Privacy Policy & Platform Ledger

This policy took effect on 2026-10-17 (October 17, 2026). It reflects our current operating practices for mobile espresso catering bookings, direct barista dispatch communications, online inquiry intake, and advertising conversion measurement.

Any operational modification to our booking workflows or measurement implementations triggers an immediate update to this ledger.

The data controller operating this site is Fastfriendlycoffee, trading at fastfriendlycoffee.com and commercially identified as FAST AND FRIENDLY COFFEE.

Official Registered Postal Address: 1057 W. TREE DR., COLLIERVILLE, TN 38017, COLLIERVILLE, TN, United States.

Direct Contact: Telephone (512) 806-3888 | Email [email protected].

Dispatch Facility Notice: 1057 W. Tree Dr. serves solely as our registered dispatch base and administrative office. There is no walk-in storefront or public counter. All client catering services are fulfilled on-site at booked event venues.

Every category of data taken across our web services:

• Inquiry Form Intake (submit.php / coje9a1.php): Name, phone, email, address, the kind of enquiry, the message, the requested specification, and the consent tick.
• Automated Network Telemetry: Automatically recorded with each submission: the IP address, the browser's user-agent string, the referring URL, the moment the form was rendered and the moment it was sent.
• Support Chat (chat.php / bepoef8.php): Keeps the conversation and a token in the visitor's browser so they can return to it.
• Cookie Identifiers: Persistent consent election recorded under site_consent_v2.
• Advertising Click Identifiers: Inbound campaign click tags passed in query parameters (gclid, msclkid, fbclid).

No Accounts or Payments: No account, no password, no payment and no card data: nothing is sold on this site and no payment is taken.

What each category is used for:

• Catering Quotations & Logistics: Preparing custom event quotes, coordinating barista staffing, calculating transit from our Collierville dispatch base, and verifying venue electrical specifications (specifically our dedicated 120V 20A circuit requirement).
• Client Communication: Responding promptly to inbound booking requests, answering chat inquiries regarding date availability, and coordinating access 60 minutes prior to event start.
• Security & Fraud Prevention: Protecting form submission endpoints against bot abuse via cryptographic honeypot parameters (branch, url) and submission timestamps (tm).
• Advertising Attribution: Assessing whether advertising campaigns on search engines and social networks effectively reach corporate, wedding, and event organizers in Memphis and Shelby County.

The legal basis for each purpose—stated explicitly:

• Contract: Processing contact details, guest counts, and event locations is necessary to prepare binding catering quotes, execute event agreements, and deliver mobile espresso services.
• Consent: Storing non-essential cookies, analytics telemetry, ad attribution identifiers, and persistent chat tokens occurs solely upon explicit, informed visitor consent.
• Legitimate Interest: Maintaining web security, thwarting malicious form bots, auditing server access logs, and defending against contract disputes represent legitimate business interests of our registered enterprise.
• Legal Compliance: Preserving commercial correspondence and invoices to fulfill statutory Tennessee state tax and business record-keeping obligations.

Fast and Friendly Coffee receives paid traffic today. The advertising platforms that send traffic here, named: Google Ads, Microsoft Advertising and Meta Ads, with the click identifier each attaches to a link. We state verbatim: gclid, msclkid, fbclid, google ads, microsoft advertising:

• Google Ads: Paid clicks from google ads append the unique parameter gclid to evaluate search keyword efficacy (e.g. mobile espresso cart Collierville TN).
• Microsoft Advertising: Inbound traffic originating from microsoft advertising (Bing/Yahoo networks) attaches the msclkid click identifier for attribution analysis.
• Meta Ads: Paid social placements across Facebook and Instagram append the fbclid parameter to monitor catering inquiry conversions.

These identifiers are processed solely under valid consent states and are never sold to external data brokers. Nothing anywhere claims an advertising platform has reviewed, approved or verified this site.

Our website strictly implements Google Consent Mode v2 (consent mode). The four signals held denied until the visitor allows storage, and set back to denied when they decline, state verbatim: ad_storage, ad_user_data, ad_personalization, analytics_storage, consent mode:

These signals remain held denied by default before visitor choice. Only when the visitor clicks “Allow Storage” are they updated to granted. When the visitor declines or withdraws consent, all four signals are set back to denied immediately.

The third parties that receive this data, named one by one:

• Google LLC / Google Ireland Ltd: Advertising measurement and analytics routing for Google Ads.
• Microsoft Ireland Operations Ltd: Microsoft Advertising tracking networks; its own handling is covered by the Microsoft privacy statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd / Meta Platforms, Inc.: Conversion telemetry and ad routing for Meta Ads campaigns.
• Hosting Provider: High-security web hosting infrastructure provider that serves this site and stores the enquiry database under encrypted access controls.
• Mail Route Provider: Enterprise mail routing provider that carries booking notifications from our inquiry form to the operator's inbox at [email protected].

Fast and Friendly Coffee operates within Tennessee, United States. When web data is transferred outside the country of collection via third-party cloud infrastructure (such as Google, Microsoft, or Meta global server networks), lawful cross-border transfer mechanisms are enforced.

These transfers are rendered lawful through approved Standard Contractual Clauses (SCCs) and active certifications under applicable cross-border data privacy frameworks.

We enforce concrete retention periods across all data categories (we never store data “as long as necessary”):

• Enquiries and their email copies: Retained for exactly 24 months from submission for booking history and tax audit compliance.
• Chat transcripts: Retained for exactly 18 months to support returning corporate and wedding event organizers.
• Server and access logs: Retained for exactly 90 days, after which server logs are automatically cycled and purged.
• The record of a consent choice: Stored in local browser memory under site_consent_v2 for exactly 12 months before prompting anew.
• A data request is answered within: All DSAR inquiries are answered within 7 days.

Technical and organizational measures protecting personal data:

• Transport Layer Security (TLS 1.3) and strict HSTS headers across all domains.
• Input sanitization and validation on all inquiry (coje9a1.php) and chat (bepoef8.php) endpoints.
• Automated honeypot bot traps (branch, url) and time-gate checks preventing injection and scraping attacks.
• Two-factor authentication (2FA) enforced on all administrative dispatch mailboxes.
• Segregated relational database hosting on isolated, non-public network interfaces.

For visitors reaching our site from Europe, the General Data Protection Regulation (gdpr) guarantees statutory rights in full: access, rectification, erasure, restriction, portability, objection, and withdrawing consent.

• Access: Obtain confirmation and copies of your personal inquiry records.
• Rectification: Correct inaccurate or outdated event contact records.
• Erasure: Request complete deletion of your booking correspondence where retention is no longer legally mandated.
• Restriction: Restrict processing during data dispute investigations.
• Portability: Receive your inquiry data in a structured, commonly used machine-readable format.
• Objection: Object to processing based on legitimate business interests or direct advertising.
• Withdrawing consent: Withdraw consent at any time without affecting lawful prior processing.

US state privacy law applies—with California named under the California Consumer Privacy Act (ccpa) as amended by the CPRA, along with state privacy frameworks in Virginia, Colorado, Connecticut, and Tennessee:

• Right to Know & Access: Learn categories and specific pieces of personal information collected over the preceding 12 months.
• Right to Delete: Demand deletion of collected personal records, subject to statutory tax and commercial exceptions.
• Right to Correct: Remediate inaccurate personal booking records.
• Right to Opt-Out of Sale or Sharing: We do not sell your personal data for monetary payment. However, transmitting identifiers for ad attribution may constitute a “share” under California law; you retain the absolute right to opt out of sale or sharing.
• Right to Non-Discrimination: We never deny catering service, change rates, or alter drink quality when you exercise statutory privacy rights.

That global privacy control is honoured: Our web architecture detects and honors the Sec-GPC (Global Privacy Control) browser signal.

When a browser transmits an active Global Privacy Control header, advertising identifiers and analytical storage are automatically suppressed and set to denied without prompting the visitor again.

That the site is not for children and takes no data from them. Fast and Friendly Coffee provides commercial mobile espresso catering intended exclusively for adult event hosts, corporate managers, and wedding couples aged 18 and older.

We do not knowingly collect, retain, or solicit personal information from children under 16. If personal data of a minor is inadvertently submitted, we purge the record immediately upon discovery.

The right to complain to a data protection authority: Visitors have the right to lodge a complaint regarding data handling with competent supervisory bodies.

The visitor may complain to their state Attorney General (in Tennessee, the Office of the Tennessee Attorney General - Consumer Protection Division), and to the California Privacy Protection Agency in California (CPPA). European visitors may lodge complaints with their resident Data Protection Authority (DPA).

How to exercise these rights, with the real address to write to and how long an answer takes:

Turnaround Time: We verify identity against the submitted email address or telephone number. A data request is answered within 7 days.

How a change to this policy is announced:

When changes are made to our privacy practices, marketing telemetry, or catering intake workflows, the revised policy is published directly on this page with an updated “Effective Date”.

We recommend periodic review of this ledger. Continued use of fastfriendlycoffee.com or submission of new booking requests following updates constitutes acceptance of the modified terms.

A contact that reaches a human: the real email, and the phone or postal address:

FAST AND FRIENDLY COFFEE (Fastfriendlycoffee)
Attn: Privacy & Barista Dispatch Operations
1057 W. TREE DR., COLLIERVILLE, TN 38017
COLLIERVILLE, TN, United States
Email: [email protected]
Phone: (512) 806-3888
Dispatch Desk Hours: Monday through Saturday, 7:00 AM – 6:00 PM CST