Privacy notice

Last updated 18 September 2026

This site collects what you type into one of its two forms: the "Join the crew" mailing list, or the contact form. It also counts page views through a cookieless analytics tool, and Cloudflare, which hosts it, keeps the short-lived technical and security logs any web host keeps. Nothing here is sold or handed to advertisers.

Who runs this site

This site is owned and operated by Papa Juan's Baja Grill & Bar,8942 Tampa Ave, Northridge, CA 91324, which is responsible for it and for the information collected through it. Its web team, Vamos Viral Media, builds and hosts the site for the restaurant as a service provider: signups and enquiries submitted here are delivered to that team, who look after them for the restaurant and pass enquiries on.

What is collected, and when

The "Join the crew" signup form

Only when you submit it, and only these fields:

• your first name;
• your email address;
• your phone number, if you choose to give one;
• the fact that you ticked the consent box, and the date and time you ticked it;
• your browser's user agent string, and a one-way hash of your IP address;
• the exact wording of the consent box you ticked, so there is a record of what you agreed to.

The hashed address exists to stop the form being flooded: the same connection is limited to five submissions an hour. It is a SHA-256 hash with a fixed salt, stored instead of the address itself, and it is not used to identify or profile anyone. It is saved alongside your signup and kept for as long as the signup is.

No text messages. This site does not send marketing texts. A phone number is only used if someone needs to reach you about your signup or enquiry.

The contact form

Only when you submit it, and only these fields: your name, your email address, your phone number if you give one, which kind of enquiry it is, the event date and party size if you fill them in, and your message. The same user agent string and hashed address are stored, for the same anti-flood reason and under the same five an hour limit.

A contact message is not a mailing list signup. It is kept separately, it carries no marketing consent, and sending one does not add you to any list.

What it is used for

Signup details are used to email you news about specials and events at Papa Juan's Northridge. Contact-form details are used to answer your enquiry and to arrange the catering, party or event you asked about. Those are the only purposes. Your details are not sold, rented, traded or handed to advertisers, and a contact message is never added to the mailing list.

Cookies, analytics and tracking

The public site sets no cookies, stores nothing on your device and loads no advertising or social tracking pixels. There is no consent banner because there is nothing stored on your device to consent to. The only cookie anywhere on this domain is a sign-in cookie for the restaurant's staff on the events admin page, which visitors never reach.

It does count page views, using Cloudflare Web Analytics. That tool is cookieless: it does not fingerprint your device, does not follow you between sites, and produces aggregate counts rather than a profile of you. It is the only third-party script the site loads.

Cloudflare also asks your browser to report connection failures to it (Network Error Logging), which it uses to keep the site reachable, and keeps standard request logs for security. Neither is used to profile you.

Because this site does not track you across other websites and does not sell or share anything about you, every visit is already treated as if a Do Not Track or Global Privacy Control signal were switched on, whether or not your browser sends one.

The site ships a small amount of JavaScript of its own, for the menu tabs, the specials slider, the photo viewer and the contact form. None of it tracks you or sends anything anywhere; every page works with JavaScript switched off.

Who else sees it

• Vamos Viral Media, the restaurant's web team, receives signups and enquiries and manages the list on the restaurant's behalf, as a service provider.
• Cloudflare hosts the site and the database that holds the signup list.
• Resend delivers the notification email announcing a new signup or contact message, when that notification is switched on.

All three act only on the restaurant's instructions. No one else receives the list.

How long it is kept

Mailing-list details: until you ask for them to be removed, or until the list is closed. Contact messages: kept while your enquiry is open and for up to 24 months afterwards, so the restaurant can look up what was agreed, and deleted automatically after that. You can ask for either to be deleted sooner at any time. The separate anti-flood log is deleted automatically after an hour; the hashed address saved with a signup or message is deleted with it.

Your choices

You can leave the mailing list at any time on the unsubscribe page, or from the link in any email you receive. Your address is then kept only as a record that you asked not to be emailed, so it cannot be added back by mistake. You can also ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted, by calling (818) 626-9413, asking at the restaurant, or sending a message through the contact form. The restaurant's web team carries out these requests for it. These requests are honoured for everyone, whether or not a privacy law requires it for a business of this size, and making one will never cost you anything or change how you are treated.

This site is not directed at children under 13 and does not knowingly collect their information.

Changes

If what the site collects changes, this page changes with it and the date at the top moves.

Reaching us about this notice

Call (818) 626-9413 or visit 8942 Tampa Ave, Northridge, CA 91324.