Your inquiry. Your privacy.

Matthew / Palm & Salt is responsible for the personal information collected through these inquiry forms. Contact Matthew at privacy@palmandsaltburritos.com about your information or this notice.

What we collect and why

We collect your name, email, message and the business details you choose to submit: a target area, timeline and any selected formats for franchise inquiries; company, channel, target market and product interest for salsa and hot sauce trade; and what you would bring, with optional organization, for partnerships; and your message and optional organization for investor expressions of interest. Boracay contact inquiries include name, email, message and optional subject and phone; delivery and group inquiries also include party size and optional preferred date and area or venue. Boracay opening-news signup collects email and explicit newsletter consent. We record the notice acknowledged, submission time, source page and a receipt reference.

Matthew and authorized Palm & Salt team members use this information to assess and respond to your inquiry and keep a record of the conversation. Please do not send identity documents, payment details, health information or confidential financial records through these forms. Inquiries do not create a contract or an automated decision about you.

Where it goes

The website is hosted on Vercel. Inquiries and Boracay newsletter consent are sent securely to HubSpot, a CRM hosted in the United States, and stored there for Matthew’s review. HubSpot is the processor for this inquiry and newsletter information. Service providers process the information needed to host, store and protect the service. Technical request information is used for security and abuse prevention. We do not publish applicant details or sell your inquiry data.

How long it is stored

Inquiry records are kept while the conversation is active and afterward as a record of the inquiry and its follow-up. There is no automatic deletion timer. HubSpot records can be deleted following review of a request. Matthew reviews retention and erasure requests individually, including whether information is still needed for a continuing purpose or legal obligation. Closing a deal does not by itself delete its inquiry or associated contact.

You can contact Matthew to ask about the need for continued retention, request restriction, or request erasure. Matthew reviews requests individually, including any obligation to preserve records; closing an inquiry alone does not erase it.

Your choices and rights

You may request access to your information, correction, a copy where applicable, restriction or erasure, and object to processing as provided by applicable law. We may need to verify your identity before acting on a request. Contact privacy@palmandsaltburritos.com; include your receipt reference if available. You may also raise a concern with the Philippine National Privacy Commission.

Newsletter consent is kept while needed to manage your preference and respond to withdrawal or erasure requests. There is no automatic deletion timer for newsletter contacts. Matthew reviews continued retention and erasure requests individually.

Optional updates

The inquiry marketing checkbox is separate, optional and unchecked. Boracay opening-news signup has its own unchecked consent box; signup requires that consent. Leaving it unchecked does not affect your inquiry. If you choose updates, we record that consent and its time in HubSpot; it does not subscribe you to an automated mailing service. You may withdraw consent at any time by emailing Matthew at the privacy address above.

Browser storage and service checks

Public inquiry details are not saved in browser storage. An in-memory request identifier helps avoid duplicate submissions when you retry on the same page. Separate private founder access uses a secure session cookie. No advertising tracker is added by these public pages.

Inquiry notice version: 2026-10-27