Information you choose to give us
You may give us information when you join our email list, contact us by phone or email, or place a merchandise order. Depending on what you do, that information may include your email address, name, telephone number, delivery address, the contents of your message, the products and options you select, quantities, and order details.
Romero’s Wallet provides an optional customer account tied to a verified email address. Routine access uses the customer’s password; a secure email link is available to join or recover access. It can show Romero’s gift value and eligible Current or Record rewards. The Control Room remains restricted to authorized Romero’s staff.
A Wallet gift purchase may include purchaser and recipient email addresses, a recipient name, an optional message, amount, status, and transaction references. A verified Wallet session may persist in the browser until it expires or you sign out.
A reservation, waitlist, Lounge, or event record may include contact details, party size, requested and actual service states, relevant preferences or notes, linked event or space, communications, and operational history. When ownership is sufficiently verified, Romero’s may link source records to one continuing Relationship record while preserving their source and provenance. Similar names or behavior alone do not establish identity, and relationship association does not create marketing consent.
Payments and merchandise orders
Merchandise checkout is provided by Stripe. Payment-card details are entered into Stripe’s checkout service and are not stored by Romero’s website. Romero’s receives information needed to identify and manage an order, such as customer and shipping information, order totals, payment status, and Stripe transaction identifiers.
Gift-card purchases also use Stripe checkout. Romero’s—not Stripe or Toast—maintains the authoritative Wallet balance and transaction history. Purchased gift value remains distinguishable from promotional, loyalty, and reward value. At restaurant checkout, a short-lived Wallet pass or manual code may be used to authorize value; camera images used to scan a QR code are processed on the device and are not retained by Romero’s.
Printful supplies and fulfills merchandise for Romero’s. When a paid order is sent for fulfillment, Printful receives the recipient, delivery, product, and order information needed to produce and ship it. Stripe and Printful handle information under their own privacy terms.
Email list and communications
If you join the Romero’s email list, we record your email address, your consent, the signup source, and information needed to honor unsubscribes, complaints, invalid addresses, and delivery failures. Our email service provider may process this information to deliver messages and maintain suppression records. You may unsubscribe using the link in an email or contact us. Transactional messages about an order may still be sent when necessary to complete or support that order.
If you contact Romero’s directly, we use the information in your message to respond, provide restaurant or reservation information, discuss an event or private gathering, or address an order or service issue.
Operational messages about an existing reservation, waitlist, Lounge booking, event, order, gift, or Wallet issue are transactional rather than marketing. A durable notice may remain visible in Wallet even if an email or push delivery attempt fails.
Authorized Romero’s staff may use browser push notices for operational work. Wallet customers may separately choose to receive occasional Romero’s news, event, reward, and offer alerts on an enrolled device. Romero’s and its delivery providers process a browser subscription endpoint and related encryption keys needed to route those notices. A Wallet customer can turn those alerts off inside Wallet or withdraw browser permission in device or browser settings. Staff operational alerts and customer marketing alerts use separate enrollment and consent records; enabling either does not grant Control Room access.
Website operation and browser storage
The Store saves cart contents in your browser’s local storage so the cart can remain available as you move between pages or return to the site. You can remove that data through your browser settings. Restricted staff authentication may also use essential browser storage to keep an authorized Control Room session active.
Romero’s uses first-party Pulse analytics to understand visits and meaningful actions. Pulse records a random browser-session identifier, page path, referring host, event name, placement, device class, and timestamps; it is not designed to store form contents or directly identify a Wallet holder. Our providers may also process routine technical information such as IP address, browser and device information, requested pages, timestamps, and error or security events.
Current, Record, and restaurant activity
A Current submission may include media, words, attribution, email address, publication permission, optional marketing choice, technical upload details, and an IP-based request record used for security and abuse prevention. Approved work may be published with the attribution selected by Romero’s and the submitter. Current and Record rewards can be linked to a verified email and reconciled against read-only Toast check information, including a matching reward code when available.
Toast supplies restaurant transaction and check information used for operational reconciliation and economic attribution. During Wallet redemption, authorized staff can see the limited Wallet, value, pass, and check information needed to complete and audit the transaction.
How we use information
We use information to operate the website and restaurant’s online services; respond to questions and reservation inquiries; maintain the mailing list and honor consent choices; prepare, process, fulfill, and support merchandise orders; prevent misuse, fraud, or security incidents; keep required business and transaction records; and comply with law.
We also use source and provenance evidence to determine whether records can responsibly be associated with a continuing customer relationship. Similarity may raise a human review, but does not by itself establish identity, consent, economic ownership, or authority to change a Wallet.
Campaign learning and first-party signals
When a Romero’s message links back to this site, the link may identify the campaign, communication channel, message variation, and the broad Romero’s area it concerns, such as dining, Wallet, events, Store, Current, community, or gifting. Pulse may connect that campaign context to first-party actions in the same browser session, such as viewing a page, opening a menu or product, requesting directions, starting a reservation, or reaching checkout.
Romero’s uses these signals to review whether a message was useful and which part of Romero’s a visitor chose to explore. A signal does not prove that a campaign caused a visit or purchase. Romero’s does not use this system to infer sensitive traits or vulnerability, and an anonymous browser session is not silently converted into a known customer identity merely because behavior looks similar.
Community, Give, and Nonsense
If you choose to contribute eligible Wallet value to an active Romero’s community program, Romero’s records the program, amount, value source, Wallet, and ledger evidence needed to preserve the transaction and report only verified outcomes. Program participation is not treated as marketing permission.
The optional Wallet Nonsense experience records the approved format shown, the date, and the answer selected by the Wallet holder. It is cultural participation only: it does not award points, discounts, cash, prizes, staff action, or marketing authority.
When information is shared
We disclose information as reasonably needed to providers supporting these services: Cloudflare for site delivery and infrastructure; Supabase for database, storage, and authentication; Stripe for payment processing; Brevo for email delivery; Toast for restaurant transaction reconciliation; and Printful for merchandise production and fulfillment. Each receives information appropriate to its role. We may also disclose information when required by law, to protect Romero’s or others, investigate misuse or fraud, or as part of a business transfer.
Retention and security
We retain information for as long as reasonably needed for the purposes described here, including order and Wallet support, accounting, legal compliance, consent and suppression records, dispute resolution, fraud prevention, and security. Different records may be kept for different periods. Profile information may sometimes be corrected or removed, while an immutable financial or audit record may need to remain with identifying information minimized where appropriate. No automatic deletion schedule is presently promised.
Your choices
You may ask about, correct, or request deletion of personal information Romero’s controls, subject to records we must or reasonably need to retain. You may withdraw from marketing email at any time and turn off Wallet device alerts independently. Send requests to inquiries@romeroskentucky.com. We may need enough information to verify and complete a request.
Children and external services
This website and Store are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13 through the site. If you believe a child has submitted such information, please contact us.
The site links to services Romero’s does not operate, including Google Maps and the checkout and fulfillment services described above. Their privacy practices are governed by their own notices.
Changes and contact
We may update this policy as the website, our services, or legal requirements change. The effective date above identifies the current version.
Questions or privacy requests may be sent to inquiries@romeroskentucky.com, made by phone at (859) 520-3075, or mailed to Romero’s, 2 East Main Street, Mount Sterling, KY 40353.