Privacy Policy

Last updated: July 7, 2026

This policy describes how McInasal Filipino Grilled Chicken ("we") collects and uses your information when you use our website and online ordering service.

1. Information We Collect

When you order or create an account we collect your name, email address, phone number, delivery address (for delivery orders), and order history. Payment card details are collected and processed directly by Stripe and never touch our servers. We also collect basic usage data (pages visited, device type) to operate and improve the site.

2. How We Use It

We use your information to fulfill orders, send order confirmations and status updates (email/SMS), operate the loyalty program, respond to inquiries, and — only if you subscribe — send marketing messages. We do not sell your personal information.

3. Service Providers

We share data only with providers needed to run the Service: Stripe (payments), Supabase (data hosting), Vercel (website hosting), Resend (email), Twilio (SMS), Square (point of sale and loyalty), and delivery partners (Uber Direct, DoorDash, Shipday) when you choose delivery. Each receives only what it needs to perform its function.

4. Cookies

We use essential cookies to keep you signed in and remember your cart, and basic analytics to understand site usage. You can manage cookies through your browser and the consent banner.

5. Marketing Choices

You can unsubscribe from marketing emails via the link in any message, and from SMS by replying STOP. SMS message frequency varies based on your order and marketing activity; you should expect no more than a few marketing texts per month, plus transactional messages about your own orders. Message and data rates may apply. Transactional messages about an active order are sent regardless of marketing preferences. We do not share or sell your mobile phone number or SMS opt-in consent to third parties or affiliates for their own marketing; mobile opt-in data is used only by us and our SMS provider (Twilio) to deliver order and marketing messages. See our SMS Terms for details.

6. Data Retention & Security

We retain order records as required for accounting and legal purposes. Data is encrypted in transit, access is restricted by role, and we use industry-standard hosting providers.

7. Your Rights

You may request access to, correction of, or deletion of your personal information (subject to legal retention requirements) by contacting us through our Contact page.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect their information.

9. Changes

We may update this policy from time to time; the "Last updated" date reflects the current version.