Now open in Strawberry Village · Join Lulu Rewards and get 10% off your next order
Açaí bowl with berries, banana and granola on linen
Privacy

Privacy policy

What this website collects, why, who helps us run it, and the choices you have. Short version: we collect very little, we never sell it, you can opt out of ad tracking, and you can ask us to delete it.

Last updated October 17, 2026

This policy covers lulu-daes.com, run by Edgy Elephant LLC, which does business as Lulu Dae's at 802 Strawberry Village Suite 802, Mill Valley, CA 94941. Questions go to info@lulu-daes.com or (415) 384-8201.

What we collect

When you send the contact form

Your name, email address, phone number if you give it, the topic you pick and your message. It is emailed to the Lulu Dae's team and the people who run this website for us so we can reply. It is not added to a mailing list and is not stored in a database on this site. If the email fails to send, a copy is kept in our hosting provider’s server logs so the message is not lost; those logs are deleted automatically after a short period.

When you browse the site

We use Google Analytics 4, loaded through Google Tag Manager, to see which pages people visit and which buttons they use: for example, how many people tap Order, Directions or Call. Google Analytics sets cookies and receives information such as the pages you view, the links you click, your device and browser type, and your approximate location (city level). It does not tell us who you are. The events we send never include your name, email address, phone number or message.

We also use the Meta Pixel, from Meta (the company behind Facebook and Instagram), to measure our ads and to show our ads to people who have visited this site. It uses cookies and sends Meta the pages you view and the buttons you use, such as Order, Call or Directions, along with your device, browser and IP address. Meta may connect this to a Facebook or Instagram account you are logged into. We never send Meta your name, email address, phone number or message. You can turn it off on our privacy choices page, and it does not load at all if your browser sends a Global Privacy Control signal.

Like every website, our host (Vercel) receives your IP address and browser details when your device loads a page. This is used to deliver the site and keep it secure.

On your device

If you close or act on the Lulu Rewards pop-up, we save a small note in your browser’s local storage so it does not keep reappearing. It stays on your device and is not sent to us.

Ordering and Lulu Rewards

Online ordering, payment and Lulu Rewards are run by our point-of-sale provider, SpotOn. When you order online or join Lulu Rewards, you are on SpotOn’s pages and give your details to SpotOn, which handles them for us under SpotOn’s consumer privacy notice. We never see or store your full card number.

Joining Lulu Rewards signs you up for emails and texts from Lulu Dae's about new bowls, flavors and member deals. You can opt out at any time with the unsubscribe link in any email or by replying STOP or UNSUBSCRIBE to any text. Opting out of marketing does not remove your rewards account; ask us if you want that deleted too.

How we use it

  • To answer your messages and questions.
  • To run Lulu Rewards and send the messages you signed up for.
  • To understand how the site is used and make it better.
  • To measure our ads on Facebook and Instagram and show them to past visitors, unless you opt out.
  • To keep the site secure and working.
  • When the law requires it.

Who helps us run the site

These companies process information on our behalf, only to provide their service to us:

  • Vercel: website hosting.
  • Google (Tag Manager and Analytics): website analytics.
  • Resend: delivers contact form messages to our inbox.
  • Meta (Meta Pixel): measuring and targeting our ads on Facebook and Instagram. Meta also uses this information for its own purposes under Meta’s privacy policy.
  • Google Workspace: our email.
  • SpotOn: online ordering, payments and Lulu Rewards.

Links to other sites, such as Instagram, Google Maps and the event organizers on our events page, are covered by those sites’ own policies.

Selling and sharing

We do not sell your personal information. The Meta Pixel described above counts as “sharing” personal information for cross-context behavioral advertising under California law: the identifiers and internet activity on this site (pages viewed, buttons used, device and IP address) go to Meta for advertising. We do not knowingly sell or share the information of anyone under 16.

To opt out, use Your privacy choices, linked at the bottom of every page, or turn on Global Privacy Control in your browser, which we honor automatically. You can also email info@lulu-daes.com.

Your choices

  • Block or delete cookies in your browser settings, or install Google’s Analytics opt-out add-on. The site works without them.
  • Opt out of the Meta Pixel on Your privacy choices, or with Global Privacy Control.
  • Unsubscribe from rewards emails and texts as described above.
  • Ask us what we hold about you, or ask us to correct or delete it, by emailing info@lulu-daes.com.

California residents

Under the California Consumer Privacy Act, as amended, you have the right to know what personal information we collect, use and disclose; to have it deleted; to correct it; and to opt out of its sale or sharing. We do not sell it; to opt out of sharing, use Your privacy choices or Global Privacy Control. We will not treat you differently for using these rights. Send a request to info@lulu-daes.com or call (415) 384-8201. We will confirm we received it within 10 business days and respond within 45 days. We may need to verify your identity first, usually by confirming the email or phone number you used with us. You can also have an authorized agent contact us for you.

How long we keep it

Contact messages stay in our email for as long as we need them to help you, then are deleted. Google Analytics keeps detailed event data for no more than 14 months. Meta keeps Pixel data under its own policy. SpotOn keeps ordering and rewards records under its own policy for as long as your account is active.

Children

This site is for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children. If you think a child has sent us information, email us and we will delete it.

Security

The site is served only over HTTPS and we limit who can see the messages you send. No method of sending or storing data is perfectly secure, but we take reasonable steps to protect what you share with us.

Changes

If we change how we handle information, we will update this page and the date at the top. See also our accessibility statement.