This Privacy Policy explains how CardFlight, the developer and operator of this website, together with Chef Bugsy, LLC, collects, uses, stores and protects information when you visit our website, contact our truck crew, book the service window for an event, or stand in line at one of our weekly stops. Chef Bugsy, LLC is a street food kitchen with its business address at 8098 W Thoreau Dr, Magna - 84044-2815, United States (US). The company name and the developer name appear here because transparency about who is responsible for your information is the first duty of any serious food business. We want you to understand what we keep, why we keep it and how you can ask us to stop.
This document is written in plain English on purpose. Food service moves fast and legal writing often does not, so we have set out every topic under its own heading and kept the language direct. If anything here is unclear, write to sales@cardflight.buzz or call +16206597460 and a person from the company will walk you through it.
1. Who We Are
Chef Bugsy, LLC is a limited liability company registered in the United States and operating a street food kitchen from a service window truck. The business address is 8098 W Thoreau Dr, Magna - 84044-2815, United States (US). The company cooks smash burgers, loaded fries and hand-spun shakes along a weekly route and supplies catering and private event service across the surrounding area.
For the purposes of this policy, Chef Bugsy, LLC is the controller of the personal information described below. The developer identity used for this website is CardFlight, and communications addressed to either the developer name or the company name reach the same small team. There is no separate corporate parent, no franchise network and no outside marketing agency holding a copy of your details for its own use.
The kitchen employs a handful of crew members. Everyone who handles customer information has been shown this policy and understands that guest details are treated as confidential business records. Access is limited to the people who actually need it to cook, serve, deliver or invoice.
Business identity
Company: Chef Bugsy, LLC. Address: 8098 W Thoreau Dr, Magna - 84044-2815, United States (US). Contact email: sales@cardflight.buzz. Contact phone: +16206597460. Website: https://www.cardflight.buzz.
2. Scope of This Policy
This policy covers the website at https://www.cardflight.buzz, the contact form hosted on that website, email and phone conversations with the crew, booking records for catering and private events, and the paper and digital tickets created at the service window. It does not cover third party websites that we link to, nor does it cover a bank or payment network acting under its own privacy terms.
Our website describes the truck, the menu and the route calendar. It does not run a customer account system, it does not sell products online, and it does not process card details on the server. Most of the information we hold comes from a direct conversation: an email about a block party, a phone call about a private hire, or a name written on a ticket so the right bag reaches the right person at the pass.
If a host books the truck for an event, that host may share guest counts or dietary notes with us. In that case the host sends us the information, and we handle it only to plan and deliver the event service. The host remains responsible for telling their guests how the guest list is managed.
3. Information We Collect
We collect several categories of information, and we try to collect the least amount needed for each purpose. The categories below describe what we actually use in day to day operation, not a wish list of everything a modern data company might gather.
- Contact details. Your name, email address, phone number and, for events, the street address or venue description where the truck will park.
- Correspondence. The content of emails, messages and notes taken during phone calls, including questions about the menu, allergies, timing and parking access.
- Booking and order records. Headcount bands, chosen menu items, service times, deposit status and the name of the person collecting a group order at the ledge.
- Dietary and allergy notes. Only when you volunteer them so the crew can keep a safe service line. These notes can relate to health, so we treat them with extra care and never use them for marketing.
- Technical website data. Basic request information such as browser type, device type and the page requested, held in standard server logs for security and reliability.
- Photographs. Images of the truck, the food and the crowd, taken at events with reasonable care and, where practical, with the knowledge of the host.
We do not ask for government identification, we do not ask for financial account numbers, and we do not collect precise location history from your phone. If someone claiming to represent Chef Bugsy, LLC asks for that kind of data, treat the request as suspicious and check the phone number against the one printed in this policy.
4. Order and Booking Details
At a busy window, the crew writes a short name or an order letter on a paper ticket so the correct bag reaches the correct person. Those tickets live on a spike during service, then go into a closed bag for shredding at the end of the shift. We keep the daily totals, the number of covers and the menu mix so we can plan the next route and order stock responsibly, but we do not keep a permanent archive of who ordered what.
For catering and private events the record is more detailed because the job is larger. We keep the booking name, the host contact, the agreed menu, the headcount, the service window and any access instructions for the site. We also keep a short note on how the service went so we can improve the next one. These records are held in a shared folder that only the owner and the lead cook can open.
If a booking is cancelled, we mark the record as cancelled and keep it only as long as needed to resolve a deposit, settle an invoice or meet a tax duty. After that time it is deleted or reduced to an anonymous monthly total.
5. Payment Information
Card payments at the window are handled by a payment processor and its card reader. The reader captures the card number, while our crew sees only an approval result and a truncated receipt reference. We do not write full card numbers on paper, we do not photograph cards, and we do not store card security codes anywhere in our systems.
When a booking requires a deposit, we send a payment request through the processor or issue an invoice. The processor is responsible for the security of the card data it handles, and its own privacy notice applies to that processing. Our records keep the invoice number, the amount, the date and the fact of payment, which is the minimum needed for bookkeeping.
If you believe a payment made through our window has been handled incorrectly, contact us with the date, the stop and the amount. We will compare the note with the processor record and respond as quickly as we can. Never send a full card number or security code by email.
6. Website and Technical Data
Our website is a static set of pages. It does not host a login area, it does not run analytics scripts for advertising, and it does not build a profile of your browsing across other sites. When your browser requests a page, the hosting provider records standard information such as the date and time, the requested file, the referring page and the general browser family. These logs exist so the site stays available and so unusual traffic can be investigated.
The contact form on our website does not store your message on a server. It prepares an email in your own mail program and addresses it to sales@cardflight.buzz. That means the message leaves your device through your own email provider, and its content is handled under your provider terms as well as ours. We see the message only when it arrives in our inbox.
We may receive aggregate counts from the hosting provider, such as how many times a page was opened in a month. Those counts do not identify individual visitors and are used only to judge whether a page is working.
8. How We Use Information
We use personal information for a short list of practical purposes. Each purpose is tied to running the truck and serving the people who come to the window.
- To answer questions about the menu, the route, hours and availability.
- To prepare, confirm and deliver catering and private event bookings.
- To give the crew the details needed for a safe service, including allergy notes you share.
- To settle invoices, deposits and refunds and keep accurate accounting records.
- To plan the weekly route, order stock and reduce waste.
- To keep the website and the booking process secure and reliable.
- To meet legal, tax and insurance duties that apply to a food business.
We do not sell personal information. We do not rent a contact list. We do not send promotional messages to people who have not asked to hear from us, and we do not add every customer to a marketing list by default. When we do send a note about the route or a new special, it is because you asked for it, and every such note includes a clear way to stop.
9. Legal Bases for Processing
Where data protection law requires a stated basis, we rely on the following. For a booking or an order, we process information because it is needed to perform the agreement with you or with the host who booked the truck. For everyday questions and route updates you request, we rely on your consent or on our legitimate interest in answering customers promptly.
We rely on legitimate interests for security logging, fraud prevention, service quality notes and the orderly management of the business. Those interests are balanced against your reasonable expectations, and we keep the data involved to a minimum. Where a legal duty applies, such as tax and food safety record keeping, we process the required details because the law asks us to.
When we rely on consent, you can withdraw it at any time by writing to sales@cardflight.buzz. Withdrawal does not affect work already done under that consent, and it does not cancel a booking that both sides have agreed to complete.
11. Service Providers
Small food businesses depend on a handful of outside services, and we choose them with care. Our payment processor, our email provider, our hosting provider and our bookkeeper each receive only the information needed for their part of the work. We look for providers that publish clear security practices and that agree to use the data only on our instructions.
These providers may operate systems outside the state or the country where you live. When information crosses a border, we take reasonable steps to confirm that the provider applies protections consistent with this policy. We do not control every internal practice of a large provider, but we review the relationship when something changes and we replace a provider that does not meet our expectations.
If you want to know which categories of provider are involved in a particular booking, ask us. We will explain the role without disclosing confidential commercial terms.
12. How Long We Keep Information
We keep information only as long as it serves the purpose for which it was collected. A question by email is usually deleted within twelve months after the conversation ends. A booking record is kept for the length of the event plus the period needed to close the invoice and satisfy tax rules, which is commonly several years. Payment receipts are kept for the period required by accounting law.
Paper tickets from the window are shredded at the end of each shift, apart from the daily totals, which are recorded without names. Website server logs are rotated on a short cycle and are not kept for long term analysis. Photographs of events may be kept longer if they are used on the website or in a printed menu, and we remove a photograph on request when the person in it can be identified and asks us to.
When a record is no longer needed, we delete it, shred it or reduce it to a form that no longer identifies anyone. We review the retention list once a year so that old records do not pile up simply because nobody remembers them.
13. How We Protect Information
We protect information with practical controls suited to a small kitchen. Email accounts use strong passwords and two step verification where the provider offers it. Booking records sit in a shared folder with access limited to the owner and the lead cook. Paper tickets are held on a spike in view of the crew, then shredded. Devices used for bookings are locked when unattended and kept updated.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects personal information, we will investigate promptly, contain it, and notify affected people and the appropriate authority where the law requires. We will also explain in plain terms what happened and what we changed.
You can help by keeping your own account secure, by not sending card details by email, and by telling us at once if a message claiming to be from the truck looks unusual. Our real email address is sales@cardflight.buzz and our real phone number is +16206597460.
14. Your Privacy Rights
Depending on where you live, you may have the right to know whether we hold information about you, to receive a copy, to correct an error, to delete a record, to restrict how it is used, or to object to a particular use. You may also have the right to withdraw consent and the right not to be treated unfairly for exercising any of these rights.
To make a request, write to sales@cardflight.buzz with enough detail for us to find the record, such as the name used for a booking and the approximate date. We will confirm receipt and respond within the time the law allows. We may ask for a simple verification step so that we do not hand one person the records of another.
There is normally no fee for a reasonable request. If a request is clearly unfounded or repetitive, we may explain why we cannot act on it. If we refuse a request, we will give our reason and tell you how to complain. You also have the right to complain to the data protection authority in your state or country, though we would appreciate the chance to fix the issue first.
15. Privacy for Children
Our website is meant for adults who plan meals, routes and events. We do not knowingly collect personal information from children under thirteen through this website, and the contact form is not designed for use by a child. If a parent or guardian believes a child has sent us information, contact us and we will remove it.
At the truck, a family may order for a child, and the crew may write a first name on a ticket so the right bag is handed over. That name is treated like any other ticket note and is shredded at the end of the shift. We do not build profiles of children, we do not market to them, and we do not ask for their contact details at the window.
Event hosts sometimes share a guest list that includes minors. We use such a list only to count covers and plan the service, and we ask hosts to share the minimum necessary.
16. Changes to This Policy
We may update this policy when our service changes, when we add a tool, or when the law asks for a different disclosure. When we make a material change, we will update the effective date at the top of the page and post a short note on the homepage so regular visitors can see that something moved.
If a change would broaden the way we use information already collected, we will make that clear and, where consent is the right basis, ask before the new use begins. Continuing to use the website after an update means you have seen the current version, but it does not waive any right the law gives you.
We keep earlier versions of this policy on file so we can answer a question about what applied on a given date. Ask us if you need a copy for a booking record.
17. How to Contact Us
Questions about this policy, requests about your information and complaints all go to the same small team. Write to sales@cardflight.buzz or call +16206597460 during business hours. You can also send a letter to Chef Bugsy, LLC, 8098 W Thoreau Dr, Magna - 84044-2815, United States (US).
Please include your name, the best way to reach you and a short description of what you need. If the request concerns a booking, add the date and the venue so we can find the right folder. We aim to acknowledge every request within a few business days.
If you are not satisfied with our answer, tell us. We would rather resolve a concern directly than have it sit unresolved. If we cannot agree, we will point you to the authority that can review the matter.
18. Regional and State Notices
Chef Bugsy, LLC operates in the United States and handles information under the laws that apply there. If your state grants specific rights, such as a right to opt out of the sale of personal information, we honor those rights. We do not sell personal information, so there is no sale to opt out of, but you can still ask us to confirm that in writing.
Residents of states with a consumer privacy statute may request access, correction, deletion and a portable copy of their information. We will not discriminate against you for making a request, and we will not change the price or the quality of service because you exercised a right. To use an authorized agent, send a written authorization signed by you along with the request.
For visitors from outside the United States, we process information to answer your message and to deliver a booking you request. Where local law provides additional rights, we will work to honor them in a way that fits our small operation. This policy does not create rights beyond those the applicable law already grants.
Solid promise: we collect little, we keep it briefly, and we never sell it. If any part of this policy is unclear, contact Chef Bugsy, LLC at sales@cardflight.buzz or call +16206597460 and ask for a plain explanation.