Privacy Policy

Last updated: January 1, 2026

ThriveBreak ("ThriveBreak," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit thrivebreak.com, contact us, or use our vending services.

1. Information We Collect

Information you provide to us

When you fill out a contact form, feedback form, or sign a Location Agreement, we may collect:

• Your name
• Your email address
• Your phone number
• Your company or organization name
• Your business address (location of the machine)
• The type and size of your facility (office, warehouse, number of employees)
• Any message or feedback you choose to send us

Information collected automatically

When you visit our website, we may collect:

• IP address and approximate geographic location
• Browser type and version
• Device type
• Pages visited and time spent
• Referring website

Information from the vending machines

Our vending machines collect anonymous transaction data: what products were purchased, at what price, and at what time. This data is used for inventory forecasting and service reporting.

We do not collect personal identifying information from employees who use the machines. The machine processes card and mobile payments through a PCI-compliant third-party payment processor (see Section 4). We do not store card numbers or payment credentials.

2. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and schedule appointments.
• Send service reports to Client partners.
• Process payments and manage the service.
• Operate, maintain, and forecast inventory for the vending machines.
• Improve our website, services, and product mix.
• Comply with legal obligations.
• Send service-related updates and, if you opt in, occasional marketing communication.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

3. Legal Basis for Processing

We process personal data based on:

• Contract: To provide the vending services you have agreed to receive.
• Legitimate interest: To respond to inquiries, improve our services, and prevent fraud.
• Consent: For optional communications such as marketing emails (you can opt out at any time).
• Legal obligation: To comply with tax, sales tax, and other applicable laws.

4. Third-Party Service Providers

We share data with a limited set of trusted service providers that help us operate the business:

• Formspree - processes contact and feedback forms submitted through our website.
• Cloudinary - hosts images used on our website.
• Our hosting provider - stores the website and database.
• Our payment processor - processes card and mobile payments at the vending machine (PCI-compliant).
• Our email service provider - sends service notifications and reports to Clients.

These providers only access the data necessary to perform their services and are contractually obligated to protect it.

5. Cookies and Tracking

Our website uses minimal cookies and similar technologies. We may use:

• Functional cookies - to remember your language preference (English or Spanish).
• Analytics cookies - if we enable website analytics, to understand how visitors use the site.

You can disable cookies in your browser settings. Doing so may affect some site functionality (such as language preference).

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy:

• Contact form submissions: up to 24 months, or until you request deletion.
• Client agreements and service records: 7 years, as required by tax law.
• Anonymous machine transaction data: retained indefinitely for forecasting purposes.

7. Your Rights

Depending on your jurisdiction (including New Jersey and, if applicable, California, the EU, or the UK), you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information (subject to legal retention requirements).
• Object to or restrict certain processing.
• Opt out of marketing communications at any time.
• Request a portable copy of your data.

To exercise any of these rights, email us at hello@thrivebreak.com. We will respond within 30 days.

8. Data Security

We use reasonable technical and organizational measures to protect personal information, including:

• HTTPS encryption on our website.
• Access controls on internal systems.
• PCI-compliant payment processing (we do not store payment credentials).
• Regular review of third-party providers.

No system is 100% secure. If we become aware of a data breach affecting your personal information, we will notify you as required by law.

9. Children's Privacy

Our services are intended for businesses, not children. We do not knowingly collect personal information from anyone under the age of 13. If you believe we have collected information from a child, please contact us and we will delete it.

10. International Transfers

Our operations are based in the United States. If you access our website from outside the US, your information will be transferred to and processed in the US. By using the site, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be communicated by email to active Clients and by a notice on this page.

12. Contact Us

Questions about this Privacy Policy or your personal data?

• Email: hello@thrivebreak.com
• Phone: (908) 560-4646
• Piscataway, New Jersey, USA