Privacy Policy

Who we are

SeoulSpice operates seoulspice.com. On the site you can look up our food and locations, order for pickup, join SeoulSpice Rewards and sign up for our emails. In this policy, “SeoulSpice,” “we” and “us” mean the company that runs the site.

You can reach us at hello@seoulspice.com.

What we collect

What you give us

• Orders. Your name, phone number and email, the store you pick, what you order, your pickup time and your total.
• Payments. You enter your card number into a payment form run by Square. SeoulSpice never sees or stores your full card number. Square tells us the card brand and the last four digits so we can show them on your receipt. Apple Pay and gift cards also go through Square.
• Rewards. Your phone number, which connects you to your Hearts and rewards in Square Loyalty.
• Guest accounts. You log in with your phone number and a code we text you. We keep your name, email, birthday (if you add it), order history, saved favorites and any ratings you leave. If Square already has your name, email or birthday from a visit to a store, we use it to fill in your account.
• Sign-ups. Your email address when you join our list. If you choose to, you can also share your birthday and phone number.
• Ideas and messages. Anything you send us, such as where we should open next, and an email address if you give one.
• Apple Wallet. If you add your rewards card to Apple Wallet, we keep what Apple sends us, such as a device token, so the Hearts count on your card stays current.

What we collect automatically

When you visit seoulspice.com, we and the tools we use collect:

• Your IP address, and the type of device, browser and operating system you use.
• The pages you view, the links you click and the page that sent you to us.
• The date and time of your visit, and a general location based on your IP address.

This happens through our hosting provider, cookies, pixels and similar technology. We also set a few cookies of our own and use your browser’s storage. They keep you logged in (up to 30 days), remember your rewards number (up to 30 days), confirm a texted code (about 30 minutes), hold your bag while you order, remember the ad or link that brought you to us (up to 90 days) and remember your privacy choice (one year). See Cookies, analytics and advertising for the rest.

How we use your information

We use your information to:

• Take, prepare and confirm your orders, and give you pickup updates.
• Run SeoulSpice Rewards, including your Hearts, rewards and birthday treat.
• Answer your questions and fix problems.
• Send you the emails and texts you asked for, with your consent.
• Measure and improve our ads and our site.
• Keep our site, your account and our guests safe, and prevent fraud and misuse.
• Follow the law and enforce our terms.

Cookies, analytics and advertising

We use Google Analytics and Google Tag Manager to see how people use our site, and the Meta Pixel to measure our ads on Facebook and Instagram. These tools set cookies and receive information such as your IP address, your device and browser, the pages you view, and what you do on them, like adding an item to your bag or placing an order.

We also send some order events to Meta through its Conversions API, so we can measure our ads even when a browser blocks the Pixel. An event can include your order total and items, a hashed (scrambled) version of your email address and name, and your IP address and browser details. We never send Meta your phone number. Meta uses them to match the order to its users.

Your choices

• Use the controls in Your privacy choices. Opting out of targeted advertising turns off the Meta Pixel and Google’s ad features in your browser, and we stop sending your orders to Meta.
• We honor Global Privacy Control (GPC) signals. If your browser sends one, we treat it as that opt-out.
• We still count visits with Google Analytics. You can opt out of that with Google’s browser add-on.
• Manage the ads you see from Meta in its ad preferences.
• Block or delete cookies in your browser settings. Some features, like staying logged in, may stop working.

Other providers can see your IP address when your browser loads their content. For example, our location maps use map tiles from OpenStreetMap, and our Follow Us section can show posts from Instagram.

Texts and emails

Texts

If you give us your phone number, we text you a one-time code when you log in, join rewards or use a reward. We send marketing texts only if you opt in. Message frequency varies. Message and data rates may apply. Reply STOP to stop texts, or HELP for help. We don’t share your mobile number, or your consent to get texts, with third parties for their marketing or promotions. Our Terms of Use have the details.

Emails

If you join our list, we email you news, deals and birthday offers. Every marketing email has an unsubscribe link. You can also email hello@seoulspice.com to be removed.

Opting out of marketing doesn’t stop messages about your account or an order, such as a verification code.

How we share your information

We share information with companies that help us run SeoulSpice. They may use it only to do that work for us, except Google and Meta, which are covered above.

• Square processes payments, gift cards and orders, and runs SeoulSpice Rewards (Square Loyalty).
• Twilio sends the texted codes you use to log in and use rewards.
• Supabase hosts the database for sign-ups, guest accounts, favorites, ratings and order history.
• Vercel hosts the site and keeps technical logs.
• Google and Meta provide analytics and advertising tools, as described above.
• Resend delivers e-gift card emails, if we offer them.
• Delivery and catering partners. If you order through a partner, such as ezCater for catering, it gets what it needs to fill your order. Its own privacy policy applies.
• Hiring. The Apply button takes you to a site run by our applicant tracking provider. Its privacy policy applies there.
• Our own tools. Order and rating details also go to our internal operations tools, so our team can prepare orders and follow up with you.

We may also share information:

• When the law requires it, to answer legal requests, or to protect the rights, safety and property of SeoulSpice, our guests or others.
• In a merger, sale, financing or other business transfer.

We don’t sell personal information for money. Sharing information with Google and Meta so we can measure and improve our ads may count as “sharing” for cross-context behavioral advertising, or “targeted advertising,” under some state privacy laws. You can opt out. See Your privacy choices.

Your privacy choices

You decide how we use your information for ads and analytics, and you can ask us to do more.

Requests

You can ask us to:

• Tell you what personal information we have about you (access).
• Fix information that’s wrong (correction).
• Delete your information (deletion).
• Stop sharing your information for targeted advertising (opt out).

Email hello@seoulspice.com. To protect your information, we may ask you to confirm details we already have, such as the phone number on your account. You can also use an authorized agent to make a request for you. We won’t treat you differently for using your rights.

If you live in a state with a privacy law, such as Virginia or Maryland, you have these rights by law. We respond within the time the law requires.

Appeals

If we say no to a request, you can appeal. Email hello@seoulspice.comwith “Appeal” in the subject line and tell us what you’d like us to look at again. We respond to appeals within the time the law requires. If you are still not satisfied, you can contact your state attorney general.

Stopping texts and emails

Reply STOP to a text. Use the unsubscribe link in an email.

How long we keep information

We keep information only as long as we need it for the reasons in this policy, for example to run your account and rewards, keep order records, follow tax and accounting rules, settle disputes and prevent fraud. When we no longer need it, we delete it or make it anonymous. You can ask us to delete your information sooner (see Your privacy choices).

Security

We use safeguards that fit the information we hold: encrypted connections, signed and secure cookies, and limited access for our team. Your card details go straight to Square. No system is perfectly secure, so we can’t promise absolute security.

Children

seoulspice.com isn’t directed to children under 13, and we don’t knowingly collect personal information from them. If you think a child under 13 has given us information, email hello@seoulspice.comand we’ll delete it.

Changes to this policy

We may update this policy. We’ll post the new version here and change the date at the top. If a change is significant, we’ll also let you know another way, such as an email or a notice on the site.

Contact us

Questions or requests? Email hello@seoulspice.com.