Privacy Policy

Last updated: September 17, 2026

Paper Bag Sandwich Co. (“Paper Bag Sandwich Co.,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you visit paperbagsandwich.co (the “Site”), how we use it, and the choices you have.

Information we collect

We collect only what we need to respond to you and run our business:

• Information you give us. When you submit a catering request or contact us, we collect the details you provide — such as your name, email address, phone number, event date, and any notes about your order.
• Automatic information. Like most websites, our hosting provider automatically logs basic technical data such as your IP address, browser type, and the pages you view. This helps keep the Site secure and running.

How we use your information

• To respond to catering requests, questions, and messages you send us.
• To prepare quotes and fulfill orders.
• To operate, secure, and improve the Site.
• To send you updates only if you have asked to hear from us.

We do not sell or rent your personal information.

Service providers

We rely on trusted third parties to run the Site and our business — for example, our website host (Netlify), Square (online ordering, payments, and gift cards), and Klaviyo (email and text-message marketing). These providers process information only to provide services to us and are expected to protect it.

Text messages (SMS)

If you provide your mobile phone number and opt in, we use it to send order and catering updates and, where you have agreed, marketing texts, sent through Klaviyo and Square. You can opt out at any time by replying STOP to any message. Message frequency varies and message and data rates may apply.

We do not sell your mobile number, and we do not share it with third parties or affiliates for their own marketing. Mobile opt-in and text-messaging consent are never shared with any third party for marketing purposes.

Cookies

The Site uses minimal cookies and similar technologies needed for the Site to function. We do not use them to build advertising profiles. You can control or delete cookies through your browser settings.

Data retention

We keep the information you send us only as long as needed to respond to your request, fulfill your order, and meet our legal and accounting obligations, after which we delete or anonymize it.

Your choices

You may ask us to access, correct, or delete the personal information we hold about you, or to stop contacting you, by emailing us at the address below. We will respond within a reasonable time.

Children’s privacy

The Site is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Your continued use of the Site means you accept the current version.