TRUCK & TABLE PRIVACY POLICY

Effective Date: 7/1/2026

Truck & Table ("Company," "we," "our," or "us") respects your privacy and is committed to handling your personal information responsibly. This Privacy Policy explains what information we collect, how we use and share it, and your rights regarding that information.

By using our website or booking platform (the "Platform"), you agree to the practices described in this Privacy Policy. This Policy is incorporated into and should be read alongside our Terms of Service.

─────────────────

1. INFORMATION WE COLLECT

(a) Information You Provide. We collect information you voluntarily submit through our website, booking forms, or direct communications, including:

• Full name

• Email address

• Phone number

• Company or organization name

• Property or venue information

• Event details, dates, and preferences

• Any other information you choose to share with us in connection with an event inquiry or booking

(b) Payment Information. When you make a payment through the Platform, payment card details and billing information are collected and processed directly by Stripe, our third-party payment processor. Truck & Table does not store, access, or retain full payment card numbers or sensitive payment credentials. Stripe's handling of your payment data is governed by Stripe's own Privacy Policy, available at https://stripe.com/privacy.

(c) Communications. When you contact us by email or through our Platform, we retain records of that correspondence, including your contact information and the content of your messages. Email communications are transmitted and stored using Google Workspace, operated by Google LLC.

(d) Automatically Collected Information. When you visit our website, our web hosting provider may automatically collect certain technical information, including your IP address, browser type, operating system, referring URLs, and pages visited. This information is used for website security, performance monitoring, and general operational purposes. We do not currently use third-party website analytics or advertising tracking tools. If we introduce such tools in the future, this Policy will be updated to reflect that.

─────────────────

2. HOW WE USE YOUR INFORMATION

We use the information we collect to:

• Respond to event inquiries and booking requests

• Coordinate food truck events and communicate with participating vendors on your behalf

• Process payments and manage billing for confirmed bookings

• Send confirmations, updates, and communications related to your bookings or services

• Maintain records of our business relationships and transactions

• Improve our Platform, services, and customer experience

• Comply with applicable legal obligations

We do not use your personal information for targeted advertising or sell it to third parties for marketing purposes.

─────────────────

3. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We may share your information in the following limited circumstances:

(a) Food Truck Vendors. We share relevant event details (such as event date, location, headcount, and contact information) with participating food truck vendors solely for the purpose of coordinating and fulfilling your booked event. Vendors are expected to use this information only for event coordination purposes.

(b) Payment Processing — Stripe. Payment transactions are processed by Stripe, Inc. When you submit payment through the Platform, your billing and payment information is transmitted directly to Stripe. We share only the information necessary to process your transaction. For more information, see https://stripe.com/privacy.

(c) CRM and Contact Management — HubSpot. We use HubSpot, Inc. to manage customer and prospect contact information, track communications, and coordinate bookings. Information you provide through our Platform may be stored in HubSpot. HubSpot's privacy practices are described at https://legal.hubspot.com/privacy-policy.

(d) Email Services — Google Workspace. Our business email is operated through Google Workspace (Google LLC). Email communications you send to us or receive from us may be transmitted through and stored on Google's servers. Google's privacy practices are described at https://policies.google.com/privacy.

(e) Legal and Safety Disclosures. We may disclose your information if required by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect the rights, safety, or property of Truck & Table, our users, or the public.

(f) Business Transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity, subject to the same privacy commitments described in this Policy.

─────────────────

4. COOKIES AND TRACKING TECHNOLOGIES

Our website may use basic cookies or similar technologies for functional purposes, such as maintaining session information or website performance. We do not currently use advertising cookies, behavioral tracking, or third-party analytics cookies.

If you wish to disable cookies, you may do so through your browser settings. Disabling cookies may affect the functionality of certain features of our website.

We will update this section if we introduce additional tracking technologies in the future.

─────────────────

5. DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy or as required by applicable law. General retention guidelines:

• Booking and transaction records: Retained for a minimum of seven (7) years in accordance with standard business and tax record keeping requirements.

• Inquiry and contact information: Retained for up to two (2) years from the date of last contact, or until you request deletion, whichever occurs first.

• Payment records: Managed and retained by Stripe in accordance with Stripe's data retention policies and applicable financial regulations.

When personal information is no longer needed, we will delete or anonymize it in a reasonable and secure manner.

─────────────────

6. YOUR PRIVACY RIGHTS

Depending on your location, you may have certain rights regarding your personal information. Texas residents may have rights under the Texas Data Privacy and Security Act (TDPSA) and other applicable law, which may include:

• Right to Access: The right to request confirmation of whether we process your personal data and to obtain a copy of that data.

• Right to Correction: The right to request correction of inaccurate personal information we hold about you.

• Right to Deletion: The right to request deletion of personal information we hold about you, subject to certain legal exceptions.

• Right to Opt Out of Sale: We do not sell your personal information. No action is required to opt out.

To exercise any of these rights, please contact us at admin@truckandtable.com with the subject line "Privacy Request" and a description of your request. We will respond within a reasonable time and in accordance with applicable law. We will not discriminate against you for exercising any privacy rights.

─────────────────

7. CHILDREN'S PRIVACY

Our Platform is intended for use by businesses and adults and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child under 13, please contact us at admin@truckandtable.com.

─────────────────

8. THIRD-PARTY LINKS

Our Platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

─────────────────

9. DATA SECURITY

We take reasonable and appropriate technical and organizational measures to protect the personal information we hold from unauthorized access, loss, misuse, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify affected individuals as required by applicable law.

─────────────────

10. UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will post the updated Policy on our website with a revised effective date. We encourage you to review this Policy periodically. Your continued use of the Platform after any update constitutes your acceptance of the revised Policy.

─────────────────

11. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Truck & Table

Email: admin@truckandtable.com