by phone when confirming the order. H&A Deli cannot guarantee an allergen-free or cross-contact-free preparation environment.

This notice does not reduce H&A's food-safety responsibilities. Ask staff when you are uncertain about ingredients or preparation.

Who processes information

If you choose an App Store download link, you leave the website and connect to Apple. Apple handles the store visit and app installation under its own privacy practices. Installing the app is optional; you can continue ordering through the website.

H&A limits access to people and services that need information for the purposes described above. Depending on the interaction, these may include:

• Authorized H&A staff for order handling, delivery, customer service, account management, and security.
• Vercel for website hosting, delivery, request logs, Web Analytics, and BotID security.
• Supabase for customer and staff authentication, customer saved items, the order database, multi-factor authentication, sessions, and access controls.
• Stripe for hosted payment fields, PaymentIntents, payment verification, and signed webhooks when online card payment is offered.
• U.S. Census Bureau for server-side address geocoding to check the delivery radius. Its privacy practices govern requests it receives.
• Apple and Google for optional customer sign-in and identity verification when you choose those methods; Apple Maps also provides address suggestions as described above.
• Apple and Expo for iPhone and iPad app distribution, optional push-notification delivery, device permission controls, secure app storage, and Apple Pay or native platform services when you choose to use them.
• Resend as the email-delivery provider for customer account-verification and password-recovery messages, and staff account-recovery messages. H&A does not currently use Resend to market to customers or send customer order emails.
• Google Maps when the embedded location map loads or you choose an external directions or review link. H&A does not use Google Maps for delivery eligibility, address validation, or delivery pricing.

H&A does not currently use Twilio or another customer SMS provider. The direct-order workflow does not send verification codes, marketing texts, or automated order-status texts; staff use the required phone number for order-related calls.

H&A may also preserve or disclose information when reasonably necessary to comply with law, respond to lawful process, investigate security or fraud, protect a person's safety, or establish or defend legal claims.

Third-party ordering and links

The website links to DoorDash, Uber Eats, Grubhub, Google Maps, and other external services. A link does not send H&A's direct order form to that service, but the external company may collect information after you open its site or app. Its own privacy policy, terms, prices, fees, and security practices apply.

The optional review link opens H&A's public Google Maps listing without putting your order number, cart, tip, contact information or private order-access link in the destination URL. Google may process technical information when you open it. If you post a review, your review and Google profile information may be public under Google's settings and policies, and H&A may read that public feedback. Avoid including private order details or sensitive information in a public review. H&A's checkout does not collect a review or require access to your Google account to offer this link.

How long information is kept

H&A keeps information for as long as reasonably necessary for order operations, store records, security and audit needs, dispute resolution, and legal or business requirements. Retention depends on the record and its purpose; we do not promise a single deletion deadline for all information. The current order system does not apply a fixed automatic deletion period to restaurant transaction records. Completed and canceled orders can remain in order history, and security audit records are designed to be append-only.

Deleting your customer account removes its saved addresses, Favorites, and account links from the active service. Order records may still contain information needed for fulfillment, payment reconciliation, tax records, disputes, fraud prevention, or other legal requirements. Provider backups and security logs may remain subject to their retention schedules and access restrictions. Browser-stored cart and confirmation information follows the browser behavior described above. Service providers may keep logs and service records under their own retention practices. H&A will review a deletion request against operational, security, recordkeeping, and legal needs.

Security

H&A uses safeguards appropriate to this service, including HTTPS in production, authenticated individual staff accounts, authenticator-app MFA, role-based access, Supabase Row Level Security, restricted server credentials, append-only audit records, rate limiting, bot protection, and server-side price validation.

No website or storage system can be guaranteed completely secure. If H&A learns of a security incident, it will evaluate and respond to it under applicable law.

Children and minors

This is a general-audience restaurant website and is not primarily directed to children or designed for children under 13. H&A does not ask users to provide their age and does not use known minors' personal data for targeted advertising, marketing profiling, or sale.

If H&A learns that a website user is under 18, it will limit processing to what is reasonably necessary to provide the requested order or service, operate the business, prevent fraud or security incidents, comply with law, or protect a person's safety, unless another lawful basis and any required consent apply. A parent or guardian with a concern may call H&A.

Your choices and requests

• You may browse and order as a guest. Email is optional for guest direct orders; an email address or supported provider identity is needed for a customer account.
• You may update your display name and manage saved addresses and Favorites in Account settings. Customer account deletion is available in the app and on the website after identity confirmation.
• You can clear local or session storage using your browser settings.
• You can decline app notifications, turn them off later in iPhone or iPad Settings, and continue using the live order-status screen without notifications.
• You can decline location access and type a delivery address manually. You can change location permission later in iPhone or iPad Settings.
• You can use browser privacy settings or content-blocking tools to block third-party embedded content and can choose not to open Google Maps or another external delivery or directions link.
• You may call to ask about, correct, or request deletion of information associated with an order. We verify identity before disclosing or changing private records and assess requests under applicable law. Where the law gives you rights to access, correct, obtain a copy of, or delete information, you may contact us to exercise them. We may retain information when reasonably necessary or legally required and will explain a request we cannot fulfill. Please do not send passwords, verification codes, or full card details.

The website currently has no marketing-email list, targeted advertising, or sale of personal information to opt out of.

Historical group-order records

Group ordering is no longer available. Existing records may include display names, contributed food choices, fulfillment details and protected device credentials. Purchased details may remain on restaurant orders and kitchen tickets.

Abandoned groups become eligible for cleanup seven days after expiry. Finished or canceled groups become eligible after 30 days without an update. Unresolved checkouts and payment holds remain available for recovery. These retention periods can be configured by H&A. Cleanup removes group access and invitation records without deleting restaurant transactions or purchased snapshots. Device sessions expire after 30 days; signing out revokes that device’s access. Contact H&A for help with an existing order or uncertain payment.

Changes and contact

H&A may update this policy when the website, vendors, or legal requirements change. A revised version will be posted here with a new effective date. Material changes will not be applied misleadingly to earlier activity.