This policy explains what information Poppy House Art Cafe LLC ("Poppy House," "we" or "us") collects through poppyhouseartcafe.com, how we use it, and the choices you have.
What we collect
We only collect what we need to run bookings, parties, events and our mailing list:
- Bookings and event tickets: your name, email, mobile number, the session or event, how many people are coming, any promo code you use, and the time you agreed to our waiver.
- Party requests: your name, email, mobile number, the date and details you send us, and how many guests.
- Our mailing list: your email, and your mobile number if you choose to get texts, along with the exact consent wording you agreed to and when.
- Payments: handled entirely by Square on its own checkout page. We never see or store your full card number. Square shares with us the amount paid and a payment reference.
- Spam protection: when you send a form, we keep a scrambled code made from your internet address and the date, to stop too many submissions in a short time. We never store the address itself.
How we use it
- To hold your seats, confirm your booking or party, and send you confirmation and reminder emails.
- To answer your questions and party requests.
- To send you news about events and open seats, only if you signed up. You can unsubscribe from emails at any time, and reply STOP to any text to stop texts.
- To keep records we need for our business, taxes and safety, including waiver agreements.
Who we share it with
We don't sell your information. We share it only with the services that help us run the website and the business, and only so they can do that work for us:
- Square, for payments and receipts.
- Supabase, which stores our booking and website information.
- Vercel, which hosts the website.
- Resend, which sends our emails.
- Google, whose map appears on our Visit page. Google may collect information when the map loads, under Google's own privacy policy.
- Meta and TikTok, if we run ads with them: their tools may record that you visited our site or completed a booking, to measure our ads. They use their own cookies under their own privacy policies.
Cookies
The website itself only uses cookies to keep our staff signed in to the admin pages. The Google map and, if we run ads, the Meta and TikTok tools may set their own cookies. You can block or delete cookies in your browser settings.
How long we keep it
We keep booking, party and waiver records for as long as we need them to run the business and as the law requires. We keep mailing list details until you unsubscribe. Spam protection codes are only useful for a day.
Your choices
You can ask us to see, correct or delete the information we have about you by emailing charisma@poppyhouseartcafe.com. Some records, like payments and signed waivers, we may need to keep for legal reasons.
Children
Bookings are made by adults. Kids come with a parent or guardian, who agrees to the waiver for them. We don't knowingly collect information directly from children under 13.
Security
We use trusted services, secure connections and limited staff access to protect your information. No system is perfect, so we can't promise absolute security.
Changes to this policy
If we change this policy, we'll post the new version here with a new date at the top.
Contact us
Questions? Email charisma@poppyhouseartcafe.com, or write to us at 744 Market St, Suite 102A, Tacoma, WA 98402.