Privacy Policy

The Good Lunch (TGL) — Group Order App

Effective Date: 6-1-2025

Privacy Policy

This Privacy Policy (“Privacy Policy” or “Policy”) describes how The Good Lunch (“TGL,” “we,” “us,” or “our”) collects, uses, discloses, and protects information from users (“users,” “you”). This Policy applies to information collected through all our digital and physical services, collectively referred to as the “TGL App” in this Policy. This includes our mobile application, website (eatgoodlunch.com), and all other services we provide to users.

1. Information We Collect

TGL may collect the following categories of information when you access or use the TGL App:

a. Personal Information which falls into categories such as identifiers and customer records information:

  • First and last name
  • Email address
  • Company affiliation and work location
  • Phone number (when provided)
  • Delivery addresses and locations
  • Order history and selections
  • Payment information (when applicable)

b. Technical and Usage Data:

  • Device identifiers and technical logs
  • IP address and browser information
  • App and website usage patterns
  • Login activity and session information
  • Cookies and similar tracking technologies
  • Anonymized analytics data

c. Information From Third Parties:

  • Employee information provided by client companies
  • Delivery logistics information from service partners
  • Publicly available information relevant to service provision

Any information TGL obtains from third parties will be treated in accordance with this Policy.

2. Purpose of Collection and Use

TGL collects and uses the information above for the following purposes:

a. Service Delivery and Operations:

  • Processing and fulfilling meal orders and catering services
  • Coordinating deliveries and managing logistics
  • Personalizing menu options based on dietary preferences
  • Communicating order confirmations and updates
  • Managing accounts and maintaining service records

b. Business Operations and Communications:

  • Sending invoice and payment information
  • Providing customer service and technical support
  • Analyzing usage patterns to improve our services
  • Communicating service updates and operational changes
  • Managing relationships with client companies

c. Marketing and Engagement:

  • Informing you about new menu options and seasonal offerings
  • Sharing updates about TGL services you might be interested in
  • Conducting surveys and collecting feedback to improve our services - Sending promotional communications about special events or programs - Providing information about new features or enhancements

3. Information Sharing and Disclosure

TGL does not sell or rent your personal information to third parties. TGL may share user data only as necessary in the following limited circumstances:

a. Service Providers and Partners:

  • With payment processors to facilitate transactions

  • With delivery and logistics partners to fulfill orders

  • With technology providers that support our app and website operations - With cloud storage and hosting services that store TGL data

  • With analytics providers to help improve our services

b. Client Company Administrators:

  • With your employer’s designated program administrators responsible for overseeing the meal program

  • With facility management to coordinate deliveries and access

  • With authorized company representatives as specified in service agreements c. Legal and Compliance Requirements:

  • When required to comply with applicable law, regulation, or legal process - To respond to valid governmental requests or court orders

  • To protect TGL’s rights, property, or safety

  • To detect, prevent, or address fraud, security, or technical issues

When your information is shared with third parties, that information becomes subject to their privacy policies. Upon request, TGL can provide additional information about the specific third-party service providers with whom we share personal information.

4. Automatically Collected Information

When you use the TGL App or website, certain technical information may be automatically collected:

a. Device Information:

  • Device type and operating system
  • Mobile device identifiers (for app users)
  • Browser type and version (for website users)

b. Connection Data:

  • IP address
  • Access timestamps
  • Referring website addresses (when applicable)

c. Basic Usage Data:

  • App or website crashes and errors
  • General session information
  • Basic interaction metrics

This automatically collected information is used for operating and maintaining our services, troubleshooting technical issues, ensuring security, and analyzing basic usage patterns to improve functionality.

5. Cookies

The TGL App and website use “cookies” and similar technologies to enhance functionality and personalize your experience. A cookie is a small text file that may be stored on your device when you visit our website. These technologies cannot run programs or deliver viruses to your device. TGL uses the following types of cookies:

a. Essential/Functional Cookies:

  • Necessary for our services to function properly
  • Enable basic functions like order processing, secure login, and account access - Remember your preferences to simplify your experience on return visits - Maintain your session and authentication status

b. Analytics Cookies:

  • Help TGL understand how users interact with our digital services
  • Collect and report information anonymously to improve functionality
  • Assist in identifying technical issues and enhancing user experience
  • Provide insights into popular features and service usage patterns

You have the ability to accept or decline cookies through your device or browser settings. Most web browsers automatically accept cookies, but you can usually modify your settings to decline them if you prefer. The TGL mobile app may use similar technologies to cookies for the same purposes. Please note that if you choose to decline certain cookies, especially essential ones, you may not be able to fully access or use all features of the TGL App or website.

The TGL website does not currently respond to “Do Not Track” (DNT) signals or other similar mechanisms. You can enable or disable the DNT setting in your web browser, which will communicate your preference to websites you visit. However, please note that enabling DNT may not affect all data collection by TGL’s digital services.

The TGL App and website may contain links to other websites or services. Please be aware that TGL is not responsible for the content or privacy practices of such other sites. These third-party websites have separate and independent privacy policies. TGL encourages you to be aware when you leave our digital services and to read the privacy statements of any other site that collects personally identifiable information.

TGL has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party sites or services. Accessing external links is at your own risk, and TGL is not liable for any damages or losses arising from your use of external websites or services linked from our platforms.

7. Data Security

TGL employs commercially reasonable security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. We implement appropriate administrative, technical, and physical safeguards designed to protect the data we collect and maintain.

While we take steps to protect your personal information, no method of electronic storage or transmission over the internet is completely secure. Therefore, while TGL strives to use commercially reasonable means to protect your personal information, we cannot guarantee its absolute security. You acknowledge that: (i) there are security and privacy limitations inherent to digital communications which are beyond TGL’s control, and (ii) the security, integrity, and privacy of information exchanged between you and TGL cannot be guaranteed to be completely secure.

In the event of a data breach that affects your personal information, TGL will notify affected users and relevant authorities in accordance with applicable laws.

8. Data Retention

TGL retains your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal information, TGL considers:

a. Retention Factors:

  • The amount, nature, and sensitivity of the personal information
  • The potential risk of harm from unauthorized use or disclosure
  • The purposes for which we process your personal information
  • Whether those purposes can be achieved through other means
  • Applicable legal, regulatory, or contractual requirements

After the applicable retention period expires, your personal information will be securely deleted or anonymized so that it can no longer be associated with you, unless the law allows or requires TGL to preserve certain information, including in the context of an ongoing or anticipated legal proceeding.

You may request deletion of your personal information by contacting TGL in the Contact Information section below. We will respond to such requests in accordance with applicable data protection laws.

9. User Rights

Depending on your location, you may be entitled to certain rights regarding your personal information under the California Consumer Privacy Act (CCPA) or other relevant laws. These may include:

a. Right to Know: You may have the right to request information about the personal information we collect, use, disclose, or share.

b. Right to Access: You may have the right to request access to your personal information in a portable format.

c. Right to Delete: You may have the right to request deletion of your personal information. Please note that TGL may not be able to comply with deletion requests if the information is necessary to:

  • Complete transactions or provide services you’ve requested
  • Detect security incidents or protect against fraudulent activity
  • Debug or repair errors in our systems
  • Comply with legal obligations
  • Fulfill other legitimate business purposes permitted by law

d. Right to Correct: You may have the right to request correction of inaccurate personal information.

e. Right to Limit Use of Sensitive Personal Information: Under applicable laws, you may have the right to limit the use and disclosure of sensitive personal information. You may request that we limit the use of such information to purposes necessary to provide the services you have requested.

f. Right to Opt-Out: You may have the right to opt-out of certain sharing of your personal information.

g. Right to Opt-Out of Automated Decision-Making: You may have the right to opt-out of decisions based solely on automated processing of your personal information that could significantly affect you.

h. Right to Non-Discrimination: TGL will not discriminate against you for exercising your privacy rights.

To exercise these rights, you or your authorized agent can submit a verifiable request by contacting TGL via the information provided in the Contact Information section at the end of this Policy. We will respond to verifiable requests within 30 days, unless we notify you that we require additional time. If we deny your request, you have the right to appeal our decision. To submit an appeal, please contact us using the same method you used for your initial request, clearly stating that you wish to appeal our decision. We will respond to your appeal within 30 days. Please note that these rights are not absolute and may be subject to limitations or exceptions under applicable law.

10. Sensitive Personal Information

TGL collects payment information, such as credit card authorization data or ACH payment details, only when necessary to process transactions for our services. This payment information is handled with industry standard security measures and is only used for the specific purpose of processing authorized payments.

TGL does not intentionally collect other categories of sensitive personal information (such as health data, biometric information, or government identifiers) through any of our services. Any such information that might be incidentally provided, such as dietary restrictions or health-related food allergies shared during the ordering process, is used solely for the purpose of fulfilling your specific food service requests.

Under the California Consumer Privacy Act (CCPA) and similar state laws, dietary restrictions related to health conditions may qualify as sensitive personal information. You have the right to limit the use and disclosure of such information to what is necessary to provide the meal services you’ve requested. TGL retains this information only for as long as necessary to fulfill your orders and comply with any applicable legal requirements. To exercise your rights regarding sensitive personal information, please contact us using the information in the Contact Information section below.

All payment information and any incidentally collected sensitive information is protected using appropriate security measures and is retained only for as long as necessary to fulfill the transaction or comply with legal obligations. If TGL’s practices regarding sensitive information change, this Privacy Policy will be updated accordingly.

11. Children’s Privacy

TGL’s services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from anyone under 13 years of age. The TGL App and services are designed for use by adults in workplace and professional settings. If you are under 13, please do not attempt to register for or otherwise use our services or send any personal information about yourself to us. If we learn that we have collected personal information from someone under 13 years of age, we will take steps to delete that information as quickly as possible. Parents or legal guardians who believe that a minor under 13 may have provided us with personal information should contact us immediately using the information provided in the Contact Information section at the end of this Policy.

12. Changes to This Privacy Policy

TGL reserves the right to modify or update this Privacy Policy at any time. When we make changes to this Policy, we will post the revised Policy on our website and/or within the TGL App.

For significant changes that materially alter your privacy rights, TGL will make reasonable efforts to notify you by means such as prominent notice within the TGL App or website, email notification to registered users, or other appropriate communication channels. Minor changes, such as clarifications or updates that do not reduce your privacy rights, may be made without direct notification.

Your continued use of TGL’s services after such modifications will constitute your acknowledgment of the modified Privacy Policy and your agreement to abide by and be bound by its terms. We encourage you to review this Privacy Policy periodically to stay informed about how TGL protects your information.

13. Contact Information

For questions or requests regarding this Privacy Policy, please contact:

The Good Lunch

Email: support@eatgoodlunch.com

Phone:650-394-5518

Website: www.eatgoodlunch.com