Privacy Policy

# Privacy Policy for Skyway Diner  

skywaydiner.com  

**Last Updated: December 5, 2025**  

We at Skyway Diner respect your privacy and are committed to protecting your personal information. This Privacy Policy covers visitors from everywhere — including specific rights for California residents under the California Consumer Privacy Act (CCPA), as amended by the CPRA, and for residents of the EEA/UK/Switzerland under GDPR (see sections below).

### 1. Data Controller / Business  

Skyway Diner  

740 Gristmill Dr., New Braunfels, TX 78130  

Phone: (737) 231-1298  

Email: support@skywaydiner.com  

### 2. Personal Information We Collect

| Category (CCPA)                              | Examples We Collect                                      | Collected? |

|----------------------------------------------|----------------------------------------------------------|------------|

| Identifiers                                  | Name, address, email, phone, IP address                  | Yes        |

| Customer Records (Cal. Civ. Code § 1798.80)  | Payment card info (processed, not stored by us), order history | Yes        |

| Commercial Information                       | Products purchased, order value                          | Yes        |

| Internet/Network Activity                    | Browsing history on our site, cookies, device info      | Yes        |

| Geolocation Data                            | General location derived from IP address                 | Yes        |

| Inferences Drawn                             | Preferences based on purchase history                    | Yes        |

**We do NOT collect**: biometric data, precise geolocation, protected characteristics, sensory data, or sensitive personal information (SSN, driver’s license, exact financial account numbers, etc.).

**Do we “sell” or “share” personal information?**  

No. We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising (the CCPA definition of “sharing”).

### 3. CCPA / CPRA Rights (California Residents Only)

You have the following rights under California law:

- **Right to Know** – Request details about the categories and specific pieces of personal information we have collected about you in the past 12 months  

- **Right to Delete** – Request deletion of your personal information  

- **Right to Correct** – Request correction of inaccurate personal information  

- **Right to Opt-Out of Sale or Sharing** – Not applicable (we do not sell or share)  

- **Right to Limit Use of Sensitive PI** – Not applicable (we do not collect sensitive PI)  

- **Non-Discrimination** – We will not discriminate against you for exercising your rights  

**How to Exercise Your Rights**  

Submit a request by:  

- Emailing support@skywaydiner.com with subject “CCPA Request”  

- Calling (737) 231-1298  

- Using the contact form on our website  

We will verify your identity (usually by matching name, email, and recent order details) and respond within 45 days (extendable once by another 45 days if needed).

Authorized agents may submit requests on your behalf with written permission.

### 4. Lawful Bases & Purposes (All Users – Including GDPR)

| Purpose                              | Lawful Basis (GDPR)                  | CCPA Business Purpose |

|--------------------------------------|--------------------------------------|-----------------------|

| Process & fulfill orders             | Contract                             | Yes                   |

| Send order updates & customer service| Contract / Legitimate interests      | Yes                   |

| Marketing emails                     | Consent                              | Yes                   |

| Fraud prevention & security          | Legitimate interests                 | Yes                   |

| Analytics & site improvement         | Legitimate interests                 | Yes                   |

| Legal & tax compliance               | Legal obligation                     | Yes                   |

### 5. International Data Transfers (EEA/UK/Switzerland)

Data is processed in the United States. We rely on the EU-U.S. Data Privacy Framework (DPF), UK Extension, and Standard Contractual Clauses (SCCs) with our processors (WooCommerce/Automattic, Stripe, PayPal, Google, shipping carriers).

### 6. Data Retention

| Data Type                  | Retention Period                              |

|----------------------------|-----------------------------------------------|

| Orders & transactions      | 7 years (U.S. tax law)                        |

| Account data               | Until deletion request or 3 years inactivity |

| Marketing lists            | Until unsubscribe or consent withdrawn       |

| Analytics & logs           | Up to 26 months                               |

### 7. Your Broader Rights (GDPR + CCPA)

- Access, correct, delete, or port your data  

- Withdraw marketing consent at any time  

- Opt out of cookies via the cookie banner  

- Lodge a complaint with your local supervisory authority (EU/UK) or the California Attorney General  

### 8. Cookies & Tracking  

See our separate Cookie Policy (footer link). You can manage preferences anytime.

### 9. Security  

We use encryption, PCI-DSS compliant processors, access controls, and regular security reviews.

### 10. Children  

Our site is not directed to children under 16. We do not knowingly collect personal information from children under 16.

### 11. Changes  

We will notify you of material changes by email (if we have it) or a banner on the site.

### 12. Contact Us  

Skyway Diner  

740 Gristmill Dr.  

New Braunfels, TX 78130  

(737) 231-1298  

support@skywaydiner.com  

Thank you for choosing Skyway Diner — your home for nostalgic tribute merchandise!