Privacy Policy.

1. Information we collect

We collect the following types of information to operate our website and respond to your requests:

A. Personal information you provide

When you submit our Contact or Franchise form, we collect the personal information you enter in that form — for example, your name, email address, phone number, and the details of your event or franchise inquiry (such as event date, guest count, the address of the event, a photo of your event space if you choose to upload one, franchise address, or the notes you add). When you sign up for our newsletter, we collect your email address, your first name if you choose to give it, the topics you pick (the restaurant, Event Creations or both), and a record of your opt-in (when and where you signed up, the topics you chose and the version of the opt-in wording you agreed to). We do not collect payment information anywhere on this website. Online ordering is handled entirely through Toast, a separate third-party ordering platform not operated by this website — please refer to Toast's own privacy policy for how it handles your information.

B. Technical information processed automatically

Our website and forms are hosted and processed through Cloudflare's infrastructure, which automatically processes standard technical information about each request — such as IP address and browser/device information — as part of normal web hosting, and in order to run Cloudflare Turnstile (bot verification) and rate limiting on our Contact, Franchise and newsletter forms. This processing happens at the infrastructure level and is not used by Culto Italiano to build a profile of your browsing activity. Website analytics and advertising measurement run only if you allow them — see § 1.D.

C. Contact and Franchise form submissions

When you submit the Contact or Franchise form, your entry is sent from your browser to a Cloudflare Worker, which verifies it with Cloudflare Turnstile (to confirm it isn't automated). After validation, a Get a Quote (Contact) request is saved in Brevo, the customer-relationship and email service we use: your contact details are kept in our list of quote requests and each request is kept as a separate note, so we can follow up on it. If you upload a photo of your event space, it is stored in private storage on Cloudflare (Cloudflare R2), linked to your request; it is not public, and only our team can open it, from the request. Photos taken with a phone or camera can carry information embedded in the file, such as the date and the place where the photo was taken; you may wish to remove it before uploading. Our team is notified by email, and you receive a one-time email confirming we received your request. A Franchise inquiry is sent to our team as an email through Brevo. Neither form subscribes you to our newsletter. These emails may remain in the recipients' own email systems, and Cloudflare, Brevo, and other infrastructure providers involved in handling the request may retain their own operational records as part of running their services; we recommend reviewing their own privacy documentation for details on their specific practices, which this policy cannot state on their behalf.

D. Cookies, analytics & advertising

When you first visit, a banner asks which optional cookies we may use. Until you choose — and whenever you choose “Reject optional” — our website loads no analytics or advertising tools, sets no analytics or advertising cookies and does not load the Google Map. You can change your choice at any time with Cookie preferences here or at the bottom of every page.

Cookies and similar technologies on our website fall into four groups:

• Necessary (always on): a cookie on this website named culto_consent, which remembers your choice for six months, after which we ask again; and Cloudflare Turnstile, a bot-verification widget operated by Cloudflare. Our Contact and Franchise pages load Turnstile, and the newsletter form loads it once you start filling it in. Turnstile may use cookies or similar browser signals to confirm that a form is sent by a real visitor rather than automated software. It is a security feature, not an analytics or marketing tool, and Culto Italiano does not control the technical details of how it operates — see Cloudflare's own documentation.
• Analytics (only if you allow it): Google Analytics, which helps us understand which pages are visited and how the site is used. It sets cookies on this website such as _ga and _ga_…, which Google keeps for up to two years by default.
• Marketing (only if you allow it): Google Ads conversion measurement, which tells us whether our online ads lead to visits and requests, and may be used to show our ads to you on other websites. It sets cookies on this website such as _gcl_au (about 90 days), and Google may set its own cookies on Google's domains. We do not currently use other advertising services; if we add one, such as Meta, we will name it here first.
• Google Maps (only if you allow it): the interactive Google Map on our Home and Restaurant pages, embedded directly from Google (§ 1.E). It sets no cookies on this website; Google may set its own cookies on Google's domains.

These tools are loaded through Google Tag Manager, and only after you allow Analytics or Marketing. Your choice is passed to Google's tags through Google Consent Mode, and each tool runs only under the category you allowed: with only Analytics allowed, no advertising tag runs; with only Marketing allowed, Google Analytics does not run. When they run, these tools receive standard technical information such as the address of the page you are viewing, your browser and device information and your IP address, which Google processes according to its own privacy practices.

What you type in our forms — your name, email address, phone number, event details or messages — is never sent to these analytics or advertising tools. When a form is sent successfully, our website tells them only that it was sent, which form it was and a random reference number; for the newsletter, which topics you chose. Our newsletter unsubscribe page never loads these tools.

If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of advertising: Marketing stays off, whatever you choose in the banner.

Withdrawing your consent: if you turn Analytics or Marketing off, we stop loading those tools, delete the analytics and advertising cookies our website can reach (such as _ga and _gcl_au) and reload the page. If you turn Google Maps off, the map is removed from the page straight away and does not load again unless you allow it. Cookies that Google sets on its own domains — including any set by the map — cannot be removed by our website: you can delete them in your browser settings, and manage ad personalization in your Google account.

Our Home and Restaurant pages can also show a Google Map if you allow it (§ 1.E) and display a Restaurant Guru award badge (§ 1.F). Apart from these, our fonts and images are served directly from this website.

E. Embedded Google Map

Our Home and Restaurant pages can show a Google Map, embedded directly from Google, to help visitors find our Bergenfield location. The map loads only if you allow the “Google Maps” category — in the cookie banner, in Cookie preferences, or with “Allow Google Maps” where the map would appear — and then loads by itself on those pages, as you scroll to it. Until you allow it, your browser does not connect to Google for it. Once loaded, the map is Google's own content, not something Culto Italiano built or hosts: Google may process technical information associated with that connection (such as your IP address and browser information) and set its own cookies or similar identifiers, according to its own privacy practices, which this policy cannot state on Google's behalf — see Google's Privacy Policy for details. If you'd rather not load the map, the “Get directions” link next to it opens Google Maps directly instead, with or without this permission.

F. Restaurant Guru award badge

Our Home and Restaurant pages display an award badge issued by Restaurant Guru. To show it, your browser loads the badge's styles and fonts directly from Restaurant Guru's servers (awards.infcdn.net), which may process technical information associated with that connection (such as your IP address and browser information) according to their own privacy practices. Selecting the badge opens Restaurant Guru's website in a new tab.

G. Newsletter

The newsletter form at the bottom of our pages asks for your email address, optionally your first name, which news you'd like (the restaurant, Event Creations or both) and an explicit opt-in (an unticked box you choose to tick). Your entry is sent to a Cloudflare Worker, verified with Cloudflare Turnstile, and passed to Brevo, the service we use to keep our mailing lists and send the newsletter. Once Brevo has saved your subscription, you are on the list(s) you chose and we send you a one-time welcome email through Brevo. With your subscription we keep a record of your opt-in: the date and time, the website form you used, the topics you chose and the version of the opt-in wording. The form works without accepting any optional cookies. You can unsubscribe at any time with the unsubscribe link in our emails or by contacting us (§ 9).

2. How we use your information

We use the collected information for the following purposes:

• To provide, operate, and maintain our website
• To respond to the Contact and Franchise inquiries you submit, and follow up about services, quotes, or franchise opportunities
• To send you our newsletter, only if you subscribed through the newsletter form and ticked the opt-in box
• To protect our forms and website against spam and abuse (for example, through Cloudflare Turnstile and rate limiting)
• To understand how our website is used and measure how our ads perform — only if you allow Analytics or Marketing (§ 1.D)
• To comply with legal obligations

Information you submit through the Contact or Franchise forms is not added to our newsletter and is not used to send you marketing email; only the separate newsletter sign-up does that.

3. Data sharing and disclosure

We will not sell, rent, or lease your personal information to third parties. However, we may share your information in the following circumstances:

• Service providers: Cloudflare, which hosts our website and processes requests to our Contact and Franchise forms, including running Cloudflare Turnstile (bot protection) and rate limiting, and stores the event-space photos you choose to upload with a Get a Quote request; and Brevo, which keeps our quote requests and newsletter mailing lists, delivers the emails generated by our forms, and sends the newsletter; and Google, which provides Google Tag Manager, Google Analytics and Google Ads — only if you allow Analytics or Marketing (§ 1.D) — and the embedded Google Map, only if you allow Google Maps (§ 1.E).
• Legal Compliance: we may disclose your information if required to do so by law, or if we believe such action is necessary to comply with legal obligations or protect our rights, safety, or property.
• Business Transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data security

We take reasonable precautions to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Your privacy rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: you can request access to the personal information we hold about you.
• Correction: you can request that we correct any inaccurate or incomplete information.
• Deletion: you can request that we delete your personal information under certain circumstances.

To exercise any of these rights, please contact us using the information below.

6. Third-party links

Our website contains links to third-party websites that are not operated by us — for example, our "Get directions" links open Google Maps, and other links lead to our Instagram and Facebook pages, to a video on YouTube and to Toast for online ordering. Your browser only connects to these services if you choose to follow the link. We are not responsible for the content, privacy policies, or practices of third-party websites, and encourage you to review the privacy policies of any third-party sites you visit.

7. Children's privacy

Our website is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have inadvertently collected information from a child under 13, please contact us immediately so we can take appropriate action.

8. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or technology. When we make changes, we will update the date at the top of this page. We encourage you to review this policy periodically for any updates.

9. Contact us

If you have any questions or concerns about this privacy policy or our data practices, please contact us at:

Culto Italiano
Email: corrado@cultoitaliano.com
Website: cultoitaliano.com