What we collect, and why.

Overview

This notice explains how Graceful Meals Food Services, based in Carmona, Cavite, Philippines, handles information when you browse the website, verify a Google account, build a food request, submit the connected Google Form, or communicate with us about an order.

The website is designed for order inquiries and quotations. It does not complete an online payment or automatically confirm an order.

Information we handle

Information you provide

This may include your name, verified email address, telephone number, event date, guest count, pickup or delivery location, menu selections, quantities, spice preferences, dietary or allergy notes, event details, and other notes you choose to send.

Information kept on your device

Your draft menu, inquiry details, request reference, and theme preference may be stored in your browser so you can continue planning. You can remove this information by clearing this site’s browser storage.

Technical and security information

We and Cloudflare process limited network, browser, device, and challenge information to operate the website, prevent automated abuse, and rate-limit repeated attempts. The website converts the connection address used for rate limiting into a one-way identifier instead of storing that raw address in the rate-limit record.

Google account data

Before opening the final order form, Google Identity Services asks you to choose a Google account. After Google authenticates you, Graceful Meals receives only the account’s stable Google identifier, verified email address, display name, and an optional profile image.

Our use of information received from Google APIs follows theGoogle API Services User Data Policy, including its Limited Use requirements.

How we use information

• Verify the email address connected to an order request.
• Prefill and process the Graceful Meals order-request form.
• Review availability, quantities, delivery feasibility, dietary notes, and event requirements.
• Prepare quotations, receipts, production plans, and customer communications.
• Prevent spam, automated submissions, fraud, and unauthorized admin access.
• Maintain business, accounting, and compliance records.

We do not use Google account data for advertising and do not sell it.

Service providers and sharing

We use service providers only where needed to operate the request process:

• Google provides account authentication, the order Form, and connected business Sheets.
• Cloudflare hosts the website, provides bot protection, and stores protected application records.
• Email services may deliver request acknowledgements, quotations, and order communications.

We may also disclose information when required by law, to protect customers or the business, or as part of a business transfer. We do not allow service providers to use customer information for their own advertising.

Storage and retention

• The signed website session created after Google verification expires after one hour.
• Rate-limit records expire after the applicable security window, no longer than one hour for the customer request flow.
• Draft request information remains in your browser until you clear it.
• Submitted inquiries, quotations, receipts, and related communications are retained while the request is active and afterward as reasonably needed for customer service, accounting, dispute resolution, and legal obligations.

Google and Cloudflare may process information in locations outside the Philippines under their own data-protection commitments.

Your choices and data requests

You may ask to access, correct, or delete personal information we control. You may also object to or restrict certain processing, subject to records we must retain for legitimate business or legal reasons.

To request deletion, email vinniephtk@gmail.com with the subject “Graceful Meals data deletion request” and include the email address or request reference used for the order. We may ask you to verify the request before acting on it.

You can review or revoke Google account access from your Google Account’s third-party connections page. Revoking access does not automatically remove order records already required for business or legal purposes, so contact us if you also want a deletion review.

Security

We use Google token verification, Cloudflare Turnstile, request throttling, signed HTTP-only cookies, restricted admin access, transport encryption, and browser security headers. No internet service can guarantee absolute security, but we review the controls used for the information in our care.

Contact us

You can also use our contact page. We may update this notice when our services or legal obligations change. The effective date above identifies the current version.