Legal
Privacy Policy
Effective August 3, 2026
Donut I Love U is a small, family-run, one hundred percent gluten-free donut shop and food truck in Charlotte, North Carolina. This page explains what we collect when you use donutiloveu.com, why we collect it, and what we do with it.
Short version: we collect what you type into our forms so we can write back to you, and we count visits so we know which pages are useful. We don’t sell anything about you to anyone.
Who we are
Donut I Love U LLC, operating as Donut I Love U
908 E. 35th Street, Charlotte, NC 28205
(704) 412-2151
privacy@donutiloveu.com
What we collect
When you fill in the booking form, we collect your name, email address, phone number, your event date, how many guests you expect, how you heard about us, and whatever you write in the message field.
When you place an online order, we collect your name, phone number, email address, your pickup time, and what you ordered. Your card details go directly to Square through a secure payment field on our checkout page — they never pass through our systems and we never see them.
When you fill in the contact form, we collect your name, email address, and your message.
When you visit any page, our analytics provider records ordinary web statistics: which pages you looked at, roughly where in the world you are, what kind of device and browser you used, and which site sent you to us. This is aggregated. We are not trying to work out who you are from it, and we can’t.
That’s the whole list. Card details for online orders are collected by Square, not by us — more on that below. We don’t have accounts or logins, and there is nothing to sign up for.
What we do with it
Form submissions go to us so we can answer you. A booking inquiry goes to the person who handles bookings. A contact message goes to the owners. Someone reads them and replies. That’s the entire purpose.
Analytics tell us what’s working. How many people looked at the menu, whether anyone found the truck schedule, whether an ad brought anyone in. We use it to make the site more useful and to spend our advertising money less stupidly.
Online orders exist so we can make your donuts and hand them to the right person at the right time. That is the entire use.
We do not sell your information. Not to anyone, for any amount, ever. We are a donut shop.
We do not send marketing email to people who filled in a form. If you ask us about catering, you’ll hear back about catering. You will not find yourself on a mailing list because of it.
Who else touches it
A few services we rely on to run the site:
- Google Analytics — the visit statistics described above
- Microsoft 365 — our email; form submissions reach us as email
- Railway — hosts the website
- Square — processes payments for online orders, gift cards, and in-person purchases, and holds our order records. Card details you enter at checkout go directly to Square; we never see them. Square’s own privacy policy governs the payment itself.
Each of these is a company doing a specific job for us, not a company we’ve handed your information to for their own use.
We may also disclose information if the law requires it — a subpoena, a court order, that kind of thing. We hope never to.
How long we keep it
Form submissions: twelve months, then they’re deleted. Long enough to plan an event you booked well in advance and to find your message if you write again. Not long enough to become a filing cabinet nobody remembers.
If you booked an actual event with us, ordinary business records of that event — invoices, receipts — are kept as long as tax and accounting rules require.
Online orders work the same way: the order itself lives in Square alongside every purchase at the counter and is kept as long as tax and accounting rules require. The pickup details our own website holds are covered by the same twelve-month rule as form submissions.
Analytics: fourteen months, which is the maximum our analytics provider retains at our service level.
Order cancellation links
Your order confirmation email includes a private link for canceling that order. Anyone who has that link can cancel that order, so treat it like a receipt and don’t forward it. The link works for that one order only, and stops working once the cancellation window closes or the order is canceled.
We keep order records — including cancellations — under the retention schedule described above. Square, our payment processor, keeps its own record of the payment and any refund.
Your choices
You can ask us to show you what we hold about you, correct it if it’s wrong, or delete it. Email privacy@donutiloveu.com and we’ll take care of it. We’ll need enough detail to find your record — usually the email address you used.
You can turn off analytics with any standard browser privacy setting or ad blocker. The site works exactly the same either way.
Depending on where you live, you may have additional legal rights over your information. If you believe you do, write to us and we’ll honor them.
Children
This site is meant for adults arranging donuts. It isn’t directed at children under 13 and we don’t knowingly collect anything from them. If you believe a child has sent us information through a form, email us and we’ll delete it.
Security
We use encrypted connections (HTTPS) across the whole site and limit access to form submissions to the people who need to read them.
We won’t pretend to be something we’re not: we’re a donut shop, not a bank. We take reasonable care, and no website anywhere can promise perfect security. Please don’t send us anything sensitive through a contact form — no card numbers, no government ID numbers. We never need them, and we’ll never ask.
Changes
If we change this policy we’ll update the date at the top. Material changes will be noted on the page.
Questions
privacy@donutiloveu.com · (704) 412-2151 · 908 E. 35th Street, Charlotte, NC 28205