Hula Mula U.S. Privacy Policy
Effective and last updated: July 17, 2026
Hula Mula, LLC (“Hula Mula,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with our United States operations.
This Privacy Policy applies when you:
Visit www.hulamula.com or another Hula Mula website that links to this Privacy Policy.
Subscribe to our newsletter or other communications.
Visit or make a purchase at a Hula Mula location.
Use our point-of-sale, online ordering, pickup, delivery, digital receipt, gift card, or payment services.
Participate in a Hula Mula loyalty, rewards, promotions, or points program.
Use a Hula Mula mobile application, if and when one becomes available.
Connect to guest Wi-Fi or otherwise interact with services that link to this Privacy Policy.
We refer to these collectively as the “Services.”
Personal Information We Collect
The personal information we collect depends on how you interact with us and which Services you use.
Information You Provide
We may collect:
Your name, email address, telephone number, postal address, billing address, or delivery address.
Account information, such as your username, password, account ID, and communication preferences.
Birthday information if you voluntarily provide it for birthday rewards or account personalization.
Newsletter and marketing preferences.
Order details, product selections, customizations, special instructions, pickup or delivery information, and transaction history.
Loyalty information, such as points earned, rewards, redemptions, account activity, membership status, and preferred Hula Mula location.
Gift card information, including gift card balances and transaction history.
Customer service requests, survey responses, reviews, feedback, contest entries, and other communications.
Information you voluntarily provide when participating in events, promotions, or other Hula Mula programs.
Please avoid providing sensitive medical information through general forms or order notes. If you voluntarily provide allergy or dietary information in connection with an order or customer service request, we will use it to respond to your request, support food safety, or fulfill your order. We do not use such information to infer medical conditions or for targeted advertising.
Transaction and Payment Information
When you make a purchase, we may collect information about:
The date, time, and location of the transaction.
Items purchased or considered.
Purchase amount, discounts, rewards, and promotions.
Payment method, card type, and limited card information, such as the last four digits.
Refunds, disputes, and transaction status.
Full payment card numbers and security codes are processed by Square or another authorized payment processor. Hula Mula does not ordinarily receive or store complete payment card numbers or security codes.
Information Collected Automatically
When you use our website, future mobile app, online ordering services, or digital communications, we may automatically collect:
IP address.
Browser and device type.
Operating system and language settings.
Device and online identifiers.
Referring website.
Pages viewed and features used.
Dates and times of visits.
Links, emails, or offers opened or selected.
App activity, crash information, diagnostics, and performance information.
Approximate location derived from an IP address.
Cookie and similar technology information.
Location Information
Our Services may collect approximate location information, such as a general location derived from your IP address.
If a future Hula Mula mobile app offers features such as finding a location, ordering for pickup, delivery, or location-based offers, the app may request permission to access your device’s precise location. Precise location information will only be collected when permitted through your device settings or otherwise authorized by you.
You can disable location access through your device settings. Some location-dependent features may not function properly if location access is disabled.
In-Store Information
Where used, Hula Mula locations may operate security cameras that collect video images for safety, security, loss prevention, incident investigation, and operational purposes. Hula Mula does not use security footage for facial recognition or targeted advertising.
If guest Wi-Fi is offered, Hula Mula or its Wi-Fi service provider may collect device, connection, usage, and technical information necessary to provide and secure the service. Additional terms may be displayed before you connect.
Sources of Personal Information
We may collect personal information:
Directly from you.
Automatically through our website, app, devices, cookies, and similar technologies.
From Square and other payment, ordering, delivery, loyalty, or technology providers.
From social media services when you choose to interact with us through those services.
From promotional partners when you participate in a jointly offered promotion.
From another person when they purchase a gift card or otherwise direct us to provide something to you.
From publicly available sources where permitted by law.
We may combine information from these sources to maintain your account, connect purchases with your loyalty membership, improve our Services, and personalize your experience.
How We Use Personal Information
We may use personal information to:
Provide, maintain, and improve our Services.
Process and fulfill orders, payments, refunds, pickup, and delivery.
Provide digital receipts and transaction notifications.
Create, maintain, secure, and authenticate customer accounts.
Operate loyalty, rewards, points, gift card, and promotional programs.
Calculate, issue, redeem, and manage points, rewards, offers, and benefits.
Remember favorites, preferences, previous purchases, and preferred locations.
Personalize menus, recommendations, communications, rewards, and offers.
Communicate about orders, accounts, rewards, program changes, and customer service requests.
Send marketing communications when permitted.
Request feedback and conduct surveys or research.
Analyze customer trends and understand how our Services are used.
Develop new menu items, services, features, and promotions.
Detect and prevent fraud, abuse, unauthorized access, and security incidents.
Enforce our terms, policies, and agreements.
Comply with legal, tax, accounting, recordkeeping, and regulatory obligations.
Protect the rights, safety, property, and security of Hula Mula, our customers, employees, and others.
Carry out other purposes disclosed at the time information is collected or with your consent.
Personalization and Customer Profiles
We may use your purchase history, loyalty activity, selected favorites, account preferences, and interactions with our Services to understand your likely interests and personalize your Hula Mula experience.
For example, we may:
Recommend products based on previous purchases.
Remind you about available points or rewards.
Provide offers based on your preferred products or location.
Customize the content displayed in a future app.
Limit communications that are not relevant to you.
We do not use sensitive personal information to infer health conditions or other sensitive characteristics for advertising. We do not use automated decision-making to make decisions that produce legal or similarly significant effects concerning customers.
Newsletter and Email Marketing
When you subscribe to our newsletter or otherwise agree to receive marketing communications, we may send opening information, menu updates, promotions, rewards information, special offers, events, and other Hula Mula news.
You may unsubscribe at any time using the unsubscribe link in any marketing email.
Providing an email address solely for a digital receipt, transaction, or customer service request does not by itself subscribe you to Hula Mula marketing emails. After unsubscribing, you may still receive necessary transactional communications about purchases, orders, accounts, rewards, safety notices, or requests you submit.
Text Messages
If Hula Mula offers marketing text messages in the future, we will obtain any consent required by applicable law through a separate disclosure at the point of enrollment.
Consent to marketing text messages will not be a condition of making a purchase. Message and data rates may apply, and customers will be able to opt out by replying STOP or by following the instructions provided with the message.
This Privacy Policy alone does not constitute consent to receive automated marketing text messages.
Push Notifications and In-App Messages
A future Hula Mula app may request permission to send push notifications or display in-app messages about orders, account activity, rewards, products, or promotions.
You can manage push notifications through the app or your device settings. Disabling promotional notifications will not necessarily disable transactional messages required to operate the Services.
Squarespace
Our website is hosted by Squarespace. Squarespace provides website hosting, security, forms, mailing-list storage, analytics, cookies, and related services.
When you visit our website or submit information through a form, Squarespace may process information such as your IP address, browser and device information, website activity, cookies, and information entered into the form.
Squarespace’s privacy practices are described at:
https://www.squarespace.com/privacy
Square
We use Square for point-of-sale, payment processing, Customer Directory, digital receipts, online ordering, gift cards, loyalty, marketing, and other business services, as applicable.
When you transact with us or use Square-enabled features, Square may process:
Identification and contact information.
Payment and transaction information.
Items purchased and purchase history.
Billing, delivery, and pickup information.
Digital receipt and communication preferences.
Device, usage, IP address, and location information.
Loyalty and rewards activity.
Depending on the service, Square may process information on our behalf as a service provider or may process information for its own purposes under its own privacy notices.
Square’s notices are available at:
https://squareup.com/us/en/legal/general/privacy-no-account
For digital receipts, Square marketing, Square profiles, Square Pay, and other buyer features:
https://squareup.com/us/en/legal/general/buyer-features
Square privacy preferences may also be managed at:
Mobile Applications
If we offer a Hula Mula mobile app, the app may process information described in this Privacy Policy to provide account, ordering, payment, loyalty, personalization, location, communication, security, analytics, and customer support features.
Depending on the features you choose, the app may request access to:
Location services.
Camera access for scanning a loyalty or QR code.
Push notifications.
Device identifiers and diagnostic information.
Permissions can generally be managed through your device settings. We will not access device features that require permission unless permission is requested through the operating system or otherwise provided by you.
Before launching or materially changing an app, we will update this Privacy Policy to reflect the app’s actual providers, software development kits, permissions, and data practices.
Loyalty, Rewards, and Promotional Programs
If Hula Mula offers a loyalty, points, rewards, or similar promotional program, participation will be voluntary.
We may collect and use contact, account, transaction, purchase history, preferences, rewards activity, and device information to:
Enroll and identify members.
Award, track, and redeem points and rewards.
Prevent fraud or misuse.
Send program and account communications.
Provide personalized rewards and offers.
Measure and improve the program.
Withdrawing from or deleting a loyalty account may result in the loss of unused points, rewards, account history, and benefits, subject to the applicable program terms.
Certain states may classify loyalty programs or discounts provided in exchange for personal information as financial incentive or bona fide loyalty programs. Where required, we will provide an additional notice and applicable program terms at enrollment describing the benefits, relevant information practices, and how to withdraw.
Cookies and Similar Technologies
Our website and future app may use:
Essential technologies required for security and functionality.
Preference technologies that remember selections.
Analytics technologies that help us understand performance and usage.
Advertising technologies, only if implemented and disclosed in accordance with applicable law.
These technologies may include cookies, pixels, software development kits, local storage, tags, and similar tools.
You can manage available choices through our cookie banner, browser settings, device settings, or other privacy controls we provide. Blocking essential technologies may prevent parts of the Services from functioning.
We may use Google reCAPTCHA to protect forms from spam and automated submissions. Google may process device and technical information under its own policies.
How We Disclose Personal Information
We may disclose personal information to:
Website, app, cloud hosting, payment, POS, loyalty, ordering, delivery, communication, analytics, customer support, security, and technology providers.
Payment networks, banks, and financial institutions needed to process transactions.
Delivery and fulfillment partners when requested by you.
Professional advisers, including accountants, insurers, attorneys, and auditors.
Promotional or business partners when you choose to participate in a jointly offered service or promotion.
Government authorities, courts, law enforcement, or other parties when required or permitted by law.
Parties involved in a potential or completed merger, acquisition, financing, restructuring, sale, or transfer of business assets.
Other parties at your direction or with your consent.
Service providers may access personal information only as reasonably necessary to provide their services, subject to their agreements and applicable law. Certain companies, such as Square, may also process information independently under their own privacy notices.
Advertising, Analytics, and Remarketing
We may use third-party advertising, analytics, and measurement technologies, including services provided by Meta Platforms, Inc. and Google LLC, such as the Meta Pixel, Google Analytics, Google Ads, and similar technologies.
These services may use cookies, pixels, tags, device identifiers, APIs, and similar technologies to collect information about how you interact with our website, future mobile application, advertisements, and other digital services. This information may include your IP address, approximate location, browser and device information, cookie or advertising identifiers, referring URLs, pages or products viewed, advertisements viewed or clicked, newsletter sign-ups, purchase events, transaction values, and other interactions with our services.
We and our advertising partners may use this information to analyze and improve our services, measure advertising performance, understand our audiences, create or exclude advertising audiences, limit how often advertisements are shown, and display advertisements that may be more relevant to your interests on third-party websites, applications, and platforms.
Where permitted by applicable law, we may also use contact information you provide, such as an email address or telephone number, in hashed or otherwise protected form to create, match, exclude, or measure advertising audiences. Where consent is required, we will obtain it before using this information for such purposes.
We do not sell personal information for money. However, the disclosure of personal information to advertising and analytics partners through cookies, pixels, audience-matching tools, or similar technologies may be considered a “sale,” “sharing,” or use for “targeted advertising” under certain U.S. state privacy laws.
Where required by applicable law, we will obtain consent before activating non-essential advertising technologies and provide users with a way to decline or opt out. You may manage these technologies through our cookie banner or any “Your Privacy Choices” link we make available. Your selection may apply only to the browser or device you are using, and clearing cookies may reset your selection.
We do not intentionally provide payment-card details, passwords, government-issued identification numbers, or sensitive dietary or allergy information to advertising partners for personalized advertising.
Meta and Google may process information in accordance with their own privacy policies:
Meta Privacy Policy: https://www.facebook.com/privacy/policy/
How Google uses information from sites and apps: https://policies.google.com/technologies/partner-sites
Aggregated and De-Identified Information
We may create aggregated or de-identified information that is not reasonably capable of being linked to an individual. We may use and disclose this information for analytics, research, operational, and business purposes as permitted by law. We will not attempt to re-identify information that applicable law requires us to maintain in de-identified form.
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
Provide the Services.
Maintain accounts and loyalty programs.
Complete transactions.
Comply with legal, tax, and accounting requirements.
Prevent fraud and abuse.
Resolve disputes.
Enforce agreements.
Marketing information is generally retained until you unsubscribe or request deletion. We may retain limited suppression-list information to ensure that your opt-out preference is honored.
Deletion of an account does not require us to delete information that must be retained for tax, accounting, fraud prevention, legal compliance, dispute resolution, or other lawful purposes.
Square, Squarespace, app platforms, and other independent providers may retain information according to their own policies.
Data Security
We maintain reasonable administrative, technical, and organizational measures designed to protect personal information against loss, misuse, unauthorized access, disclosure, or alteration.
However, no website, mobile application, transmission, or storage system can be guaranteed to be completely secure. Customers are responsible for protecting their account credentials and devices.
Your Privacy Choices and Rights
Depending on where you reside and applicable law, you may have the right to:
Confirm whether we process your personal information.
Access or obtain a copy of personal information.
Correct inaccurate personal information.
Request deletion of personal information.
Obtain certain information in a portable format.
Opt out of certain targeted advertising, sales, sharing, or profiling.
Withdraw consent where processing is based on consent.
Appeal a decision concerning a privacy request.
Use an authorized agent where permitted.
Exercise privacy rights without unlawful discrimination.
To exercise a right, email info@hulamula.com with the subject line “Privacy Request.” We may request information reasonably necessary to verify your identity and protect your account.
If we deny a request and applicable law provides an appeal right, you may appeal by replying to our decision and stating that you wish to appeal.
Account Deletion
Customers may request deletion of a Hula Mula account by contacting us at info@hulamula.com. If a future Hula Mula app permits account creation, we will also provide an account deletion method within the app and an accessible online deletion method.
Deleting an account may permanently remove associated preferences, points, rewards, and benefits. Certain transaction or legal records may be retained where permitted or required.
Do Not Track and Global Privacy Control
Some browsers offer a “Do Not Track” setting. Because there is currently no uniform industry standard for responding to Do Not Track signals, our website may not respond to those signals.
Where required by applicable law, we will recognize legally valid opt-out preference signals, such as Global Privacy Control. Because Hula Mula does not currently sell personal information or share it for targeted advertising, such a signal does not currently change our data practices.
Children’s Privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13.
Any future loyalty or app account will be intended for individuals aged 13 or older. Minors should use the Services only with the involvement and permission of a parent or legal guardian where required.
International Visitors
Hula Mula’s U.S. Services are operated from the United States. Personal information may be processed and stored in the United States or other countries where our providers operate.
Where required by applicable law, we will use appropriate safeguards for cross-border transfers.
This Privacy Policy applies to Hula Mula’s U.S. operations. If Hula Mula later offers an app, loyalty program, or other Services specifically to customers in the European Economic Area, United Kingdom, Switzerland, or other jurisdictions with additional requirements, we will provide any additional notices required before launching those Services.
Third-Party Services
Our Services may contain links to third-party websites, social media platforms, delivery services, or applications. Their privacy practices are governed by their own notices. Hula Mula is not responsible for the privacy practices of independent third parties.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our Services, technology, providers, or legal obligations.
We will post the revised version on this page and update the “Effective and last updated” date. Where required, we will provide additional notice or obtain consent before materially changing how previously collected personal information is used.
Contact Us
If you have questions, concerns, or privacy requests, contact:
Hula Mula, LLC
201 S Orange Ave, Suite 105
Orlando, FL 32801
United States
Email: info@hulamula.com