Privacy Policy

This Privacy Policy describes how Cabana Taco ("we," "us," "our," or "the Company") collects, uses, discloses, and protects your personal information when you visit our website at taco-cabana.click, place orders, use our services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner.

By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms described herein, please discontinue use of our website and services immediately.

We encourage you to review this policy periodically, as we may update it from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

1. About Us

Cabana Taco is a food service business operating in the United States. We are dedicated to providing our customers with high-quality food products and an exceptional dining experience — whether in person or online. Our contact details are as follows:

For all privacy-related inquiries, questions, or requests, please use the contact details provided above or refer to the dedicated contact section at the end of this document.

2. Information We Collect

We collect various categories of information depending on how you interact with our website and services. The information we gather falls into the following categories:

2.1 Personal Identification Information

When you register an account, place an order, subscribe to our newsletter, make a reservation, or contact our customer support, we may collect personal identification information, including but not limited to:

• Full name
• Email address
• Phone number
• Billing and delivery address (street address, city, state, ZIP code)
• Date of birth (where required for age verification or promotional purposes)
• Username and password (for registered accounts)
• Payment information (such as credit card numbers, billing details — processed securely through third-party payment processors)

2.2 Order and Transaction Data

When you make a purchase or place an order through our website, we collect information related to that transaction, including:

• Items ordered, quantities, and customizations
• Order history and purchase frequency
• Payment confirmations and transaction identifiers
• Delivery preferences and special instructions
• Loyalty points, promotions, or rewards redeemed

2.3 Usage Data and Analytics

When you visit our website, we automatically collect certain technical and behavioral information about how you interact with our digital services, including:

• IP address and approximate geographic location
• Browser type, version, and language settings
• Operating system and device type
• Pages visited, links clicked, and navigation paths
• Time and duration of your visit
• Referring URLs (the website that directed you to ours)
• Search queries entered on our website
• Error logs and performance data

2.4 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. This may include session identifiers, preferences, and interaction data. For more information, please refer to Section 8 (Cookie Policy) of this document.

2.5 Device Information

We may collect information about the device you use to access our website or mobile platform, including:

• Device identifiers (such as mobile device ID or advertising ID)
• Hardware model and screen resolution
• Mobile network information
• Operating system version

2.6 Communications Data

If you contact us through email, our website contact form, or customer support channels, we may retain records of those communications, including:

• The content of messages and attachments you send us
• Feedback, reviews, and survey responses
• Support tickets and correspondence history

2.7 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms (if you connect your account or interact with our social media pages)
• Third-party delivery and ordering platforms
• Analytics and advertising partners
• Payment processors and fraud prevention services

3. How We Use Your Information

We use the personal information we collect for the following lawful purposes:

3.1 Service Provision and Order Fulfillment

The primary purpose of collecting your information is to provide you with our food services, including:

• Processing and fulfilling your orders
• Managing your account and preferences
• Coordinating delivery or pickup services
• Sending order confirmations, receipts, and status updates
• Providing customer support and resolving disputes
• Processing payments and issuing refunds where applicable

3.2 Analytics and Service Improvement

We analyze usage data and behavioral information to:

• Understand how customers use our website and services
• Identify popular menu items and trends
• Improve website functionality, navigation, and user experience
• Diagnose technical problems and optimize site performance
• Conduct internal research and business analysis

3.3 Marketing and Promotional Communications

With your consent where required by applicable law, we may use your contact information to:

• Send you promotional emails, newsletters, and special offers
• Notify you about new menu items, limited-time deals, and seasonal promotions
• Deliver personalized marketing content based on your order history and preferences
• Run loyalty programs and reward campaigns
• Display targeted advertising on third-party platforms

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us directly at [email protected].

3.4 Legal Compliance and Safety

We may process your personal information as required to:

• Comply with applicable federal and state laws and regulations
• Respond to lawful requests from law enforcement and government authorities
• Enforce our Terms of Service and other legal agreements
• Detect, investigate, and prevent fraud, abuse, or security incidents
• Protect the rights, safety, and property of Cabana Taco, our customers, and the public

3.5 Personalization

We may use information about your preferences and purchase history to personalize your experience, including recommending menu items, remembering your dietary preferences, and customizing the content you see on our website.

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your data with trusted third parties under the following circumstances:

4.1 Service Providers and Business Partners

We engage third-party vendors and service providers who perform functions on our behalf, such as:

• Payment processors — to securely handle billing and transactions
• Delivery platforms — to coordinate food delivery to your address
• Email and marketing platforms — to manage promotional communications
• Analytics providers — to help us understand website usage (e.g., Google Analytics)
• Cloud hosting and IT services — to store and manage data securely
• Customer support tools — to manage support tickets and communications

These service providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security standards. They are not authorized to use your personal data for their own marketing or other purposes.

4.2 Legal Requirements

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Enforce our legal rights or defend against legal claims
• Prevent fraud, identity theft, or harm to individuals
• Protect the vital interests of individuals

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other corporate transaction involving Cabana Taco, your personal information may be transferred to the successor entity. We will notify you via email or prominent website notice before your data is transferred and becomes subject to a different privacy policy.

4.4 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or other business purposes.

4.5 With Your Consent

We may share your personal information with additional third parties when you have given us your explicit consent to do so.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical measures to protect it from unauthorized access, disclosure, alteration, or destruction.

5.1 Security Measures We Employ

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocols.
• Payment Security: We use PCI-DSS compliant payment processors and do not store full credit card numbers on our servers.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions.
• Secure Data Storage: Personal information is stored on secure servers with firewalls, intrusion detection systems, and regular security audits.
• Employee Training: Our staff members are trained on data privacy and security practices and are bound by confidentiality obligations.
• Regular Assessments: We conduct periodic security reviews and vulnerability assessments to identify and remediate potential risks.

5.2 Limitations

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the appropriate regulatory authorities as required by applicable law.

6. Your Rights and Choices

Depending on your location within the United States, you may have specific rights regarding your personal information. We are committed to honoring those rights and making it easy for you to exercise them.

6.1 California Residents — CCPA/CPRA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights:

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
• Right to Delete: You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell your personal information.
• Right to Limit Use of Sensitive Personal Information: You may have the right to limit our use of sensitive personal information to what is necessary to provide the services you request.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise your California privacy rights, please submit a verifiable consumer request to us at [email protected]. We will respond to your request within 45 days, as required by law.

6.2 General Rights for All Users

Regardless of your location, we provide all users with the following rights and options:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct or update inaccurate or incomplete information about you.
• Deletion: You may request that we delete your personal information, subject to applicable legal and operational requirements.
• Data Portability: Where technically feasible, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time.
• Account Closure: You may request to close your account, after which we will delete or anonymize your personal information unless we are required to retain it by law.

6.3 How to Submit a Request

To exercise any of your privacy rights, please contact us using the following methods:

• Email: [email protected]
• Website: taco-cabana.click

We may need to verify your identity before processing your request to protect your privacy and security. We will not charge a fee for reasonable requests, but may charge a reasonable fee for excessive or repetitive requests.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

After the applicable retention period expires, we will securely delete or anonymize your personal information. In some cases, we may retain de-identified or aggregated data indefinitely for statistical and research purposes.

8. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver relevant content and advertisements.

8.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They allow the website to recognize your device, remember your preferences, and collect information about how you use the site.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly, including session management, shopping cart functionality, and security features.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website (e.g., pages visited, time spent, error messages). We use tools such as Google Analytics for this purpose.
• Functional Cookies: Remember your preferences and settings, such as language, location, and saved orders.
• Marketing and Advertising Cookies: Track your browsing activity to deliver targeted advertisements and measure the effectiveness of our marketing campaigns.

8.3 Managing Cookies

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Most browsers allow you to:

• View and delete cookies stored on your device
• Block cookies from specific websites
• Block all third-party cookies
• Clear all cookies when closing the browser

For more detailed information about how we use cookies and how to manage your preferences, please refer to our full Cookie Policy, available on our website at taco-cabana.click.

9. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, in compliance with the Children's Online Privacy Protection Act (COPPA), or from individuals under 18 years of age without verified parental or guardian consent.

If you are under 18 years old, please do not use our website or provide us with any personal information. If you are the parent or guardian of a minor who has provided us with personal information without your consent, please contact us immediately at [email protected], and we will take prompt steps to delete such information from our records.

If we learn that we have inadvertently collected personal information from a child under 13, we will delete that information as quickly as possible. We do not knowingly market to children, and our promotional materials are designed for adult audiences.

10. International Data Transfers

Cabana Taco is based in the United States and primarily processes personal information within the United States. If you access our services from outside the United States, please be aware that your personal information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your country of residence.

For users accessing our services from other countries, including those in the European Economic Area (EEA) or the United Kingdom, please note the following:

• The United States does not have a general federal data protection law equivalent to the European Union's General Data Protection Regulation (GDPR).
• By using our services, you consent to the transfer of your personal information to the United States and its processing in accordance with this Privacy Policy.
• We implement appropriate safeguards for international transfers where required, including standard contractual clauses and data processing agreements with our service providers.

If you have questions about how your data is protected during international transfers, please contact us at [email protected].

11. Applicable Laws and Regulatory Framework

As a business operating in the United States, our privacy practices are governed by and comply with the following laws and regulations:

• Federal Trade Commission Act (FTC Act): We comply with FTC guidelines on unfair or deceptive practices, including our data collection and privacy representations to consumers.
• CAN-SPAM Act: All commercial email communications we send comply with the requirements of the Controlling the Assault of Non-Solicited Pornography And Marketing Act, including clear identification, opt-out mechanisms, and accurate subject lines.
• Children's Online Privacy Protection Act (COPPA): We do not knowingly collect personal information from children under 13 years of age.
• California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA): We respect and honor the privacy rights of California residents as described in this policy.
• Other State Privacy Laws: We also strive to comply with applicable privacy laws of other U.S. states, including the Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and similar legislation as they become effective.

12. Third-Party Links and Integrations

Our website may contain links to third-party websites, social media platforms, and integrated services (such as delivery platforms or review sites). This Privacy Policy does not apply to those external websites, and we are not responsible for the privacy practices or content of third-party sites.

We encourage you to review the privacy policies of any third-party websites you visit. Links to third-party websites are provided for your convenience and do not imply our endorsement of those sites or their privacy practices.

Third-party services we may integrate with include, but are not limited to:

• Google Analytics (website analytics)
• Social media platforms (Facebook, Instagram, Twitter/X)
• Food delivery platforms (e.g., DoorDash, Uber Eats, Grubhub)
• Payment gateways (e.g., Stripe, Square, PayPal)
• Email marketing services

13. How to File a Complaint

If you believe that we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to contact us first so that we can attempt to resolve your concern.

13.1 Internal Complaint Process

To submit a privacy-related complaint to Cabana Taco directly:

1. Send a written description of your complaint to [email protected]
2. Include your name, contact information, and a detailed description of the issue
3. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days

13.2 Regulatory Complaints

If you are not satisfied with our response, or if you believe your privacy rights have been violated, you have the right to file a complaint with the relevant regulatory authority:

You may also contact your state's Attorney General office if you believe your consumer privacy rights have been violated under state law.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, business operations, legal requirements, or for any other reason. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy on our website at taco-cabana.click
• Send a notification to registered users via email (for significant changes)
• Display a prominent notice on our website for a reasonable period

Your continued use of our website and services after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page regularly to stay informed about how we protect your information.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your privacy inquiries promptly and transparently.