Privacy Policy — Team Love Taco

What we collect & why

This Privacy Policy explains what information Team Love Taco LLC ("Team Love Taco," "we," "us," or "our") collects when you visit our website, sign up for the Taco Ride Stash, receive our text messages or emails, or interact with us on Facebook and Instagram — and how we use, share, and protect it.

01 Who we are

Team Love Taco LLC is an Iowa limited liability company that promotes the Thursday Taco Ride on the Wabash Trace Nature Trail and operates the teamlovetaco.com website, the Taco Ride Stash rewards program, and related communications.

Team Love Taco is an independent affiliate marketer for SW Iowa Nature Trails, Inc. ("SWINT") and for Tobey Jack's Mineola Steakhouse ("Tobey Jack's"). We are a separate business. SWINT and Tobey Jack's do not control this website or these communications, and we are solely responsible for the content we publish and the messages we send.

If you have any questions about this policy or your information, contact us at info@teamlovetaco.com.

02 The short version

We collect only what we need to run the ride, the rewards game, and our messages.
Our texts and emails are opt-in. You can leave any time — reply STOP to texts, or click unsubscribe in any email.
We do not sell your personal information, and we do not share your mobile number or SMS opt-in with anyone for their own marketing.
On Facebook and Instagram we only manage our own accounts. We don't message, monitor, or collect data from your account.
You can ask us to access or delete your data at any time — see How to delete your data.

03 Information we collect

We collect the following categories of information:

Information you give us. When you create a Taco Ride Stash account or interact with the site, we may collect your email address, chosen trail name, referral/sponsor code, linked social handles you choose to share, event RSVPs, and — if you opt in — your mobile phone number.

Ride & rewards activity. QR check-in scans, points, badges, streaks, referral activity, and — where applicable — approximate location captured at the moment you scan a checkpoint (used only to confirm the scan is legitimate).

Receipt images. If you upload a Tobey Jack's receipt to validate a visit, we store the image and extract the date, time, check number, and total. Receipts may incidentally show other details; we store them in a private, access-logged location and use them only to confirm and bill validated visits.

Messaging information. If you opt into texts, we keep your number, your consent record (date, time, and method), and the messages exchanged. If you opt into emails, we keep your address and delivery/engagement events (such as opens, clicks, and unsubscribes).

Social interactions. Public interactions you have with our Facebook Page or Instagram posts (likes, comments, shares) are visible to us through those platforms and are governed by Meta's own policies as well as this one.

Automatically collected data. Standard device and usage data (IP address, browser type, pages viewed, referring links, and UTM tags from links you follow), collected through cookies and analytics as described in Cookies & analytics.

Purchases. If you buy merch, checkout is handled by Shopify. We do not receive or store your full payment card details.

04 How we use your information

We use your information to:

run your Taco Ride Stash account, award points and badges, and operate referrals and leaderboards;
confirm ride check-ins and Tobey Jack's visits, and generate partner statements from confirmed, validated visits;
send the ride communications, confirmations, reminders, and updates you asked for by text or email;
publish and measure our own posts on Facebook and Instagram and understand which content drives ride participation;
measure marketing performance and, in aggregate, report channel results to SWINT and validated-visit counts to Tobey Jack's;
protect the program against fraud and abuse, and keep required audit and consent records; and
comply with law and enforce our Terms & Conditions.

05 Text messages (SMS) & your consent

Our texts are opt-in. We only send SMS to people who have given prior express consent — by confirming their number and agreeing during onboarding, or by replying YES to a one-time confirmation text. We keep a dated record of that consent.

No mobile information is ever sold or shared with third parties or affiliates for their marketing or promotional purposes. Your phone number and your SMS opt-in are used only to send you the Team Love Taco Ride Coordination messages you signed up for. We share your number with our messaging provider solely to deliver those messages, never for their own marketing.

Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe at any time, or HELP for help. Consent to receive texts is not a condition of any purchase or of participating in the ride.

06 Email communications

If you opt into email, we send ride reminders, recaps, and program updates. Every marketing email includes a one-click unsubscribe link; you can also email info@teamlovetaco.com to be removed. We may still send you essential account or transaction messages (for example, a receipt-validation confirmation) that are not marketing.

07 Facebook & Instagram

We use the Meta (Facebook and Instagram) platforms to publish Team Love Taco's own posts and to read the engagement metrics on our own posts and accounts. This is a first-party integration: our application only acts on the Team Love Taco Facebook Page and linked Instagram account that we own and control.

We do not use these platforms to send direct messages, read or moderate comments on your behalf, or collect personal data from your account. Any information we obtain through Meta is used only to operate and measure our own event communications, is stored securely, and is never sold or shared for others' marketing.

When you interact with our content on Facebook or Instagram, your activity is also governed by Meta's Privacy Policy. This site and application are not endorsed, sponsored, or administered by Meta.

We do not sell your personal information. We share it only in these limited ways:

Service providers. We use trusted vendors to run the program — for example, our SMS provider (Twilio), Meta (publishing), our database and storage provider (Supabase), our commerce provider (Shopify), our analytics provider (PostHog), and our AI provider (Anthropic, used to draft copy and read receipt images). They process data only on our instructions and only to provide their service to us.

Partners, in aggregate. We report channel-level marketing performance to SWINT and confirmed validated-visit counts (with receipt evidence available on request) to Tobey Jack's. These reports are used for billing and program measurement. We do not hand your contact list, phone number, or SMS opt-in to SWINT or Tobey Jack's for their own marketing.

Legal & safety. We may disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of Team Love Taco, our riders, or the public.

Business transfer. If the program is transferred to another operator, information may transfer with it, subject to this policy.

09 Cookies & analytics

We use cookies and privacy-conscious analytics (PostHog and Cloudflare Web Analytics) to understand site traffic, measure marketing channels through UTM tags, and improve the experience. You can control cookies through your browser settings; blocking them may affect how parts of the site work. We do not use cross-site advertising trackers to build profiles of you elsewhere.

10 Data retention

We keep information only as long as needed for the purposes above or as the law requires. In particular: receipt images are retained for the season plus 90 days as billing evidence, then purged; SMS consent records are kept as long as you are opted in and for a reasonable period afterward to prove consent; and account and ledger data is retained while your account is active. You can ask us to delete your account data as described below.

11 Your choices & rights

You can, at any time: opt out of texts (reply STOP), opt out of emails (click unsubscribe), and request to access, correct, or delete your personal information. Depending on where you live, you may have additional rights under applicable privacy laws; we honor those requests regardless of location. To exercise any right, email info@teamlovetaco.com. We will not discriminate against you for exercising your rights.

12 How to delete your data

To delete the data associated with your Team Love Taco account, email info@teamlovetaco.com with the subject "Delete my data" from the email on your account, or use the account-deletion option in your profile.

We will delete or de-identify your personal information within 30 days, except records we are required to keep (such as SMS consent evidence, or receipt/validation records needed for partner billing, which are purged on the retention schedule above). This page also serves as our data-deletion instructions for Meta's platform requirements.

13 Security

We protect your information with reasonable technical and organizational safeguards: access tokens and API keys are stored encrypted server-side and never exposed in your browser, receipts live in a private access-logged bucket, and the rewards ledger is append-only and auditable. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your data and to respond promptly if an issue arises.

14 Children & age

The Thursday Taco Ride is an adult-oriented event, and our site and messaging are intended for adults. Our services are not directed to children under 13, and we do not knowingly collect their personal information. Certain "spicy" content requires an 18+ self-attestation. If you believe a child has given us information, contact us and we will delete it.

15 Third-party links & services

Our site links to and integrates with third-party services (Meta, Shopify, Strava, and others). Their handling of your information is governed by their own privacy policies, not this one. We encourage you to review them.

16 Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll change the "Last updated" date above and, for material changes, provide additional notice. Continued use of the site or our messages after an update means you accept the revised policy.

17 Contact us

Questions about your privacy? Email info@teamlovetaco.com. For text-program help, reply HELP to any message.

The rules of the ride.