Privacy Policy

Last Updated: October 12, 2026

Welcome to the Mystic Cafe & Grill website, located at https://mysticcafeandgrill.com/ (the "Website"). This Website is developed and maintained by Tribal Codes LLC.

We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our Website or place an order through it.

1. Information We Collect

A. Information You Provide When You Order

Our order-ahead feature lets you place an order for pickup directly on this Website. When you do, we collect:

• Name: so the kitchen knows who the order is for.
• Phone number: so we can contact you about your order.
• Pickup time: the time you ask us to prepare your order.
• Order contents: the items you select and any special instructions you add (for example allergies, "no onions", or pickup notes).

We use this information for one purpose only: to prepare and hand you your order. We do not use it for marketing, and we do not sell it.

B. Information Collected Automatically

When you visit our Website, we (and our third-party analytics providers) automatically collect certain technical information from your device, including:

• Device Information: Type of device (mobile, desktop, tablet), operating system, and browser type.
• Usage Data: Pages visited, time spent on pages, buttons clicked, and referring websites.
• IP Address: We may collect your IP address to determine your general geographic location (e.g., city/country).

C. Information Stored on Your Device

To make repeat ordering quicker, your browser stores a small amount of data locally on your own device (this never leaves your device unless you submit an order):

• Your cart, so items you added are not lost if you navigate away.
• Your name and phone number, so the checkout form is prefilled next time. You can clear this at any time through your browser's site data settings.
• Your most recent order, so you can re-order or check its status.

2. How We Store and Share Order Information

Order details you submit are stored in a secure database operated by Supabase (hosted in the United States). Supabase stores and processes this data on our behalf solely to run the ordering feature. Access is restricted: customer order records can only be read or changed by staff after verifying a PIN, and each order is referenced by a random code rather than by any customer identifier.

When our kitchen notification system is active, the details of a new order (items, your first name as entered, and the order code) may be sent to the restaurant's WhatsApp so the kitchen is alerted promptly. This message goes to the restaurant, not to a third party, and is governed by WhatsApp's Privacy Policy.

We do not sell, rent, or share your personal information with advertisers or data brokers.

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

A. PostHog

We use PostHog to capture usage data and analyze how users interact with our Website. PostHog helps us identify which menu items are popular and how to improve the user experience.

• Data Collected: PostHog collects data such as your IP address, device type, browser information, and interactions (clicks, scroll depth) on our site.
• Session Replay: PostHog's session recording feature is enabled. This captures a replay of your visit — such as the pages you open, clicks, and scrolling — to help us find where the ordering flow confuses people. Session replays are used for product improvement only, are visible only to the site's administrators, and are not shared with third parties. Please avoid typing sensitive information into any field on this site.
• Privacy: For more information on PostHog's privacy practices, please visit the PostHog Privacy Policy.

B. Local Storage

As described in section 1C, we keep your cart and checkout details in your browser's local storage. This data stays on your device, is not transmitted to us until you place an order, and can be removed by clearing your browser's site data for this Website.

4. Third-Party Links and Services

Our Website contains links to third-party websites and services that are not operated by us.

Delivery (7Krave)

When you click "Delivery," you will be directed to 7Krave. Any personal information (including payment details, address, and order history) you provide to 7Krave is governed by their privacy policy, not ours. We strongly advise you to review the privacy policy of 7Krave before providing any information.

Payments

We do not collect payment information on this Website. All orders placed here are paid at pickup, in cash or by card at the restaurant.

Social Media

Our Website includes social media features, such as links to Instagram, TikTok, Facebook, X (Twitter), and WhatsApp. Interacting with these features is governed by the privacy policy of the respective social media company.

Fonts

We load web fonts from Google Fonts. Your browser connects to Google's servers to retrieve them, which shares your IP address with Google. See Google's Privacy Policy.

5. How We Use Your Information

We use the collected data for the following purposes:

• To prepare, fulfil, and hand you your order.
• To contact you if we have a question about your order.
• To provide and maintain our Service.
• To monitor the usage of our Service (e.g., seeing which menu items are viewed most).
• To detect, prevent, and address technical issues.

6. Data Security

The security of your data is important to us. Order records are stored in a database protected by row-level security, and can only be read or modified by staff after PIN verification — not by members of the public. Orders are identified to customers by a random five-character code rather than by name.

Remember that no method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security. Because payment is taken at pickup, we never hold your card details on this Website at all.

7. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By Phone: 876-634-6675
• By WhatsApp: 876-203-1638
• By Mail: 1 Destiny Mall, Portmore, St. Catherine, Jamaica