Privacy Policy

Your Privacy Matters To Us

Last updated March 15, 2026. A plain-language description of what data we collect, why, and what your rights are.

On this page

  1. Who we are
  2. Information we collect
  3. How we use your information
  4. Legal bases for processing
  5. Cookies & similar technologies
  6. How we share information
  7. Data retention
  8. Data security
  9. Your rights (GDPR & CCPA)
  10. International transfers
  11. Children’s privacy
  12. Third-party links
  13. Changes to this policy
  14. Contact us

1. Who We Are

Jenkies Joint ("we", "us", "our") is a family-owned coffee shop, bakery, and laundromat located at 368 Pine Street, Orbisonia, Pennsylvania 17243. We’re registered in the Commonwealth of Pennsylvania, and this policy applies to information collected through our website (jenkiesjoint.com), our physical premises, our email correspondence, and our catering services.

The data controller for the purposes of the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) is Jenkies Joint LLC. You can contact us at any time using the details in section 14.

2. Information We Collect

We collect only the information we need to serve you well. Broadly:

2.1 Information you give us directly

2.2 Information we collect automatically

2.3 Information we receive from third parties

When you connect through social media (e.g. Facebook Messenger), we receive your public profile name and message content. When you use a gift card or subscription that was purchased for you, we receive the purchaser’s name (but not their contact details).

3. How We Use Your Information

We use your information to:

We do not sell your personal information, and we never will. We do not share it with data brokers, and we do not use it to build advertising profiles.

4. Legal Bases For Processing (GDPR)

If you are a resident of the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on the following legal bases:

5. Cookies & Similar Technologies

Our website uses minimal cookies and browser storage. We do not use third-party advertising trackers.

5.1 Strictly necessary

These are essential for the site to function — for example, remembering your dismissed cookie banner or saved menu tab. You cannot opt out of these; they store no identifying data.

5.2 Analytics

We may use privacy-respecting analytics (aggregated visit counts by page, no individual tracking) to understand what’s useful on the site. We do not use Google Analytics or similar cross-site trackers.

5.3 Embedded content

Some pages embed a Google Maps location map. Google may set its own cookies when the map loads; please review Google’s privacy policy for details.

5.4 Managing cookies

You can clear cookies at any time in your browser’s settings. Doing so will not affect your ability to visit the site, though some preferences may reset.

6. How We Share Information

We share your information only with:

7. Data Retention

We keep your information only as long as we need it:

8. Data Security

We take reasonable technical and organizational measures to protect your data. Our website uses HTTPS encryption; our payment processing is PCI-DSS compliant; and access to our customer records is restricted to the two owners (Eric and Amanda) and our accountant. We review our security practices annually.

No system is 100% secure, but if a breach ever affects your personal information, we will notify you within 72 hours where required by law.

9. Your Rights

Depending on where you live, you have some or all of the following rights:

To exercise any of these rights, email us at [email protected] with "Privacy Request" in the subject line. We’ll respond within 30 days.

10. International Transfers

Our servers are located in the United States. If you’re contacting us from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data protection laws than your country. Where required, we rely on Standard Contractual Clauses as our transfer safeguard.

11. Children’s Privacy

Our services are directed at adults. We don’t knowingly collect personal information from children under 13 (or under 16 in the EEA). If you believe a child has provided us with personal information, please contact us and we’ll delete it promptly.

12. Third-Party Links

Our site links to Facebook, Instagram, Google Maps, and occasionally to partner businesses (Paul Family Farms, Wise County Biscuits). We’re not responsible for those sites’ privacy practices — please review their policies directly.

13. Changes To This Policy

We may update this policy from time to time. When we make material changes, we’ll post a notice at the top of this page and, where feasible, email newsletter subscribers. The "last updated" date at the top always reflects the most recent version.

14. Contact Us

Questions about this policy or your data? Reach us at: