Elevated Eats

Privacy Policy

Last updated: June 22, 2026

1. Introduction

Elevated Eats (“we,” “us,” or “our”) operates the website at elevatedeatsma.com and related domains (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using the Service, you agree to this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: When you create an account, we collect your name, email address, phone number, and password.
  • Order Information: Delivery address, pickup preferences, order details, special dietary requests, and payment information.
  • Communications: Information you provide when contacting us, including email correspondence and feedback.

2.2 Information from Third-Party Authentication

If you choose to sign in using Google Sign-In or other third-party authentication providers, we receive your name, email address, and profile picture from that provider. We use this information solely to create and manage your account. We do not access your contacts, calendar, or other data from your Google account.

2.3 Information Collected Automatically

  • Usage Data: Pages visited, features used, time spent on the Service, and referring URLs.
  • Device Information: Browser type, operating system, device type, and IP address.
  • Cookies: We use essential cookies for authentication and session management. See Section 6 for details.

3. How We Use Your Information

We use the information we collect to:

  • Process and fulfill your meal prep orders
  • Create and manage your user account
  • Communicate with you about orders, deliveries, and promotions
  • Process payments securely through our payment processors
  • Manage our loyalty rewards program
  • Improve our Service, menu offerings, and user experience
  • Ensure the security and integrity of our Service
  • Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share information with:

  • Payment Processors: Stripe processes payments on our behalf. Their use of your data is governed by their own privacy policy.
  • Authentication Providers: Google (for SSO sign-in). We only receive basic profile information as described in Section 2.2.
  • Service Providers: Hosting, email, and analytics providers who assist in operating our Service, bound by data protection obligations.
  • Legal Requirements: When required by law, court order, or governmental authority.

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure password hashing (bcrypt)
  • Access controls and authentication for administrative functions
  • Regular security reviews of our systems

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking

We use essential cookies required for the Service to function, including authentication session cookies and CSRF protection tokens. These cookies are strictly necessary and cannot be disabled without breaking the Service.

We do not use advertising cookies or sell data to advertisers. We may use basic analytics to understand how our Service is used and to improve it.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate personal data.
  • Deletion: Request deletion of your personal data and account.
  • Data Portability: Request a copy of your data in a portable format.
  • Opt-Out: Unsubscribe from promotional emails at any time using the link in any email.

To exercise any of these rights, please contact us at the email address provided below.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Order history is retained for accounting and legal compliance purposes. You may request account deletion at any time by contacting us.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

10. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: