Privacy
Your information, handled with care.
We collect what we need to make your food, take your payment, and keep in touch when you’ve asked us to. Here’s what that means in practice for themillww.com and The Mill.
Last updated October 19, 2026
01
What we collect
When you order: your name, email and phone number, what you ordered, your pickup or delivery time, a delivery address for catering, and any notes you add, such as allergies.
When you sign in: your email address. We email you a one-time code instead of using passwords.
When you pay: card details go straight into our payment processor’s secure form and never reach our servers. If you save a card, our payment processor keeps it on your customer profile, and we only see the brand, the last four digits and the expiry date.
Your purchases with us: when you’re signed in, your account shows your purchases at The Mill, Events & Catering and Moosie + Baha, including in-store purchases made with your customer profile or a card saved to it.
Gift cards: the recipient’s name and email and your message, so we can deliver it.
Catering and wholesale: the contact and business details you send us. For wholesale accounts, also the people you add, your delivery addresses and your signed account agreement.
Email signups: your email address, when you ask for menu updates or news.
How you use our website: the pages you visit, the items you look at and add to your bag, the device and browser you use, and the link or ad that brought you here.
02
How we use it
To make and hand over your order, take payment, and send your confirmations and receipts.
To apply member pricing and member credit, and to show your purchase history and savings in your account.
To answer your questions, and to run the business: bookkeeping, taxes and preventing fraud.
To send marketing email if you’ve signed up for it, and at most one reminder if you leave an order unfinished at checkout. Every one has an unsubscribe link.
To see what’s working on our website and in our ads, and to show our ads to people who’ve visited.
03
Who we share it with
Only the services that help us run The Mill, and only what each one needs:
Square, our payment processor and point of sale: orders, payments, saved cards, gift cards and your customer profile.
Pintuna, which runs membership billing and member credit.
Klaviyo, for our emails, including what you’ve viewed and added to your bag once you’ve given us your email.
Google (Google Analytics and Google Ads), to measure visits and orders and our ads’ results.
Meta (Facebook and Instagram), to measure our ads’ results and show our ads to people who’ve visited.
Microsoft 365, which sends our order and account emails.
Cloudflare, which hosts this website.
Gusto, if you apply for a job through our hiring page. Gusto’s own privacy policy applies there.
We don’t sell your personal information, and we never share order notes such as allergies with Google or Meta. We may share information if the law requires us to.
04
Cookies and your browser
One cookie keeps you signed in, for up to 30 days. It’s removed when you sign out.
Your bag is saved in your own browser, so it’s still there when you come back.
Google Analytics shows us how people use the site: which pages they visit, where they came from and what gets ordered. It sets its own cookies.
The Meta Pixel and Google’s tag tell us whether our ads on Facebook, Instagram and Google lead to visits and orders, and let us show ads to people who’ve visited. When you sign in or place an order, they receive your email address in scrambled (hashed) form so an order can be matched to an ad.
Klaviyo runs our signup forms. Once you’ve given us your email, it also notes the items you view and add to your bag, so we can send a reminder if you leave something behind.
None of these run on our order confirmation and receipt pages.
If your browser sends a Global Privacy Control signal, we don’t load the Meta Pixel and we turn off Google’s advertising features for your visits.
05
How long we keep it
We keep order and payment records for as long as we need them for our books and taxes. You can ask us to delete your account and signup details at any time; some records we’re required to keep.
06
Your choices
Unsubscribe from marketing email with the link at the bottom of any email.
Update the card on file from your account.
Limit ads: turn on Global Privacy Control in your browser, or use Google’s My Ad Center and Meta’s ad preferences. Google offers a browser add-on to opt out of Google Analytics.
Ask us for a copy of your information, or to correct or delete it: email info@themillww.com or call 509-593-1173.
07
Keeping it safe
Card numbers are handled by our payment processor, sign-in uses one-time codes instead of passwords, and the site is served only over a secure connection. Only Mill staff can open the admin pages.
08
Children
Our website is meant for adults. We don’t knowingly collect information from children under 13.
09
Changes and questions
If we change this policy, we’ll update the date at the top of this page.
Questions are welcome: info@themillww.com, 509-593-1173, or Mill Market Co., 130 E Rose St, Suite 101, Walla Walla, WA 99362.