We safeguard your inquiries with explicit privacy safeguards

Policy Effective Date & Document History

This privacy policy took effect on November 12, 2026, and applies to all visitors accessing bluebonnetscafe.com. Our practices reflect current federal, state, and platform guidelines, ensuring advertising integrity across all digital channels. Any procedural adjustments are recorded on this page with exact date stamps.

Data Controller Identity & Physical Premises

The data controller responsible for personal information processed on this website is Bluebonnetscafe, trading at bluebonnetscafe.com. Our physical cafe operates continuously at 211 N US Highway 281, Marble Falls, Texas 78654, Marble Falls, Texas, United States.

You can contact our management team directly by telephone at 830-693-2344 or by sending electronic mail to [email protected]. We hold active registration with local authorities and maintain continuous membership in the Marble Falls Chamber of Commerce.

Categories of Personal Data Collected

We limit data collection strictly to what is needed to reply to food questions, coordinate table inquiries, and serve our roadside guests. This website does not process payments, store credit card numbers, or host customer account logins. Information originates from three specific touchpoints:

• Inquiry Form Submissions (via zuha22c.php): We collect your full name, telephone number, email address, physical pickup or delivery address, inquiry kind, custom notes, order specifications, and timestamp of consent. We also record the rendering time and submission time to filter spam transmissions.
• Live Support Chat (via bolo965.php): We preserve chat message text, your voluntary contact identifiers, and an anonymous session token saved in local browser storage so you can review message replies during your visit.
• Technical Server Logs & Click Tags: When requests hit our server, automated logs capture IP addresses, browser user-agent details, referring page URLs, and advertising click identifiers (specifically gclid, msclkid, and fbclid) when traffic arrives through promotional links.

Operational Purposes for Data Processing

Collected information serves practical, everyday cafe operations:

1. To evaluate diner requests for breakfast platters, group table seatings, daily lunches, and carry-out pie batches.
2. To answer questions submitted through our website chat or contact desk regarding dietary ingredients, hours, and parking.
3. To maintain website security, prevent spam bot abuse, and diagnose infrastructure server health.
4. To measure ad campaign effectiveness truthfully under verified platform parameters without deceptive free-offer pricing.

Explicit Legal Grounds for Processing

Under Texas law and applicable international standards, processing takes place on specific legal foundations:

• Consent: Storing analytics cookies, enabling advertising tracking, and processing voluntary inquiries occur only when you affirmatively tick our consent confirmation or approve browser cookies.
• Contractual Steps: Formulating an accurate table turnaround estimate or catering quote based on your request requires processing your contact details.
• Legitimate Interests: Securing server assets, detecting spam through honeypot fields, and ensuring network stability represent legitimate business operations.

Advertising Platforms & Click Identifiers

This website is an active destination for paid traffic from major advertising networks. We run active promotional campaigns today through Google Ads, Microsoft Advertising, and Meta Ads. Under these platforms, specific query identifiers accompany inbound visitor links:

• google ads: Transmits the unique gclid click identifier to evaluate campaign engagement once consent is granted.
• microsoft advertising: Attaches the msclkid click identifier to correlate Bing search queries with cafe inquiries.
• Meta Ads: Attaches the fbclid click identifier for visitors discovering our home kitchen via Meta advertising placements.

Under our integration of google ads and microsoft advertising, these tracking parameters remain inactive for profiling until affirmative consent is confirmed. We never claim that any advertising network has reviewed, certified, or approved our home kitchen or website.

Consent Mode v2 Default Restrictions

Our website deploys Google consent mode v2 to respect visitor autonomy before tracking occurs. By default, prior to any selection on our consent banner, the four critical tracking parameters remain held strictly denied:

• ad_storage: Denied
• ad_user_data: Denied
• ad_personalization: Denied
• analytics_storage: Denied

Under consent mode, these four signals stay denied until the visitor explicitly clicks the “Accept” action on our cookie consent banner. If the visitor selects “Decline” or later revokes permission through our Cookie Settings tool, all four parameters (ad_storage, ad_user_data, ad_personalization, analytics_storage) are set back to denied immediately, and advertising tags cease writing or reading marketing cookies.

Authorized Processors & Service Providers

We share personal data exclusively with vetted operational partners who supply hosting infrastructure, network communications, and digital advertising measurement:

• Google LLC / Google Ireland Ltd: Supplies search advertising infrastructure under strict data processing agreements.
• Microsoft Ireland Operations Ltd: Coordinates Microsoft Advertising search impressions. Learn about their data stewardship in the official statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd: Measures campaign visits originating from social feeds.
• Hosting & Server Infrastructure: Manages our dedicated server hardware and securely holds SQL inquiry records.
• Automated Mail Relays: Routes completed inquiry notifications securely to cafe staff inboxes over encrypted TLS lines.

International Data Transfers & Frameworks

Bluebonnet Cafe stores core inquiry data on hosting servers situated within the United States. In the event European or foreign visitors browse our site, cross-border transmission of technical parameters relies on Standard Contractual Clauses (SCCs) and data privacy framework certifications established by our processor network.

Specific Data Retention Periods

We reject open-ended data hoarding. We retain your information only for defined, finite operational periods:

Technical & Organizational Security Measures

All interactions across bluebonnetscafe.com use modern Transport Layer Security (TLS 1.3) with forced HTTPS encryption. Inquiry forms feature dual-field honeypot spam protection, timestamp verification, and strict input sanitation to prevent cross-site scripting and database injection attacks. Internal access to customer messages remains restricted to authorized cafe managers.

European Visitor Rights Under GDPR

Visitors residing in the European Economic Area, Switzerland, or the United Kingdom benefit from comprehensive protections under the General Data Protection Regulation (gdpr). You possess direct rights to:

1. Access: Inspect all personal data retained under your email address or phone record.
2. Rectification: Correct inaccurate booking details or update contact addresses.
3. Erasure: Request immediate removal of stored inquiries (“Right to be Forgotten”).
4. Restriction: Limit processing while an accuracy objection is reviewed.
5. Data Portability: Receive a machine-readable export of submitted inquiry specifications.
6. Objection: Object to processing justified by legitimate commercial interest.
7. Consent Withdrawal: Revoke consent choices at any time without penalty.

United States State Privacy Rights (CCPA & CPRA)

State residents across the United States—including California under the California Consumer Privacy Act (ccpa) and the California Privacy Rights Act (CPRA)—hold explicit consumer rights. Bluebonnet Cafe does not sell personal information or share consumer data for cross-context monetary consideration. You possess the right to know what personal categories are gathered, demand deletion of records, correct inaccurate entries, and exercise privacy prerogatives without experiencing discriminatory pricing or reduced cafe service quality.

Global Privacy Control (GPC) Compliance

Our website recognizes and respects the global privacy control (GPC) signal broadcast by modern privacy browsers. When a client application transmits the Sec-GPC header, our scripts interpret that signal as an automatic, binding request to decline marketing cookies and restrict behavioral advertising without asking you twice.

Protection of Children’s Privacy

This website provides general informational content for adult diners, travelers, and event organizers. We do not intentionally solicit, collect, or store personal information from individuals under sixteen years of age. If a parent discovers that a minor has submitted an inquiry form, contact us immediately for prompt deletion.

Supervisory Authorities & Complaint Procedures

If you believe our data processing violates statutory obligations, you retain the right to submit a formal complaint to regulatory oversight bodies. In Texas, inquiries fall under the Consumer Protection Division of the Office of the Attorney General. California residents may contact the California Privacy Protection Agency (CPPA). European visitors may lodge grievances with their national Data Protection Authority (DPA).

Submit a Data Request (14-Day Response Window)

To exercise rights regarding access, data extraction, or file erasure, mail or email our compliance coordinator:

Notice of Material Policy Changes

When operational changes or advertising platform updates necessitate updates to our data handling protocols, revisions will be published immediately on this page. The “Effective Date” header will be modified to indicate the revision moment. Continuing to consult our website constitutes acknowledgement of published guidelines.

Human Direct Contact Details

We manage privacy inquiries directly from our Marble Falls counter, not an outsourced routing service. For immediate assistance with data records or cookie settings, contact our owner-operator team:

• Operator / Controller: Bluebonnetscafe, trading at bluebonnetscafe.com
• Postal Address: 211 N US Highway 281, Marble Falls, Texas 78654, Marble Falls, Texas, United States
• Telephone: 830-693-2344
• Electronic Mail: [email protected]