Legal

Privacy & Security Policy

Last updated: June 2026

King of Shawarma & Kabab (“we,” “us,” or “our”) respects your privacy. This policy explains what information we collect when you use our website and online ordering service, how we use it, who we share it with, and how we protect it.

Information We Collect

We collect only what we need to take and fulfill your orders:

• Contact details — your name, email address, and phone number.
• Order information — the items you order, special instructions, pickup or delivery selection, and order history.
• Delivery address — collected only when you choose delivery, and shared with our delivery partner to complete the delivery.
• Account information — if you create an account, your login credentials (stored securely) and saved preferences or addresses.
• Payment information — handled entirely by our payment processor (Square). We do not collect or store your full card number, CVV, or expiration date.

How We Use Your Information

• To process, prepare, and fulfill your orders.
• To send transactional messages such as order confirmations and status updates.
• To arrange delivery through our courier partner when you select delivery.
• To operate our rewards program, if you participate.
• To send marketing emails and/or texts only if you have separately opted in to that specific channel.
• To protect against fraud and keep the Service secure.

Payment Security

All card payments are processed by Square, a PCI-DSS Level 1 compliant payment provider. Your card details are entered into a secure, encrypted field hosted by Square and are transmitted directly to Square. Your full card number never touches or is stored on our servers. This means even in the unlikely event of a breach of our systems, your card data is not exposed through us.

How We Share Information

We share information only as needed to run the Service, and never sell your personal information. Specifically:

• Square — to process payments securely.
• DoorDash Drive — for delivery orders, we share your name, delivery address, and phone number so a courier can complete your delivery.
• SendGrid / Twilio — to deliver order & delivery notifications and, where you have separately opted in, marketing communications, by email and/or text.
• Service providers that host our website and database under confidentiality obligations.
• Legal requirements — if required by law or to protect our rights, customers, or staff.

Text Message (SMS) Consent

We offer two separate, optional text message programs, and we collect a separate opt-in for each — you may join either, both, or neither, and consent to either is never a condition of any purchase:

• Order & delivery notifications — automated texts about an order you place, such as order received, accepted, and ready, plus live delivery tracking. Typically a few messages per order.
• Marketing & promotions — recurring automated texts with deals, discounts, and event announcements. Message frequency varies. You opt in to this separately from order notifications.

For both programs, message and data rates may apply. Reply STOP to any message to opt out of that program, reply HELP for help, or call (210) 719-1335.

We do not sell, rent, or share your mobile phone number or SMS opt-in information with any third parties or affiliates for their own marketing or promotional purposes. Your phone number is shared only with the service providers that help us send our own messages and fulfill your order — for example, our SMS provider (Twilio) and, for delivery orders, our delivery courier — and only for those purposes. No mobile opt-in data is shared with anyone for marketing.

Email Communications

Order-related emails are sent as part of providing the Service. Marketing emails are sent only with your opt-in and include an unsubscribe link in every message. You can also manage preferences from your account or by contacting us.

Data Retention

We keep order and account information for as long as needed to provide the Service, comply with legal and tax obligations, resolve disputes, and enforce our agreements. You may request deletion of your account information by contacting us (some records may be retained where required by law).

Your Choices & Rights

• Opt out of marketing emails (unsubscribe link) or texts (reply STOP) at any time.
• Access, update, or request deletion of your personal information by contacting us.
• Decline to provide certain information, though this may limit your ability to order.

How We Protect Your Information

We apply practical, layered security measures appropriate to a small business handling customer orders:

• Encryption in transit — the entire site is served over HTTPS, so data moving between your device and us is encrypted.
• Payment isolation — card data is handled by Square in a secure hosted field and never stored by us.
• Access controls — administrative and staff areas are protected by authentication, and sensitive credentials are stored securely and never exposed in the website.
• Least-data principle — we collect only what is necessary to fulfill orders.
• Trusted processors — payments, messaging, and delivery are handled by established, security-reviewed providers.

No method of transmission or storage is completely secure, but we work to protect your information and to limit what is collected and retained.

Children’s Privacy

The Service is intended for adults able to place food orders. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

Changes to This Policy

We may update this policy periodically. The “Last updated” date above reflects the most recent version. Material changes will be reflected here.

Contact Us

For privacy questions or requests, call (210) 719-1335 or visit 8719 Wurzbach Rd, San Antonio, TX 78240.