Privacy Policy

Who we are

Kick'n Hibachi, a mobile hibachi catering business operating in [service area]. If you have a question about this policy or about information we hold, contact us at info@kicknhibachi.com or (772) 696-3878.

What we collect

Only what you type into the contact form, and only when you choose to send it:

• Name — so we know who we are replying to
• Email address — to send the reply
• Phone number — optional; used only if details are quicker to settle by phone
• Event date — optional; to check availability
• Reason for contact — so the inquiry reaches the right person
• Your message — whatever you tell us

We do not ask for and have no way to take payment details on this site. There are no accounts, no logins, and no online ordering, so there is nothing to sign up for and no order history to store.

What we do with it

We use it to answer your inquiry and, if you book, to run the event. That is the whole purpose. We do not sell it, rent it, or trade it, and we do not add you to a marketing list because you asked us a question. If we ever start a mailing list, joining it will be a separate, deliberate opt-in.

How long we keep it

Inquiries that do not become bookings

Deleted after [12 months].

Inquiries that become bookings

Kept for [7 years] alongside the rest of the business records for that event, because tax and accounting rules require it.

Who else sees it

The people who run Kick'n Hibachi, and the services we use to receive and store mail:

• [Email provider] — receives and stores the inquiry as an email
• [Website host] — operates the server and keeps standard access logs

We do not hand your information to anyone else unless the law requires it.

Cookies and tracking

We set no cookies of our own and run no analytics or advertising trackers.

Google Maps does set cookies. The home and Find Us pages embed a Google map, and loading it lets Google place cookies and similar identifiers in your browser — as soon as the page loads, before you touch the map.

The Find Us schedule lets you switch the map between the pitches we work. Each day you select loads a fresh map, which is another request to Google carrying your IP address. Selecting days is optional; the map loads once either way.

If your customers are somewhere that requires consent before non-essential cookies are set, the EU and UK among them, [confirm with counsel whether a consent gate is required, or load the map only after a click].

If analytics or a booking tool is added later, this section must be rewritten again first.

Third parties the pages load

Two things on this site reach outside our server, and both mean your browser makes a request that reveals your IP address and rough location to another company:

• Google Fonts — the typefaces load from Google's servers. If you would rather not have visitors' browsers contact Google at all, the fonts can be self-hosted instead, which removes this entirely.
• Google Maps — the embedded map on the home and Find Us pages. Opening a page that carries the map sends your IP address to Google and lets Google set cookies, whether or not you interact with it. Switching between scheduled locations loads a further map each time.

Server logs

Our host records ordinary web server logs — IP address, the page requested, the time, and your browser's user agent. These are used to keep the site running and to investigate abuse, and are kept for [30 days].

Keeping it safe

The site is served over HTTPS. The contact form is validated and rate-limited on the server, and inquiry emails are readable only by the people who need them. No method is perfectly secure, but we do not collect sensitive categories of information in the first place, which is the best protection available.

The embedded map is the only third-party content we load, and it is fenced in:

• A Content-Security-Policy on every page permits framed content from www.google.com and nowhere else, so no other site can be loaded into that frame.
• The map runs in a sandboxed frame with a restricted permission set — it cannot request your location, camera, or microphone, and cannot navigate the page around you.
• Referrer information sent to Google is trimmed to the site origin rather than the full page address.
• Map addresses are validated against a strict allowlist before loading, so a mistake or a tampered record cannot point that frame somewhere else.

Children

This site is aimed at people booking catering. We do not knowingly collect information from children. If you believe a child has sent us something, contact us and we will delete it.

Your choices

You can ask us to show you what we hold about you, correct it, or delete it. Email info@kicknhibachi.com and we will respond within [30 days]. Depending on where you live you may have further rights — [list the specific rights and the regulator to complain to for your jurisdiction].

Changes

If this policy changes we will update the date below. If a change is significant — new tracking, a new third party, a new purpose — we will say so on this page rather than quietly editing it.

Last updated: [date] · Draft version, pending legal review