Privacy Policy — Restaurant Gaï

Effective Date: July 2026

 

1. Introduction

Restaurant Gaï (“Gaï,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights available to you when you visit our website, dine with us, place an order, make a reservation, or otherwise interact with our business.

By using our website or services, you agree to the practices described in this policy. If you do not agree, please do not use our website or provide us with personal information.

2. Information We Collect

Information You Provide Directly

  • Contact information: name, email address, phone number, mailing address
  • Reservation details: party size, date/time, seating preferences, special occasion notes, dietary restrictions or allergy information you choose to share
  • Online orders: items ordered, delivery/pickup address, order notes
  • Catering & event inquiries: event details, guest count, menu preferences, budget information
  • Communications: messages sent through our contact form, email, phone, or social media
  • Newsletter/marketing sign-up: email address, and phone number if you opt into SMS updates
  • Employment applications (if applicable): resume, work history, references

Information Collected Automatically

When you visit our website, we (and our service providers) may automatically collect:

  • IP address, browser type, device type, operating system
  • Pages visited, time spent on site, referring website
  • Cookies and similar tracking technologies (see Section 5)
  • Approximate location (derived from IP address, not precise GPS unless you separately grant permission)

Payment Information

We do not directly collect or store full credit/debit card numbers. Payments made online or in person are processed through PCI-DSS-compliant third-party payment processors (e.g., Square, Stripe, Toast, or similar). These processors have their own privacy policies governing how they handle your payment data.

Information from Third Parties

If you order through a third-party delivery platform (e.g., DoorDash, Uber Eats, Grubhub) or book through a third-party reservation platform (e.g., OpenTable, Resy), those platforms collect and manage your data under their own privacy policies. We may receive limited order/reservation details from them (name, contact info, order contents) to fulfill your request.

3. How We Use Your Information

We use the information we collect to:

  • Process and fulfill reservations, orders, and catering requests
  • Communicate with you about your reservation, order, or inquiry
  • Send marketing communications, promotions, and updates — only if you have opted in
  • Improve our website, menu offerings, and customer experience
  • Respond to customer service requests and feedback
  • Maintain records for accounting, tax, and legal compliance
  • Detect, prevent, and address fraud, security issues, or technical problems
  • Comply with applicable laws and respond to legal requests

We do not sell your personal data to third parties for money.

4. How We Share Your Information

We may share your information with:

  • Service providers who help us operate our business (payment processors, website hosting, email marketing platforms, reservation software, delivery partners) — these providers are only permitted to use your data to perform services on our behalf
  • Third-party ordering/reservation/delivery platforms, if you choose to use them
  • Legal and regulatory authorities, if required to comply with a law, subpoena, court order, or to protect our rights, property, or safety, or that of our guests or staff
  • Business transfers, if Restaurant Gaï is involved in a merger, acquisition, or sale of assets — your information may be transferred as part of that transaction

We do not share your personal information with third parties for their own independent marketing purposes without your consent.

5. Cookies & Tracking Technologies

Our website may use cookies and similar technologies to:

  • Remember your preferences
  • Understand how visitors use our site (via analytics tools such as Google Analytics)
  • Support advertising or retargeting campaigns, if applicable

You can control cookies through your browser settings, including blocking or deleting them. Disabling cookies may affect some website functionality (e.g., saved reservation preferences).

Do Not Track: Our website does not currently respond to “Do Not Track” browser signals, as there is no industry-standard approach to honoring them.

6. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal data. We honor the following rights for all guests, regardless of state residency, as a matter of good practice:

  • Right to Know/Access — request confirmation of what personal data we hold about you
  • Right to Delete — request deletion of personal data you’ve provided to us, subject to legal recordkeeping requirements
  • Right to Data Portability — request a copy of your data in a portable format
  • Right to Opt Out — unsubscribe from marketing emails/texts at any time, and opt out of any sale or targeted-advertising use of your data (we do not currently sell data)
  • Right to Non-Discrimination — we will not deny service or charge different prices because you exercised a privacy right (loyalty/rewards programs may be affected if tied to data use, per applicable law)

Iowa residents:  index=”5-1″ Under the Iowa Consumer Data Protection Act, businesses meeting certain data-volume thresholds must allow consumers to access, delete, and port their data, and opt out of the sale of personal data. cite While Restaurant Gaï does not currently meet those thresholds, we extend these rights to all guests voluntarily.

California residents: If applicable, you may have additional rights under the California Consumer Privacy Act (CCPA). Contact us using the information in Section 11 to make a request.

To exercise any right above, email or call us using the contact information in Section 11. We may need to verify your identity before fulfilling a request. We will respond within a reasonable time, generally within 45 days.

7. Children’s Privacy

Our website and services are not directed at children under 13, and we do not knowingly collect personal information from children under 13 without parental consent, in accordance with the Children’s Online Privacy Protection Act (COPPA). If we learn we have inadvertently collected such information, we will delete it promptly. Parents or guardians who believe their child has provided us information may contact us to request deletion.

8. Marketing Communications

If you sign up for our email list or opt into SMS updates:

  • We will only send marketing emails in compliance with the CAN-SPAM Act, including a clear way to unsubscribe in every email
  • We will only send marketing text messages in compliance with the Telephone Consumer Protection Act (TCPA), and only after obtaining your consent; reply STOP to any text to opt out at any time
  • You may unsubscribe at any time without affecting your ability to make reservations or place orders

9. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy, comply with legal, tax, and accounting obligations, and resolve disputes. Reservation and order records may be retained for standard business recordkeeping periods as required by Iowa and federal law.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

Restaurant Gaï [Address — 2660 Wiley Blvd SW, Suite B
Cedar Rapids, IA 52404] [(319) 497-8436]

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Last Updated” date at the top of this page indicates when the policy was last revised. Continued use of our website or services after changes take effect constitutes acceptance of the updated policy.