Privacy Policy

Kebab and Cake, LLC, a South Carolina limited liability company doing business as Saffron (“we,” “us,” or “our”), operates the restaurant at 333 East Bay Street, Charleston, SC 29401, together with our catering service and our website at saffronfoods.com. Our corporate and legal notice address is 3348 Business Circle, North Charleston, SC 29418.

This policy explains what information we collect when you visit our website, order online, book a table, enquire about catering, join our mailing list, or apply for a job with us — and what we do with it.

• Contact details: name, email address, telephone number and, for delivery or catering, a postal address.
• Order information: what you ordered, when, any allergen or dietary notes you give us, and special instructions.
• Reservation information: date, time, party size and any preferences or occasion notes.
• Catering enquiries: event details, headcount, venue and quotes.
• Payment information: card details are entered directly into our payment processor and are stored by them, not by us. We retain only a token and the last four digits so we can match and refund a transaction.
• Account information: if you create an account, your sign-in credentials in hashed form and your saved preferences and order history.
• Job applications: the details and any documents you submit through our careers pages.
• Technical data: IP address, device and browser type, pages viewed and timestamps.

Allergen and dietary information is health-related. We collect it only because you choose to tell us, we use it only to prepare your food safely, and we share it only with the kitchen and service staff handling your order.

• Taking, preparing and fulfilling your orders and reservations.
• Taking payment and issuing refunds.
• Answering enquiries, including catering and private events.
• Sending order confirmations, reservation confirmations and reminders, and service updates.
• Sending news, offers and event invitations — only if you have asked to receive them.
• Operating loyalty and referral features where you take part in them.
• Considering job applications.
• Keeping the website secure, preventing fraud, and improving our service.
• Meeting legal obligations, including tax and food-safety records.

We send marketing email only to people who have opted in. Every marketing email has an unsubscribe link, and unsubscribing takes effect promptly. Confirmations, receipts and reservation reminders are part of the service you asked for and are sent whether or not you take marketing email.

We do not currently operate a text-message programme, and we do not send marketing texts. If a member of our team texts or calls you about a specific booking or catering order, it is because you gave us that number for that purpose. If we introduce a text-message programme in the future we will update this policy first and obtain consent before sending.

We do not share mobile telephone numbers with third parties or affiliates for marketing or promotional purposes, and we do not sell them.

We do not sell your personal information. We share it only with service providers who need it to do work for us, under contracts that bar them from using it for their own purposes:

• Payment processors for card transactions.
• Our point-of-sale and online-ordering providers.
• Cloud hosting and email providers.
• Delivery partners, where an order is delivered.
• Accountants and professional advisers.

We may also disclose information where the law requires it, to enforce our terms, or to protect the rights and safety of our guests, our staff or the public. If the business is sold, customer records may transfer as part of that transaction and this policy would continue to apply.

We keep order, reservation and payment records for as long as we need them for accounting, tax and food-safety purposes and to resolve any dispute. Marketing contacts are kept until you unsubscribe. Unsuccessful job applications are kept for a limited period and then deleted.

We use access controls, encryption in transit, and role-based permissions so staff see only what their job requires. Card details are handled by PCI-DSS compliant processors and are not stored on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

• Unsubscribe from marketing email at any time using the link in any such email.
• Access or correct the personal information we hold about you.
• Deletion: ask us to delete your information. We may need to keep records we are legally required to retain, and we will say so if that applies.

Contact us using the details in section 13. We will not treat you differently for exercising these rights. Depending on where you live you may have additional rights under state privacy law, and we will honour those where they apply to us.

Our website uses cookies that are necessary to keep your cart and sign-in working and to keep the site secure, and basic analytics cookies that tell us which pages are used so we can improve them. You can control cookies in your browser settings; disabling necessary cookies will stop online ordering from working.

Our website is not directed to children and we do not knowingly collect personal information from anyone under 13. If we learn that we have, we will delete it. Children are of course welcome in the restaurant — this section is about the website.

We may update this policy as our services or the law change. The date at the top of this page shows when it last changed. Material changes will be posted here before they take effect.

Kebab and Cake, LLC
d/b/a Saffron
3348 Business Circle
North Charleston, SC 29418
Email: accounts@saffronfoods.com
Phone: (843) 207-1990