Privacy Policy

Effective October 2026

This Privacy Policy describes how FamilyMeal Concepts Inc. (d/b/a Disco Cater) (“Disco Cater,” “we,” “us,” or “our”) collects, uses, shares, and protects information about you when you visit Disco Cater, use our websites, applications, and services, or otherwise interact with us (collectively, the “Services”). By using the Services, you agree to the practices described in this Policy.

I. Information We Collect and Use

We collect information in the following ways:

Information you provide to us

• Account information — such as your name, email address, phone number, and password when you create an account.
• Order information — such as the items you order, delivery or pickup address, scheduled date and time, special instructions, and headcount.
• Payment information — payment-card or other payment details, which are collected and processed by our third-party payment processors; we do not store full card numbers.
• Communications — information you provide when you contact us for support, respond to surveys, or otherwise communicate with us.

Information we collect automatically

• Usage data — pages viewed, features used, search queries, and other actions taken within the Services.
• Device and log data — IP address, browser type, device identifiers, operating system, referring URLs, and timestamps.
• Location data — approximate location derived from your IP address or, with your permission, more precise location to help you find nearby restaurants.
• Cookies and similar technologies — as described in Section V.

Information from third parties

We may receive information about you from partner restaurants, payment processors, mapping and analytics providers, and other service providers that help us operate the Services.

II. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Services, including processing and fulfilling your orders.
• Facilitate payments and send order confirmations, receipts, and service-related communications.
• Personalize your experience and provide recommendations, including through Disco AI.
• Provide customer support and respond to your inquiries.
• Improve, troubleshoot, and develop new features for the Services.
• Detect, prevent, and address fraud, security incidents, and abuse.
• Send you marketing and promotional communications, where permitted, from which you can opt out.
• Comply with legal obligations and enforce our terms and policies.

III. How We Share Your Information

We do not sell your personal information. We may share information as follows:

• With partner restaurants — to fulfill your orders, including your name, contact details, delivery address, and order contents.
• With service providers — payment processors, delivery and logistics providers, hosting, mapping, analytics, and communications vendors that perform services on our behalf.
• For legal reasons — when we believe disclosure is necessary to comply with applicable law, legal process, or governmental request, or to protect the rights, property, or safety of Disco Cater, our users, or others.
• In a business transaction — in connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.
• With your consent — when you direct us to share your information.
• Advertising partners. We work with Google, Meta (Facebook and Instagram) and LinkedIn to show Disco Cater ads and to measure how they perform. We may upload lists of our customers’ contact information, such as email addresses, to these partners so they can match them to people who use their services. The lists are hashed (converted into a scrambled code) before they are uploaded, and the partners use the matches only to show and measure our ads. You can opt out as described in Section VI, “Your Privacy Choices.”

IV. How We Store and Protect Your Information

We retain your information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. We implement reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

V. Cookies

We and our partners use cookies and similar technologies (such as web beacons and local storage) to operate and secure the Services, remember your preferences, understand how the Services are used, and deliver and measure marketing. You can control cookies through your browser settings; disabling some cookies may affect the functionality of the Services.

Advertising tags. Our site uses the Meta Pixel and the LinkedIn Insight Tag, which record your visits so Meta and LinkedIn can show you Disco Cater ads and tell us how our ads perform. We also use Google’s tags for the same purpose.

Visitor identification. We use RB2B and Apollo.io’s website tracker, services that may match a visit to our site to a person’s business identity, such as name, job title, company, professional email address and LinkedIn profile, using their own data. They run only after you accept optional cookies in the banner on our site. We use this to reach restaurants and businesses that may be interested in Disco Cater.

Analytics and session recording. We use Google Analytics to understand how our site is used, and Microsoft Clarity, which records how visitors interact with our pages, such as clicks, scrolling and mouse movement, so we can find and fix problems. Clarity runs only after you accept optional cookies in the banner on our site. It is set to mask the text on our pages and anything you type, so it does not capture what you enter.

VI. Your Privacy Choices

You can opt out of advertising and visitor identification on our site in three ways:

• Cookie banner. Choose Decline in the banner on your first visit, or change your choice later on the Your Privacy Choices page. Declining keeps Microsoft Clarity, RB2B and Apollo.io’s website tracker off.
• Your Privacy Choices page. Turn on the switch at discocater.com/privacy-choices. Your choice is saved in that browser, so set it again if you clear your browser data or use another browser or device.
• Global Privacy Control. If your browser or an extension sends a Global Privacy Control (GPC) signal, we treat it as the same opt-out, and as declining optional cookies.

When you opt out, we do not load the Meta Pixel, the LinkedIn Insight Tag or RB2B and Apollo.io’s website tracker, and we tell Google not to use your visit for advertising. Google Analytics keeps running to help us understand how our site is used; it is not used to show you ads. Microsoft Clarity runs only if you accept optional cookies.

These choices apply to the browser you use. To have your email address removed from the customer lists we share with advertising partners, or to opt out of marketing email, email concierge@discocater.com.

VII. Links to Other Websites

The Services may contain links to third-party websites or services that are not operated by us. This Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party site you visit, as we are not responsible for their content or practices.

VIII. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and, where appropriate, provide additional notice. Your continued use of the Services after an update becomes effective constitutes your acceptance of the updated Policy.

IX. Disco Cater CRM Extension

Disco Cater staff use a Chrome browser extension, “Disco Cater CRM,” to record restaurants and other business prospects in our internal customer-relationship management (“CRM”) system. The extension is available only to Disco Cater staff. This section describes what it collects, both from the web pages staff view with it and about the people whose details are recorded with it.

What the extension reads from web pages

When a staff member opens the extension’s side panel, it reads information from the page they are viewing to fill in a form: the business name (from the page title, the site’s name, or the site’s structured data) and, where the page shows them, a person’s name, job title, company, and email address. On LinkedIn and Apollo.io it reads the profile being viewed. In Gmail it reads the name and email address of the sender of the open message, but not the message itself.

Information sent automatically while the panel is open

While the side panel is open, each time a page loads the extension sends that page’s website address (the domain only, such as example.com, not the full web address) and the business name it read from the page to our CRM, to check whether that business is already recorded. These lookups are not saved to the CRM, though they may appear in our hosting provider’s routine request logs. Nothing else read from a page is sent until a staff member chooses to save it or to look up contact details (described below).

Information saved to the CRM

When a staff member saves a record, the CRM stores the person’s name, job title, company, email address, phone number, and LinkedIn profile address where available, together with the website where they were found and the staff member’s categorization of the record. Staff can also create follow-up tasks, with notes, against a record.

Contact details from Apollo.io

If a staff member chooses to look up a person’s contact details, we send that person’s first name, last name, and company name to Apollo.io, a business-contact data provider, which returns the business email address, phone number, job title, and LinkedIn profile it holds for that person, if any. These requests and Apollo.io’s responses may appear in our hosting provider’s routine request logs.

Information stored in the browser

The extension stores a Disco Cater access token, entered by the staff member, in the browser’s storage for the extension, along with whether its side panel is open. Removing the extension clears this information.

How we use this information

We use information recorded with the extension only for Disco Cater’s sales and account management: deciding which businesses to contact, contacting them about Disco Cater, including by email sent through Apollo.io, and keeping records of those conversations. We do not sell this information.

We do not use information recorded with the extension for advertising.

How long we keep it

We keep CRM records for as long as they are useful for our sales and account management, and we delete them on request.

Asking us to remove your details

If your details have been recorded in our CRM and you would like them removed, or would like us to stop contacting you, email concierge@discocater.com. We will delete your details from the CRM and keep only your email address on a do-not-contact list, so that you are not added or contacted again.

Questions about this Policy or your information? Contact us at concierge@discocater.com.