Effective date: May 15, 2026
Soja Foods LLC ("Soja Foods," "we," "us," "our") operates the website at sojafood.com (the "Site"). This Privacy Policy explains what information we collect, why, how we store and protect it, and what rights you have.
Audience. The Site is intended for users located in the United States. We do not target or knowingly direct the Site to residents of the European Economic Area (EEA), the United Kingdom, or other jurisdictions whose laws would apply extraterritorially based on targeting. If you are accessing the Site from outside the United States, you do so on your own initiative and are responsible for compliance with local laws.
a) First-party site analytics. When you visit the Site, our own analytics system (not a third-party service) records a small set of operational metrics such as page views, CTA clicks, and successful form or newsletter submissions so we can understand whether the Site is working. If you allow analytics storage, we also collect more detailed interaction metrics to help us improve content and usability:
The basic operational metrics do not require persistent browser identifiers. If you allow analytics storage, we use two randomly generated identifiers in your browser's local storage and session storage (not cookies) to link detailed analytics events within a visit and across return visits: a permanent anonymous ID (_sja) and a session-scoped ID (_sjs). These identifiers contain no personal information and cannot be used to identify you directly. You can remove them at any time by clearing your browser's site data for sojafood.com.
All first-party analytics data described in this section is sent to and stored in our own database (Cloudflare D1, located in the United States). For analytics we do not use Google Analytics, Meta Pixel, or any other third-party analytics service, and we do not share our analytics data with third parties. The one exception is the Google Ads advertising tag described separately in §1(f) below, which operates independently of the first-party analytics described here and is governed by its own consent and disclosure framework.
b) Newsletter sign-up. If you choose to sign up for our newsletter, we collect your email address and basic signup context, such as the page where you subscribed, signup source, referrer URL, UTM campaign parameters, and audience type if provided. We store this information in our database and use it to send the communications you signed up for and understand which signup channels are working. If newsletter delivery or list management is enabled, your email address may also be processed by Resend on our behalf. You may unsubscribe at any time by following the link in any email we send, or by emailing [email protected].
c) Wholesale and sample inquiry form. When you submit the inquiry form at sojafood.com/wholesale/, we collect the information you provide: first name, middle name if provided, last name, inquiry type, email address, company if provided, business type, products of interest, estimated volume, delivery region, and any message you include. We also record your IP address and submission timestamp in our database to prevent spam and troubleshoot delivery errors. The browser user agent may be included in the inquiry notification email and server logs for security and troubleshooting. Your inquiry is forwarded to our team by email.
d) Direct email correspondence. If you email us at [email protected] or [email protected], we receive and retain the content of your message and any contact information you include.
e) Cloudflare infrastructure logs. The Site is served through Cloudflare Pages. Cloudflare's infrastructure automatically records standard server access logs (IP addresses, pages requested, timestamps) for security and network performance purposes. We do not control this logging. Cloudflare's practices are governed by Cloudflare's Privacy Policy.
f) Google Ads (advertising measurement and remarketing). We load the Google Ads tag (gtag.js) served by Google LLC on each page. Google may set cookies and similar identifiers on your device and receive: your IP address, page URL, referrer, browser and device characteristics, and Google Click Identifier (gclid) if you arrived from a Google ad. We use this data to (i) measure conversions from our paid Google search and display campaigns, and (ii) build remarketing audiences to show our ads to past visitors on Google properties and the Google Display Network. We implement Google Consent Mode v2: if you click "Opt out" in our cookie banner, click the cookie preferences link and choose to opt out, or send a Global Privacy Control signal from your browser, Google's ad and analytics storage are set to "denied" and Google will not set ad or analytics cookies for that visit. Depending on Google's consent-mode implementation, limited cookieless measurement signals may still be sent to Google when storage is denied. Google's processing is governed by the Google Privacy Policy; you can also opt out of personalized ads from Google at Google Ads Settings.
Enhanced Conversions (form submissions). When you complete and submit a form on the Site (for example, the wholesale or sample inquiry form), and you have not opted out of advertising cookies, we may transmit a hashed (one-way encrypted) copy of the email address and first/last name you provided to Google as part of the same conversion event described above. Google uses this data, in a process called "Enhanced Conversions," solely to improve the accuracy of conversion measurement attributed to our ad campaigns and to build or refine remarketing audiences. We do not transmit your message content, company name, phone, or any other form field for this purpose. If you have clicked "Opt out," sent a Global Privacy Control signal, or are visiting from a region where we require explicit opt-in consent (EEA / UK / Switzerland / Brazil) and have not granted that consent, no Enhanced Conversions data is sent to Google — only the conversion count itself is recorded through Consent Mode's cookieless measurement path.
g) What we still do not collect. We do not use session-recording or heatmap services. We do not load third-party social-media pixels (e.g., Meta, TikTok, LinkedIn). Outside the Google Ads tag (item f), no external font or asset CDN is contacted when you visit the Site. We do not knowingly collect "sensitive personal information" as defined by U.S. state privacy laws (e.g., precise geolocation, government IDs, financial account credentials, biometric data, health information).
Manage your choices: You can open the cookie banner and change your decision at any time — open cookie preferences. Clearing your browser's site data for sojafood.com will also reset all preferences.
Analytics (item a): We use this data to understand how visitors interact with the Site, diagnose performance problems, and improve content and user experience. We do not use it for advertising, profiling, or any automated decision-making about individuals.
Newsletter (item b): We process your email address to send you the communications you signed up for and to understand which signup channels are working. You can withdraw at any time by unsubscribing.
Wholesale inquiries and email (items c, d): We process this information to respond to your inquiry and, where relevant, take steps toward a business relationship. The IP address and user agent collected with form submissions are used to prevent abuse and protect the Site.
Google Ads (item f, with consent): We use this data to measure conversions from our Google Ads campaigns, build remarketing audiences, and improve the relevance of our ads. We do not use it for any automated decision-making about individuals.
We do not sell, rent, or trade personal information for monetary consideration. We may share information only in the limited circumstances below.
gclid), and a Google-assigned advertising identifier in a cookie. Google uses this data, on our behalf, to measure ad conversions and serve remarketing ads to past visitors of our Site. Under the California Consumer Privacy Act (CCPA/CPRA) and several other U.S. state privacy laws, this activity may constitute "sharing" of personal information for cross-context behavioral advertising. You can opt out at any time using the cookie preferences link or by sending a Global Privacy Control browser signal — either action sets Google's ad and analytics storage to "denied" through Google Consent Mode v2, which prevents ad and analytics cookies from being set for that visit._sja, _sjs): _sja persists until you clear your browser's site data; _sjs is cleared automatically when you close the browser tab or session.Depending on the state where you live, you may have the following rights with respect to personal information we hold about you:
_sja identifier from your device at any time.Global Privacy Control (GPC). We honor the Global Privacy Control browser signal as a valid request to opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising. When your browser sends a GPC signal, our consent script automatically sets Google's ad_storage, ad_user_data, and ad_personalization states to "denied" regardless of any prior cookie-banner choice.
California residents. Soja Foods does not currently meet the revenue or data-volume thresholds that make a business subject to the CCPA/CPRA. As a matter of practice, we honor CCPA-equivalent rights on request: you may ask us what personal information we hold, request correction or deletion, opt out of sharing for cross-context behavioral advertising (use the cookie preferences link or send a GPC signal), and limit use of sensitive personal information (we do not knowingly collect any). To make a request, email [email protected]; we aim to respond within 45 days, with one 45-day extension where reasonably necessary.
Other U.S. state residents. Residents of states with comprehensive privacy laws — including but not limited to Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, and Indiana — have rights similar to those listed above, subject to each state's specific exemptions and thresholds. We honor verifiable rights requests from residents of these states regardless of whether the law's applicability threshold is met. To exercise a right, email [email protected] with sufficient detail to identify your request and the state in which you reside.
Soja Foods is pre-launch. Photographs and product visuals on the Site are preview imagery intended to communicate the general format and category of products in development. Final product packaging, color, dimensions, and styling may differ. We do not use AI-generated imagery on actual product packaging, regulatory labels, or any material that constitutes a product representation under FDA labeling rules. We will update Site imagery to real product photography as soon as production begins.
This Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 in compliance with the U.S. Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us with personal information, contact [email protected] and we will promptly delete it.
We take reasonable technical and organizational measures to protect personal information, including HTTPS (TLS) encryption for all data in transit and access controls on our database. No method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. The effective date at the top of this page reflects the most recent revision. For material changes, we will take reasonable steps to notify affected individuals. Continued use of the Site after a revision constitutes acceptance of the updated policy.
Questions, requests, or complaints regarding this Privacy Policy or our data practices:
Soja Foods LLC
302 Klaby Meaux Rd
Kaplan, LA, United States
[email protected]