Privacy Policy

This policy explains what information Ngõ (“we”) collects when you use our website to browse the menu and place pickup or delivery orders, how we use it, and who we share it with.

Account information — your name, email address, and phone number. Passwords are stored only as a salted, one-way hash; we never see your actual password.

Order information — the items you order, totals, and (for delivery) your delivery address, contact phone, and any notes you add.

Payment information — card payments are handled by Square. Your full card number is entered directly into Square’s secure form and is never received or stored on our servers. We retain only a Square payment reference and whether the order was paid.

Technical information — essential cookies that keep you signed in and protect forms (login session and security/CSRF tokens), plus basic server logs needed to operate and secure the site.

To process and fulfil your orders, send order confirmations and status updates, let you sign in to your account, provide customer support, prevent fraud and abuse, and meet legal or accounting obligations.

We do not sell your personal information. We share only what’s necessary with the service providers that run the site:

Square — payment processing. Resend — sending order & account emails. Our cloud hosting & database provider — storing your account and order records. Each processes data on our behalf under their own security and privacy terms.

We may also disclose information if required by law or to protect our rights, customers, or the public.

We use only essential cookies required for login sessions and security. We do not use advertising or third-party analytics trackers.

Traffic is served over encrypted HTTPS, passwords are hashed, and card details are tokenised by Square so they never touch our systems. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your data.

We keep account and order records for as long as needed to operate the business and satisfy legal and accounting requirements. You may request to access, correct, or delete your account and personal data by contacting us.

Our website is not directed to children under 13, and we do not knowingly collect their personal information.

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.

Questions about your data? Reach us on Instagram @ngo.seattle or at ngo.seattle2024@gmail.com.