Privacy Policy

Effective date: November 5, 2026
Business operator: East Coast Subs.

This Privacy Policy explains how East Coast Subs (“we,” “us” or “our”) handles personal information in connection with this website, inquiries and restaurant orders we receive through connected services. It does not replace the privacy notices of independent ordering, payment, delivery, loyalty or social media providers.

1. Information we handle

• Information you provide: your name, contact information, messages and information needed to respond when you contact the restaurant. Please do not send payment card numbers, passwords or unnecessary sensitive information in messages.
• Order information: when an ordering provider sends us an order, we may receive the customer’s name, contact details, items, modifications, pickup or delivery details, transaction status and order identifier to prepare the order and provide support. The exact information depends on the provider. Payment entry takes place on the provider’s checkout, not this website.
• Technical information: hosting and security services may process IP addresses, request times, requested pages, browser and device information, referring pages and error records to deliver and protect the website.
• Analytics and advertising information, if enabled: the services below can process cookie or device identifiers, ad click identifiers, IP addresses, approximate location, page visits and interactions such as clicking an ordering link. An ordering-link click does not by itself establish that a purchase occurred.

When you use a contact or catering form, subscribe to a newsletter or opt in to text messages, the following information-handling practices apply. Enabled contact forms send your details to the restaurant inbox. Catering is arranged by phone. Newsletter and SMS signup takes place on the selected provider’s website when those links are available. Forms may collect your name, email, phone number, organization, event date, guest count and message or order-planning details. Newsletter enrollment collects your email and preferences. SMS enrollment collects your mobile number and consent record. Signup records may include the time, source and disclosure version presented, and technical information used to verify enrollment or prevent abuse. This website has no customer accounts or on-site checkout. Administrator sign-in uses WordPress authentication cookies.

2. Why we use information

We use information to provide the website, prepare and support orders, respond to inquiries, resolve service issues, maintain records, prevent fraud, protect security and meet legal obligations. If the measurement and advertising services are enabled, we also use the information described below to understand site use, measure campaigns and reach interested customers, subject to applicable choices and consent requirements.

We do not need allergy or medical details for advertising. Share food-safety concerns directly with the restaurant when needed for an order; those details must not be sent to analytics or advertising platforms.

2a. Forms, newsletters and text messages

We use contact and catering submissions to respond to your request and coordinate service. The website does not maintain an inquiry database; enabled live forms deliver inquiries by email, where mailbox and service-provider retention applies. Short-lived security tokens and hashed request identifiers help prevent abuse. Hosting and email providers may maintain operational logs. An inquiry is not an order confirmation and does not automatically enroll you in marketing. Collect only information needed for your request; please avoid unnecessary sensitive details.

If you subscribe to our newsletter, we use your email and preferences to send East Coast Subs news and offers. You can unsubscribe through the link in a marketing email or by emailing info@eastcoastsubsmurray.com. Necessary non-marketing order or service messages may still be sent where permitted.

If you separately opt in to the East Coast Subs text program, we use your number and consent information to send the messages described at enrollment and manage your preferences. Marketing consent is not required to purchase. Once the program is active, reply STOP to unsubscribe or HELP for assistance, or contact us by email. Other reasonable requests to revoke consent will also be honored as required. Message frequency varies; message and data rates may apply. The program’s enrollment terms govern the specific types of messages you choose.

Mobile numbers and SMS opt-in data will not be sold or shared with third parties or affiliates for their own marketing or advertising, including customer-list audiences or ad-platform matching. They may be provided to contracted messaging vendors only as necessary to operate and support this program, or as required by law.

3. Google services, analytics and advertising

This section covers Google Search Console, Google Analytics 4 (GA4), Google Ads and related measurement and advertising features. Optional features apply only when enabled and subject to applicable notices, permissions and privacy choices. Describing a feature here does not mean it is active or give us permission to use information for an unrelated purpose. No Google measurement or advertising tag is currently active on this website.

Google Search Console

Search Console provides information about the site’s appearance in Google Search, search queries, impressions, clicks and indexing or technical issues. Verification of site ownership does not itself require a visitor-tracking pixel. Search Console reporting is separate from GA4 and advertising measurement.

Google Analytics 4

When enabled, GA4 measures visits, engagement, traffic sources and website interactions. Information may include page URLs and titles, referrers, campaign parameters, timestamps, browser and device characteristics, language, approximate location, cookie or other online identifiers, and event information. Events can include page views, scrolls, site searches, downloads, form interactions and clicks on order, directions or telephone links. Where an authorized ordering integration supports it, events may also include order identifiers, item information, transaction amounts and conversion status. We do not treat an outbound ordering click as a completed purchase.

Optional GA4 features can include enhanced measurement, custom events, audience creation, demographic and interest reporting, Google signals, advertising attribution, cross-device or cross-domain measurement, and modeled or predictive reporting. Where enabled and permitted, Google signals can associate site activity with information from eligible signed-in Google users according to their settings. A non-identifying User-ID may connect activity across sessions where an appropriate customer relationship exists; it is not an email address or telephone number.

Google Ads and linked advertising features

When enabled, Google Ads and linked GA4 features can measure campaign performance, attribute conversions, optimize ad delivery and bidding, build or exclude audiences, and provide remarketing or personalized advertising across Google services and participating websites or apps. Google and we may use first-party cookies and identifiers together with third-party advertising cookies, ad click identifiers and other identifiers to connect ad interactions with website activity. Linking GA4 with Google Ads permits information to flow between the products under the relevant Google terms and settings.

Depending on the configuration, measurement may include website conversions, calls or clicks to call, authorized offline conversion or store-sales imports, and supported ordering-platform events. Advertising reports may use measured and modeled results. Technical request information can include an IP address; we do not promise that an Analytics/Ads integration transmits no IP information.

Enhanced conversions and customer audiences

If we enable enhanced conversions or similar approved measurement features, we may securely send eligible first-party contact information you provide, such as an email address, together with relevant conversion data to Google to perform advertising measurement on our behalf. Contact identifiers are hashed where the feature requires it so Google can match them with its records. Hashing does not make personal information anonymous.

If enabled, Customer Match or conversion-based customer lists may use eligible first-party customer information to match Google accounts for audience targeting, exclusions, re-engagement or campaign optimization. These uses require appropriate notice and any required consent, must respect opt-outs and Google’s policies, and are not authorized merely because someone submits an inquiry. We exclude mobile numbers and SMS opt-in data from ad matching and customer-list audiences, as described in Section 2a.

Delivery methods, safeguards and choices

Measurement may be implemented through the Google tag, Google Tag Manager, approved server-side tagging, APIs or integrations. Changing the delivery method does not remove privacy obligations. We do not send allergy or medical notes, full payment-card details, passwords or private message contents to these services. Identifying contact details must not be placed in ordinary Analytics page URLs, event names or parameters; any approved customer-data feature requires its separate safeguards.

Consent Mode can communicate choices about analytics storage, advertising storage, use of user data for advertising and ad personalization. Some configurations can send limited cookieless measurement requests even when storage is denied; “cookieless” does not mean no information is transmitted. The actual implementation must match the choices described in Section 5. Google account settings and website preferences serve different purposes.

Read how Google uses information from sites that use its services and Google’s Privacy Policy. Manage Google advertising preferences in My Ad Center and activity preferences in My Activity. Google also offers a Google Analytics opt-out browser add-on. These tools have different scopes, may depend on your browser or signed-in account, and do not necessarily stop every form of measurement. You can contact us to exercise applicable rights as described in Section 9.

4. Meta and TikTok advertising

Meta Ads and Meta Pixel (formerly Facebook Pixel) can, when enabled, measure advertising and support remarketing on Facebook and Instagram. The pixel can transmit website-event information, page URLs, device/browser details, IP addresses and cookie or advertising identifiers to Meta. Meta may match events with accounts and use information under its own policies. See Meta’s Privacy Policy and the advertising preferences in your Meta account.

TikTok Ads and TikTok Pixel can, when enabled, use cookies and identifiers to measure website events and ad performance, match visitors with TikTok users and build advertising audiences. See TikTok’s U.S. Privacy Policy and the advertising controls in your TikTok account.

Optional Meta Conversions API, TikTok Events API and advanced matching can transmit permitted website or conversion information through server connections and match eligible hashed contact identifiers with provider records. Customer audiences may be used for targeting or exclusions where permitted. These features require appropriate notice, required consent and respect for opt-outs; they exclude sensitive order notes, mobile numbers and SMS opt-in data. Hashing does not make information anonymous. Neither pixel, server API nor customer matching is currently active on this website.

5. Cookies and your choices

Cookies and similar storage can support necessary functions, analytics or advertising. Necessary hosting/security functions and administrator authentication differ from optional measurement and advertising. Blocking necessary cookies may affect sign-in or other functionality.

Current website: optional analytics and advertising are absent; no cookie preference control is presented. Your browser can block or delete cookies, and the provider controls linked above manage some information on those providers’ services.

Before optional analytics or advertising services are activated, we will update this policy with the available privacy controls and information about the cookies and similar technologies in use. Viewing this policy, scrolling or using the website is not consent to optional tracking.

Advertising disclosures may be considered a “sale,” “sharing” or processing for targeted advertising under some privacy laws, even without a cash payment. We will describe the actual disclosures and applicable opt-out mechanism before these services are activated. Browser Do Not Track and GPC are different signals; this website currently has no optional advertising processing to suppress. Controls on this website do not control independent providers after you leave it.

6. Ordering, delivery and loyalty providers

Ordering links take you to an external provider. That provider may collect account, order, delivery, device and payment information under its own terms and privacy notice. We remain responsible for our handling of information we receive from it; referring you to a provider does not remove our obligations.

Ordering and delivery services:

• TouchBistro: our online pickup ordering provider.
• Uber Eats, Grubhub and DoorDash: possible delivery/ordering options, subject to confirmed merchant participation.

Use the provider shown on the live ordering page and your receipt for provider-specific account and payment assistance. Loyalty programs, gift cards and promotional messages may have separate enrollment disclosures. Confirm each actual provider before submitting information.

7. When information is disclosed

Information may be shared with authorized restaurant personnel and service providers that support hosting, security, communications, order fulfillment, payment processing and professional advice, as needed for those functions. The website is hosted by GoDaddy, and restaurant inquiry email is handled through Google Workspace.

If activated, the analytics and advertising providers described above receive the relevant technical and event information. Ordering and delivery services exchange information needed for their respective roles. We may also disclose information to comply with lawful requests, protect rights and safety, or in a business transfer subject to applicable protections. We do not grant providers unrestricted permission to use sensitive order notes for advertising.

8. Retention and security

Information is retained as needed for its purpose, order support, accounting and tax obligations, dispute resolution, security and applicable legal requirements. Retention depends on the information type, applicable law and whether a legal hold applies. Deletion may be delayed in secured backups until their normal expiration.

We seek to use reasonable safeguards appropriate to the information and restrict access to authorized personnel and providers. No website or transmission method is completely secure. Do not send full payment-card information through ordinary email.

9. Privacy requests

Depending on where you live, applicable law and whether the business is covered, you may have rights to access, obtain a copy of, correct or delete personal information; opt out of sale, sharing or targeted advertising; withdraw consent; or appeal a denied request. These rights have exceptions, and not every right applies in every jurisdiction. We will not unlawfully discriminate against you for exercising an applicable right.

Contact us using the details below and describe your request. We may need proportionate information to verify identity or an agent’s authority. Do not send identification documents unless requested through an appropriate secure process. We will respond within applicable legal deadlines and explain any permitted extension or denial and any applicable appeal process. For information controlled independently by an ordering or advertising provider, you can also contact that provider directly.

10. Children and visitors outside the United States

This website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through this website. If you believe a child has provided information, contact us so we can investigate and take appropriate steps.

The restaurant serves customers in Utah. Providers may process information in the United States and other countries. Applicable rights and transfer requirements depend on the circumstances; visiting the site is not a waiver of those rights or blanket consent to international transfers.

11. Updates and contact

We will update this policy when our practices change and revise the effective date. Material changes will receive additional notice or consent where required; changes do not override existing legal rights.

East Coast Subs — Privacy contact
East Coast Subs
Email: info@eastcoastsubsmurray.com
6056 State Street, Murray, UT 84107
Phone: 801-262-7827

See also our Website Terms.