GUACOHOLIC — PRIVACY POLICY

When you create a Guacoholic account, you provide:

• Full name
• Email address
• Password (stored in encrypted form — we never see your raw password)
• Membership status (free or paid tier)

Your digital membership card is generated from this registration data.

When you redeem a #cado coupon at a participating restaurant, we collect:

• Which restaurant you redeemed at
• Date and time of redemption
• Redemption tracking data (to enforce the 2 coupons per month limit and prevent duplicate use)

When a restaurant applies to become a Guacoholic partner through our onboarding form, we collect:

• Restaurant name
• Contact person's name
• Business address (street, city, state)
• Phone number
• Email address
• Website URL
• Answers to two yes/no qualification questions about guacamole offerings

This information is used solely to evaluate the partnership, list the restaurant on our map, and coordinate the #cado program.

When you participate in the Guacoholic community, you may submit:

• Posts and comments on the community feed
• Reactions to other members' content
• Recipe submissions to the Recipe Rolodex (including recipe name, ingredients, instructions, prep/cook time, spice level, and photos)

Content you post publicly is visible to other Guacoholic members and visitors. Do not include sensitive personal information in your public posts or recipes.

When you purchase merchandise through Guacoholic.club, we collect:

• Shipping name and address
• Order details (items purchased, quantities, order total)

Payment processing is handled entirely by a third-party payment processor (such as Stripe). We do not store your credit card number, CVV, or any financial account information on our servers.

When you RSVP for a Guacoholic member event or in-person meetup, we collect:

• Name
• Email address
• Attendance confirmation and any event-specific details you provide

When you visit Guacoholic.club, our platform and third-party tools may automatically collect:

• IP address and approximate geographic location
• Browser type and version
• Device type (desktop, mobile, tablet)
• Pages visited and time spent on each page
• Referring website (how you found us)
• Actions taken on the site (clicks, form submissions, scroll behavior)
• Cookie identifiers and session data

This data helps us understand how members use the platform and improve the overall experience.

We will send you transactional emails as part of your membership, including:

• Account creation confirmation
• Password reset instructions
• Order confirmation and shipping updates for merch purchases
• Event RSVP confirmations
• #cado coupon redemption confirmations

These are service-related messages and are not optional while your account is active.

With your consent, we may also send:

• New recipe highlights and community spotlights
• Upcoming event announcements
• Guacoholic membership news and platform updates
• Partner restaurant features

You can unsubscribe from non-essential marketing emails at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email we send
• Emailing us at Info@guacoholic.club with the subject line "Unsubscribe"

We will process your request promptly — within 10 business days at the latest. Unsubscribing from marketing emails will not affect transactional messages tied to your active membership or orders.

Your information is stored in secure, cloud-based platforms (as described in Section 5). Access to systems containing personal data is limited to authorized Guacoholic personnel who need it to operate the platform and deliver member services.

We take reasonable, industry-standard steps to protect your personal information, including:

• Secure, encrypted connections (HTTPS/SSL) across Guacoholic.club
• Password-protected and access-controlled platforms
• Encrypted password storage (we never store passwords in plain text)
• Limited data access on a need-to-know basis
• Regular review of tools, integrations, and access permissions

While we take these precautions seriously, no internet transmission or electronic storage system is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.

We retain your personal information only as long as necessary for the purposes outlined in this policy, or as required by law:

• Member account data is retained for the life of your account plus up to 3 years after account closure.
• Order and transaction records are retained for up to 7 years to satisfy financial and legal obligations.
• Community content (posts, recipes, comments) may remain on the platform after account closure unless you specifically request deletion.
• Event RSVP data is retained for up to 2 years.
• Restaurant partner data is retained for the duration of the partnership plus up to 3 years.
• Website analytics data (via Google Analytics) is retained per our settings, typically 26 months.

When data is no longer needed, we take reasonable steps to securely delete or anonymize it.

Cookies are small text files placed on your device when you visit a website. They help the site remember your session, track usage for analytics, and deliver a consistent experience. Cookies can be session cookies (deleted when you close your browser) or persistent cookies (stored on your device for a set period).

We use the following categories of cookies on Guacoholic.club:

• Strictly Necessary Cookies — Required for the platform to function. These cannot be disabled. Examples: login session tokens, security cookies, membership authentication.
• Analytics Cookies — Help us understand how members and visitors use the site. Data is aggregated and anonymized. Example: Google Analytics (_ga, _gid cookies).
• Functional Cookies — Remember your preferences (such as saved recipes or display settings) to improve your experience.

Note: We do not use advertising or targeting cookies. There are no ad pixels on Guacoholic.club.

You have the right to control cookies. Here's how:

• Browser Settings: Most browsers allow you to block or delete cookies. Visit your browser's help documentation to learn how.
• Google Analytics Opt-Out: Install the opt-out browser add-on at tools.google.com/dlpage/gaoptout.
• Industry Opt-Out Tools: Visit optout.aboutads.info or youronlinechoices.com for additional controls.

Note: Disabling strictly necessary cookies may prevent you from logging in or using core membership features.

We process your personal data only when we have a valid legal basis:

• Consent — When you create an account, sign up for emails, or submit community content, you are consenting to the processing described at that point of collection.
• Contractual Necessity — When we process data to fulfill your membership, process your merch order, or deliver event services you've requested.
• Legitimate Interests — We may process data to operate and improve the platform (e.g., analytics, security monitoring), provided those interests do not override your rights.
• Legal Obligation — When we are required to retain or process data to comply with applicable law.

Some third-party tools we use may transfer data outside the EU/EEA (including to the United States). Where this occurs, we rely on appropriate transfer mechanisms such as Standard Contractual Clauses (SCCs) or approved data transfer frameworks to ensure your data remains protected.

If you are in the EU/EEA and believe we have mishandled your personal data, you have the right to lodge a complaint with your local data protection authority (DPA).

Over the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email address, IP address)
• Membership and account information (membership status, coupon usage, redemption history)
• Commercial information (merch orders, transaction records)
• Internet or network activity (browsing behavior on Guacoholic.club)
• Geolocation data (approximate location via IP address)
• User-generated content (community posts, recipe submissions, comments)

Guacoholic does not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. We do not share personal information in ways that constitute a "sale" under CCPA.

As a California resident, you have the right to:

• Know what personal information we have collected about you and how it is used
• Request deletion of your personal information (subject to certain exceptions)
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information
• Non-discrimination — We will not treat you differently or deny you services for exercising your privacy rights

To submit a CCPA request, email us at Info@guacoholic.club with the subject line "California Privacy Request." We will respond within 45 days as required by law, with one possible 45-day extension if needed (you will be notified of any extension).