Privacy Policy

Last Updated: May 15, 2026

Stack Wellness Cafe (“Stack,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, use our mobile app, place an order, join our rewards program, interact with our marketing, request catering, visit our locations, or otherwise communicate with us.

By using our website, app, ordering services, loyalty program, or other services, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We may collect the following categories of information:

Information You Provide Directly

This may include:

• Name
• Email address
• Phone number
• Mailing address
• Billing information
• Delivery or pickup details
• Account login information
• Birthday or rewards related information
• Order history and menu preferences
• Catering inquiry details
• Customer service messages
• Feedback, survey responses, reviews, or promotion entries
• Dietary preferences, allergen related notes, or customization requests you choose to provide

Stack is not a healthcare provider. Any nutrition, macro, allergy, dietary, or wellness related information you provide is used to help fulfill orders, improve customer experience, and support product customization. It is not used to provide medical advice, diagnosis, or treatment.

Information Collected Automatically

When you use our website, app, emails, or digital services, we may automatically collect:

• IP address
• Device type
• Browser type
• Operating system
• App usage data
• Pages viewed
• Links clicked
• Referral source
• Date and time of visits
• Approximate location based on device, IP address, or app permissions
• Cookie, pixel, SDK, or similar tracking identifiers

Payment Information

Payments may be processed by third party payment processors. Stack does not intentionally store full payment card numbers in a readable form. Payment processors may collect and process payment information according to their own security and privacy practices.

Location Information

If you enable location services through our app or device settings, we may collect approximate or precise location information to help show nearby Stack locations, support ordering, provide relevant offers, or improve services. You can disable location access through your device settings.

2. How We Use Information

We may use information for the following purposes:

• Process and fulfill orders
• Provide pickup, delivery, catering, rewards, and customer support
• Create and manage customer accounts
• Operate the Stack app, website, and loyalty program
• Send order confirmations, service updates, receipts, and account messages
• Send promotional emails, SMS messages, push notifications, or app offers when permitted
• Personalize offers, menu recommendations, and customer experiences
• Track rewards, points, challenges, offers, and redemptions
• Respond to catering requests, feedback, questions, or complaints
• Improve menu items, operations, marketing, website performance, and app functionality
• Analyze customer behavior, traffic, and campaign performance
• Protect against fraud, misuse, security incidents, or unauthorized activity
• Comply with legal, regulatory, tax, accounting, or business obligations
• Enforce our terms, policies, and agreements

3. Cookies, Pixels, Analytics, and Advertising

We may use cookies, pixels, SDKs, tags, and similar technologies to operate our website and app, remember preferences, analyze performance, measure advertising, and deliver relevant marketing.

These technologies may be used by Stack or by third party service providers such as analytics platforms, advertising networks, social media platforms, app providers, ordering platforms, and email or SMS tools.

You can control cookies through your browser settings. You can also manage mobile tracking and advertising preferences through your device settings. Disabling certain tracking technologies may affect website, app, ordering, or rewards functionality.

Some browsers send “Do Not Track” signals. Because there is no uniform industry standard for responding to those signals, we may not respond to them. Where legally required and technically feasible, we will honor applicable opt out preference signals such as Global Privacy Control.

4. How We Disclose Information

We may disclose information to the following categories of recipients:

Service Providers

We may share information with vendors that help us operate our business, including:

• Website hosting providers
• App and online ordering providers
• Point of sale providers
• Payment processors
• Loyalty and rewards platforms
• Email, SMS, and push notification providers
• Catering, customer support, and CRM tools
• Analytics providers
• Advertising and retargeting partners
• IT, security, and fraud prevention providers
• Professional advisors such as attorneys, accountants, consultants, and insurers

These providers are permitted to use information only as needed to provide services to Stack or as otherwise allowed by law.

Advertising and Analytics Partners

We may disclose certain identifiers, internet activity, device information, commercial information, and inferred preferences to advertising and analytics partners to measure campaigns, improve marketing, and deliver relevant ads. This may be considered “sharing,” “targeted advertising,” or similar activity under some state privacy laws.

Business Partners and Stack Locations

We may share information with affiliated Stack locations, business partners, operators, or vendors as needed to provide services, fulfill orders, support promotions, manage events, process catering requests, or operate the Stack brand.

Legal and Safety Purposes

We may disclose information when we believe it is necessary to:

• Comply with law, subpoena, court order, or government request
• Protect the rights, safety, and property of Stack, customers, employees, or others
• Investigate fraud, security issues, or policy violations
• Enforce agreements, terms, or policies

Business Transfers

If Stack is involved in a merger, acquisition, financing, restructuring, sale of assets, franchise transaction, bankruptcy, or similar business event, information may be disclosed or transferred as part of that transaction.

With Your Consent

We may disclose information for other purposes when you direct us or give us permission.

5. Email, SMS, and Push Notifications

If you sign up for marketing emails, SMS messages, rewards updates, or app notifications, we may send you promotions, limited time offers, rewards updates, new menu announcements, catering information, and other Stack related messages.

You can unsubscribe from marketing emails by using the unsubscribe link in the email. You can opt out of SMS messages by replying “STOP.” You can manage push notifications through your device settings.

Even if you opt out of marketing messages, we may still send non promotional messages, such as receipts, order confirmations, account alerts, customer service responses, or legal notices.

6. Loyalty Program and Rewards

Stack may offer rewards, points, discounts, app offers, challenges, birthday offers, referral offers, or other loyalty benefits. To provide these benefits, we may collect and use information such as your name, email address, phone number, birthday, account activity, purchase history, rewards activity, and offer redemptions.

Participation in Stack rewards or promotional programs is voluntary. The value of rewards, discounts, or benefits is reasonably related to the value of the customer relationship and information used to provide the program. You may opt out of rewards participation by not enrolling, disabling your account where available, or contacting us at catering@stackwellness.com.

7. Childrens Privacy

Our services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information online from children under 13.

If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take reasonable steps to delete that information. If you believe a child under 13 has provided information to us, contact us at catering@stackwellness.com.

8. Data Retention

We retain information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including providing services, maintaining accounts, processing orders, managing rewards, responding to inquiries, complying with legal obligations, resolving disputes, preventing fraud, and enforcing agreements.

Retention periods may vary depending on the type of information, the reason it was collected, business needs, and legal requirements.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure.

No website, app, payment system, transmission method, or storage system is completely secure. We cannot guarantee absolute security of information.

10. Your Privacy Choices

Depending on where you live and the laws that apply, you may have certain rights regarding your personal information. These may include the right to:

• Request access to personal information we maintain about you
• Request correction of inaccurate information
• Request deletion of certain information
• Request a copy of certain information
• Opt out of targeted advertising, sale, or sharing where applicable
• Limit certain uses of sensitive personal information where applicable
• Appeal a denied privacy request where applicable
• Not be discriminated against for exercising privacy rights

To exercise privacy rights, contact us at catering@stackwellness.com.

We may need to verify your identity before processing a request. Verification may require matching information you provide with information we maintain. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and identity verification.

11. Sale, Sharing, and Targeted Advertising

Stack does not sell personal information for money.

We may use advertising, analytics, and retargeting tools that involve disclosing certain information to advertising partners. Depending on applicable law, this activity may be considered “sharing,” “targeted advertising,” or a “sale” of personal information.

You may opt out of targeted advertising or sale/share related processing by contacting us at catering@stackwellness.com with the subject line “Privacy Opt Out.” You may also use available browser, device, or platform settings to limit ad tracking.

12. Sensitive Personal Information

We do not seek to collect sensitive personal information unless it is necessary for a specific purpose or you choose to provide it.

If you provide dietary preferences, allergen related notes, nutrition goals, health related preferences, or similar information, we use that information to support ordering, customization, customer service, and business operations. We do not use this information to provide medical services or to infer sensitive characteristics beyond the purpose for which it was provided.

13. Third Party Links and Platforms

Our website, app, emails, social media pages, or ads may link to third party websites, apps, ordering platforms, delivery services, payment processors, social media platforms, or other services.

We are not responsible for the privacy practices, security, or content of third party services. Your use of third party services is governed by their own privacy policies and terms.

14. Social Media and User Content

If you tag Stack, post about Stack, submit content, leave a review, participate in a promotion, or otherwise share content publicly, we may view, respond to, share, or use that content in accordance with platform rules, promotion terms, and applicable law.

Do not post or submit information you do not want made public.

15. International Users

Stack is based in the United States, and our services are intended for users located in the United States. If you access our services from outside the United States, your information may be processed and stored in the United States, where privacy laws may differ from those in your location.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date above. Changes are effective when posted unless otherwise stated.

Your continued use of our website, app, ordering services, rewards program, or other services after changes are posted means you accept the updated Privacy Policy.

17. Contact Us

If you have questions about this Privacy Policy or would like to exercise privacy rights, contact us at:

Stack Wellness Cafe
222 3rd Avenue Southwest
Cedar Rapids, IA 52404
United States

Email: catering@stackwellness.com