Privacy Policy

Information We Collect

Account information

When you create an account you provide your name and email address, and either a password you choose or a Google profile (via Google Sign-In). We store your name, email address, and (when applicable) a hashed password. If you sign in with Google we receive only the profile information Google makes available to us — typically your name and email address.

Order information

When you place an order we record your name, email address, the items ordered (including any customizations or kitchen notes), subtotal, tax, and total amount. If you choose to receive an SMS pickup notification, our payment processor, Stripe, collects the phone number you provide and passes it to us solely for that purpose. We also record the date and time of your SMS consent.

Payment information

Credit and debit card details are entered directly into Stripe’s secure payment form and are never transmitted to or stored on our servers. We retain only the Stripe session ID, payment intent ID, and payment status associated with each order.

Cart contents

Before you check out, your cart is stored only in your browser’s local storage. It is never sent to our servers until you begin checkout.

Session and usage data

When you log in we create a session record that includes a secure token, your IP address, and your browser’s user-agent string. This information is used solely to keep you logged in and to detect unusual activity. We do not currently use any third-party analytics or advertising tracking on this site.

How We Use Your Information

• To create and manage your account and authenticate you when you sign in.
• To process and fulfill your pickup orders and calculate the correct Indiana sales tax.
• If you opt in, to send you a single text message notifying you when your order is ready for pickup (see SMS section below).
• To communicate with you about your order if there is a problem.
• To operate and improve the reliability and security of this website.

We do not use your information for advertising, sell it to data brokers, or share it with any party except as described in this policy.

Text Message (SMS) Notifications

SMS notifications are optional. You consent only when you affirmatively check the SMS consent box during checkout; the box is unchecked by default. Placing an order, providing a phone number, or accepting our Terms does not by itself constitute SMS consent. If you opt in, you agree to receive one automated text message from Tienda & Tacos when that order is ready for pickup. This is a transactional message only — we do not send marketing or promotional texts.

• Message content: Your order number and a ready-for-pickup notice with our address.
• Frequency: One message per order.
• Message and data rates may apply depending on your carrier plan.
• To opt out: Reply STOP to any message we send and you will receive no further texts. You may also contact us directly (see below) to request removal.
• Help: Reply HELP for assistance or contact us directly.
• Consent is not a condition of purchase. You can complete your order without checking the SMS consent box.

Text messages are delivered through Telnyx LLC. Your phone number, order number, and the content of the notification are shared with Telnyx solely to deliver and operate this messaging service.

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. We will not share your SMS opt-in or consent status with third parties for purposes unrelated to providing the messaging service. We may share that information with Telnyx, phone carriers, and other vendors only as needed to deliver the messages you requested.

Third Parties We Share Data With

We share the minimum information necessary with the following service providers to operate this website:

We may also disclose your information if required by law, court order, or government authority, or to protect the rights and safety of our customers, staff, or the public.

Cookies and Local Storage

We use a single session cookie to keep you logged in to your account. This cookie is strictly necessary for authentication and does not track you across other websites. We do not use advertising cookies, analytics cookies, or any third-party tracking cookies.

Your cart is stored in your browser’s local storage (not a cookie) and remains entirely on your device until you proceed to checkout.

Data Retention

We retain account information and order history for as long as your account is active, or as needed for tax, accounting, and legal compliance. If you request account deletion, we will remove your personal information from our active systems within a reasonable time, subject to any legal retention obligations.

Children’s Privacy

This website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently done so, we will promptly delete that information.

Your Rights and Choices

You may request to access, correct, or delete the personal information we hold about you at any time by contacting us using the information below. We will respond within a reasonable timeframe. Note that deleting your account will not delete historical order records that may be required for tax or legal purposes.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Continued use of the site after a change constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, please reach out to us: