Last updated: January 2026
Shaltat ("we," "us," or "our") respects your privacy and is committed to protecting it through this Privacy Policy.
This Privacy Policy describes the types of personal information we collect about people who use our website at shaltat.local (the "Site"), our mobile ordering experience, and who otherwise interact with us online or in person (collectively, our "Services"). It also describes how we use and share that information, the choices you have, and how to contact us.
Our Site and online ordering are powered by Virtual Plates LLC ("Virtual Plates"). Virtual Plates may collect and process personal information on our behalf in connection with the Services. Virtual Plates' own privacy practices are described in its Privacy Policy.
We may update this Privacy Policy from time to time. When we do, we'll change the "Last Updated" date above and post the updated version on the Site. Your continued use of the Services after we post changes means you accept the updated Privacy Policy.
By using our Services, you agree to the practices described in this Privacy Policy.
1. Personal Information We Collect and Why
We collect the following categories of personal information for the listed purposes:
Identifiers and Contact Information
Includes your name, postal address, email address, phone number, account username, IP address, and similar identifiers.
We use this to:
- Process your orders and provide the Services.
- Maintain your account.
- Communicate with you about your orders, account, or our restaurant.
- Send you marketing and promotional messages (where you've opted in).
- Detect and prevent fraud or abuse.
Payment and Transaction Information
Includes the records of your orders and information needed to process payment. We do not store full payment card numbers ourselves — card data is handled by our PCI-compliant payment processor.
We use this to:
- Process your orders and payments.
- Issue refunds when applicable.
- Maintain order history for your account.
Commercial Information
Includes records of items you've ordered, items you've considered, and your order history.
We use this to:
- Recommend items you may enjoy.
- Personalize the Services.
- Improve our menu and offerings.
- Run loyalty, rewards, or promotional programs.
Internet and Device Activity Information
Includes browser type, device identifiers, pages you visit on our Site, links you click, search history within the Site, and how you interact with us online.
We use this to:
- Operate and improve the Site.
- Understand how customers use the Services.
- Personalize content.
- Serve and measure advertising.
Location Information
We may infer your general location from your IP address, or — with your permission — collect more precise location from your mobile device to determine whether you're within our delivery area or to suggest the nearest pickup location.
Demographic Information
If you choose to provide it (for example, your birthday for a birthday promotion), we may collect age or date of birth and gender.
Inferences
We may draw inferences from the information above — for example, your taste preferences based on past orders — to personalize the Services and our marketing.
2. How We Collect Personal Information
We collect personal information from these sources:
- Directly from you when you create an account, place an order, contact us, sign up for marketing, or participate in a promotion.
- Automatically through cookies, pixels, and similar technologies when you use the Site (see Section 4).
- From Virtual Plates LLC, which operates the platform powering the Site.
- From service providers that help us run our business (payment processors, delivery partners, marketing and analytics providers).
- From advertising and social media platforms if you interact with our ads or social content.
3. How We Share Personal Information
We share personal information with:
- Virtual Plates LLC, which operates the Site and ordering platform on our behalf.
- Service providers that help us with payment processing, delivery, marketing, analytics, customer support, and other business operations. These providers are authorized to use your information only to perform services for us.
- Delivery partners (such as third-party couriers) when delivery is performed by a third party. They receive the order details needed to complete the delivery.
- Advertising and analytics partners to help us understand how the Services are used and to deliver relevant advertising.
- Authorities and others when required by law, in response to a subpoena or legal process, to protect our rights or the rights of others, to investigate fraud or unlawful activity, or in connection with a business transaction such as a merger, acquisition, or sale of assets.
We do not sell personal information for money. However, some of our advertising and analytics practices may be considered a "sale" or "sharing" of personal information under certain state privacy laws. See Sections 6 and 7 for your rights to opt out.
We may also use and share information in deidentified or aggregated form (data that doesn't identify any individual) without restriction.
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies (pixels, tags, scripts, device identifiers) to operate the Site, remember your preferences, analyze how the Site is used, and support advertising.
- Strictly necessary cookies — required for the Site to function (for example, keeping items in your cart, logging you in).
- Functional cookies — remember your preferences and personalize your experience.
- Analytics cookies — help us understand how customers use the Site so we can improve it. We may use services like Google Analytics for this.
- Advertising cookies — used by us and our advertising partners to show you relevant ads and measure their effectiveness.
You can control cookies through your browser settings. Blocking cookies may prevent parts of the Site from working properly.
Do Not Track signals. Some browsers can send a "Do Not Track" signal. Because there is no industry standard for how to interpret these signals, our Site does not currently respond to them. However, you may have other opt-out rights under Sections 6 and 7 below.
5. How Long We Keep Personal Information
We keep your personal information for as long as needed to:
- Provide the Services to you.
- Maintain your account and order history.
- Comply with our legal, tax, accounting, or reporting obligations.
- Resolve disputes and enforce our agreements.
When we no longer need your information, we'll delete or deidentify it.
6. Your Privacy Rights — California Residents
If you live in California, the California Consumer Privacy Act ("CCPA") gives you the following rights:
Right to Know
You have the right to request:
- The categories of personal information we've collected about you.
- The categories of sources we collected it from.
- The business purposes for collecting or sharing it.
- The categories of third parties we shared it with.
- The specific pieces of personal information we collected.
Right to Delete
You have the right to request that we delete personal information we collected from you, subject to certain exceptions (for example, where we need it to complete an order or comply with the law).
Right to Correct
If you believe information we hold about you is inaccurate, you can request that we correct it.
Right to Opt Out of Sale or Sharing
You have the right to opt out of any "sale" or "sharing" of your personal information for targeted advertising. To opt out, please contact us using the information in Section 10.
Right to Limit Use of Sensitive Personal Information
We do not use sensitive personal information for purposes that would trigger the right to limit under the CCPA.
Right to Non-Discrimination
We won't deny you services, charge you a different price, or provide a different level of service because you exercised your privacy rights.
How to Submit a Request
To exercise any of these rights, contact us using the information in Section 10. To verify your identity, we'll ask you to confirm details that match our records. You can also designate an authorized agent to make a request on your behalf, but we'll still need to verify your identity.
California “Shine the Light”
California residents may request a list of the categories of personal information we've disclosed to third parties for their direct marketing purposes during the prior calendar year. To make such a request, contact us using the information in Section 10 and include "California Shine the Light Request" in the subject.
7. Your Privacy Rights — Other States
If you live in Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you have the following rights under your state’s privacy laws:
- Right to access — confirm whether we process your personal information and get a copy in a portable format.
- Right to correct inaccuracies in your personal information.
- Right to delete your personal information, subject to exceptions.
- Right to opt out of (a) targeted advertising, (b) the sale of personal information, and (c) profiling that produces legal or similarly significant effects. We do not engage in profiling that produces legal or similarly significant effects.
- Right to appeal if we decline your request.
To make a request, contact us using the information in Section 10. We may need to verify your identity. If you're a resident of Montana or Oregon, you may also request a list of third parties with which we've shared your personal data.
8. Marketing Communications
We may send you transactional messages (order confirmations, status updates, account notices) and, if you've opted in, marketing messages (promotions, new menu items, special offers).
You can opt out of marketing communications at any time:
- Email: click the "unsubscribe" link in any marketing email, or contact us.
- Text messages (SMS): reply STOP to any marketing text. See our Terms for more on SMS messaging.
- Push notifications: turn them off in your device settings.
Opting out of marketing won’t stop transactional messages related to your orders.
9. Children's Privacy
Our Services are not directed to children under 16, and we don't knowingly collect personal information from children under 16. If you believe we've collected information from a child under 16, please contact us and we'll delete it.
If you're a resident of Colorado, Delaware, or Montana and under 18, or a resident of New Jersey and under 17, and we become aware of your age, we'll either delete your personal information or seek affirmative consent from your parent or guardian to process it.
10. Security
We take reasonable technical and organizational measures to protect personal information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. No system is perfectly secure, however, and no transmission of information over the internet is guaranteed to be secure. You're responsible for keeping your account password confidential.
11. Third-Party Sites and Services
Our Services may link to or interact with third-party websites, services, and social media platforms. These third parties have their own privacy practices, and this Privacy Policy doesn't apply to them. We recommend reviewing the privacy policies of any third party before sharing information with them.
12. Contact Us
If you have questions about this Privacy Policy or want to exercise any of your privacy rights, please contact us:
Shaltat
Hayward: 22380 Foothill Blvd, Hayward, CA 94541 · (650) 250-9995
Email: support@shaltat.local
