Privacy Policy

This Privacy Policy describes how Cabana Taco ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website cabanataco-food.click, place orders, use our services, or otherwise interact with us. Please read this policy carefully. By using our website or services, you agree to the practices described herein.

We are committed to protecting your privacy and handling your data with transparency, integrity, and respect. This policy has been drafted in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant consumer protection regulations.

1. Who We Are

Cabana Taco is a food service business operating in the United States. We provide customers with food ordering, delivery, catering, and related services through our website and other channels.

For all privacy-related inquiries, requests, or concerns, please contact us at the email address provided above.

2. Information We Collect

We collect various categories of information depending on how you interact with our website and services. The categories of personal information we may collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, make a reservation, subscribe to our newsletter, or contact us, we may collect personal identification information such as:

• Full name
• Email address
• Phone number
• Billing and shipping address (including street address, city, state, and ZIP code)
• Date of birth (where required for age verification)
• Username and password for account access

2.2 Payment and Financial Information

When you complete a purchase or transaction through our website, we may collect payment-related information, including:

• Credit or debit card number (last four digits only, as full card details are processed by our payment processors)
• Billing address associated with your payment method
• Transaction history and order records

Please note that full payment card details are not stored directly on our servers. All payment processing is handled by PCI-DSS-compliant third-party payment processors.

2.3 Order and Transaction Data

When you place an order or use our services, we collect data related to that transaction, including:

• Items ordered, preferences, and customizations
• Order date, time, and frequency
• Delivery instructions and preferences
• Special dietary requests or allergen notes
• Loyalty points and promotional code usage

2.4 Usage and Behavioral Data

When you visit our website, we automatically collect certain technical and behavioral data about your interactions, including:

• Pages visited, links clicked, and time spent on each page
• Search queries entered on our website
• Referring URLs and exit pages
• Frequency and duration of visits
• Shopping cart activity (including abandoned cart data)

2.5 Device and Technical Information

We automatically collect certain device and technical information when you access our website, including:

• IP address
• Browser type and version
• Operating system and device type (desktop, mobile, tablet)
• Screen resolution
• Unique device identifiers
• Internet service provider (ISP)
• Time zone settings

2.6 Location Data

With your permission, we may collect precise or approximate geolocation data from your device to provide delivery services, show you relevant restaurant locations, or tailor our content to your area. You can disable location sharing through your device settings at any time.

2.7 Communication Data

If you contact us by email, phone, online chat, or through a contact form, we collect the content of those communications, including any attachments, together with your contact details and the date and time of the communication.

2.8 User-Generated Content

If you submit reviews, ratings, comments, photos, or other content through our website or social media channels, we collect and may display that content publicly in connection with our services.

2.9 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect information about your browsing behavior on our website. For detailed information about the cookies we use, please refer to Section 8 of this policy.

3. How We Use Your Information

We use the personal information we collect for legitimate business purposes, including but not limited to the following:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders and reservations
• Managing your account and providing customer support
• Coordinating delivery and pickup logistics
• Verifying your identity and preventing fraudulent transactions
• Sending order confirmations, receipts, and status updates

3.2 Communication and Customer Support

• Responding to your inquiries, feedback, complaints, and requests
• Sending service-related notifications, including changes to our menu, hours, or policies
• Providing technical support and resolving disputes

3.3 Marketing and Promotional Activities

• Sending you promotional emails, newsletters, and special offers (only with your consent where required by law)
• Personalizing your experience based on your order history and preferences
• Running loyalty programs and promotional campaigns
• Displaying targeted advertisements on our website or third-party platforms
• Remarketing to you across digital platforms based on your browsing behavior

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send or by contacting us directly at [email protected].

3.4 Analytics and Service Improvement

• Analyzing usage trends and customer behavior to improve our website and services
• Conducting internal research and development
• Testing new features, menu items, and promotions
• Monitoring website performance, uptime, and security

3.5 Legal and Compliance Purposes

• Complying with applicable federal and state laws and regulations
• Enforcing our Terms of Service and other agreements
• Responding to legal claims, investigations, or government requests
• Protecting the rights, property, and safety of Cabana Taco, our customers, and the public

4. Legal Basis for Processing

Under applicable U.S. privacy law, including the CCPA/CPRA, we process your personal information based on the following grounds:

• Contractual Necessity: Processing required to fulfill your orders and deliver our services.
• Legitimate Business Interests: Processing for fraud prevention, security, analytics, and service improvement, where such interests are not overridden by your rights.
• Consent: Where we rely on your explicit consent, such as for marketing emails or the use of non-essential cookies.
• Legal Obligation: Processing required to comply with federal and state legal requirements.

5. Sharing Your Information with Third Parties

We do not sell, rent, or lease your personal information to unaffiliated third parties for their own direct marketing purposes. However, we may share your information with trusted third parties in the following circumstances:

5.1 Service Providers and Business Partners

We engage third-party service providers who assist us in operating our business and delivering our services. These providers are contractually obligated to use your data only as directed by us and in accordance with this Privacy Policy. Categories of service providers include:

• Payment Processors: To securely process online payments and prevent fraud (e.g., Stripe, Square, or similar platforms).
• Delivery and Logistics Partners: To coordinate food delivery to your specified address.
• Email and Marketing Platforms: To manage email campaigns, newsletters, and automated communications (e.g., Mailchimp, Klaviyo, or similar).
• Analytics Providers: To analyze website traffic and user behavior (e.g., Google Analytics).
• Cloud Hosting and IT Services: To host and maintain our website and databases securely.
• Customer Support Tools: To manage customer inquiries and support tickets.

5.2 Legal and Regulatory Disclosures

We may disclose your personal information when required to do so by law, regulation, court order, subpoena, or other lawful legal process. We may also disclose information when we believe in good faith that disclosure is necessary to:

• Comply with applicable federal or state law, including cooperation with law enforcement agencies
• Protect the rights, property, or personal safety of Cabana Taco, our customers, or the public
• Detect, prevent, or address fraud, security issues, or technical problems
• Enforce our Terms of Service or other agreements

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring or successor entity. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5.4 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or other business purposes.

5.5 California "Shine the Light" Disclosure

California Civil Code Section 1798.83 ("Shine the Light" law) permits California residents to request information about the categories of personal information we disclose to third parties for those third parties' direct marketing purposes. If you are a California resident and wish to make such a request, please contact us at [email protected].

6. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We respect and honor these rights as required by applicable law.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

6.2 Rights Under Other State Privacy Laws

Residents of other U.S. states, including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with enacted consumer privacy legislation, may have similar rights to access, correct, delete, and opt out of the processing of their personal data. We will honor all legally required rights requests regardless of the state in which you reside.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable consumer request to us by:

• Email: [email protected]

Your request must include sufficient information for us to reasonably verify your identity. We will respond to your verified request within 45 days of receipt. If we require additional time, we will notify you of the extension and the reason for it. We may extend the response period by an additional 45 days when reasonably necessary.

You may designate an authorized agent to make a request on your behalf. We will require verification that the agent is authorized to act on your behalf before processing the request.

7. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

7.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocols.
• Encrypted Data Storage: Sensitive data, including passwords, is stored using strong cryptographic hashing algorithms.
• Firewalls and Intrusion Detection: We use firewall protection and intrusion detection systems to monitor and protect our network infrastructure.
• Access Controls: Access to personal information is restricted to authorized personnel who have a legitimate need to know, on a role-based access control basis.
• Secure Payment Processing: All payment transactions are processed by PCI-DSS-compliant payment processors. We do not store full credit or debit card numbers on our servers.

7.2 Administrative Safeguards

• Regular employee training on data privacy and security best practices
• Data processing agreements with all third-party service providers
• Documented incident response and data breach notification procedures
• Periodic review and updating of our privacy and security practices

7.3 Limitations

Despite our best efforts, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable federal and state breach notification laws, including state-specific data breach notification statutes.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing efforts.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to remember your preferences, actions, and session information across multiple pages or visits.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the operation of our website and cannot be disabled. They enable core functions such as page navigation, security, and access to secure areas of the website.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, including which pages are visited most often and any error messages received. This data helps us improve our website's performance.
• Functionality Cookies: These cookies allow our website to remember choices you make (such as your preferred language, location, or login status) and provide enhanced features.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements relevant to you and your interests. They also help us measure the effectiveness of our advertising campaigns.
• Third-Party Cookies: Some cookies are placed by third-party services that appear on our pages, such as Google Analytics, Facebook Pixel, or advertising networks.

8.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse, delete, or be alerted about cookies. Please note that disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance (DAA) opt-out page or the Network Advertising Initiative (NAI) opt-out page.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general data retention guidelines are as follows:

When personal information is no longer needed for its original purpose and no legal retention obligation applies, we will securely delete, destroy, or anonymize it.

10. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, in compliance with the Children's Online Privacy Protection Act (COPPA). We also do not knowingly collect personal information from individuals between the ages of 13 and 17 without verifiable parental consent.

If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt steps to investigate and, where confirmed, delete such information from our records.

If you are under 18 years of age, you are not permitted to use our website or services, and you should not submit any personal information to us.

11. International Data Transfers

Cabana Taco is based in the United States, and your personal information is primarily collected, stored, and processed within the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the U.S., where data protection laws may differ from those in your home country.

By using our website and providing us with your personal information, you acknowledge and consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy. We take appropriate steps to ensure that any international transfers of personal data are made in compliance with applicable legal requirements and that your data remains protected to a standard equivalent to that required under U.S. law.

12. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Cabana Taco. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices or content of any third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

Common third-party services integrated into our website may include:

• Google Analytics (website analytics)
• Social media platforms (Facebook, Instagram, Twitter/X)
• Payment processors (Stripe, Square, PayPal)
• Online ordering and delivery platforms
• Online advertising networks

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. At this time, there is no universally accepted standard for how websites should respond to DNT signals. Our website does not currently alter its data collection or use practices in response to DNT signals. We will update this policy if a uniform DNT standard is established and we modify our practices accordingly.

California residents may also exercise their opt-out rights under the CCPA/CPRA as described in Section 6 of this policy.

14. How to File a Complaint

If you believe that your privacy rights have been violated or that we have failed to handle your personal information in accordance with this Privacy Policy or applicable law, we encourage you to contact us first so that we can address your concerns.

14.1 Contact Us Directly

Please send your complaint or concern to:

• Email: [email protected]
• Website: cabanataco-food.click

We will acknowledge your complaint promptly and strive to resolve it within 30 days of receipt.

14.2 Filing a Complaint with a Regulatory Authority

If you are a California resident and are not satisfied with our response, you have the right to file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

If you are located in another state with applicable privacy laws, you may also file a complaint with your state's attorney general's office or relevant consumer protection authority.

Federal consumer protection complaints may also be submitted to the Federal Trade Commission (FTC):

15. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post the revised policy on our website at cabanataco-food.click
• Notify you by email (where we have your email address and where required by law) or through a prominent notice on our website

Your continued use of our website or services following the posting of any revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this policy periodically to stay informed about how we protect your information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact us:

We are committed to working with you to resolve any privacy concerns fairly and promptly. Thank you for trusting Cabana Taco with your personal information. We are dedicated to handling it with the utmost care, transparency, and respect.