Privacy Policy
How Burger Bach collects, uses, and protects your personal information.
1. Introduction
Burger Bach ("we," "us," or "our") operates the website theburgerbach.com and associated digital properties for our restaurant locations in Richmond, Virginia. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website, interact with our online forms, place orders, or engage with our digital services.
By accessing or using our website, submitting information through any of our forms, or engaging with our digital services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please discontinue use of our website.
2. Information We Collect
We collect information in several ways when you interact with our website and services:
Information You Provide Directly:
| Data Type | When Collected |
|---|---|
| Name | Reservation requests, contact forms, feedback submissions, newsletter signup |
| Email Address | Contact forms, feedback submissions, newsletter signup, online ordering |
| Phone Number | Reservation requests, contact forms, call-ahead seating |
| Reservation Details | Date, time, party size, and special requests submitted via our reservation form |
| Feedback & Reviews | Star ratings, category selections, comments submitted via our feedback system |
| Message Content | Any messages, inquiries, or comments submitted through our contact form |
Information Collected Automatically:
- IP address and approximate geographic location
- Browser type, version, and operating system
- Device type (desktop, mobile, tablet) and screen resolution
- Pages visited, time spent on each page, and navigation path
- Referring website or search terms used to find our site
- Date and time of each visit
3. Form Submissions & Data Processing
Our website contains several interactive forms that collect personal information for specific purposes:
Reservation Form: When you submit a reservation request, we collect your name, email, phone number, preferred date and time, party size, and any special requests. This information is transmitted via a secure webhook to our customer relationship management (CRM) platform for processing. A member of our team will confirm your reservation directly.
Feedback System: Our star rating and feedback form collects your rating (1-5 stars), optional category selections (e.g., food quality, service, atmosphere), optional comments, and optional contact information. Ratings of 5 stars may redirect you to our Google Business Profile to leave a public review; this redirect is optional and you are under no obligation to leave a public review.
Contact Form: Messages submitted via our contact form, including your name, email, subject category, and message content, are routed to our CRM for response by our management team.
Newsletter Signup: If you subscribe to our newsletter or mailing list, we collect your email address and, optionally, your name. You may unsubscribe at any time using the link provided in every email communication.
Bot Protection: Our forms employ honeypot fields and may utilize Google reCAPTCHA to prevent automated spam submissions. Google reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.
4. How We Use Your Information
We use the information we collect for the following purposes:
- Fulfill Requests: Process reservations, respond to inquiries, and acknowledge feedback submissions
- Improve Our Services: Analyze feedback ratings and comments to improve food quality, service, and guest experience
- Communicate With You: Send reservation confirmations, respond to contact form inquiries, and provide requested information about our restaurant
- Marketing (With Consent): Send promotional emails, special offers, event invitations, and menu updates to subscribers who have explicitly opted in
- Analytics: Understand how visitors use our website to improve design, content, and functionality
- Legal Compliance: Comply with applicable laws, regulations, and legal processes
- Security: Detect, prevent, and respond to fraud, unauthorized access, or other security incidents
5. Marketing Communications
Opt-In Requirement: We will only send you marketing communications if you have explicitly opted in. Submitting a reservation or contact form does not automatically subscribe you to marketing emails.
What You May Receive: If you opt in to our mailing list, you may receive periodic emails about new menu items, seasonal specials, events, loyalty rewards, and promotional offers.
SMS/Text Messages: If you provide your phone number and consent to SMS communications, you may receive appointment reminders, reservation confirmations, or promotional text messages. Message and data rates may apply. You may opt out at any time by replying STOP to any message.
Opting Out: Every marketing email includes an unsubscribe link at the bottom. You may also contact us directly at [email protected] to be removed from our mailing list. Please allow up to 10 business days for removal to take effect. Opting out of marketing will not affect transactional communications (e.g., reservation confirmations).
6. Cookies & Tracking Technologies
Our website may use the following tracking technologies:
| Technology | Purpose |
|---|---|
| Essential Cookies | Required for basic website functionality, session management, and security. These cannot be disabled. |
| Analytics Cookies | Help us understand how visitors interact with our website (e.g., pages visited, time on site). We may use Google Analytics or similar tools. |
| Marketing Pixels | Track conversions from advertising campaigns on platforms such as Facebook (Meta), Instagram, and Google Ads to measure campaign effectiveness. |
| Google reCAPTCHA | Protects our forms from spam and abuse by analyzing user behavior patterns. |
| Google Maps | Our contact page embeds Google Maps, which may set cookies to provide mapping functionality. |
Managing Cookies: Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies, delete existing cookies, or alert you when a cookie is being set. Note that disabling cookies may impact certain features of our website.
Do Not Track: Our website currently does not respond to "Do Not Track" browser signals, as there is no industry-standard technology for honoring such requests. However, you may use browser-level controls to manage tracking as described above.
7. Third-Party Services
We utilize the following third-party services to operate our website and business:
| Service | Purpose |
|---|---|
| Internal CRM Platform | Customer relationship management, form processing, workflow automation, and marketing communications |
| Toast | Online ordering, payment processing, and point-of-sale system for pickup and delivery orders |
| Google (Maps, Analytics, reCAPTCHA, Ads) | Website analytics, mapping, form security, and advertising measurement |
| Meta (Facebook, Instagram) | Social media presence and advertising pixel tracking |
| Web Hosting Provider | Secure hosting of our website files and assets |
Each third-party service operates under its own privacy policy. We encourage you to review their respective policies. We only share the minimum information necessary for each service to perform its designated function.
8. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information, including:
- HTTPS/SSL encryption for all data transmitted between your browser and our website
- Secure webhook transmission of form data to our CRM platform
- Honeypot fields and reCAPTCHA to prevent unauthorized automated submissions
- Access controls limiting who within our organization can view personal data
- Regular review of our data collection, storage, and processing practices
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
9. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:
- Reservation Data: Retained for up to 12 months after your reservation date for record-keeping and guest preference tracking
- Feedback Data: Retained indefinitely in aggregate form for service improvement; personally identifiable feedback data retained for up to 24 months
- Contact Form Messages: Retained for up to 12 months after resolution of your inquiry
- Marketing Subscriber Data: Retained until you unsubscribe or request deletion
- Analytics Data: Retained in anonymized/aggregated form as permitted by our analytics providers
You may request early deletion of your personal data at any time by contacting us using the information provided below.
10. Your Rights & Choices
Depending on your jurisdiction, you may have certain rights regarding your personal information:
- Right to Access: Request a copy of the personal information we hold about you
- Right to Correction: Request that we correct inaccurate or incomplete personal information
- Right to Deletion: Request that we delete your personal information, subject to certain legal exceptions
- Right to Opt Out: Opt out of marketing communications at any time
- Right to Data Portability: Request your data in a commonly used, machine-readable format
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights
Virginia Consumer Data Protection Act (VCDPA): Virginia residents have specific rights under the VCDPA, including the right to access, correct, delete, and obtain a copy of personal data, as well as the right to opt out of the processing of personal data for targeted advertising, sale, or profiling.
To exercise any of these rights, please contact us at [email protected] or call (804) 359-1305. We will respond to verified requests within 45 days.
11. Children's Privacy
Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child under 13, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your information.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Burger Bach. Carytown
3426 W Cary St, Richmond, VA 23221
Phone: (804) 359-1305
Email: [email protected]
Website: theburgerbach.com
