Privacy Policy

1. Introduction

Effective date: 03/01/2026

Sabai Thai Street Food ("Sabai Thai," "we," "us," or "our") is a family-run restaurant operated by Sabai LLC at 3333 S Orange Ave, Suite 105, Orlando, FL 32806. We respect your privacy and want you to know exactly what information we collect, why, and what choices you have.

This Privacy Policy applies to information we collect through our website, online ordering, email and text programs, social media pages, advertising, and in our restaurant. It does not apply to information collected by third-party websites or services we link to, which have their own privacy policies.

By using our website or services, you acknowledge that you have read this Privacy Policy. We do not sell your personal information.

2. Information We Collect

Information you give us

• Contact details — name, email address, and mobile phone number when you place an order, join our email or text list, sign up in the restaurant, enter a promotion, or contact us.
• Order information — items ordered, order history, pickup or delivery details, special instructions, and food allergy or dietary notes you choose to share so we can prepare your food safely.
• Payment information — processed by our payment providers (see section 7). We do not store full card numbers.
• Communications — messages, reviews, survey answers, catering or event inquiries, and feedback you send us.
• Optional details — such as your birthday month for a birthday offer, if you choose to provide it.

Information collected automatically

When you visit our website or interact with our ads, we and our service providers may collect device and usage information, including IP address, browser type, device type, pages viewed, referring website, approximate location (city or region, based on IP address), and how you interact with our emails and ads. See section 5 for more on cookies and similar technologies.

Information from third parties

We may receive information from delivery partners (such as name, order details, and delivery address for orders you place through their apps), from advertising and social media platforms (such as aggregated reports on how our ads performed), and from review sites when you post publicly about us.

3. How We Use Your Information

We use the information we collect to:

• Take, prepare, and fulfill your orders, and send order confirmations and pickup updates
• Respond to questions, catering requests, and feedback
• Send promotions, specials, and news by email or text, only when you have opted in (see section 6)
• Run promotions, giveaways, and any rewards or loyalty program you join
• Show you relevant ads on platforms such as Google, Facebook, and Instagram, and measure whether those ads lead to visits and orders
• Understand how guests use our website and improve our menu, service, and marketing
• Protect against fraud, keep our systems secure, and comply with legal obligations

We use allergy and dietary notes only to prepare your order. We do not use them for marketing.

4. How We Share Your Information

We do not sell your personal information, and we never sell sensitive information. We share information only as described below.

• Service providers that help us run the restaurant and only use your information on our behalf, including our website and online ordering provider (Popmenu), our point-of-sale and payment provider (Toast), email and text messaging services, and website hosting and analytics providers.
• Advertising and social media platforms such as Google and Meta (Facebook and Instagram). When you use our website, these platforms may collect device and browsing information through cookies and tags to measure and improve our ads. We may also share a scrambled (hashed) version of your email address with these platforms to measure ad results or show ads to similar audiences. You can opt out as described in section 5.
• Delivery partners when you order through a third-party delivery app, which handles your information under its own privacy policy.
• Legal and safety reasons — when required by law, subpoena, or court order, or to protect the rights, safety, or property of our guests, staff, or business.
• Business transfers — if the restaurant is sold or reorganized, information may transfer to the new owner, who must honor this policy.
• With your consent — any other sharing you agree to.

5. Cookies, Pixels, and Advertising

Our website uses cookies, pixels, and similar technologies so the site and online ordering work, to remember your cart, to understand site traffic, and to measure and personalize our advertising. These may include Google Analytics, the Google Ads tag, and the Meta Pixel.

Your choices:

• Browser settings — you can block or delete cookies. Some features, such as online ordering, may not work without them.
• Google — manage ad personalization at adssettings.google.com and opt out of Google Analytics with the browser add-on.
• Meta — manage ad preferences in your Facebook or Instagram settings under Ad Preferences.
• Industry opt-outs — the Digital Advertising Alliance and Network Advertising Initiative offer tools to opt out of interest-based ads from participating companies.

Our website does not currently respond to browser "Do Not Track" signals, because no common standard for them exists. Opting out of interest-based ads does not stop all ads; you may still see ads that are not personalized.

6. Email and Text Message Marketing

Email. If you join our email list or opt in when ordering, we may send you specials, events, and news. Every marketing email includes an unsubscribe link, and we will process your request promptly. You will still receive transactional emails, such as order confirmations.

Text messages (SMS). We send marketing text messages only to people who have expressly agreed to receive them — for example, by checking an unchecked consent box online or in the restaurant, or by texting a keyword to our number.

To stop texts, reply STOP (or QUIT, END, CANCEL, UNSUBSCRIBE, or OPT OUT) to any message, or tell us any other reasonable way, such as by email or in person. We will honor your request within 10 business days, and usually much sooner. We may send one final text confirming you've been unsubscribed.

We never sell or share your mobile number or text-message consent with third parties for their own marketing. Text-message opt-in data is used only by Sabai Thai and the service providers that deliver our messages.

7. Payment Information

Card payments in the restaurant and online are processed by our point-of-sale and online ordering providers (Toast and Popmenu) and their payment processors, which are required to meet Payment Card Industry Data Security Standards (PCI DSS). We do not store full credit or debit card numbers on our own systems. We may receive limited details, such as card type, the last four digits, and transaction amount, to process refunds and keep records.

8. Data Security

We take reasonable measures to protect your personal information, as required by Florida law. These include using reputable service providers with industry-standard security, limiting staff access to customer information to those who need it, using secure passwords and account controls, and securely disposing of records we no longer need. No system is completely secure, so we cannot guarantee absolute security.

If a security breach involving your personal information occurs, we will notify you as required by the Florida Information Protection Act (Fla. Stat. § 501.171) — as quickly as practicable and no later than 30 days after we determine a breach occurred — and will notify the Florida Department of Legal Affairs where the law requires.

9. Data Retention

We keep personal information only as long as we need it for the purposes in this policy. Order and transaction records are kept as long as needed for accounting, tax, and legal purposes. Marketing contact information is kept until you unsubscribe or ask us to delete it; after an opt-out we keep a minimal record of your number or email so we can honor that request. When information is no longer needed, we delete it or make it unreadable, as Florida law requires for customer records.

10. Your Choices and Requests

You can ask us to:

• Access — tell you what personal information we hold about you
• Correct — fix information that is inaccurate
• Delete — delete your personal information, unless we must keep it for legal, tax, or security reasons
• Stop marketing — remove you from our email and text lists at any time

To make a request, email us at sabaithaiorl@gmail.com or call 689-336-3384. We may need to verify your identity before acting on a request. We will respond within 45 days and will not treat you differently for making a request.

We extend these choices to all of our guests, whether or not the law of your state requires it.

11. Children's Privacy

Our website and marketing programs are intended for adults. We do not knowingly collect personal information from children under 13, consistent with the federal Children's Online Privacy Protection Act (COPPA), and our email and text programs are for guests 18 and older. If you believe a child has given us personal information, contact us and we will delete it.

12. Third-Party Links and Services

Our website and social pages link to services we don't control, such as delivery apps, review sites, Google Maps, Facebook, and Instagram. Their privacy practices are governed by their own policies, which we encourage you to read.

13. Changes to This Policy

We may update this Privacy Policy as our business or the law changes. We will post the updated version on this page with a new effective date. If we make a material change to how we use your personal information, we will give notice on our website or by email before the change takes effect.

14. Contact Us

Questions or requests about this Privacy Policy:

Sabai Thai Street Food
Sabai LLC
3333 S Orange Ave, Suite 105
Orlando, FL 32806
Phone: 689-336-3384
Email: sabaithaiorl@gmail.com