Privacy policy

Effective September 22, 2026

This policy explains what information Spina's Italian Restaurant (“we”, “us”) collects through this website, why, how long we keep it, and the choices you have. We've tried to write it in plain language. The short version: we collect as little as we can, we never sell it, and we don't use advertising trackers.

1. What we collect, at a glance

2. Catering requests

When you use the catering form we collect your name, email address, phone number (optional), event date, number of guests, service style, the package you're interested in (optional) and any message you write. We use these only to reply to you, put together a quote and, if you book, cater your event. We don't add you to a mailing list.

We deliberately don't ask for your event address, payment details or date of birth on the website. If you book, we'll ask for what we need to deliver (such as the venue address) directly.

A copy of each request is emailed to our staff inbox so we can reply quickly.

Requests are deleted automatically 1 year after the event date. Staff can delete a request sooner, and will if you ask. If your event goes ahead, invoices and related records are kept separately for as long as tax law requires.

To limit spam, the form uses a hidden field and a timing check. It also counts how many requests arrive from the same connection in an hour. For that count we store a scrambled, one-way code derived from your IP address (never the address itself), and delete it within an hour.

3. Job applications

You apply for jobs by emailing us, so the website itself doesn't collect or store applications. We use what you send only to consider you for the role. We keep applications for up to 12 months in case a similar position opens, then delete them. Ask us and we'll delete yours sooner. If we hire you, your application becomes part of your employee records, which are covered by separate notices.

Please don't email your Social Security number, bank details or date of birth. We'll never ask for them before an interview.

4. Visit statistics

If, and only if, you choose “Allow analytics” in our cookie banner, we add your visit to simple daily totals kept on our own server. For each page view we count:

• the date and which page was viewed;
• the type of device (phone, tablet or computer), worked out from your browser's user-agent at that moment and then discarded;
• the name of the website that linked you here, if any (for example “google.com”), without the rest of the address.

We also count a few actions, such as tapping our phone number, opening directions, starting a job-application email, using the menu filters, or sending a catering request. We count that they happened, not who did them.

We don't store your IP address, your full user-agent, a visitor ID or any other identifier, and we don't set a tracking cookie. The totals can't be linked back to you or to your other visits. No third-party analytics service (such as Google Analytics) is used.

If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a “no” even if you clicked allow. You can change your answer any time with the “Cookie settings” link at the bottom of every page. Totals are deleted after 13 months.

5. Server logs

Like almost every website, the server that hosts this site automatically records basic technical details of each request: your IP address, the date and time, the page requested, the referring page, and your browser's user-agent. These logs are used only to keep the site secure, investigate errors and stop abuse. They're kept for up to 30 days and then deleted, and we don't combine them with anything else.

Staff sign-ins to the private admin area are also recorded (which account, and when) for security.

6. What we don't collect

• No customer accounts or passwords. Only restaurant staff have sign-ins.
• No payment card details. There's no online payment on this site.
• No precise location, contacts or device access.
• No advertising or social-media tracking pixels, and no “like” or share buttons that load code from other companies.
• No third-party fonts, maps or videos embedded in our pages, so simply viewing a page doesn't send your data to anyone else.

The “Get directions” link opens Google Maps. That only happens if you click it, and from then on Google's own privacy policy applies.

7. Who we share it with

We don't sell your personal information, and we don't share it for targeted advertising. We only share it:

• with the companies that provide our web hosting and email, who store it on our behalf and may not use it for anything else;
• when the law requires it, such as a valid court order, or to protect people's safety;
• if the restaurant is ever sold or transferred, with the new owner, who would have to keep honoring this policy for information collected under it.

8. How long we keep it

9. Your rights and choices

Wherever you live, you can ask us to:

• see the personal information we hold about you and get a copy;
• correct anything that's wrong;
• delete it;
• stop using it for a particular purpose.

Email me@djspina.site or call (303) 555-0142. We may need to confirm it's really you, usually by replying from the email address you used with us. We'll respond within 45 days and won't charge you or treat you differently for asking. Residents of Colorado, California and other states with privacy laws may have additional rights under those laws, and you can use an authorized agent to make a request. If we decline a request, we'll explain why and how to appeal.

Because visit statistics can't be tied to any person, there's no personal analytics data to access or delete. You can stop being counted at any time through “Cookie settings”.

10. Security

The site is served over an encrypted (HTTPS) connection. Staff sign-ins use strong password hashing, lock after repeated failures, and expire after inactivity. Access to catering requests is limited to staff who need it. No system is perfectly secure, but if a breach ever affected your information we'd tell you as the law requires.

11. Children

This website isn't directed at children under 13 and we don't knowingly collect their information. If you think a child has sent us personal information, contact us and we'll delete it.

12. New features in the future

We may add features such as online ordering, table reservations, gift cards, an email newsletter or an online job application form. If we do:

• we'll update this policy before the feature goes live, describing exactly what it collects;
• online payments would be handled by a payment processor that meets card-industry security standards; we'd receive the order details and a confirmation, not your full card number;
• a newsletter would be strictly opt-in, with an unsubscribe link in every email;
• reservation or ordering services run by another company would be named here, along with a link to their privacy policy;
• any new optional cookies would appear in our cookie policy and wait for your permission;
• we'd keep collecting only what the feature actually needs.

13. Changes and contact

When we change this policy we'll update the date at the top. If a change is significant, such as using information in a new way, we'll put a clear notice on the website before it takes effect and ask for your consent where the law requires it.

Questions? Contact Spina's Italian Restaurant, 2120 Via Nonna Way, Denver, CO 80202, me@djspina.site, (303) 555-0142.