This policy explains what Mica's Shack ("we", "us") collects through this website and at booking, why, who else sees it, and the choices you have.
1. What we collect
When you book: your name, email address, phone number (if given), the menu, the date, and any notes you add (guests, occasion, address, dietary needs). Notes are optional; if you tell us about an allergy or a health matter, it is used only to plan your menu and keep your guests safe.
When you use "Ask Mica": the helper is a short set of questions, not a chat with a person or an AI. Your answers are not sent or stored anywhere; they are only copied into the booking form, where you can change them before you send it.
When you pay a deposit: your card or wallet details go straight to our payment provider. We receive only confirmation of the payment, the amount, and the name and email the provider holds.
When you visit: our hosting provider records standard request information (IP address, browser, the page asked for, time) to keep the site running and to stop abuse.
2. How we use it
- To hold and confirm your date, and to contact you about it.
- To take, and where due refund, a deposit.
- To keep a record of past events, so a returning client's menu and dietary needs are remembered.
- To answer your questions and requests.
We do not sell or rent your information, and we do not use it for advertising.
3. Who else handles it
Only the providers needed to run the business, each acting on our behalf:
- Cloudflare: hosting, the booking database and security.
- Our payment provider (such as PayPal or Stripe, when deposits are on): takes the payment under its own privacy policy.
- Our email provider (such as Resend or Brevo, when set up): sends your confirmation.
- Google Calendar, only if Mica connects it: receives your name, email and event date so the booking appears on Mica's calendar and Google can send an invitation.
4. Cookies and similar storage
Visitors get no cookies from us by default. The only cookie we set is the sign-in cookie for Mica and anyone she authorises in the admin area.
Your browser also stores two small choices on your device, never sent to us: whether you turned the music on, and that the "Ask Mica" helper has already said hello this visit.
If we switch on visitor statistics, you are asked first by a banner, nothing is counted until you agree, and you can change your mind at any time from the link at the foot of each page.
5. How long we keep it
Booking records are kept for as long as you are a client and for up to three years after your last event, then deleted. Enquiries that did not lead to a booking are deleted after twelve months. You can ask us to delete your information sooner (see below), except records we must keep by law.
6. Your choices and rights
You can ask to see, correct, download or delete the information we hold about you, and to stop any use you object to. Email ; we reply within 30 days and may need to confirm it is you. Residents of states with their own privacy laws (such as California) and of the EU and UK have these rights by law; we give them to everyone.
7. Security
The site is served only over HTTPS. Stored data is encrypted by our host, the admin area needs a password and, once set up, a second factor (a passkey or a code), and access is limited to Mica and the people she authorises. No system is perfectly secure; if a breach ever affected your personal information, we would tell you, and the Florida Department of Legal Affairs where required, as Florida Statutes section 501.171 sets out.
8. Children
This site is not meant for children under 13, and we do not knowingly collect their information. Bookings are made by adults.
9. Changes
If this policy changes, the date at the top changes with it. Significant changes are shown on the site before they take effect.