Privacy
Who runs this
This ordering page is run for Bower Surf Club, 2501 Colorado Ave #190, Santa Monica, CA 90404. Questions or requests about your information go to events@bowersurfclub.com.
What we collect
When you place an order: your name, your email address, what you ordered, the pickup day, anything you write in the notes box (such as an allergy or a change to a dish), and when you ordered. There are no accounts or passwords, we never take card details, and the page sets no cookies and runs no tracking or advertising.
Why
To make and hand over your order, to email you a confirmation with a link to cancel it, and to add up each person's orders so Bower Surf Club can invoice the company paying for them.
Who sees it
The Bower Surf Club staff who prepare and manage orders, through a morning email, a private staff page and a Google Sheet. The company paying for your lunch sees your name, email address, number of orders and their total on its invoice. The person who runs this service for Bower Surf Club can see everything stored on the server, including its logs, to keep it working. Nobody else. It is never sold or used for marketing.
Where it is kept
On the server that runs this page: your orders, and a copy of every email it prepares for you (your confirmation, any cancellation or approval), including any that could not be delivered. A copy of all of it is made each day on the same server; when a new copy is made, copies more than 30 days old are deleted, so if the service is stopped, old copies stay until it runs again. Orders also go into the Google Sheet. If an email cannot be sent, its text can appear in the server's logs. Nothing is deleted automatically, because Bower Surf Club needs order history for invoicing. To have yours removed, email events@bowersurfclub.com: it is deleted by hand from the server and the sheet, and older daily copies that still hold it are deleted as they pass 30 days.
The page uses Google for two things only: sending the order emails from a connected mailbox, with permission to send email and nothing else, and writing that one Google Sheet. It cannot read, change or delete any message in that mailbox; the only email it keeps is its own copy of the emails it prepares, described above. It uses no Google user data for anything else. Its use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Last updated October 3, 2026.