All Team Eats

Effective Date: December 3, 2025

This Privacy Policy explains how Athl3ats LLC (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and protects Personal Information when you access our websites, applications, and marketplace that facilitates Orders between athletic programs and restaurant partners (the “Services”).

1) Scope and Controller.

a) Controller. Company is the controller of Personal Information described in this Privacy Policy.

b) Who This Policy Covers. This Policy applies to Clients (e.g., athletic departments, teams, and authorized staff), Partners (restaurants and their authorized staff), and visitors to our websites and apps located in the United States.

c) Exclusions. This Policy does not apply to Partner-owned websites or services, or to third-party services you access through the Services. Their privacy practices are governed by their own policies.

2) Key Definitions.

a) “Personal Information” means information that identifies, relates to, describes, or can reasonably be linked, directly or indirectly, with a particular individual or household.

b) “Sensitive Personal Information” includes data such as government identifiers, financial account numbers with credentials, precise geolocation, racial or ethnic origin, health-related data, or other categories defined by applicable law.

c) “Clients” are athletic programs and their authorized users (e.g., coaches, staff, administrators, and the athletes participating in the athletic programs) who place Orders through the Services.

d) “Partners” are restaurants and their authorized users who accept and fulfill Orders.

3) Personal Information We Collect. We collect the following categories of Personal Information:

a) Identifiers and Contact Information: name, email address, phone number, institution/school, role/title, team or department affiliation, account credentials.

b) Transaction and Order Data: items ordered, delivery locations (including drop-off instructions), special instructions, dietary notes provided by the Client, prices, taxes, tips, cancellations/adjustments, dispute history.

c) Sensitive Personal Information Handling: Dietary notes may incidentally reveal health-related information. We use such notes solely to fulfill Orders and operate the Services; we do not use them for marketing or profiling and apply additional safeguards as required by law.

d) Payment Information: tokenized payment IDs, billing details, and transaction confirmations from our payment processor (currently Stripe). We do not store full card numbers.

e) Device/Internet Activity: IP address, device/browser type, operating system, settings, referring URLs, pages viewed, app events, and interactions. We use cookies, pixels, SDKs, and similar technologies for functionality, analytics, and advertising as described in Section (6).

f) Communications: messages, support inquiries, feedback, call/SMS logs related to order coordination.

g) Partner Business Data: menus, pricing, lead times, delivery capabilities, service areas, and tax status.

We do not intentionally collect information from individuals under 18. Clients are responsible for ensuring any End User information they provide (e.g., roster coordination) is collected and shared lawfully.

4) Sources of Personal Information. We collect Personal Information:

a) directly from you (account creation, placing/fulfilling Orders, support);

b) automatically through cookies/SDKs when you use the Services;

c) from third parties, such as payment processors (e.g., Stripe), authentication/SSO providers (if enabled), logistics partners, and communication providers.

5) How We Use Personal Information. We use Personal Information to:

a) provide and operate the Services (process Orders, coordinate delivery, provide support);

b) communicate about Orders, service updates, and policy changes;

c) process payments, remit funds to Partners, and prevent fraud and abuse;

d) maintain security, debug, and monitor performance;

e) perform analytics and reporting (including dashboards for Clients and Partners);

f) conduct marketing and promotional activities, including using Client or Partner names and logos with consent or as permitted by law, with opt-out options (see Section (9));

g) comply with legal obligations and enforce agreements.

We do not use Sensitive Personal Information for purposes other than those permitted by law or reasonably necessary to provide the Services.

6) Cookies, Analytics, and Advertising.

a) Types of Cookies/Technologies:

i) Strictly Necessary: core functionality, security, network management.

ii) Functional: preferences and enhanced features.

iii) Analytics/Performance: usage insights to improve the Services (e.g., Google Analytics).

iv) Advertising/Targeting: to deliver and measure ads and to understand marketing performance.

b) Your Choices. You can:

i) manage cookies in your browser settings;

iii) opt out of interest-based advertising via industry tools like NAI (optout.networkadvertising.org) and DAA (optout.aboutads.info), or your mobile device settings. Note: Some cookies may be considered “sharing” under certain state laws. See Section (10)) for opt-out rights.

7) Disclosures of Personal Information. We disclose Personal Information to:

a) Service Providers/Processors: hosting, payment processing (e.g., Stripe), email/SMS, analytics, customer support, and security providers who process data on our behalf under contractual restrictions.

b) Partners and Clients: limited Order details and contact information needed to prepare and deliver Orders or coordinate adjustments.

c) Professional Advisors: auditors, accountants, legal counsel, and insurers.

d) Authorities: where required by law or to protect rights, safety, and prevent fraud.

e) Business Transfers: in connection with mergers, acquisitions, financings, or sale of assets, subject to standard confidentiality obligations.

We do not sell Personal Information for monetary consideration. We do not “share” Personal Information for cross-context behavioral advertising except where certain analytics/advertising cookies may be deemed “sharing” under state law. See Section (10)) for your opt-out rights.

8) Data Retention. We retain Personal Information as follows, unless a longer period is required by law or necessary to resolve disputes and enforce agreements:

a) Account and contact information: for the life of the account and up to 2 years after closure.

b) Transaction and order data: 7 years (tax, accounting, compliance).

c) Communications and support: up to 2 years after resolution.

d) Device/usage data: up to 2 years for analytics and security. When retention is no longer necessary, we will delete or de-identify the data in accordance with our policies. If you request deletion, we will honor your request except where retention is required by law or permitted for legitimate business purposes.

9) Your Choices and Marketing.

a) Marketing Communications. You may opt out of marketing emails by using unsubscribe links or contacting privacy@allteameats.example.com. We will continue to send transactional/operational communications (e.g., order confirmations).

b) Account Information. You may review, update, or correct certain account information in your profile or by contacting support at support@allteameats.example.com.

c) Logo/Name Use. We may use Client or Partner names and logos for case studies and client lists as permitted by law or applicable agreements. You may opt out by contacting marketing@allteameats.example.com.

10) U.S. State Privacy Rights.

a) Depending on your state of residence (e.g., CA, CO, CT, UT, VA), you may have the following rights, subject to legal exceptions:

i) Right to Know/Access the categories and specific pieces of Personal Information we have collected about you;

ii) Right to Correct inaccuracies;

iii) Right to Delete Personal Information collected from you;

iv) Right to Receive a Portable Copy of Personal Information;

v) Right to Opt Out of (i) targeted advertising (“sharing”), (ii) the sale of Personal Information (as defined by law), and (iii) certain profiling for automated decision-making;

vi) Right to Limit the use and disclosure of Sensitive Personal Information to what is necessary to provide the Services (where applicable);

vii) Right to Appeal if we deny your request.

b) How to Exercise Your Rights:

i) Submit a request via https://allteameats.com/privacy/privacy-request, or email privacy@allteameats.example.com.

ii) We will confirm receipt within 10 business days and aim to respond within 45 days (or as otherwise required by law). We may extend once by an additional 45 days when reasonably necessary.

iii) Verification: We may request information necessary to verify your identity and protect your privacy.

iv) Authorized Agents: You may designate an authorized agent to act on your behalf, subject to verification and proof of authorization.

v) Opt-Out of “Sale” / “Sharing”: Use our “Do Not Sell or Share My Personal Information” link at https://allteameats.com/privacy/do-not-sell or enable a recognized opt-out preference signal in your browser (e.g., GPC). We honor such signals where required by law.

vi) Non-Discrimination: We will not discriminate against you for exercising these rights.

11) Security. We use administrative, technical, and physical safeguards designed to protect Personal Information, including encryption in transit, access controls, audit logging, and least-privilege access. No system is perfectly secure. You are responsible for safeguarding your credentials and promptly notifying us of any suspected compromise.

12) Children’s Privacy. The Services are not intended for individuals under 18, and we do not knowingly collect Personal Information from them. If you believe a minor has provided Personal Information, contact us to request deletion.

13) Automated Decision-Making and Profiling. We do not use automated decision-making that produces legal or similarly significant effects on individuals. We may use limited profiling for purposes such as fraud prevention and advertising/analytics as described in Sections (5) and (6). Where required by law, you may opt out of profiling for targeted advertising using the mechanisms in Section (10).

14) De-Identified and Aggregated Data. We may create de-identified or aggregated data from Personal Information and use it for lawful purposes, including analytics and service improvement. We will maintain and use such data in de-identified form and will not attempt to re-identify it except as permitted by law.

15) International Users. The Services are intended for use in the United States. If you access the Services from outside the U.S., you understand your Personal Information may be processed in the U.S., where laws may differ from those in your jurisdiction.

16) Changes to This Policy. We may update this Policy from time to time. If we make material changes, we will post the updated Policy on our website and update the Effective Date above. Your continued use of the Services after the Effective Date constitutes acceptance of the updated Policy.

17) Contact Us. Questions or privacy requests:

a) Email: privacy@allteameats.example.com

b) Web form: https://allteameats.com/privacy/privacy-request

c) Phone: 502-114276-4860

d) Address: 207 Decatur St NW, Olympia, WA 98502

18) Additional Notices for California Residents (CCPA/CPRA).

a) Categories Collected. In the past 12 months, we collected the categories described in Section (3). We may disclose these categories to Service Providers, Partners/Clients (as necessary to fulfill Orders), advisors, authorities, and in business transfers as described in Section (7).

b) Purposes. We use Personal Information for the purposes listed in Section (5).

c) Sensitive Personal Information. We use Sensitive Personal Information only as necessary to provide the Services and as permitted by law (e.g., dietary notes to fulfill Orders). We do not use or disclose Sensitive Personal Information for purposes requiring a “Limit the Use” link beyond what is necessary to provide the Services.

d) “Sale”/“Sharing.” We do not sell Personal Information for money. Certain analytics/advertising activities may be considered “sharing.” You may opt out as described in Section (10) and via https://allteameats.com/privacy/do-not-sell

e) Retention. See Section (8).

f) Rights and Requests. California residents can exercise their rights as described in Section (10). We will verify and respond as required by law.

19) Notice to Nevada Residents. We do not sell “covered information” as defined under Nevada law. If you are a Nevada resident and wish to submit a do-not-sell request, contact privacy@allteameats.example.com.