Your information. Your privacy.

Matthew / Palm & Salt is responsible for the personal information collected through the Boracay inquiry forms and opening-news signup. Contact Matthew at privacy@palmandsaltburritos.com about your information or this notice.

What we collect and why

For contact inquiries, we collect your name, email, message, optional subject and optional phone number. For delivery and group inquiries, we also collect party size and any preferred date and area or venue you choose to provide; your message can describe the occasion. Opening-news signup collects your email and your explicit consent. We record the notice acknowledged, submission time, source page and a receipt reference.

Matthew and authorized Palm & Salt team members use this information to assess and respond to your inquiry and keep a record of the conversation. Please do not send identity documents, payment details, health information or confidential financial records through these forms. Inquiries do not create a contract or an automated decision about you.

Where it goes

The website is hosted on Vercel. Inquiries and newsletter consent are sent through the corporate website to HubSpot, a CRM hosted in the United States, and stored there for Matthew’s review. HubSpot is the processor for this inquiry and newsletter information. Service providers process the information needed to host, store and protect the service. Technical request information is used for security and abuse prevention. We do not publish applicant details or sell your inquiry data.

How long it is stored

Inquiry records are kept while the conversation is active and afterward as a record of the inquiry and its follow-up. There is no automatic deletion timer. HubSpot records can be deleted following review of a request. Matthew reviews retention and erasure requests individually, including whether information is still needed for a continuing purpose or legal obligation. Closing a deal does not by itself delete its inquiry or associated contact.

You can contact Matthew to ask about the need for continued retention, request restriction, or request erasure. Matthew reviews requests individually, including any obligation to preserve records; closing an inquiry alone does not erase it.

Your choices and rights

You may request access to your information, correction, a copy where applicable, restriction or erasure, and object to processing as provided by applicable law. We may need to verify your identity before acting on a request. Contact privacy@palmandsaltburritos.com; include your receipt reference if available. You may also raise a concern with the Philippine National Privacy Commission.

Newsletter consent is kept while needed to manage your preference and respond to withdrawal or erasure requests. There is no automatic deletion timer for newsletter contacts. Matthew reviews continued retention and erasure requests individually.

Optional updates

The inquiry marketing checkbox is separate, optional and unchecked. Opening-news signup has its own unchecked consent box; signup requires that consent. Leaving it unchecked does not affect your inquiry. If you choose updates, we record that consent and its time in HubSpot; it does not subscribe you to an automated mailing service. You may withdraw consent at any time by emailing Matthew at the privacy address above.

Browser storage and service checks

Public inquiry details are not saved in browser storage. An in-memory request identifier helps avoid duplicate submissions when you retry on the same page. The ordering preview keeps its draft bag in browser storage. That local draft does not place a real order or share inquiry details. Website measurement, where configured, is separate from inquiry and newsletter consent.

Inquiry notice version: 2026-10-27