1. Information we collect

When you interact with our website or contact us directly, we may collect:

Name, email address, and phone number submitted through our contact or inquiry forms, or by email.
Event details you share when you inquire, such as event type, date, guest count, and venue.
Any other information you choose to provide in your message.

If you apply for a role through our careers page, we collect:

Full name, email address, and phone number.
Your résumé and any supporting documents you upload.
Roles of interest and relevant work experience.
Any biographical or background information you voluntarily provide.
Referral information, if you were referred by a current team member.

Like most websites, our site automatically collects certain technical data when you visit, including your IP address, browser type, pages visited, and the date and time of your visit. This data is used to keep the site secure and functioning correctly. If you consent to analytics (see Section 5), we also use analytics services to understand, in aggregate, how visitors find and move through the site. We do not use this data to identify you personally.

2. How we use your information

We use the information we collect to:

Respond to your inquiries and communicate with you about our services, by email or phone, including preparing a proposal for your event.
Review and evaluate job applications and contact candidates.
Maintain records of our hiring process.
Comply with applicable legal obligations.
Protect the security and integrity of our website and systems.
With your consent, measure how our website is used so we can improve it.

A phone number is required when you submit an event inquiry so we can reach you about it. Any phone number you provide is used only to contact you about your inquiry or application, by phone or email. We do not send marketing or promotional text messages.

We do not use your information for automated decision-making or profiling, and we do not use job application data for any purpose other than evaluating your candidacy.

3. How we share your information

We do not sell, rent, or share your personal information with third parties for their own commercial purposes. We may share your information only in the following limited circumstances:

Service providers. We use Firebase (Google) to securely store the information you submit and to power our forms and hosting, and SendGrid (Twilio) to deliver the emails we send, including your inquiry or application confirmation and the internal notification to our team. These providers process data on our behalf under strict confidentiality obligations and are not permitted to use your data for their own purposes.
Analytics providers. If you grant analytics consent, Google Analytics 4 (Google LLC) and Microsoft Clarity (Microsoft Corporation) receive site-usage data, such as the pages you view, approximate location derived from your IP address, device and browser type, and on-page interactions, so we can understand how the site performs. These services set their own cookies, process this data under their respective privacy terms, and do not load or store anything unless you opt in. We enable IP anonymization in Google Analytics and do not use its advertising features.
Legal requirements. We may disclose information if required to do so by law, court order, or governmental authority, or where we believe disclosure is necessary to protect our rights or the safety of others.
Business transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs.

4. Data retention

We retain personal information only for as long as necessary for the purposes described in this policy:

Contact and inquiry data is retained for up to 2 years.
Job application data (including résumés) is retained for up to 12 months from the date of submission, unless you are hired, in which case your information is incorporated into your employment record and subject to our employment data retention practices.

You may request deletion of your data at any time by contacting us at the address below.

5. Cookies and browser storage

Our website uses browser storage in two categories: storage that is strictly necessary for the site to work, and optional analytics that load only if you consent. We do not use cookies or browser storage for advertising.

Strictly necessary (always on):

Firebase (Google LLC). We use Google Firebase to power our inquiry and job-application forms, store the information you submit, and connect to our staffing system. Firebase may store session tokens and cached data in your browser's localStorage and IndexedDB. This storage is required for the forms to function.
Consent preference. We save your cookie and analytics choice in your browser so we can honor it on your next visit.
Typefaces. Our fonts are served directly from our own domain, your browser does not contact Google's servers to load them, and no font-related cookies are set.

Analytics (optional, off unless you opt in):

Google Analytics 4 (Google LLC) and Microsoft Clarity (Microsoft Corporation). If you accept analytics, these services set cookies and use browser storage to measure how the site is used, such as pages viewed, approximate location, device and browser type, and on-page interactions like clicks and scrolling. Microsoft Clarity also records anonymized session replays and heatmaps. Neither service loads, and neither sets any storage, unless you opt in.

You can grant or withdraw analytics consent at any time through the "Your Privacy Choices" link in the footer. We also honor the Global Privacy Control (GPC) signal if your browser sends one. Declining or withdrawing analytics does not affect the strictly necessary storage the site needs to function. You can clear localStorage and cookies at any time through your browser settings; for more information on managing cookies, visit allaboutcookies.org.

This policy covers alexandradettori.com. Job applications are processed through our staffing system (staffing.alexandradettori.com), which runs on the same Firebase backend; this policy applies to that data as well.

6. Third-party websites and links

Our website may contain links to external websites and social media platforms that we do not operate or control. This policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the content, practices, or policies of any linked sites.

7. Children's privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.

8. Data security

We take reasonable technical and organizational measures to protect the personal information we hold against unauthorized access, loss, or misuse. Data is stored using Google Firebase, which maintains industry-standard security certifications. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. We recommend that you avoid sending sensitive personal information through unsecured channels.

9. California privacy rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you specific rights regarding your personal information. We do not sell or share your personal information with third parties for commercial purposes, including job applicant data.

Your rights as a California resident:

Right to Know, you may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we have shared it.
Right to Delete, you may request that we delete personal information we have collected from you, subject to certain exceptions permitted by law.
Right to Correct, you may request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sale or Sharing, you have the right to direct us not to sell or share your personal information. As noted above, we do not engage in such practices, but you may submit a request at any time.
Right to Limit Use of Sensitive Personal Information, to the extent we collect information that qualifies as sensitive under the CPRA, you may request that we limit its use to what is necessary to provide our services.
Right to Non-Discrimination, we will not discriminate against you for exercising any of your rights under California law.

To submit a request, contact us by either of the following methods:

Email: hello@alexandradettori.com, use the subject line "California Privacy Request".
Mail: BAB Food LLC, 34 Van Dyke Street, Brooklyn, NY 11231.

We will acknowledge your request within 10 business days and respond within 45 calendar days. If we need additional time, we will notify you of the extension and the reason for it. We may ask you to verify your identity before processing your request.

10. Changes to this policy

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last revised" date at the top of this page. Where required by law, we will provide additional notice (such as an email notification). Your continued use of our website following the posting of changes constitutes your acceptance of the updated policy.

11. How to contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: hello@alexandradettori.com
Mail: BAB Food LLC, 34 Van Dyke Street, Brooklyn, NY 11231