Privacy Policy

This policy explains what Ono Food Trucks collects when you use onofoodtrucks.com, why we collect it, who else touches it, and how to get it removed. It covers eaters browsing the directory and vendors who claim or pay for a listing.

The short version

We collect only what we need to run the directory: your email if you claim a listing or sign up for the newsletter, the business details vendors give us, ratings and tips people leave, and basic analytics about which pages get visited. We do not sell your data. Vendor contact details show up publicly only when the vendor gives them to us and leaves them switched on. Ask us to delete something and we will.

1. What we collect

Vendor account information. When you claim a listing, we collect the email address you sign in with. Sign-in is by emailed link, so that address is your account. We also keep a record of when you signed in and what you changed on your listing.

Business details you give us. Business name, description, cuisine, island and location, hours, where you are parked, phone number, website, social links, menu, prices, and photos. This is business information meant to be published — that is the whole point of a listing.

Listing information from public sources. Before a vendor claims a listing, we may build it from publicly available business information: a public social profile, a website, a map listing, a permit list, an event flyer. It is business information, not personal information, and any vendor can correct or remove it.

Ratings and tips from eaters. If you rate a truck or leave a tip, we collect the rating or tip itself, and the name and email you choose to give. Names may be shown publicly next to what you wrote. Email addresses are never shown publicly — we use them only to check a submission is real and to follow up if we need to.

Messages and sign-ups. If you email us, fill in a form, request a catering quote, or subscribe to the newsletter, we keep what you sent and your contact details so we can reply and follow up.

Payment information. If you subscribe to Da Works, our payment processor collects your card details directly. We receive only a record of the subscription and its status — never your full card number.

Analytics and technical information. Standard web analytics: pages viewed, roughly where in the world the visit came from, device and browser type, the site you arrived from, and how long you stayed.

2. Analytics, and crawler visits

The site runs two analytics tools, and both load on every page:

• Google Analytics 4, for page traffic and audience trends.
• DataFast, a privacy-oriented analytics tool we use to see which pages and vendors people actually look at.

We use these to understand what the directory needs more of and which listings people are looking for. We look at patterns and totals, not at individual people.

Separately, our host keeps standard server logs of requests to the site — including visits from search engine and AI crawlers such as those run by Google, Bing, OpenAI, Anthropic, and Perplexity. We look at those logs to see how well the directory is being read and cited by AI search, which is a core part of what we do for vendors. Server logs may include IP addresses and browser identifiers, and are kept for a limited time.

3. Cookies and browser storage

We use very little of this, and none of it is advertising.

• Sign-in. When a vendor signs in, we store a session token in the browser's local storage so you stay signed in and do not have to request a new link on every page. Signing out or clearing your browser data removes it.
• Analytics. Google Analytics sets its own cookies. DataFast is designed to work without cookie-based tracking of individuals.
• Preferences. We may store small things like a filter you chose, so the site behaves sensibly on your next visit.

You can block or clear cookies and local storage in your browser settings. If you block them, browsing the directory still works, but vendor sign-in will not.

4. Why we use it

To publish and maintain the directory, to sign vendors in and let them manage their listings, to run the paid plan and bill for it, to answer messages and catering enquiries, to send the newsletter to people who asked for it, to show vendors how their listing is doing, to catch spam and fake reviews, to improve the site, and to meet our legal obligations. That is the list.

5. What is public, and what is not

A listing is meant to be found, so business information on it is public: name, description, cuisine, island, general location, hours, menu, and photos.

Contact details are different. A phone number, email address, website, or social handle appears on a listing only when the vendor has given it to us and left it switched on in their dashboard. Turn it off and it comes off the public page. We do not publish a vendor's private phone number or personal email, and we do not publish the email address used for signing in.

Ratings and tips are public once approved, along with the first name given. Eater email addresses are never published.

6. Who else handles your information

We keep the list of outside services short, and we share only what each one needs to do its job. We work with:

• A web host, which serves the site and keeps server logs.
• A database and authentication provider, which stores listing data and handles vendor sign-in links.
• An email delivery service, which sends sign-in links, notifications, and the newsletter.
• A payment processor, which handles subscription billing and card details.
• A customer relationship and messaging platform, used for vendor communication and the front-office tools included in the paid plan.
• The analytics tools named above.

These providers act on our instructions and are not allowed to use your information for their own purposes. We may also disclose information if the law requires it, to protect the safety or rights of people or the site, or if the business is ever sold or reorganized — in which case this policy travels with the data.

We do not sell your personal information, and we do not rent or trade our email lists.

7. How long we keep it

Listing information stays up as long as the listing is live. Account information stays while the account is open. Messages and enquiries are kept while they are useful for support and follow-up. Billing records are kept as long as tax and accounting rules require. Analytics data is kept on the retention schedule of the tool it lives in. When we no longer need something, we delete it or strip it of anything identifying.

8. Getting your information changed or deleted

You can ask us to see what we hold about you, correct it, or delete it. For vendors, that includes taking your listing down entirely, whether or not you ever claimed it.

Email howzit@onofoodtrucks.com with what you want done. Say which listing or account it concerns, and send it from the email address on the account if you have one, so we can tell it is really you. We aim to act within 30 days.

Vendors can also edit most of their own information any time in the vendor dashboard. To unsubscribe from the newsletter, use the unsubscribe link at the bottom of any issue.

Some things stay after a deletion: copies in backups for a while, records we have to keep for tax or legal reasons, and anything already published elsewhere, like a newsletter that has gone out. We cannot pull those back.

9. Security

We use encrypted connections, keep credentials out of the browser, limit who can reach the database, and use emailed sign-in links so there are no passwords to steal. No system is perfectly secure, and we cannot guarantee against every risk, but we take this seriously and will tell affected people promptly if something goes wrong.

10. Where your information is held

We are based in Hawai‘i and our service providers are mostly in the United States, so information is stored and processed there. If you use the site from outside the U.S., you are agreeing to that.

11. Children

The site is meant for adults and for business owners. It is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has given us personal information, email us and we will delete it.

12. Changes to this policy

We will update this policy as the business grows and as the tools we use change. The "last updated" date at the top always reflects the current version. If a change is significant, we will make it clear on the site and email vendors with accounts.

13. Talk to us

Questions about privacy, or a request about your information, go to howzit@onofoodtrucks.com. A real person reads it.

See also our Terms of Service.