Privacy policy

Last Updated: September 16, 2026

PALM AND SOIL LLC, doing business as Mom & Pop San Diego (“Mom & Pop San Diego,” “we,” “us,” or “our”), respects your privacy.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit mompopsd.com, interact with our direct-mail or digital campaigns, claim or redeem promotional offers, use digital wallet passes or redemption tools, contact us, or otherwise use services operated by Mom & Pop San Diego (collectively, the “Services”).

This Privacy Policy applies to information collected through the Services. It does not govern the independent privacy practices of participating merchants or other third parties.

By using the Services, you acknowledge the practices described in this Privacy Policy. Where consent is required by law, we will request it separately.

1. Who We Are

Mom & Pop San Diego is a local discovery and promotional platform operated by:

PALM AND SOIL LLC
Doing business as Mom & Pop San Diego

Email: hello@mompopsd.com

Mailing Address:

PO Box 9291
Rancho Santa Fe, CA 92067
United States

Mom & Pop San Diego may feature participating restaurants, cafés, retailers, service providers, and other businesses through our website, direct-mail publications, QR codes, digital coupons, wallet passes, and related promotional channels.

Participating merchants are independent businesses. A merchant’s collection or use of information outside the Mom & Pop San Diego Services is governed by that merchant’s own privacy practices.

2. Information We Collect

The information we collect depends on how you interact with the Services.

A. Information You Provide Directly

We may collect information you voluntarily provide, including:

mobile telephone number;
email address;
name, if you choose to provide it;
information you submit when contacting customer support;
information you provide when reporting a problem with an offer or merchant;
communications and correspondence with us;
preferences you provide to us;
information submitted through forms, surveys, promotions, or similar features; and
business contact information if you contact us on behalf of a merchant, advertiser, sponsor, or prospective business partner.

We do not require consumers to provide payment-card information merely to browse, claim, save, or redeem ordinary promotional offers unless a particular future Service expressly states otherwise.

B. Offer, Claim, and Redemption Information

When you interact with an offer, we may collect information such as:

the offer viewed, claimed, saved, or redeemed;
date and time of the interaction;
claim status;
redemption status;
unique coupon, pass, claim, or redemption identifier;
campaign, edition, neighborhood, or source associated with the offer;
whether an offer has previously been claimed or redeemed;
information necessary to enforce one-per-customer or similar restrictions;
wallet-pass issuance, installation, update, or status information made available to us by a wallet or pass provider; and
fraud-prevention or abuse-prevention signals associated with the claim or redemption.

We may associate this information with a verified phone number, email address, browser session, account, or other identifier where reasonably necessary to operate the offer and prevent duplicate or fraudulent use.

C. Information Collected Automatically

When you use the Services, we and our service providers may automatically collect certain technical and usage information, including:

Internet Protocol (IP) address;
browser type and version;
device type;
operating system;
language or general device settings;
referring page or source;
pages, offers, and features viewed;
links or buttons selected;
timestamps;
session information;
cookie and similar-technology identifiers;
general interaction and performance data;
error and diagnostic information;
campaign-source information, including information indicating that a visit originated from a particular QR code, mailer, edition, or promotional campaign; and
approximate location, such as city or region, if derived from an IP address or provided by an analytics service.

We do not intend to collect precise GPS location through the ordinary consumer Services unless we provide additional notice and, where required, obtain consent.

D. Information From Third Parties

We may receive information from third parties that help operate the Services, including:

website hosting and infrastructure providers;
digital-wallet and pass providers;
SMS or email verification providers;
analytics providers;
security and fraud-prevention providers;
participating merchants when they report or confirm an offer-related issue;
communications providers; and
referral or campaign partners.

The information we receive is limited to what the third party is permitted to provide to us and what is reasonably relevant to operating the Services.

3. Information We Do Not Intentionally Collect

Through the ordinary consumer Services, we do not intend to request or collect:

Social Security numbers;
driver’s license or passport numbers;
financial-account passwords or credentials;
biometric identifiers used to identify a person;
medical records or health diagnoses;
precise geolocation;
racial or ethnic origin;
religious or philosophical beliefs;
union membership;
genetic information; or
information concerning a person’s sex life or sexual orientation.

Please do not send us sensitive personal information that we have not requested.

If a future feature requires information materially different from the categories described in this Privacy Policy, we will provide additional notice where appropriate.

4. How We Use Personal Information

We may use personal information for the following purposes:

A. Provide and Operate the Services

To:

display and deliver offers;
verify users where verification is required;
issue coupons or digital wallet passes;
enable claims and redemptions;
determine whether an offer has already been claimed or redeemed;
maintain offer status;
provide confirmations and service-related communications; and
respond to questions or support requests.

B. Prevent Fraud and Enforce Offer Limits

To:

prevent duplicate claims or redemptions;
enforce one-per-customer and similar restrictions;
identify suspicious or automated activity;
detect manipulation of coupons, identifiers, or wallet passes;
protect participating merchants and consumers; and
investigate potential violations of our Terms of Service.

C. Measure and Improve the Services

To:

understand how consumers interact with offers;
measure views, claims, saves, and redemptions;
determine which campaigns or mailers generate engagement;
improve website performance and usability;
develop and improve features;
troubleshoot technical problems; and
create aggregated or de-identified reporting.

D. Communicate With You

To:

send verification codes;
deliver requested offers;
provide claim or redemption confirmations;
send security or service notices;
respond to inquiries; and
send promotional email or text messages only where permitted by applicable law and, when required, with appropriate consent.

E. Operate and Protect Our Business

To:

maintain records;
enforce agreements;
protect our rights and property;
secure our systems;
detect and investigate misuse;
comply with legal obligations;
respond to lawful government requests; and
establish, exercise, or defend legal claims.

5. How We Share Personal Information

We do not disclose personal information indiscriminately. We may disclose information in the following circumstances.

A. Service Providers and Contractors

We may disclose information to companies that perform services for us, such as:

website hosting;
cloud infrastructure;
analytics;
digital-wallet or pass issuance;
SMS and email delivery;
user verification;
customer support;
cybersecurity;
fraud prevention;
database and software services; and
professional services.

These providers may process personal information only as permitted by their agreements with us and applicable law.

B. Participating Merchants

We may provide the applicable participating merchant with limited information reasonably necessary to administer, validate, troubleshoot, or report on that merchant’s offer.

Depending on the offer, this may include:

whether an offer was validly claimed;
whether it was redeemed;
a unique claim or redemption identifier;
the date or time of redemption; or
information necessary to resolve a redemption dispute.

We do not provide your phone number or email address to participating merchants for their independent marketing merely because you claimed or redeemed an offer. If we ever offer a feature through which you may choose to provide contact information directly to a merchant, we will make that choice clear.

C. Aggregated or De-Identified Information

We may provide merchants, sponsors, advertisers, or other business partners with aggregated or de-identified information, such as:

number of offer views;
number of claims;
number of wallet saves;
number of redemptions;
general campaign performance; or
other statistics that are not reasonably intended to identify an individual consumer.

We may use and disclose properly aggregated or de-identified information for legitimate business purposes.

D. Legal, Safety, and Security Reasons

We may disclose information if we reasonably believe disclosure is necessary to:

comply with law, regulation, subpoena, court order, or lawful process;
respond to a valid government request;
protect the rights, property, or safety of Mom & Pop San Diego, participating merchants, users, or others;
detect or investigate fraud, abuse, security incidents, or illegal activity; or
establish, exercise, or defend legal claims.

E. Business Transfers

If PALM AND SOIL LLC or the Mom & Pop San Diego business is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

F. At Your Direction or With Your Consent

We may disclose information when you direct us to do so or provide consent.

6. Sale and Sharing of Personal Information

Mom & Pop San Diego does not sell personal information for money.

We also do not currently use personal information for cross-context behavioral advertising in a manner we understand to constitute “sharing” under the California Consumer Privacy Act (“CCPA”).

We do not rent or sell lists of consumer phone numbers or email addresses to participating merchants, sponsors, advertisers, data brokers, or other third parties.

If our practices materially change, we will update this Privacy Policy and provide any notices, opt-out mechanisms, or other choices required by applicable law.

7. Cookies and Similar Technologies

We and our service providers may use cookies, local storage, pixels, tags, session identifiers, and similar technologies to operate and understand the Services.

These technologies may be used to:

keep the website functioning;
maintain a session;
remember basic preferences;
measure traffic and engagement;
identify the source of a visit;
understand which offers are viewed or claimed;
prevent fraud or duplicate claims;
improve performance; and
diagnose errors.

Some browser settings allow you to block or delete cookies. Doing so may affect certain features, including offer claiming, login or verification status, fraud-prevention controls, or other functionality that depends on a browser session.

Do Not Track

Some browsers offer a “Do Not Track” (“DNT”) signal. Because there is not a single universally adopted standard governing how websites should respond to DNT signals, our Services do not currently respond to DNT signals solely because they are received.

Global Privacy Control

Where applicable law requires us to honor a recognized browser-based universal opt-out mechanism, such as the Global Privacy Control (“GPC”), we will process that signal as required by law.

8. Digital Wallets and Third-Party Platforms

If you choose to save an offer to Apple Wallet, Google Wallet, or another wallet or pass platform, information may be processed by the applicable third-party provider under its own privacy policy and terms.

Depending on the provider and configuration, we may receive limited information about:

pass creation;
installation;
pass status;
device or operating-system category;
pass updates;
redemption status; or
other technical events associated with the pass.

We do not control the independent data practices of Apple, Google, wallet providers, or other third-party platforms.

9. SMS and Email Communications

Transactional Communications

If you provide a phone number or email address to obtain a verification code, claim an offer, receive a pass, complete a redemption, or request support, we may use that contact information for communications reasonably related to that interaction.

For example, we may send:

one-time verification codes;
requested offer links;
security notices;
claim confirmations;
redemption confirmations; and
important service-related notices.

Marketing Communications

Providing a phone number for verification does not by itself constitute consent to receive marketing text messages.

If we offer promotional text-message marketing that requires consent, we will request that consent separately.

You may unsubscribe from marketing emails by using the unsubscribe mechanism included in those messages or by contacting us.

Stopping marketing messages does not prevent us from sending non-promotional communications that are reasonably necessary to provide a Service you requested, maintain security, or comply with law.

Standard message and data rates may apply to SMS messages.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to operate offers, prevent fraud, resolve disputes, maintain security, satisfy legal obligations, and enforce our agreements.

Our retention criteria generally include:

Contact and verification information: retained for as long as reasonably necessary to provide the requested Service and for a reasonable period afterward for security, anti-fraud, and dispute-resolution purposes.
Offer claim and redemption records: retained for the life of the applicable offer and for a reasonable period afterward to prevent duplicate redemption, measure campaign performance, resolve disputes, and maintain business records.
Technical and security logs: retained for a reasonable period based on security, fraud-prevention, troubleshooting, and operational needs.
Marketing information: retained while you remain subscribed. We may retain a limited suppression record after an opt-out so that we can continue honoring your request.
Support and legal records: retained for as long as reasonably necessary to resolve the matter and satisfy applicable legal or recordkeeping obligations.

When information is no longer reasonably needed, we may delete it, de-identify it, aggregate it, or allow it to be overwritten in accordance with our ordinary systems and backup practices.

Even after a deletion request is honored, we may retain limited information where permitted by law, including a hashed identifier, suppression record, redemption record, or fraud-prevention record necessary to prevent abuse, enforce one-per-customer restrictions, document compliance with your request, protect security, or establish or defend legal claims.

Information maintained in backups may remain for a limited period until those backups are overwritten or otherwise deleted in the ordinary course.

11. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include access controls, authentication, secure communications, service-provider controls, monitoring, and other safeguards appropriate to the nature of the information we process.

No website, network, database, or method of electronic transmission is completely secure. We therefore cannot guarantee absolute security.

If you believe your information or an offer associated with you has been compromised, please contact us at hello@mompopsd.com.

12. Your Privacy Choices and Rights

Depending on where you live and applicable law, you may have rights concerning your personal information.

Even where a particular privacy law does not require us to provide a specific right, we may choose to honor reasonable requests when we can verify the request and doing so would not compromise another person’s rights, security, fraud prevention, or our legal obligations.

You may contact us to request that we:

provide information about personal information we maintain about you;
correct inaccurate information;
delete certain personal information;
stop sending marketing communications; or
answer questions about our privacy practices.

Requests may be sent to:

hello@mompopsd.com

Please use the subject line:

PRIVACY REQUEST

We may need to verify your identity before completing a request. Verification may involve confirming information reasonably related to your prior interactions with the Services.

We will not discriminate against you for exercising privacy rights provided by applicable law.

Some requests may be limited or denied where permitted by law, including where information is reasonably necessary to:

complete a requested transaction or Service;
maintain security;
prevent fraud or duplicate redemption;
comply with law;
exercise or defend legal claims;
maintain required business records;
protect another person’s rights; or
comply with another legally recognized exception.

13. California Privacy Rights

California residents may have additional rights under California privacy laws.

A. California Online Privacy Protection Act

This Privacy Policy is intended to disclose the categories of personal information we collect, how we use it, categories of third parties with whom information may be disclosed, our online-tracking practices, and methods for contacting us regarding personal information.

B. California Consumer Privacy Act

The CCPA applies only to businesses that satisfy statutory applicability requirements.

If and to the extent the CCPA applies to Mom & Pop San Diego, eligible California residents may have rights that include:

the right to know or access categories and specific pieces of personal information;
the right to know categories of sources and purposes for processing;
the right to know categories of third parties to whom information is disclosed;
the right to request deletion, subject to exceptions;
the right to request correction of inaccurate personal information;
the right to opt out of the sale or sharing of personal information;
the right to limit certain uses and disclosures of sensitive personal information where applicable; and
the right not to receive discriminatory treatment for exercising CCPA rights.

As described above, we do not sell personal information for money and do not currently use personal information for cross-context behavioral advertising in a manner we understand to constitute CCPA “sharing.”

If those practices change and the CCPA applies, we will provide the notices and opt-out mechanisms required by law.

C. Authorized Agents

Where permitted by applicable law, you may use an authorized agent to submit a privacy request on your behalf. We may require evidence that the agent is authorized to act for you and may independently verify your identity where permitted.

D. Financial Incentives

We do not currently offer financial incentives or price differences in exchange for the collection, sale, or sharing of personal information as those concepts are defined by the CCPA.

14. Children’s Privacy

The Services are intended for a general audience and are not directed to children under 13.

We do not knowingly collect personal information online from children under 13 without legally required parental consent.

If you believe a child under 13 has provided personal information to us, please contact hello@mompopsd.com, and we will take appropriate steps to address the information.

15. Third-Party Websites and Participating Merchants

The Services may link to participating merchants, reservation providers, ordering services, maps, social-media platforms, wallet providers, or other third-party websites and services.

This Privacy Policy does not govern those third parties.

If you leave the Mom & Pop San Diego Services or provide information directly to a third party, that third party’s privacy policy and terms govern its collection and use of information.

We encourage you to review the privacy practices of third parties before providing them with personal information.

16. International Users

Mom & Pop San Diego is operated from the United States and is primarily intended to serve consumers and businesses in the San Diego, California area.

If you access the Services from outside the United States, your information may be processed and stored in the United States or other locations where our service providers operate.

By using the Services, you understand that privacy and data-protection laws in those locations may differ from those in your jurisdiction.

Where applicable law requires a particular mechanism for international data transfers, we will use an appropriate mechanism.

17. Business Contacts

If you communicate with us on behalf of a participating merchant, prospective merchant, advertiser, sponsor, vendor, contractor, or other business, we may collect your business contact information and communications.

We may use that information to:

respond to inquiries;
evaluate or manage the business relationship;
administer advertising or sponsorship arrangements;
provide reports or account information;
process business communications;
maintain business records; and
exercise or defend legal rights.

Business contact information may be disclosed to service providers, professional advisers, or other parties where reasonably necessary for these purposes.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, business practices, or legal obligations.

When we update the policy, we will revise the “Last Updated” date at the top.

If a change materially affects how we use personal information already collected, we will provide additional notice or obtain consent where required by applicable law.

We encourage you to review this Privacy Policy periodically.

19. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our privacy practices, contact: