Privacy Policy

Pearl & Joy provides boba catering services in Southern California. Questions or privacy requests may be sent to hello@pearlandjoy.com.

When you use our Curate inquiry form, you may provide your name, email address, phone number, event date and time, general event location, guest count, event type, requested services, dietary needs, budget, and any other details you choose to include. Please do not submit sensitive information that is not needed to plan your event.

Curate receives the information entered into the embedded form and supports our inquiry and event-management workflow. Curate handles that information under its own privacy and security practices.

Our hosting and security providers may process limited request information needed to deliver and protect the site, such as IP address, browser or device details, requested page, referral information, timestamps, and security signals.

Google Analytics uses advanced consent mode with analytics storage denied by default. Before you choose, or if you reject or withdraw consent, Google may receive limited cookieless signals such as consent status, page activity, timestamp, browser-supplied user agent, referrer, and a random value generated for that page load. These signals may support aggregate or modeled reporting and do not use Google Analytics cookies or persistent Analytics device identifiers.

If you allow analytics, Google Analytics may set first-party analytics cookies and collect fuller device, browser, approximate location, referral, page-view, and interaction data using a pseudonymous identifier. Advertising storage, ad user data, and ad personalization remain denied in our configuration.

We remember your choice in this browser. We also keep a pseudonymous consent event in Supabase containing a random consent identifier, your analytics choice, the action, policy version, and server timestamp. We do not intentionally include your name, email, form answers, or raw IP address in that record.

To protect this audit endpoint from automated abuse, the server checks request origin and temporarily processes network information to make one-way rate-limit tokens. Those network tokens rotate daily, rate-limit rows are removed after two days, and consent audit events are deleted on a rolling schedule after 24 months.

Google Search Console provides aggregate information about how the site appears in Google Search. It does not require us to place a separate Search Console cookie or tracking script on this website.

Details are available in our Cookie Policy.

• Respond to inquiries and communicate about requested catering services.
• Prepare quotes and plan, provide, and support booked events.
• Address menu, allergy, and dietary requests provided by the customer.
• Operate, secure, troubleshoot, and improve the website.
• Measure website performance using limited cookieless signals by default and fuller analytics after consent.
• Maintain appropriate business records and meet legal obligations.

We use Curate for inquiry and event management, Lovable for website hosting, Supabase for restricted administrator authentication and consent records, and Google Analytics for limited cookieless measurement by default and fuller analytics after consent. These providers process information under their own terms and privacy practices.

We do not sell personal information. We may disclose information when required by law, to protect rights or security, or in connection with a business transfer. The site links to Instagram and TikTok but does not currently embed social feeds, social logins, Meta Pixel, or TikTok Pixel; their policies apply if you follow those external links.

We keep inquiry and event information only as long as reasonably needed to respond, provide services, maintain appropriate business, accounting, tax, insurance, and dispute records, and meet legal obligations. Retention varies by record type. Consent audit records are retained for no more than 24 months. Provider security logs follow each provider's applicable settings.

We use reasonable administrative and technical safeguards and restrict administrator access, but no online transmission or storage system can be guaranteed completely secure.

You can reject analytics when the consent panel appears or change your choice at any time through Cookie Settings in the footer. You may also clear cookies and local storage in your browser.

Depending on applicable law, you may ask to access, correct, or delete personal information we hold. Email hello@pearlandjoy.com. We may verify a request and may retain information when permitted or required by law.

This site is intended for adults arranging event services and is not directed to children under 13. We may update this policy as our services, providers, or practices change. The revised date above identifies the current version.