ORDER NOW rewards

Effective Date: September 7, 2026
Last Updated: September 7, 2026

Introduction

RSAT GROUP, LLC, a Florida limited liability company that operates Aberdeen Acai & Smoothie Shop in St. Johns, Florida ("Aberdeen", "we", "us", or "our"), respects your privacy. This Privacy Policy explains what information we collect through www.aberdeensmoothie.com and its related pages and forms (the "Website"), how we use and share that information, and the choices and rights you have.

This Privacy Policy is incorporated into and forms part of our Website Terms of Use at /terms-of-use/.

NOTICE OF DATA COLLECTION AND CONSENT. THIS WEBSITE USES COOKIES, PIXELS, TAGS, ANALYTICS SERVICES, AND SIMILAR TECHNOLOGIES THAT COLLECT AND RECORD INFORMATION ABOUT YOUR DEVICE AND YOUR INTERACTIONS WITH THIS WEBSITE. SOME OF THESE TECHNOLOGIES ARE PROVIDED BY THIRD PARTIES — INCLUDING GOOGLE AND META — AND INFORMATION ABOUT YOUR VISIT IS TRANSMITTED TO AND PROCESSED BY THOSE PROVIDERS AT THE TIME OF YOUR VISIT, WHEN THE PAGE LOADS. SECTION 3 DESCRIBES EACH TECHNOLOGY AND EACH PROVIDER. BY CONTINUING TO USE THIS WEBSITE, INCLUDING AFTER THE COOKIE NOTICE IS DISPLAYED TO YOU, YOU CONSENT TO THIS COLLECTION, RECORDING, TRANSMISSION, AND PROCESSING.

1. Scope of This Policy

This Privacy Policy applies to information we collect through the Website.

It does not apply to:

  • Information collected offline — in the shop, by telephone, or through channels other than the Website
  • Third-party websites, platforms, or services we link to but do not control, including the Toast online-ordering site where orders are placed, the TapMango rewards program site, the sharing pages of social networks, and our Instagram and Yelp pages

If you are a resident of California or another state with a comprehensive privacy law, see Section 9 for additional disclosures and rights.

2. Information We Collect

2a. Information You Provide

The Website has two forms. We collect only what you type into them:

  • Contact form (on the Contact page). Your name, email address, the subject of your message, and the message itself.
  • Newsletter sign-up (in the footer of every page, under "Stay in the Know"). Your name and email address.

The Website has no visitor accounts, takes no payments, and asks for no other personal information. Online orders are placed on Toast's website, not on the Website, and are governed by Toast's terms and privacy policy.

2b. Information Collected Automatically

When you visit the Website, we and the providers described in Section 3 automatically receive:

  • Your IP address and the approximate geographic location derived from it
  • Device type, operating system, browser type and version, screen size, and language settings
  • The referring URL, the pages you view, and the date, time, and duration of your visit
  • Clicks, scrolling, and other interaction events, including clicks on our ORDER NOW links
  • Cookie identifiers and similar browser identifiers

2c. Information From Third Parties

Google and Meta, whose analytics and advertising technologies run on the Website, may provide us with aggregated measurement data about visitors and, because we have enabled Google Analytics' demographics and interests reporting, inferred demographic and interest categories for our audience as a whole. We may also receive information from publicly available sources.

2d. Information We Do Not Intentionally Collect

The Website has no fields intended for passwords, payment card numbers, or government identification numbers, and we do not ask for them. Please do not enter sensitive personal information into any field of the Website.

3. Tracking Technologies We Use

This Section describes each category of tracking technology on the Website, what it collects, and which providers receive the information.

3a. Strictly Necessary and Security Technologies

These support the operation and security of the Website and run regardless of any choice you make:

  • Cookie notice. When you click OK on the cookie notice, the Website sets a first-party cookie named gwd_notice_ack so that the notice is not shown to you again. It expires after 365 days and contains nothing about you.
  • Cloudflare (Cloudflare, Inc.). All traffic to the Website passes through Cloudflare's network, which provides content delivery, DDoS protection, and security filtering. Cloudflare processes your IP address and request details to do so, and receives reports of network errors from your browser through its Network Error Logging feature.
  • Google reCAPTCHA (Google LLC). To protect our forms from automated abuse, Google reCAPTCHA version 3 loads on every page of the Website. It collects information about your browser and your interactions with the page and your IP address, transmits this to Google, and Google sets a cookie named _GRECAPTCHA on its own domain (google.com) to help distinguish people from automated traffic. Google's Privacy Policy and Terms of Service apply to this data. Google may use information collected through reCAPTCHA to improve reCAPTCHA and its other services; we do not characterize Google as a service provider that processes this information solely on our behalf.

3b. Analytics and Performance

We use analytics services to understand how visitors find and use the Website so we can improve it.

  • Google Analytics 4 (Google LLC), implemented through the MonsterInsights plugin (property G-H3J0MRE0XZ). It records pages viewed, referring sources, interaction events, approximate location, and device characteristics, and assigns identifiers to your browser in persistent cookies named _ga and _ga_H3J0MRE0XZ. We have enabled Google Analytics' demographics and interests reporting; with that setting, Google may associate information about your visit with the Google account of signed-in users who have Ads Personalization turned on, in order to produce demographic and interest reports.
  • Cloudflare Web Analytics (Cloudflare, Inc.). A measurement script that reports page loads and performance timings. It sets no cookies, stores nothing in your browser, and does not track you across websites.

What we do not use. The Website does not use Google Tag Manager, and it does not use session replay, heat-map, or user-experience recording tools such as Microsoft Clarity, Hotjar, FullStory, LogRocket, or Lucky Orange. The Website has no live chat or messaging feature (no Tawk.to, Intercom, Drift, Tidio, Crisp, or Facebook Messenger plugin), so no conversation with us is recorded by a chat provider.

3c. Advertising, Retargeting, and Conversion Measurement

We use advertising and measurement technologies that record your visit and certain actions, and transmit that information — which may include a hashed version of your email address or telephone number if you provide one — to advertising platforms. These platforms use the information to measure the effectiveness of our advertising, to show you our ads on other websites and apps, and to build audiences of people with characteristics similar to our visitors.

Providers currently used:

  • Google Ads (Google LLC). Google Ads conversion-tracking and remarketing tags (Google Ads account 11251628440) are loaded through our Google Analytics tag on every page. They record a conversion when you click an ORDER NOW link that takes you to Toast, set a cookie named _gcl_au, and, through Google's advertising domains (googleadservices.com and doubleclick.net), may add your browser to remarketing audiences that Google uses to show you our ads on Google services and partner sites. The doubleclick.net domain also sets a short-lived cookie named test_cookie to check whether your browser accepts cookies.
  • Meta Pixel (Meta Platforms, Inc.). The Meta Pixel (pixel 1091688666611905) records a page view on every page, sets a cookie named _fbp, and sends your IP address, browser information, and the page you are viewing to Meta. If you are logged in to Facebook or Instagram, Meta may associate this activity with your account. Meta uses the information to measure our advertising and to show our ads on Facebook and Instagram, and may also use it for its own purposes as described in Meta's Privacy Policy. We use the browser pixel only; we have not implemented Meta's server-side Conversions API.

Some of these disclosures may constitute a "sale" or "sharing" of personal information under California and other state privacy laws. See Section 9.

3d. Email and Marketing Communications

If you subscribe to our newsletter through the sign-up form in the footer, your name and email address are stored in our website database and emailed to us. We do not currently use an email marketing platform (such as Mailchimp, Klaviyo, or Constant Contact), and the Website does not associate your browsing activity with your email address. Any newsletter or promotional email we send will tell you how to unsubscribe. Messages you receive from Toast or TapMango after ordering or joining the rewards program come from those companies under their own policies.

3e. Embedded Third-Party Content

Pages load content hosted by third parties, which receive your IP address and the page you are viewing:

  • Google Fonts (Google LLC) — the typefaces used on every page are loaded from Google's font servers (fonts.googleapis.com and fonts.gstatic.com).
  • Font Awesome icons via cdnjs (Cloudflare, Inc.) — the icon font used on every page is loaded from Cloudflare's public content-delivery network.
  • Instagram Feed (Meta Platforms, Inc.) — the "Follow Us" section on the home page is designed to display our recent Instagram posts through the Instagram Feed plugin; when posts are displayed, the images are loaded from Instagram's servers.
  • Share buttons on blog posts — the Facebook, X (Twitter), and Pinterest buttons are ordinary links that open the sharing page of the selected network only when you click them; they load nothing from those networks beforehand.
  • Google Maps (Google LLC) — the Contact page embeds an interactive Google Map, which loads the Google Maps JavaScript API from maps.googleapis.com and maps.gstatic.com and transmits your IP address and the page you are viewing to Google. The address in the footer of every page also links to Google Maps, which opens on Google's site under Google's policies.

3f. Managing Your Choices

When you first visit, the Website displays a small cookie notice with links to this Policy and our Terms of Use. The notice informs you; it is not a preference center, and clicking OK does not change what the Website loads. The technologies described in this Section run when a page loads.

You can limit or block them through your browser and the platforms themselves:

You may also ask us to stop the "sharing" of your information for cross-context behavioral advertising as described in Section 9.

3g. Global Privacy Control and Do Not Track

The Website does not currently detect or respond to the Global Privacy Control (GPC) or Do Not Track browser signals; the technologies described in this Section load regardless of those signals. You can exercise the opt-out choices described in Section 3f and Section 9 instead.

4. How We Use Information

We use the information we collect to:

  • Operate, maintain, secure, and improve the Website
  • Respond to messages you send us through the contact form
  • Send the newsletter and special offers you sign up for, which you may opt out of at any time
  • Measure and improve the effectiveness of our advertising, including whether our ads lead to online orders
  • Analyze usage patterns, diagnose technical problems, and develop new features
  • Detect, investigate, and prevent fraud, abuse, security incidents, and unauthorized access
  • Establish, exercise, or defend legal claims
  • Comply with legal obligations and enforce our Terms of Use

5. How We Share Information

We do not sell your personal information for money.

We disclose information in the following circumstances:

  • Service providers. Third parties that perform functions on our behalf: website hosting (Cloudways, a DigitalOcean company, on servers in the United States); content delivery and security (Cloudflare, Inc.); transactional email delivery (SendGrid, a Twilio company), which carries the contact-form and newsletter notifications; and our website developer, Graphic Web Design, Inc., which maintains the Website, has administrative access to it, and receives a copy of contact-form and newsletter submissions so it can support us. These providers are restricted to processing information for the purposes we direct.
  • Analytics and advertising providers. Google (Analytics, Ads, reCAPTCHA, Fonts) and Meta (Pixel, Instagram) receive information as described in Section 3. Google and Meta operate under their own terms and privacy policies and may use the information for their own purposes as described there; we do not characterize them as service providers restricted to acting on our behalf. Under some state privacy laws the advertising disclosures may be considered a "sale" or "sharing."
  • Professional advisors. Attorneys, accountants, auditors, and insurers, subject to confidentiality obligations.
  • Legal and safety. Where required by law, subpoena, court order, or governmental request, or where we believe disclosure is necessary to protect our rights, property, or safety, or that of our users or the public.
  • Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case the recipient will be bound by this Policy or will provide notice of any material change.
  • With your direction or consent. Where you ask us to share information with a third party.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements.

  • Contact-form messages and newsletter sign-ups are kept in our website database and in our mailbox until you ask us to delete them (see Section 9e); the Website does not delete them automatically.
  • Analytics data is retained by Google according to the retention period set in our Google Analytics property, and aggregate reports may be retained longer.
  • Advertising data received by Google Ads and Meta is retained by those companies under their own policies.

When information is no longer needed, we delete it or de-identify it.

7. Security

We maintain commercially reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. These include encryption of data in transit using TLS, security filtering by Cloudflare, bot protection on our forms, and access controls on the Website's administration.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you transmit information to us at your own risk. If you believe your interaction with us is no longer secure, contact us immediately at rsatgroupllc@gmail.com.

8. Children's Privacy

The Website is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at rsatgroupllc@gmail.com and we will delete it.

9. Your Privacy Rights

9a. Rights Available Depending on Your Residence

Depending on where you live, you may have the right to:

  • Know / Access — request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties to whom we disclosed it
  • Delete — request deletion of personal information we collected from you, subject to exceptions
  • Correct — request correction of inaccurate personal information
  • Portability — receive a copy in a portable, machine-readable format
  • Opt out of sale or sharing — direct us not to sell or share your personal information for cross-context behavioral advertising
  • Opt out of targeted advertising and profiling — where profiling produces legal or similarly significant effects
  • Limit use of sensitive personal information — where applicable
  • Non-discrimination — we will not deny service, charge different prices, or provide a different level of quality because you exercised a privacy right
  • Appeal — where a state law provides it, appeal our denial of a request

9b. California Residents

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, California residents have the rights listed in Section 9a. We honor these requests from California residents whether or not the Act's thresholds apply to our business.

In the preceding twelve months, we have collected the following categories of personal information: identifiers; internet or other electronic network activity information; geolocation data (approximate, derived from IP address); and inferences drawn from the above (demographic and interest categories produced by Google Analytics).

The sources, purposes, and recipients for each category are described in Sections 2, 4, and 5.

Sale and sharing. We do not sell personal information for monetary consideration. However, our use of the Google Ads and Meta Pixel technologies described in Section 3c may constitute "sharing" for cross-context behavioral advertising under California law. To opt out, email us at rsatgroupllc@gmail.com with the subject "Do not sell or share my personal information," and use the browser and platform controls in Section 3f. The Website does not currently process the Global Privacy Control signal (Section 3g).

Sensitive personal information. We do not collect, use, or disclose sensitive personal information.

Authorized agents. You may use an authorized agent to submit a request. We may require the agent to provide proof of authorization and may require you to verify your identity directly.

Shine the Light. California Civil Code § 1798.83 permits residents to request information about disclosure of personal information to third parties for their direct marketing purposes. We do not make such disclosures.

9c. Other U.S. State Privacy Laws

Residents of states with comprehensive consumer privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky, and Rhode Island — have rights substantially as described in Section 9a, subject to each state's specific terms, thresholds, and exemptions. We honor verified requests in accordance with applicable law.

9d. Nevada Residents

Nevada residents may submit a request directing us not to sell certain covered information. We do not currently sell covered information as defined by Nevada law.

9e. How to Exercise Your Rights

Submit a request by:

  • Email: rsatgroupllc@gmail.com
  • Web form: the contact form at /contact/
  • Telephone: (904) 342-7306
  • Mail: RSAT GROUP, LLC, Attn: Privacy, 3735 Longleaf Pine Pkwy, Ste 217, St. Johns, FL 32259

We will verify your identity before fulfilling a request, which may require you to provide information that matches what we already hold. We will respond within the timeframe required by applicable law — generally 45 days, extendable where permitted.

10. Third-Party Websites

The Website links to sites we do not control, including Toast, TapMango, Instagram, Yelp, and Google Maps. This Policy does not apply to them. We encourage you to review the privacy policy of every site you visit.

11. International Visitors

The Website is operated in the United States and information we collect is processed and stored in the United States. If you access the Website from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

12. Changes to This Policy

We may update this Policy from time to time. The "Last Updated" date above indicates when the current version took effect. For material changes we will provide prominent notice on the Website, and where required by law we will obtain your consent. Your continued use of the Website after an update takes effect constitutes acceptance of the updated Policy.

13. Contact Us

RSAT GROUP, LLC (Aberdeen Acai & Smoothie Shop) 3735 Longleaf Pine Pkwy, Ste 217, St. Johns, FL 32259 Privacy inquiries: rsatgroupllc@gmail.com Security concerns: rsatgroupllc@gmail.com Telephone: (904) 342-7306

    STAY IN THE KNOW

    SUBSCRIBE TO GET SPECIAL OFFERS, updates on menu items and MORE!