Privacy Policy

Who we are

Primo Thunder Market & Bakery ("Primo Thunder Market," "we," "us") is a Mexican market, bakery, restaurant and catering business at 2810 Thunder Drive #B, Oceanside, CA 92056. This policy covers our website, primothundermarketoceanside.com, and the Primo Thunder Market mobile app for iPhone and Android (the "App"), which lets you order food for pickup.

The short version: we collect only what we need to take your order and reach you about it. We don't sell your information, and we don't use it for advertising.

Information we collect

When you create an account in the App

• Your name (first and last)
• Email address
• Mobile phone number
• Password. Your password is handled by our sign-in provider and stored in encrypted form. We can't see it.
• Your text message preference (whether you opted in to texts about specials and deals)

When you place an order

• The items you order, your choices (such as meat and extras), quantities and any special instructions or notes
• The pickup name, phone number and pickup time you choose
• Your order total, order number, status (received, preparing, ready, picked up or cancelled) and when the order was placed

Saved on your phone only

The App stores your cart and your language choice (English or Español) on your device so they're there next time you open it. This information doesn't leave your phone.

What we don't collect

The App doesn't access your location, contacts, camera, microphone or photos, and it doesn't track you across other apps or websites. We don't collect card or bank details (see Payments).

When you visit our website

Like most websites, our web host automatically logs basic technical information such as your IP address, browser type and the pages you visit, to keep the site running and secure. Our site shows an embedded Google Map and our Instagram feed. Google and Instagram may set their own cookies under their own privacy policies. The App also loads our menu photos and videos from our website, so our web host sees a standard request from your device when it does.

How we use your information

• To create and manage your account and let you sign in
• To receive, prepare and hand off your order, and show you its status in the App
• To contact you about your order, for example if we have a question or an item is unavailable
• To send you texts about daily specials and deals, only if you opted in
• To answer your questions and provide customer service
• To keep basic records for accounting and taxes
• To protect our business, our customers and the App from fraud or misuse, and to follow the law

Only our staff who handle orders can see your orders, and only on signed-in staff accounts that we approve.

Text messages

When you create an account, you can choose to get text messages about daily specials and deals. You can change this at any time in the App under Account.

• Agreeing to texts is never required to place an order.
• Message frequency varies. Message and data rates may apply.
• Reply STOP to any message to stop receiving texts, or HELP for help.
• We may still contact you about an order you placed, since that's part of filling it.

We will never sell, rent or share your mobile number or text message opt-in with third parties or affiliates for their own marketing. Text messaging opt-in data and consent are not shared with any third party.

Who we share it with

We don't sell or rent your personal information. We share it only in these cases:

• Service providers who run the App and website for us. Google Firebase stores accounts and orders, with data kept in the United States. Our web hosting provider runs the website. If we send texts, a text messaging provider delivers them. These providers may use your information only to provide their service to us.
• Legal reasons. We may share information if the law requires it, or to protect the rights, property or safety of our customers, our staff or our business.
• Business changes. If Primo Thunder Market is sold or merged, customer information may transfer to the new owner, who must continue to protect it under this policy.

Payments

Right now, orders placed in the App are paid at pickup, by cash or card at our counter. The App doesn't collect or store any card or bank information. If we add in-app payments later, a secure payment processor will handle your card details, and we'll update this policy before that happens.

How long we keep it

• Account information is kept while your account is open. When you delete your account, your profile and sign-in are deleted.
• Order records are kept for our accounting and tax records, generally up to 4 years, and then deleted. Once your account is deleted, they're no longer connected to an account you can sign in to.
• Website logs are kept by our web host for a limited time for security and troubleshooting.

Your choices and deleting your account

• See and update your details: In the App, go to Account to change your name, phone number and text preference.
• Delete your account: In the App, go to Account → Delete my account. This permanently deletes your profile and sign-in. You can also ask us to delete it by emailing info@primothundermarketoceanside.com or calling (760) 639-6390.
• Stop texts: Reply STOP, or turn off texts under Account.
• Ask what we have: Contact us and we'll tell you what information we hold about you.

California privacy rights

If you live in California, you have the right to:

• Know what personal information we collect, use and share about you
• Ask us to delete your personal information, with some exceptions such as records we must keep by law
• Ask us to correct inaccurate information
• Not be treated differently for using these rights

We don't sell your personal information, and we don't share it for targeted (cross-context behavioral) advertising. We don't use sensitive personal information to infer anything about you. To make a request, email info@primothundermarketoceanside.com or call (760) 639-6390. We'll need to confirm it's you, usually by matching the email and phone number on your account, and we'll respond within 45 days.

How we protect it

Information sent between the App and our systems is encrypted in transit. Accounts and orders are stored with Google Firebase, which encrypts data at rest. Access rules make sure customers can see only their own orders and only approved staff can see the kitchen order list. No system is perfectly secure, so please use a strong password that you don't use anywhere else. If you think your account has been compromised, contact us right away.

Children

Our website and App are not directed to children under 13, and we don't knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we'll delete it.

Changes and contact

We may update this policy from time to time. When we do, we'll change the effective date at the top of this page, and for significant changes we'll let you know in the App or on our website.