Leo's Coney Island Express (“Leo's,” “we,” “us”) operates the leosconey.com website and online-ordering service. This policy explains what data we collect, why, who we share it with, and your choices.
What we collect
- Order data: items, modifiers, total, fulfillment type, pickup time, special instructions you provide.
- Contact data: name, email, mobile phone number, required to contact you about your order.
- Payment data: card details are entered directly into our processor's (Toast) secure form and tokenized before reaching our servers. We never see or store your full card number. We store the last 4 digits and expiry only when displayed on a receipt.
- Account data (if you create one via Clerk): email, optional profile fields, password hash, and Clerk session cookies.
- Technical data: IP address, browser type, request timestamps, for security, rate limiting, and error diagnosis.
- Cookies: session cookies (required to keep you signed in and to maintain your cart) and analytics cookies (only if you accept).
How we use it
- Process and fulfill your orders.
- Send order confirmation, status, and (if you opt in) marketing emails.
- Operate, secure, and improve the service.
- Comply with legal obligations (tax, accounting, fraud prevention).
Who we share it with
- Toast, Inc., payment processing and order delivery to our point-of-sale system.
- Resend, transactional and marketing email delivery.
- Clerk, authentication and session management (optional accounts).
- Neon, managed PostgreSQL database hosting (in the United States).
- Vercel, application hosting and CDN.
- Sentry, error reporting (request metadata only; no payment data or full request bodies).
- Upstash, rate limiting and caching keys (no order content).
We do not sell personal data. We do not share data with advertisers.
Retention
We keep order records indefinitely for legal and accounting purposes (typically 7 years per IRS guidance). We keep account data for as long as your account is active. You may request deletion at any time, see “Your rights” below.
Your rights
- Access the personal data we hold about you.
- Correct inaccuracies via your account profile.
- Delete your account and associated personal data, email orders@leosconey.com or sign in and visit your account settings. Order records may be retained in anonymized form for accounting purposes.
- Unsubscribe from marketing emails using the link in any newsletter.
- California (CCPA) and similar state laws: you may request a copy of your data, opt out of any “sale” (we do not sell data), and request deletion.
Children
Our service is not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
Contact
Leo's Coney Island Express, 4281 24th Ave, Fort Gratiot Township, MI 48059. orders@leosconey.com · (810) 522-8022.
Updates
We may update this policy. Material changes will be posted here with a new effective date.