AUDIO CAFE, LLC
Listening Room and Sound Bar · American Fork, Utah
This policy explains how AudioCafe, the listening room and espresso bar operated by AUDIO CAFE, LLC, collects and handles information on the website at audiocafe.autos. AudioCafe builds this site with the privacy of every listener in mind, and it wants any guest to understand, in plain language, exactly what data leaves a browser and where that data goes. This policy applies to the public pages of the site, to the reservation form, and to any email conversation started from the contact page.
The website audiocafe.autos is operated by AUDIO CAFE, LLC, a limited liability company based in the United States. The registered business address is 841 E 300 N, American Fork - 84003-2024, United States (US). The company runs a listening room and espresso bar called AudioCafe, and the name AudioCafe also refers to the small team that handles events, reservations and the monthly roast pairing. Throughout this policy the words the company and we both mean AUDIO CAFE, LLC, and the word the site means audiocafe.autos.
Any questions about this privacy policy or about the way the site handles a particular detail can be sent to the address given in section 19 below. The company reviews privacy matters itself rather than through a third party, because the counter is small and the questions are usually personal. A reply may take up to two working days during an event week.
This policy covers the public pages of the site, the reservation form on the contact page, and the email messages sent to or from the contact address. It does not cover any behaviour that happens inside the physical listening room, because that place only sees a guest face to face and not through a browser. It also does not cover the website of a host, a payment partner or any other service reachable through a link on this site.
When a guest visits the room in person and later uses the site, the two sets of activity are kept apart by the company as far as the technology allows. A table reservation made on the site is tied to an email, while a walk in the door is not recorded at all unless a payment card is involved. The company tries to keep that split simple to describe because a simple promise is easier to keep.
The site collects a small set of information, and it collects that set for one of two reasons. The first reason is that you typed the information yourself into the contact form. The second reason is that the browser, the internet service provider or the server log generated the information automatically while the page loaded. Information that is typed in is described in section 4. Information that is generated automatically is described in section 5.
In either case the company collects only what the task requires. A reservation needs a name and an email. A request to change a subscription needs an address. No request on this site asks for a health record, a government number or a full payment card number over the contact form. When an in-person payment is wanted, the card is handled by a terminal at the counter and not by this website.
When you fill in the reservation form on the contact page, the site collects the value of the name field, the email field, the subject field and the message field. The message field is a free text box, and the company asks that you do not place anything sensitive inside it, such as a payment number or a personal identifier. The contents of that box are read only by the small AudioCafe team and by no one else unless section 9 requires disclosure.
The optional request to join the discovery night list is not a separate database on this site. A visitor who asks about a discovery night is simply sent an email reply from the same reservation inbox, and that email is kept only as an ordinary message. The company does not run an automatic newsletter and does not install tracking pixels into the replies. A request to stop receiving future replies is honoured the moment it is made.
Like most websites, the site records a basic server log entry each time a page is opened. A log entry typically holds the internet protocol address of the device, the date and time of the request, the type of browser, the operating system and the path of the page that was requested. The company keeps its own server logs and does not route them through a third party for marketing.
This server-side detail is used to keep the site secure, to measure roughly how many visitors load a page in a week, and to fix a fault if a page fails to render. The raw log entries are not combined with the reservation inbox in any routine way. If the company ever wants to combine them, for example to stop abuse of the contact form, it will do so narrowly and only after the logs are reviewed against a named complaint.
The company uses the information collected on the site for four clear purposes. The first purpose is to respond to a reservation request, to hold a table and to confirm an evening. The second purpose is to answer a question about a service, a record, a roast or the monthly pairing. The third purpose is to protect the site from abuse, to measure usage and to fix faults. The fourth purpose is to meet the law where a record must be kept.
The company does not use the collected information to build a profile for advertising. It does not sell the list of names, does not trade the email inbox and does not hand a message thread to an analytics network. A person who reserves a seat is treated the way a guest at the counter would be treated: remembered for the booking, welcomed on arrival, and not followed home.
The legal basis for holding a reservation message is the step before a contract. A visitor asks for a private sound session or a listening evening, and the company needs the name and email to prepare that booking. The legal basis for holding a general question is a legitimate interest in running a small service, weighed against the limited personal data involved.
For information gathered automatically, the basis is a legitimate interest in keeping the site safe and well maintained. Where an email account is covered by an overseas law that requires a stated basis, the company relies on the consent you give when you send the message and on the necessity of answering you. Nothing in this policy changes those two foundations, and withdrawing later is always possible by asking.
The site uses a hosting provider to serve the pages and a separate courier for packed deliveries. These providers act on instructions from the company and do not decide how the data may be used. Each provider is bound by its own agreement to keep the information secure and confidential.
A service provider may be located outside the United States. Where that happens, the transfer is described in section 16 below. The company reviews this short list of providers whenever a package route changes or a hosting plan is renewed, and it removes a provider as soon as the provider is no longer needed.
The company keeps reservation messages and answers for as long as they are useful to the conversation and then deletes them on request. As a rough guide, an ordinary email thread is removed after two years unless it relates to an ongoing subscription. A subscription address is kept only while the contract is active and for a short period afterwards so a renewing customer is not asked twice.
Server logs are kept for a shorter period, usually between two and four weeks, and then are overwritten. This window is enough to chase a fault or an attack without holding network detail for years. Data no longer needed is deleted rather than stored for a future purpose, because the company would rather have empty files than a heavy one.
The site is not aimed at children, and the company does not knowingly collect personal information from anyone under the age of sixteen without a responsible adult present. A listening evening is an adult social setting, so the company expects the people who book a seat to be adults or to be accompanied by one.
If the AudioCafe team learns that a child under sixteen has sent a message alone, the message is deleted as soon as it is noticed and no reply is sent. Should a parent or guardian learn of such a message, a simple request through section 19 is enough to have it removed from the mailbox within a week.
The company protects the collected information with controls that match the scale of the site. The contact form travels over an encrypted connection. The email account is guarded by a strong password and by an extra login step. The server is kept updated, and the site does not store a payment card anywhere, because a card is only handled on a terminal at the counter.
No method of moving data over the internet is completely free of risk, and the company does not promise that one exists. What it does promise is care: access to the inbox is limited to the AudioCafe team, staff are reminded not to print a message with a credit detail, and a suspected breach is reported to the correct authority within the window the law sets, together with any notice owed to the people affected.
Depending on where you live, you may have the right to ask for a copy of the information the company holds about you, to ask for it to be corrected, to ask for it to be deleted, to limit how it is used, to receive it in a portable form, and to object to a use that is based on a legitimate interest. You may also withdraw a consent at any time.
A request can be sent to the address in section 19. The company will answer within the deadline set by the law that applies, usually within thirty days, and will not charge simply for asking. Where a request is refused, the company will say why and will tell you where you can take a complaint. No request is used against you as a reason to close a booking; a privacy request and a reservation are handled as two separate matters.
For guests who live in California, this section adds what the relevant state law requires. The company does not sell personal information as that law defines the word sell. It does not offer the collected information in exchange for money or for any similar value, and it has no plans to start.
A California resident may request to know the categories of personal information the company holds, may ask for a copy, and may ask for deletion. The company will not discriminate against a guest who makes such a request, for example by refusing a future table at the counter. To make a request, use the contact route in section 19 and state that you are writing from California.
The site is hosted from servers that may not sit in the same country as the person reading it. When a visitor sends a reservation from overseas, the message travels across the internet to the server and is stored there. This is a normal part of how a shared web service works.
The company chooses hosting that is expected to offer a reasonable standard of protection and keeps the personal data to a small scale. If a transfer needs a safeguard under a local law, the company relies on the safeguards provided by the hosting agreement and by the fact that the data is limited. A visitor who is unhappy with an overseas transfer may always choose to make the booking by phone instead.
The pages of this site carry a small number of outgoing links, to the services pages and occasionally to a reference about a record. A link to a third party page means the visitor leaves audiocafe.autos and enters a place the company does not control. This privacy policy stops applying at the moment that the next page loads.
The company does not review every external page that a later edit may add, so it cannot promise that a linked site adopts the same care. A visitor is best served by reading the privacy notice on any outside site before sending a detail to it. The company never adds an affiliate link in a way that disguises where the visitor goes next.
The company may revise this policy when the site changes, when a service changes or when the law changes. Each new version will carry a fresh last updated date near the top of the page, and the wording below that point will apply from the moment it is published. A change that narrows a right will be highlighted clearly.
Because the site does not run a newsletter, the company cannot email everyone when a policy is edited. A regular reservation guest is invited to glance at the date once in a while. The company will not use a past version of this text to describe how present data is handled, since the promise that applies is always the promise that is printed now.
Questions, requests and concerns about this policy can be directed to AUDIO CAFE, LLC at 841 E 300 N, American Fork - 84003-2024, United States (US). The team can be reached by email at contact@audiocafe.autos and by phone at +17169935268.
When writing about a personal information request, please add a name and the email that was used for the original booking, so the company can find the right thread without guesswork. The company will confirm receipt, will treat the message as private, and will keep this policy page in force as the reference for how the site behaves.
Thank you for taking the time to read this policy. AudioCafe hopes the room and the site treat every visitor with the same care, and this text is part of that same promise.