This Privacy Policy explains what personal information MasterFit CT ("we", "us") collects when you use our website or order from us, how we use it, who we share it with and the choices you have. We do not sell your personal information.
1. Information we collect
Information you give us
- Account: name, email, phone, password (stored only in encrypted, one-way form) and preferred language.
- Orders: meals, extras, delivery day, delivery address and instructions, order notes and how you found us, when you tell us. If you type your contact details at checkout and do not finish, we keep them with your cart for up to 60 days and may message you once to help.
- Preferences: your goal (for example, bulking or cutting) and, only if you choose to tell us, food allergies.
- SMS list: the phone number you send us through the discount popup.
- Conversations: messages you send us on WhatsApp, by email or by text.
Information from others
- Google: if you sign in with Google, we receive your name, email and profile picture. We do not receive your Google password.
- Square: when you pay by card, Square tells us whether the payment was approved or refunded. Your full card number goes straight to Square and never reaches our servers.
Information collected automatically
- Technical data: IP address, browser and device, and the pages you visit, recorded in our server logs for security and troubleshooting.
- Visit counting: we count visits, the pages and meals viewed and the steps up to an order, to know how the site is doing. Each visitor is represented by a code made from the IP address and browser that changes every day and cannot be turned back into the IP. We do not store the IP address, and no advertising company receives this data.
- Cookies: see section 5.
2. How we use your information
- To prepare, deliver and charge your orders, and to talk to you about them.
- To run your account and remember your preferences and language.
- To take allergies into account when you share them with us.
- To send offers by SMS or email, when you agreed to receive them. You can stop at any time.
- To understand which meals, days and channels work best, and plan the kitchen. This is done with our own order data; we do not use advertising trackers from other companies on the site.
- To prevent fraud and abuse, keep the site secure and meet our legal and tax obligations.
3. Allergy information
Food allergies may reveal information about your health. Telling us about them is optional, and we only use this information to prepare your meals safely. You can change or delete it at any time in your account or by contacting us.
4. Who we share it with
We share only what each service provider needs to do its job for us:
- Square — card payments.
- Google — sign in with Google, and the storage of our backups.
- Hosting and email providers — the servers that run the site and send our emails.
- Our delivery team — name, phone, address and delivery instructions of the orders they deliver.
- U.S. Census Bureau — only the delivery address (street, city, state and ZIP), to find it on the map and put the day's deliveries in the shortest order. No name, phone or order details go with it.
- Authorities — when required by law, or to protect our rights and the safety of others.
We do not sell personal information and do not share it for targeted advertising. If the business is sold or merged, your information may be transferred to the new owner under this same Policy.
5. Cookies
- Essential cookies keep you signed in, keep your cart and protect forms against fraud. The site does not work without them.
- Preference cookies remember your language and, if you check "remember me", your login.
- Origin cookie: when you arrive from an ad or a link, we store where you came from (for example, "instagram") for 90 days, to know which channels bring customers. It does not identify you on other sites.
You can delete cookies in your browser settings; you will be signed out and your cart will be emptied.
6. How long we keep it
We keep account information while your account is active. Order records are kept for as long as needed for accounting and tax obligations. Backups are deleted automatically after 30 days. When you ask us to delete your account, we delete or anonymize your information, except what the law requires us to keep.
7. Your rights and choices
You can ask us to:
- confirm whether we process your personal information and give you a copy of it;
- correct information that is wrong;
- delete your information;
- stop sending you marketing messages (for SMS, just reply STOP).
Send your request using the contacts below. We may ask you to confirm your identity before acting on it, and we answer within 45 days. If we deny your request, you can appeal by replying to our answer; if you are not satisfied with the result of the appeal, you can contact the Connecticut Attorney General. We will not treat you differently for exercising these rights.
8. Security
We use encrypted connections (HTTPS), store passwords only in one-way encrypted form, limit who can access the admin panel and keep daily backups. No system is perfectly secure; if an incident affects your information, we will notify you as required by law.
9. Children
The site is not directed at children under 13, and we do not knowingly collect their information. If you believe a child sent us personal information, contact us and we will delete it.
10. Changes to this Policy
We may update this Policy. The date at the top shows the latest version. If a change is significant, we will tell you on the site or by email before it takes effect.
11. Contact
- contact@ctmasterfit.com
- +1 (331) 282-6958
- MasterFit CT · Connecticut, USA
