Bella Notte Restaurant Group, a DBA of Tomato Express, LLC (“we,” “us” or “our”), is a locally owned restaurant group based in Lexington, Kentucky. We operate Bella Notte, Crust Pizzeria, Bella Café & Grille and Smashing Tomato.

This Privacy Policy explains how we collect, use and share personal information about our guests. It applies to all of our restaurants and locations, our websites, our branded mobile apps, our online ordering, rewards and gift card programs, our email and text message communications, and any other place that links to this policy (together, our “Services”).

Some of our Services are powered by Toast, Inc. (“Toast”), our point of sale, online ordering and mobile app provider. Toast handles some information on our behalf as described below. You can learn about Toast’s own practices in the Toast Privacy Statement.

This policy does not cover information about our employees or job applicants, which is handled under separate policies, or third party websites and services we link to.

Information we collect

Information you give us. When you order, join our rewards program, buy or redeem a gift card, sign up for emails or texts, make a reservation, request catering, enter a promotion or contact us, we collect what you provide. That can include your name, email address, phone number, mailing or delivery address and birthday.

Orders and visits. We keep records of your orders and visits, including the items you order, the location, the date and time, amounts, tips, delivery details, special instructions and any favorites or preferences you save.

Payment information. Card payments are processed by Toast and its payment processors. We do not store your full card number on our own systems. If you pay with Apple Pay, Google Pay or a similar service, that provider also handles your payment details under its own privacy policy.

Rewards and gift cards. If you join our rewards program, we collect your points balance, rewards earned and redeemed, and related activity. For gift cards, we collect card values, balances and transaction history.

Dietary and dining preferences. You may choose to share allergies, dietary needs, accessibility requirements or other preferences. Some of this can be sensitive, and we use it only to serve you.

Feedback and communications. We collect the content of surveys, reviews, emails and messages you send us.

Information collected automatically. When you use our websites or apps, we and our service providers automatically collect device and usage information. This includes device type, browser, IP address, device identifiers, language settings, general location, pages and screens viewed, clicks, time spent and crash reports. Our apps also record whether push notifications were delivered and opened.

Precise location. If you allow it in your device settings, our apps collect your precise location to show nearby locations and offer location based features. You can turn this off at any time in your device settings.

Guest Wi Fi and security cameras. If you use guest Wi Fi at one of our locations, we may collect your device identifier and connection details. Some locations use security cameras for safety and loss prevention.

Information from others. We may receive information about you from delivery partners, reservation platforms, social media platforms when you interact with our pages, and our service providers.

How we use information

We use personal information to run our restaurants and Services. That means taking and fulfilling orders, processing payments, managing reservations and catering, running our rewards and gift card programs, and responding when you contact us.

We also use it to personalize your experience, such as remembering your favorites and suggesting locations or menu items you may enjoy based on past orders.

With your permission where required, we use it to send you news, offers and promotions by email, text message and push notification, and to show you our ads on other websites and social media platforms.

We use it to understand how guests use our Services so we can improve our menus, locations and technology, measure how well our marketing works, and plan for the future. We may combine or anonymize information so it no longer identifies you and use it for any lawful purpose.

Finally, we use it to keep our guests, team and Services safe, prevent fraud, enforce our terms and comply with the law.

How we share information

We do not sell your personal information for money. We share it only as described here, and none of the sharing described in this policy includes text message opt in data or consent.

Within our restaurant group. Information may be shared among our four concepts and all of our locations so your rewards, gift cards and preferences work wherever you visit.

Toast and other service providers. Toast hosts and processes information for our ordering, payment, app, rewards and gift card systems. We also use providers for website hosting, email and text messaging, analytics, guest database management, security and fraud prevention. These providers may use your information only to provide services to us.

Delivery and reservation partners. If you order delivery or book through a third party platform, we share what is needed to complete your order or reservation. Those platforms also have their own privacy policies.

Advertising partners. We may share device and activity information with advertising partners such as social media platforms through pixels and similar tools, so we can show our ads to you and to people with similar interests. See the next section for your choices.

Legal and safety reasons. We may share information with law enforcement, government authorities or others when required by law or when needed to protect the rights, property or safety of our guests, team or business.

Business transfers. If we sell, merge or reorganize all or part of our business, personal information may transfer to the new owner under this policy.

With your consent. We share information in other ways when you ask us to or agree to it.

Cookies, pixels and analytics

Our websites and apps use cookies, pixels, software development kits and similar tools. Some are needed for the Services to work, such as keeping you signed in and holding items in your cart. Others help us understand how the Services are used, like Google Analytics, or let us and our advertising partners show you relevant ads.

You can block or delete cookies in your browser settings, though some features may stop working. In our apps, you can turn off advertising pixels on the privacy page in app settings, and you can reset or limit ad tracking in your device settings. You can learn how Google uses information at Google’s partner sites page and opt out of Google Analytics with its browser add on.

Some browsers send “Do Not Track” signals. Our Services do not currently respond to those signals.

Emails, text messages and push notifications

Email. You can unsubscribe from marketing emails at any time using the link at the bottom of any email. We may still send messages about your orders, account or rewards.

Text messages. We send marketing texts only to guests who have agreed to receive them, for example by opting in when ordering online, joining our rewards program, requesting a text receipt or texting JOIN to our number. If you give us your phone number with an order, we may also text you about that order, such as receipts or pickup updates. Message frequency varies, and message and data rates may apply. Reply STOP to opt out or HELP for help. Agreeing to receive marketing texts is never a condition of purchase. Mobile phone numbers, text message opt in data and consent will not be shared with or sold to any third parties or affiliates for marketing or promotional purposes.

Push notifications. You can turn push notifications on or off at any time in your device or app settings.

Your choices and rights

Your account. You can view and update your account information at any time in the app or on our website.

Deleting your account. You can delete your account in the app settings. You can also request deletion without the app by emailing support@bellalexington.com with the name, email and phone number on your account. Some information may be kept where the law requires it, such as transaction records.

State privacy rights. Depending on where you live, including Kentucky, California and other states with consumer privacy laws, you may have the right to know what personal information we have about you, get a copy of it, correct it, delete it, and opt out of targeted advertising or the “sale” or “sharing” of personal information as those laws define it. You may also have the right to limit our use of sensitive information.

To make a request, email support@bellalexington.com or call 859-309-0885. We will verify your identity before responding and will reply within the time the law requires. You may use an authorized agent where the law allows. If we deny your request, you may appeal by replying to our decision with the subject line “Privacy Appeal,” and we will respond in writing. We will never treat you differently for exercising your privacy rights.

Sensitive information, children, security and retention

Sensitive information. Precise location and dietary details such as allergies, accessibility needs or religious dietary practices can be sensitive. We collect them only if you choose to share them, and we use them only to provide and personalize our Services. You can withdraw consent at any time by turning off location in your device settings or deleting those preferences from your profile.

Children. Our Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

Security. We use reasonable administrative, technical and physical safeguards to protect personal information. No system is completely secure, so we cannot guarantee absolute security.

Retention. We keep personal information as long as needed to provide our Services, maintain your account, meet legal, tax and accounting requirements and resolve disputes. When it is no longer needed, we delete or anonymize it.

Changes and contact us

We may update this policy from time to time. We will post the new version here with a new effective date, and if we make material changes we will let you know as the law requires, such as by email or a notice in our apps.

If you have questions about this policy or our privacy practices, please contact us.

Bella Notte Restaurant Group (a DBA of Tomato Express, LLC)
851 Corporate Drive, Suite 101, Lexington, Kentucky 40503
Email: support@bellalexington.com
Phone: 859-309-0885

This policy was last updated on October 16, 2026.