Privacy, in plain language

What the website collects

The order flow stores contact and Chicago delivery information, plan and menu selections, allergy or sensitivity information, policy acceptance, Square order/payment references, fulfillment state, idempotency keys, notification state, and webhook event IDs in a dedicated transactional database. Contact-form messages are also stored so Semper Fit can respond.

What it does not store

Raw card numbers, security codes, payment credentials, and Square access tokens are never sent to Semper Fit application storage, Sanity, analytics, logs, or email. Square Web Payments tokenizes card details in the secure browser context.

Service providers

Netlify hosts the site and functions; Neon provides transactional database storage; Square processes payment; Resend delivers approved transactional email; and Sanity manages public site content. Each provider processes only the information needed for its role.

Analytics choice

Optional analytics load only after a visitor accepts analytics. Order events exclude names, email addresses, phone numbers, street addresses, allergy text, discount codes, and payment data.

Retention and requests

Semper Fit retains order records as reasonably needed for fulfillment, support, accounting, fraud prevention, disputes, and legal obligations. To ask about access, correction, or deletion, use the public email on the Contact page. Some transaction records may need to be retained when required for legitimate business or legal purposes.