Le Garage Privacy Policy

Le Garage Sausalito (“Le Garage,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, retain, disclose, and protect personal information when you visit legaragesausalito.com (the “Website”), contact us, make a reservation, place an order, purchase a gift card, inquire about catering or a private event, apply for employment, or otherwise interact with Le Garage.

This Privacy Policy also describes rights that may be available under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), the California Invasion of Privacy Act (“CIPA”), the European Union General Data Protection Regulation (“GDPR”), the United Kingdom GDPR, and other applicable privacy laws.

1. Scope

This Privacy Policy applies to personal information controlled by Le Garage in connection with:

• The Website;
• Restaurant reservations and guest communications;
• Online and in-person orders;
• Gift cards;
• Catering and private-event inquiries;
• Marketing communications;
• Employment inquiries and applications; and
• Communications sent through website forms, email, telephone, or chat.

Some services are provided through third-party platforms, including Toast, Yelp, Google Maps, Instagram or Meta, and embedded menu or media providers. Those companies may independently collect and process information under their own privacy policies. This Privacy Policy does not replace their policies.  

2. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of information.

A. Contact and Identifying Information

This may include your:

• Name;
• Email address;
• Telephone number;
• Mailing or billing address;
• Account or reservation identifiers; and
• Signature, if required for an event or catering agreement.

B. Reservation, Order, and Transaction Information

This may include:

• Reservation date, time, party size, and seating preferences;
• Food, beverage, merchandise, catering, or gift-card purchases;
• Pickup, delivery, or event details;
• Transaction amount, date, and status;
• Loyalty, promotional, or gift-card information;
• Refunds, cancellations, or customer-service records; and
• Limited payment-related information received from our payment providers.

Payment card numbers and security codes are generally collected and processed directly by payment providers such as Toast or another payment processor. Le Garage does not intend to store complete payment-card numbers or card security codes on the Website.

C. Catering and Private-Event Information

This may include:

• Event date and time;
• Number of guests;
• Event type;
• Menu and service preferences;
• Budget;
• Venue and setup requirements;
• Dietary restrictions or allergy information that you voluntarily provide; and
• Communications concerning proposals, agreements, deposits, and event coordination.

Please provide only dietary or health-related information that is reasonably necessary for us to respond to your request.

D. Communications

We may collect the contents and metadata of communications you send to us, including:

• Emails;
• Contact, catering, employment, and event-inquiry submissions;
• Chat messages;
• Telephone communications;
• Feedback, reviews, and customer-service requests; and
• The date, time, sender, recipient, and status of a communication.

E. Employment Information

If you inquire about or apply for employment, we may collect:

• Contact information;
• Employment history;
• Education;
• Professional qualifications;
• Availability;
• References;
• Résumé or application materials; and
• Other information you voluntarily provide.

F. Internet, Device, and Usage Information

When you use the Website, we and our service providers may collect:

• Internet Protocol address;
• Browser and device type;
• Operating system;
• Referring and exit pages;
• Pages, buttons, and links viewed or used;
• Date, time, and duration of visits;
• Approximate location derived from an IP address;
• Cookie or device identifiers;
• Consent and privacy-choice records;
• Error, diagnostic, fraud-prevention, and security data; and
• Interactions with embedded content or website features.

G. Social-Media Information

If you interact with Le Garage through Instagram, Facebook, Yelp, or another social network, or tag Le Garage in a post, we may receive information made available by you or the platform, such as:

• Username or profile name;
• Public profile information;
• Posts, photographs, comments, or messages;
• Engagement information; and
• Information you authorize the platform to provide.

H. Sensitive Personal Information

Le Garage does not seek to collect sensitive personal information unless reasonably necessary for a requested service, legal obligation, transaction, or accommodation. Sensitive information could include payment-account information processed by a payment provider or dietary information that may suggest a health condition. We do not use sensitive personal information to infer characteristics about individuals or for unrelated advertising purposes.  

3. Sources of Personal Information

We may obtain personal information:

• Directly from you;
• Automatically through the Website;
• From reservation, ordering, payment, gift-card, catering, and delivery providers;
• From social-media and review platforms;
• From event organizers or another person arranging a reservation or event;
• From advertising, analytics, hosting, security, and technology providers;
• From publicly available sources; and
• From references or recruiting services in connection with employment applications.

If you provide information about another person, you represent that you are authorized to provide it and that you have given that person any required notice.  

4. How We Use Personal Information

We may use personal information to:

• Operate, maintain, secure, and improve the Website;
• Provide restaurant, reservation, ordering, gift-card, catering, and event services;
• Process payments and transactions;
• Confirm, change, or cancel reservations and orders;
• Respond to questions and customer-service requests;
• Prepare event proposals and agreements;
• Accommodate dietary or accessibility requests;
• Send transactional and service-related messages;
• Send marketing communications when permitted;
• Display or interact with social-media content;
• Measure Website performance and understand how visitors use the Website;
• Detect fraud, abuse, security incidents, and technical problems;
• Maintain business, accounting, tax, and transaction records;
• Evaluate employment applications;
• Establish, exercise, or defend legal claims;
• Comply with applicable laws, regulations, court orders, and governmental requests; and
• Carry out other purposes disclosed when information is collected or with your consent.

5. Cookies and Similar Technologies

The Website may use cookies, pixels, scripts, tags, local-storage technologies, embedded content, and similar tools. These technologies may fall into the following categories:

Strictly Necessary Technologies

These support Website operation, security, accessibility, network management, fraud prevention, consent management, and functions requested by the visitor.

Functional Technologies

These remember preferences or enable features such as embedded menus, maps, reservations, ordering, social content, accessibility tools, forms, and chat.

Analytics Technologies

These help us understand Website traffic, performance, and visitor interactions.

Advertising and Social-Media Technologies

These may enable social-media content, measure campaigns, or support advertising. Depending on their operation, some uses could be considered “sharing” for cross-context behavioral advertising under California law. Where required, Le Garage will not activate nonessential cookies or similar technologies until you make an affirmative choice. You can accept or reject nonessential technologies and later change your selection through the Privacy Choices link in the Website footer. Blocking certain technologies may prevent maps, social feeds, chat, embedded menus, reservations, or other optional features from functioning correctly.

6. Website Communications, Chat, and CIPA Notice

The Website may offer chat, contact, catering, event, career, or other communication features. When you intentionally open or use one of these features, information you submit is transmitted to Le Garage and to service providers operating the feature on our behalf. These providers may process message content and related metadata to:

• Transmit and store the communication;
• Route it to the appropriate person;
• Respond to your request;
• Protect the feature against fraud or abuse;
• Troubleshoot technical problems; and
• Maintain records of the interaction.

Le Garage does not authorize these providers to use the contents of private communications for their own unrelated advertising purposes. Le Garage will provide conspicuous notice and obtain consent before intentionally recording or monitoring the contents of a confidential telephone, chat, or electronic communication when consent is required under CIPA or another applicable law. We do not use Website tools for the purpose of capturing payment credentials, passwords, or the contents of information typed into a form but never submitted. Website monitoring and communication providers must be configured to exclude sensitive fields and operate only for disclosed business purposes. By voluntarily submitting a message after receiving the applicable notice, you consent to the transmission and processing of that submitted communication by Le Garage and its service providers for the purposes described above. This consent does not authorize undisclosed interception, recording, or use for unrelated purposes.

7. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients.

Service Providers and Contractors

These may include providers of:

• Website hosting and maintenance;
• Cybersecurity and fraud prevention;
• Reservations;
• Ordering, payment processing, and gift cards;
• Catering or event management;
• Email, forms, chat, and customer communications;
• Analytics and consent management;
• Menu, map, video, and social-media embeds;
• Accounting, professional, and administrative services; and
• Recruiting or employment services.

These providers may process information only as permitted by their contracts, their own legal obligations, and applicable law.

Business Partners and Platforms

When you choose to interact with Toast, Yelp, Google Maps, Instagram, Meta, or another third-party platform, information may be provided directly to or collected directly by that platform. Its privacy policy governs its independent processing.

Legal and Safety Recipients

We may disclose information when reasonably necessary to:

• Comply with law, legal process, or a governmental request;
• Protect the rights, property, or safety of Le Garage, our guests, employees, or others;
• Detect or prevent fraud, misuse, or security incidents; or
• Establish, exercise, or defend legal claims.

Business Transfers

Information may be disclosed as part of a merger, financing, acquisition, reorganization, sale of assets, bankruptcy, or similar business transaction, subject to appropriate confidentiality protections.

At Your Direction

We may disclose information when you request or consent to the disclosure.  

8. Sale and Sharing of Personal Information

Le Garage does not sell personal information for money. Le Garage does not knowingly disclose personal information for cross-context behavioral advertising in a manner that constitutes “sharing” under the CCPA/CPRA. We also do not knowingly sell or share the personal information of consumers under 16 years of age. If our practices change, we will update this Privacy Policy, provide any legally required Do Not Sell or Share My Personal Information mechanism, and honor applicable opt-out preference signals, including Global Privacy Control. Third-party platforms that you independently choose to visit may collect and use information under their own policies. A link to a third-party website is not, by itself, a sale of personal information by Le Garage.  

9. California Notice at Collection

During the preceding 12 months, Le Garage may have collected the following CCPA categories:

• Identifiers;
• Customer-record information;
• Commercial information;
• Internet or other electronic-network activity;
• Approximate geolocation information;
• Audio, electronic, or similar communication information;
• Professional or employment-related information;
• Inferences drawn from information you provide, such as dining or event preferences; and
• Limited sensitive personal information, such as payment-account information processed by a payment provider or voluntarily provided dietary information.

We collect these categories for the purposes described in Section 4 and retain them according to Section 13. We may disclose these categories to service providers, contractors, third-party platforms selected by the consumer, professional advisers, government authorities, or transaction participants for the purposes described in Section 7. We do not collect additional categories of personal information or use collected information for materially different, unrelated, or incompatible purposes without providing legally required notice.

10. California Privacy Rights

Subject to legal exceptions and verification requirements, California residents may have the right to:

• Know the categories and specific pieces of personal information we have collected about them;
• Know the categories of sources, business purposes, and recipients associated with that information;
• Request deletion of personal information;
• Request correction of inaccurate personal information;
• Opt out of the sale or sharing of personal information;
• Limit certain uses or disclosures of sensitive personal information;
• Receive information about financial incentives, if offered;
• Use an authorized agent to submit a request; and
• Receive equal service and not be discriminated against for exercising privacy rights.

Le Garage does not use sensitive personal information for purposes that require a separate right-to-limit mechanism. Please state that your request concerns “California Privacy Rights” and identify the right you wish to exercise. We may need to verify your identity by matching information provided with information in our records. We will request only information reasonably necessary for verification. We may deny or limit a request when permitted by law and will explain the basis for doing so. An authorized agent must provide proof of authorization, and we may also ask the consumer to verify their identity or confirm the authorization directly.  

11. European and United Kingdom Privacy Rights

To the extent the GDPR or UK GDPR applies, Le Garage is the controller of personal data processed for the purposes described in this Privacy Policy. We rely on one or more of the following legal bases:

• Contract: Processing necessary to provide a reservation, order, gift card, catering service, private event, or other requested service.
• Legitimate interests: Operating and securing the Website, responding to inquiries, maintaining business records, preventing fraud, and improving services, where those interests are not overridden by individual rights.
• Consent: Nonessential cookies, certain marketing communications, or communications recording and monitoring where consent is required.
• Legal obligation: Tax, accounting, employment, food-safety, regulatory, and legal requirements.
• Legal claims and vital interests: Protecting health or safety and establishing, exercising, or defending legal rights where applicable.

Depending on applicable law, you may request:

• Access to your personal data;
• Correction of inaccurate or incomplete data;
• Erasure;
• Restriction of processing;
• Data portability;
• Objection to processing based on legitimate interests;
• Objection to direct marketing;
• Withdrawal of consent at any time; and
• Information about applicable safeguards for international transfers.

Withdrawal of consent does not affect processing that was lawful before withdrawal. You may submit a request using the contact information in Section 10. You may also lodge a complaint with the data-protection authority in the country where you live or work or where you believe an infringement occurred. Le Garage operates in the United States. Information may therefore be processed in the United States and other countries whose laws may differ from those in your jurisdiction. Where required, we and our providers will use recognized safeguards for international transfers. No decision producing legal or similarly significant effects is made about Website visitors solely through automated processing.  

12. Marketing Communications

We may send promotional email or text communications when you have consented or when otherwise permitted by law. You can unsubscribe from promotional emails by using the unsubscribe link in the message or contacting us. You may opt out of promotional text messages by replying STOP. Opting out of marketing does not prevent us from sending nonpromotional messages concerning an order, reservation, event, transaction, safety issue, or other existing relationship. Consent to marketing is not a condition of making a purchase or receiving restaurant service.  

13. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, accounting, security, and dispute-resolution requirements. Our general retention periods are:

• Contact, catering, and event inquiries: ordinarily up to 24 months after the last meaningful interaction, unless an event, contract, dispute, or legal requirement remains active;
• Reservation, order, payment, gift-card, tax, and accounting records: ordinarily up to seven years or the period required by applicable law;
• Marketing information: until consent is withdrawn or the person opts out, after which limited suppression information may be retained to honor the request;
• Employment applications: ordinarily up to two years after the hiring decision, unless a longer period is required or authorized;
• Security and ordinary Website logs: ordinarily up to 12 months, unless needed for security, fraud prevention, troubleshooting, or legal claims; and
• Consent and privacy-request records: for as long as reasonably necessary to demonstrate compliance and honor the individual’s choices.

Third-party platforms may apply different retention periods under their own policies.  

14. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. These may include access controls, service-provider restrictions, security monitoring, and payment processing through specialized providers. No system is completely secure. We cannot guarantee that information transmitted through the Internet or stored electronically will never be lost, accessed, used, or disclosed without authorization.  

15. Children’s Privacy

The Website and Le Garage’s online services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information online from children under 13 without legally required parental consent. If you believe a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete it. We do not knowingly sell or share the personal information of individuals under 16.  

16. Third-Party Services and Links

The Website may contain links to or embeds from third parties, including Toast, Yelp, Google Maps, Instagram, Facebook, and menu, media, ordering, reservation, or review providers. A third party may collect information when its content loads or when you interact with it. Where required, optional third-party embeds will remain disabled until you consent. Once you leave the Website or interact directly with a third-party service, that service’s privacy policy and terms govern. We encourage you to review those policies before submitting information.  

17. Do Not Track and Global Privacy Control

Browser “Do Not Track” signals do not currently operate under a uniform industry standard, so the Website may not respond to them. Where required by the CCPA/CPRA, we honor qualifying opt-out preference signals, including Global Privacy Control, as a request to opt out of the sale or sharing of personal information for the browser or device sending the signal. Because Le Garage currently states that it does not sell or share personal information, receiving such a signal will not result in a materially different Website experience.  

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, legal requirements, or practices. The revised policy will be posted on the Website with an updated “Last Updated” date. We will provide additional notice or obtain consent when legally required.  

19. Contact Us

For privacy questions, requests, or complaints, contact: