Privacy Policy

The short version

We collect only what we need to make your order, answer your catering request and send the messages you asked for. We do not sell your personal information. We do not share your mobile number or your text-message consent with anyone for their marketing.

What we collect

• When you order online: your name, mobile number, email address, what you ordered, any notes you add, your pickup time and the order total.
• Payment: your card details go straight from your browser to Clover, our payment processor. We never see or store your full card number.
• When you request catering: your name, contact details and what you tell us about your event.
• When you buy a gift card: your name and email, the name and email of the person it is for, and your message. We keep the card’s balance and when it was used.
• When you join the Text Club: your mobile number, your first name if you give it, and a record of the consent you gave (the exact wording you agreed to, when, and on which page).
• When you contact us: whatever you send us by phone, text, WhatsApp or email.
• Automatically: basic technical information that every website receives, such as your IP address, browser type and the pages requested. Our hosting provider keeps this in short-lived logs for security and troubleshooting.

How we use it

• To prepare your order, take payment and have it ready on time.
• To send your order confirmation, and one follow-up email asking how your order was.
• To reply to catering requests and questions.
• To send Text Club messages, only if you signed up for them.
• To prevent fraud, fix problems and keep the site secure.
• To keep the business records the law requires, such as sales records.

Text messages

We text you only if you gave us your number for that purpose. Marketing texts go only to people who joined the Text Club. Details, including how to stop, are in our Text Message Terms.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-message opt-in data and consent are never shared with or sold to any third party. We share your number only with the service providers that deliver our messages for us, and only for that purpose.

Who we share it with

We use a small number of companies to run our ordering and messages. They may handle your information only to provide their service to us:

• Clover (payments, and the order system in our kitchen)
• Vercel (website hosting)
• Supabase (the database where order and sign-up records are stored)
• Resend (order confirmation and follow-up emails)
• Twilio (text messages, when you have asked for them)
• Google (Google Analytics, to measure how the site is used)
• Meta (Facebook and Instagram, to measure and show our ads)

If you order through DoorDash or Uber Eats, your information is handled under their privacy policies. We may also share information when the law requires it, or to protect our guests, staff or business. We do not sell personal information.

Cookies, analytics and advertising

The ordering page uses your browser's storage to remember your cart on your own device. Clover sets what it needs to process a card payment securely.

Google Analytics. We use Google Analytics to understand how people use this site: which pages are visited, how visitors found us, and whether an order, catering request or Text Club sign-up went through (with the order total, never your card or contact details). Google Analytics uses cookies and records information such as pages viewed, approximate location (city level), and device and browser type. We have turned off Google signals and ad personalization for this data. Google handles it under the Google Privacy Policy. You can opt out with Google's opt-out browser add-on.

Meta (Facebook and Instagram). We use the Meta pixel to measure our ads and to show our ads to people who visited this site. It uses cookies and tells Meta which pages were visited and whether an order or request was completed (with the order total). This may count as sharing for targeted advertising under some state laws. You can turn it off: we do not load it in browsers that send a Global Privacy Control signal, and you can turn off advertising on this browser.

101 Okey scoreboard. Names and scores stay on your own phone. When you finish a game, we count one game for your country, using the approximate location our hosting provider works out from your connection. We use the same approximate location (state level) to decide whether to show Ottoman Kitchen offers for the DC area. We don't store your IP address or location.

How long we keep it

We keep order records for as long as tax and accounting rules require. We keep Text Club records, including proof of consent and opt-outs, for as long as you are a member and for a period afterward to show that we followed the rules. Catering requests are kept so we can follow up and plan repeat events. You can ask us to delete information we no longer need.

Your choices

• Stop texts: reply STOP to any text from us.
• Advertising: turn off the Meta pixel on this browser. We also honor the Global Privacy Control signal.
• Analytics: install Google's opt-out add-on, or block cookies in your browser settings.
• Stop emails: reply to the email and tell us, or contact us below. Order confirmations are sent for every order you place.
• See, correct or delete your information: contact us and we will help. Depending on where you live, you may have additional legal rights over your personal information, and we will honor them.

Children

Our website and online ordering are meant for adults. We do not knowingly collect personal information from children under 13.

Changes to this policy

If we change how we handle personal information, we will update this page and the date at the top.

Contact us

Ottoman Kitchen
4300 Chantilly Shopping Center, Suite 1N, Chantilly, VA 20151
Phone or text: (571) 287-7278
Email: ottomankitchen15@gmail.com