Privacy Policy

Who we are

Sugar Pills Vending provides workplace micromarkets, office coffee service, and vending machines to businesses in Southern and Central Utah. You can reach us at (435) 229-4567.

What this website collects

Nothing, directly. To be specific about it:

• No cookies. This site does not set any.
• No analytics. There is no Google Analytics, no Meta pixel, no Hotjar, and no equivalent on any page.
• No third-party embeds or fonts. Typefaces are served from this site, not from a font network, so no external service is told that you visited.
• No account, no login, no advertising identifiers.

The contact form

The contact form runs entirely in your browser. When you submit it, the page assembles what you typed into a pre-filled email and opens it in your own email program. It is not posted to a server. Nothing reaches us until you choose to send that email yourself, and at that point the information travels through your email provider under their terms, not ours.

If you do send it, we receive what you chose to include: typically your name, email address, and whatever you wrote, plus your company and phone number if you filled those in. We use it to reply to you and to quote the work. We do not sell it, rent it, or pass it to anyone for marketing.

The form also contains two hidden fields that a person never sees. They exist only to catch automated spam. If they are filled in, the submission is ignored.

Hosting and server logs

This site is hosted on Cloudflare Pages. Like essentially every web host, Cloudflare processes standard technical request data (such as IP address, browser type, and the page requested) in order to serve the site and protect it from attack. That processing is Cloudflare's, governed by their own privacy terms, and we do not build profiles from it or receive it as a marketing dataset.

Information from being a customer

This policy covers the website. If you become a customer, we hold ordinary business records: contacts, service addresses, agreements, invoices, and service history. We keep those for as long as the relationship and our legal and tax obligations require, and we do not sell them.

Our staff and business apps

Separate from this website, the people who work for and with Sugar Pills Vending (owners, employees and contractors) use a few internal apps: an operations app for route reports, stock counts and receipts, and a mileage log for business driving. This section covers what those apps collect. Customers and website visitors never use them.

• Sign in with Google. If you sign in with Google, we receive your name, email address and Google account ID, and nothing else. We never see your Google password, and we do not ask for access to your Gmail, Drive, contacts or calendar.
• Mileage. If you turn on location sharing in the OwnTracks app, your phone sends its location to our own server so your drives can be logged as trips. That log is the mileage record the IRS requires for business driving. You mark each trip as business or personal, and you can stop sharing at any time in the app or in your phone's settings.
• Receipts and reports. Photos of receipts, route reports, stock counts and the notes you type are kept as business records. Nothing reads them automatically; a person checks each one.
• Company bank and card activity. We read the business checking account and company cards (including cards issued in a staff member's name) through a read-only bank connection to keep the books. That connection cannot move money.

Where it lives and who sees it. This information is stored on equipment we own in Utah, with encrypted backups in our own Google Workspace account. Only you and the owners of Sugar Pills Vending can see it. We do not sell it, share it with advertisers, or use it to train AI models.

How long we keep it. Business records, including mileage logs, receipts and trip details, are kept as long as tax law requires, typically up to seven years. Trips you mark as personal can be deleted on request. If you stop working with us, your sign-in is turned off and location sharing ends.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect information from children.

Your choices

Because the site collects nothing, there is nothing here to opt out of. If you have emailed, become a customer, or use one of our staff apps and want to know what we hold, or want it corrected or deleted, call (435) 229-4567 and ask. We will tell you honestly and act on it where we are able to.

Changes

If this policy changes, the date at the top changes with it. If the site ever starts using analytics or a server-side form, this page will say so before that goes live, not after.

This policy describes how the site actually behaves today. It is written in plain language rather than legal language, and it is not legal advice.