Privacy Policy

1. Introduction

St. Augustine Caterers & Commissary ("Company," "we," "us," or "our") operates the website located at staugustinecaterers.com and the related commissary management platform, client portal, and associated services (collectively, the "Services").

We provide commissary kitchen access, support facility agreements, regulatory licensing assistance, and related business services to mobile food vendors, caterers, food trucks, and other food businesses operating in the State of Florida.

This Privacy Policy explains what personal information we collect, how we use and share it, how we protect it, and the choices and rights available to you. It applies to visitors to our website, applicants, clients, and authorized users of our client portal.

Please read this Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use the Services.

2. Scope of This Policy

This Policy applies to personal information we collect:

• Through staugustinecaterers.com and any subdomains or affiliated location websites we operate;
• Through our client portal, account dashboard, and application forms;
• Through email, telephone, text message, and other communications with us;
• Through in-person interactions at our commissary facilities.

This Policy does not apply to:

• Information collected by third-party websites, payment processors, or services that we link to or that you access independently, each of which is governed by its own privacy policy;
• Information about our employees or job applicants, which is governed by separate internal policies;
• Aggregated or de-identified data that cannot reasonably be linked to an identified or identifiable individual.

3. Information We Collect

3.1 Information You Provide Directly

Account and contact information Full name, business title or role, email address, telephone number, mailing address, username, and password credentials.

Business and regulatory information Legal business name, DBA/fictitious name, entity type (LLC, corporation, sole proprietorship), Employer Identification Number (EIN), business address, county of operation, business classification (including Mobile Food Dispensing Vehicle (MFDV), DBPR-regulated, or FDACS-regulated designations), vehicle or unit descriptions, license and permit numbers, and inspection-related records.

Identity and verification informationGovernment-issued identification (such as driver's license or state ID), and, where required to provide a specific service you have requested (such as entity formation or EIN application assistance), Social Security Number or Individual Taxpayer Identification Number.

Payment and billing information Billing name and address, subscription plan and membership tier, invoice history, transaction records, and payment status. We do not collect, process, or store full payment card numbers, CVV codes, or bank account credentials on our own systems. Card and bank data is transmitted directly to and processed by our third-party payment processor (see Section 5.1).

Documents and agreements Support facility agreements, commissary letters, license applications, certificates of insurance, food manager certifications, signed contracts, and other documents you upload to or generate through the Services, including electronic signatures and associated signing metadata.

Communications The content of emails, contact form submissions, phone call bookings, support requests, and any correspondence you send us, together with our responses.

3.2 Information Collected Automatically

When you access the Services, we and our service providers may automatically collect:

• IP address and approximate geographic region derived from it;
• Browser type and version, operating system, device type, and screen resolution;
• Pages viewed, features used, links clicked, referring and exit URLs, and timestamps;
• Session identifiers, authentication tokens, and error or diagnostic logs;
• Cookies and similar technologies (see Section 7).

3.3 Information From Third Parties

We may receive information about you from:

• Payment processors, including transaction confirmations, subscription status, invoice states, and customer profile identifiers;
• Public records and government databases, including business registration records, license and permit status, and county and municipal records, where relevant to the services you have requested;
• Referral partners and affiliated commissary locations, where you have been referred to us or have engaged our services through them.

3.4 Sensitive Information

Some of the information described above — including Social Security Numbers, taxpayer identification numbers, and government-issued identification numbers — is treated as sensitive under Florida law and other applicable statutes. We collect this information only when it is necessary to deliver a specific service you have requested, we limit internal access to personnel with a business need to know, and we apply heightened safeguards to its storage and transmission.

We do not knowingly collect biometric data, precise geolocation data, health information, or information revealing racial or ethnic origin, religious beliefs, sexual orientation, or immigration status, and we ask that you not submit such information to us unless we have specifically requested it.

4. How We Use Your Information

We use personal information for the following purposes:

We do not use your personal information for automated decision-making that produces legal or similarly significant effects concerning you.

5. How We Share Your Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only as described below.

5.1 Service Providers

We share information with vendors who perform functions on our behalf and are contractually restricted from using it for any other purpose:

• Payment processing — our processor handles card and bank transactions, subscription billing, and invoicing. Payment card data is transmitted directly to the processor under PCI DSS-compliant procedures and is not retained on our systems.
• Email, calendar, and productivity services — used for transactional and service communications, appointment scheduling, and document delivery.
• Cloud hosting and infrastructure — servers, databases, backups, and content delivery.
• Document generation and electronic signature — creating, delivering, and executing agreements and letters.
• Analytics and error monitoring — measuring usage and diagnosing technical faults.

5.2 Government and Regulatory Agencies

Where you have engaged us to assist with a license, permit, or registration, we submit the information you have provided to the relevant agency — which may include the Florida Department of Business and Professional Regulation (DBPR), the Florida Department of Agriculture and Consumer Services (FDACS), the Florida Division of Corporations, the Internal Revenue Service, and county or municipal health, fire, and zoning authorities. We make these submissions at your direction and on your behalf, and only to the extent necessary to complete the service you requested.

5.3 Legal and Safety Disclosures

We may disclose personal information when we believe in good faith that disclosure is necessary to:

• Comply with a subpoena, court order, or other legal process;
• Enforce our Terms of Service or other agreements;
• Investigate or prevent fraud, security incidents, or violations of law;
• Protect the rights, property, or safety of our company, our clients, or the public.

5.4 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a materially different privacy policy.

5.5 With Your Consent

We may share your information for any other purpose disclosed to you at the time of collection or with your subsequent consent.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including:

• Active client records — for the duration of your relationship with us and for a reasonable period afterward to permit reactivation and respond to inquiries;
• Financial and transaction records — for a minimum of seven (7) years, consistent with federal and Florida tax and business recordkeeping requirements;
• Executed agreements and regulatory filings — for the period required by the applicable agency, and thereafter as needed to establish or defend legal claims;
• Security and access logs — typically for twelve (12) months.

When retention is no longer required, we delete the information or de-identify it so that it can no longer reasonably be associated with you.

7. Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies for the following purposes:

• Strictly necessary — maintaining authenticated sessions, enabling secure area access, load balancing, and preventing cross-site request forgery. These cannot be disabled without impairing the Services.
• Functional — remembering language preference, saved settings, and form progress.
• Analytics — understanding aggregate traffic patterns and feature usage so we can improve the Services.

You can configure your browser to refuse or delete cookies. Blocking strictly necessary cookies will prevent you from logging in and using the client portal.

Do Not Track. Because there is no consistent industry standard for interpreting "Do Not Track" browser signals, our Services do not currently respond to them.

8. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit using TLS;
• Encryption or tokenization of sensitive fields at rest;
• Role-based access controls and the principle of least privilege;
• Password hashing using industry-standard algorithms;
• Segregation of client data in our multi-tenant architecture;
• Regular software patching, dependency updates, and logging of administrative actions;
• Contractual security commitments from our service providers;
• Secure disposal of records containing personal information that are no longer needed, consistent with Florida Statutes § 501.171(8).

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly of any suspected unauthorized use of your account.

9. Data Breach Notification

We comply with the Florida Information Protection Act, Florida Statutes § 501.171. In the event of a breach of security involving unencrypted personal information, and where we determine that the breach has resulted in, or is reasonably likely to result in, identity theft or other financial harm, we will:

• Notify affected Florida residents no later than thirty (30) days after determining that a breach occurred;
• Notify the Florida Department of Legal Affairs (Office of the Attorney General) within thirty (30) days if the breach affects 500 or more Florida residents;
• Notify nationwide consumer reporting agencies if the breach affects 1,000 or more individuals;
• Include in our notice the date or date range of the breach, a description of the information involved, and contact information you can use to reach us.

10. Your Choices and Rights

10.1 Choices Available to All Users

Access and correction. You may review and update most account and business information directly through your client portal. For information not editable in the portal, contact us using the methods in Section 13.

Marketing communications. You may opt out of promotional emails at any time by clicking the unsubscribe link in any marketing message or by contacting us directly. We will continue to send you transactional and service-related messages — such as invoices, payment notices, agreement delivery, permit status updates, and account security alerts — because these are necessary to the services you have engaged. These are not marketing messages and cannot be opted out of while your account remains active.

Text messages. If you have consented to receive text messages from us, you may opt out by replying STOP to any message. Message and data rates may apply.

Account closure. You may request closure of your account and deletion of your information by contacting us. We will honor the request except where we are required or permitted to retain information under Section 6.

10.2 Florida Residents

Florida's comprehensive privacy statute, the Florida Digital Bill of Rights (Fla. Stat. §§ 501.701–501.72), imposes direct controller obligations only on businesses meeting statutory revenue thresholds that we do not currently meet. Regardless, we voluntarily extend the following rights to Florida residents:

• The right to confirm whether we process your personal information and to access it;
• The right to correct inaccuracies in your personal information;
• The right to request deletion of your personal information;
• The right to obtain a portable copy of personal information you provided to us, in a readily usable format;
• The right to opt out of the sale of personal information or targeted advertising (note: we do not engage in either);
• The right not to receive discriminatory treatment for exercising these rights.

10.3 Residents of Other States

If you reside in California, Virginia, Colorado, Connecticut, Texas, or another state with a comprehensive consumer privacy law, you may have rights substantially similar to those listed in Section 10.2, and in some cases additional rights (such as the right to appeal a denied request, or the right to limit the use of sensitive personal information). We will honor verifiable requests from residents of these states in accordance with applicable law.

10.4 How to Exercise Your Rights

Submit a request using either of the two methods below:

1. Email: info@staugustinecaterers.com
2. Mail: St. Augustine Caterers & Commissary, Attn: Privacy Request,

To protect your information, we will take reasonable steps to verify your identity before acting on a request — typically by confirming information already associated with your account. If we cannot verify your identity, we may decline the request.

Response time. We will respond within forty-five (45) days of receipt. If we need additional time, we will notify you within that period and may extend our response by up to forty-five (45) additional days.

Appeals. If we decline your request, you may appeal by replying to our decision with the word "APPEAL" in the subject line. We will respond to the appeal within sixty (60) days. If your appeal is denied, you may submit a complaint to the Florida Attorney General at myfloridalegal.com.

Authorized agents. You may designate an authorized agent to submit a request on your behalf. We may require the agent to provide proof of authorization and may require you to verify your own identity directly.

11. Children's Privacy

The Services are intended for business owners and operators and are not directed to individuals under eighteen (18) years of age. We do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act (COPPA), and we do not operate a social media platform subject to Florida Statutes §§ 501.1735 or 501.1736.

If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, contact us using the information in Section 13.

12. Additional Disclosures

Third-party links. The Services may contain links to third-party websites, including government agency portals and payment pages. We are not responsible for the privacy practices of those sites. Review their privacy policies before providing information.

United States processing. We operate in the United States and store and process information there. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those of your jurisdiction.

Multiple locations. We operate commissary services under several affiliated location websites and brands in Florida. This Policy applies uniformly across those properties, and information may be shared among affiliated locations under common ownership to administer your account and provide continuity of service.

Changes to this Policy. We may update this Policy from time to time. When we do, we will revise the "Last Updated" date above. For material changes, we will provide additional notice by email or by a prominent notice within the Services before the change takes effect. We review this Policy at least annually. Your continued use of the Services after a change becomes effective constitutes acceptance of the revised Policy.

13. Contact Us

If you have questions, concerns, or complaints about this Policy or our privacy practices, contact us:

You may also file a complaint with the Florida Attorney General's Office of Consumer Protection at myfloridalegal.com or by calling 1-866-9-NO-SCAM.

This Privacy Policy is provided as a general disclosure of our practices and does not constitute legal advice or create contractual rights beyond those set out in our Terms of Service.