Skip to main content
BAJAOrganica

Privacy Policy

Privacy Policy

Effective date: April 16, 2026

This Privacy Policy explains how Baja Organica ("we," "us," "our") collects, uses, and shares information when you visit bajaorganica.food, request information about our services, or place an order through us. Baja Organica is a corporate food delivery service operating in the Los Angeles area.

1. What we collect

We collect only what we need to provide and improve our service. Specifically:

Information you give us when you fill out a form or contact us:

  • Your name and job title
  • Your work email address
  • A work phone number (optional, depending on the form)
  • Your company name and team size
  • A brief message or notes describing what you're looking for
  • Which of our programs you're interested in (daily lunch delivery, Fridge by Baja, Shelf by Baja)

Information we collect when you place or receive an order:

  • Delivery address (typically a business address)
  • Order contents, quantities, and special instructions (including allergies and dietary notes, if you provide them)
  • Billing contact and billing address
  • Payment details handled by our payment processor, Stripe. We never see or store full card numbers; Stripe does. We do store a Stripe customer reference and the last four digits and brand of the card for your records.

Information we collect automatically:

  • Basic web analytics (pages viewed, approximate location derived from IP, device/browser type) to understand how people find us and which parts of the site are useful.
  • Cookies and similar technologies that keep you signed in, remember preferences, and help us measure site performance.

Information from our field representatives:

If one of our field representatives visits your site in person, they may record notes about the visit (who we spoke with, preferences we learned, delivery logistics). These notes are operational — they help us serve you better. They are not shared outside Baja Organica.

We do not knowingly collect information from anyone under 18. Our service is designed for workplace food programs.

2. How we use your information

We use the information above to:

  • Respond to inquiries and scheduling requests
  • Set up your account and deliver food to your company
  • Process payments and send receipts and invoices
  • Contact you about your orders, deliveries, and anything that needs your attention
  • Improve our service (which items people like, how fast we deliver, where we have gaps)
  • Comply with our legal obligations (tax, accounting, food safety)

We do not sell your personal information. We do not share your information with advertisers. We do not use your information to train outside AI models.

3. When we share information

We only share your information in these situations:

  • Service providers — companies that help us run the business, under contract. Current providers include Stripe (payments), Resend (transactional email), Supabase (database hosting), Vercel (website hosting), Inngest (background jobs), Mapbox (address lookup), Upstash (caching), and Anthropic (AI-assisted features like our assistant Percy). Each is bound by their own terms and privacy policies.
  • Our partner restaurant(s) — so that your order can actually be cooked. We share the minimum needed: what to make, how many, when it's needed, and any allergy or dietary notes.
  • Legal requests — if we're required to disclose information by a subpoena, court order, or other valid legal process.
  • Business transfers — if Baja Organica is acquired or reorganized, your information may transfer as part of that transaction. You would be notified.

We do not disclose your data for any other purpose without your consent.

4. How long we keep your information

We keep information for as long as we reasonably need it to run the business and meet our legal obligations. In practice:

  • Active client records: for the length of the relationship, plus reasonable tail time for accounting and support.
  • Billing and tax records: typically seven years, per standard business practice.
  • Lead/contact form submissions that never convert to customers: up to two years, then removed or anonymized.
  • Field-rep visit notes: for as long as the client relationship is active.

You can ask us to delete your information at any time (see Section 6).

5. Security

We use industry-standard practices to protect your information, including encrypted connections (HTTPS), encrypted data at rest where supported by our providers, role-based access controls, two-factor authentication for administrative accounts, and database-level isolation between customer-facing and internal tooling. No system is perfectly secure, but we take this seriously. If we ever have a security incident that affects your information, we will notify you as required by law.

6. Your rights

Depending on where you live, you may have rights to:

  • Know what personal information we have about you.
  • Access a copy of that information.
  • Correct information that's wrong.
  • Delete your information, subject to any legal records we're required to keep.
  • Opt out of certain uses, including any sale or sharing of personal information for cross-context behavioral advertising (we don't do this — but you have the right to say no anyway).

California residents have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to limit the use of sensitive personal information. We do not use or disclose sensitive personal information for any purpose other than running our service.

To exercise any of these rights, email hello@bajaorganica.food from the address associated with your account, or use the contact form on our website. We'll verify your identity and respond within 45 days (we may extend this once by another 45 days if we need to, and we'll tell you if we do).

You won't be treated differently for exercising these rights.

7. Cookies and tracking

We use a small number of cookies:

  • Essential cookies — required to sign in, keep a session, and remember the site gate password during our soft-launch period.
  • Analytics cookies — help us understand how visitors use the site. You can block these in your browser without breaking the site.

We do not use cookies for advertising. We do not run third-party ad trackers.

8. Children

Baja Organica is a B2B food service for workplaces. It is not directed to children under 13, and we do not knowingly collect personal information from anyone under 18. If you believe a child has submitted information, email hello@bajaorganica.food and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Effective date" at the top. If we make changes that materially affect your rights, we'll tell you — typically by email if we have your email, or by a prominent notice on the site.

10. Contact

If you have any questions about this Privacy Policy or how we handle your information, email us at hello@bajaorganica.food.

Baja Organica Los Angeles, California