Privacy
policy.
What we collect, what we do not, and how to tell us to stop. In plain language.
Last updated: August 6, 2026
This policy explains what Golden Shawarma collects when you use goldenshawarmatx.com, why, and what you can ask us to do about it. We have tried to write it in plain language rather than legal boilerplate.
Who we are
Golden Shawarma, 930 E Campbell Rd, Suite 108, Richardson, TX 75081, United States.
Phone: (214) 272-3734
Email: info@goldenshawarmatx.com
For anything in this policy, contact us at the email above and write “Privacy” in the subject line.
What we collect
Nothing at all, unless you act. This site has no account system, no login, and no database of visitors. Specifically:
- If you fill in the catering form: the name, email, phone, date, headcount and message you type. We use it to send you a quote and to arrange the order.
- If you allow analytics cookies: anonymised, aggregated statistics about which pages and dishes get viewed. Your IP address is truncated before it reaches us.
- If you allow marketing cookies: an identifier that lets Google and Meta tell us that an ad led to a visit, and show our ads to people with similar interests.
- Always: our host records standard server logs (IP address, browser, page requested) for security and to keep the site online. These are not linked to you and are not used for marketing.
We do not collect payment information. Ordering and payment happen on Clover's system, not here.
Cookies and your choice
When you first arrive you are asked to choose. Analytics and marketing cookies are switched off until you accept them — not merely unused, but blocked from storing anything, using Google Consent Mode. If you reject them, no analytics or advertising identifier is written.
You can change your mind at any time using in the footer of every page. Full detail is in our cookie policy.
Who else receives data
We do not sell your personal information. We do use these services, each of which receives only what it needs:
- Google Analytics 4 and Google Ads — visit statistics and ad measurement, only with your consent.
- Meta (Facebook, Instagram) — ad measurement, only with your marketing consent. The pixel is not even loaded until then.
- Formspree — delivers the catering form to our inbox.
- Clover — takes online orders and payment. Their privacy terms govern what happens once you click through.
- DoorDash, Uber Eats, Grubhub — if you choose delivery, their own terms apply on their sites.
- Google Fonts and OpenStreetMap — serve the typefaces and the map. Both see your IP address as part of loading.
Under California law, letting an advertising partner measure conversions can count as “sharing” for cross-context behavioural advertising. Rejecting marketing cookies, or using , is how you opt out. That is our “Do Not Sell or Share My Personal Information” control.
How long we keep it
- Catering enquiries: up to 24 months in our email, so we can handle repeat orders. Ask us and we will delete yours sooner.
- Analytics: 14 months, then automatically deleted by Google.
- Server logs: typically 30 days.
- Your cookie choice: stored in your own browser for 12 months. It never leaves your device.
Your rights
Wherever you live, you can ask us to show you what we hold about you, correct it, or delete it. Email us and we will respond within 45 days.
Texas residents have rights under the Texas Data Privacy and Security Act, including access, correction, deletion, portability, and to opt out of targeted advertising. California residents have rights under the CCPA/CPRA, including to know, delete, correct, and to opt out of sale or sharing; we will not discriminate against you for exercising them. Visitors in the UK or EU have rights under the GDPR, including access, rectification, erasure, restriction, portability, and objection, and may complain to your local supervisory authority.
Children
This site is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has sent us something, email us and we will delete it.
Security
The site is served over HTTPS only, with HSTS. There is no login, no customer database and no stored payment data on this site, which means there is very little here to compromise. No method of transmission over the internet is completely secure, so we cannot promise absolute security.
Changes
If we change this policy we will update the date at the top. A material change to how cookies work will also make the consent banner ask you again, so your old choice is never carried over silently.