Privacy Policy

This Privacy Policy explains how Taco Time ("we," "us," "our," or "the Company") collects, uses, discloses, and protects your personal information when you visit our website at food-tacotime.rest, place orders, interact with our services, or otherwise engage with us. We are committed to protecting your privacy and handling your personal data in a transparent, responsible, and lawful manner consistent with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act).

Please read this Privacy Policy carefully before using our website or services. By accessing or using food-tacotime.rest, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website and services immediately.

For any privacy-related questions or concerns, you may contact us at: [email protected].

1. Who We Are

Taco Time is a food service business operating in the United States. We provide food products and related services to customers through our website food-tacotime.rest and other channels. As a data controller, we determine the purposes and means by which your personal information is processed.

2. Information We Collect

We collect various categories of personal information depending on how you interact with us. The types of information we may collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Mailing or delivery address
• Billing address
• Username and password (stored in encrypted format)
• Profile picture or avatar (if uploaded voluntarily)
• Date of birth or age verification data

2.2 Payment and Transaction Information

When you make a purchase through our website, we collect transactional data necessary to process your order. Please note that full payment card details (such as credit or debit card numbers) are handled by our third-party payment processors and are not stored directly on our servers. We may retain:

• Order history and details
• Last four digits of your payment card
• Transaction ID and confirmation numbers
• Billing preferences and saved payment methods (tokenized only)

2.3 Usage Data and Website Analytics

When you visit our website, we automatically collect certain technical and behavioral information, including:

• IP address
• Browser type and version
• Operating system
• Referring URLs (the page you visited before arriving at our site)
• Pages viewed and time spent on each page
• Clickstream data and navigation patterns
• Search terms used on our website
• Date and time of your visit
• Frequency and duration of visits

2.4 Device Information

We collect information about the devices you use to access our website, including:

• Device type (desktop, mobile, tablet)
• Device identifiers
• Mobile network information
• Screen resolution and display settings
• Time zone settings
• Language preferences

2.5 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interaction with our website. This includes session cookies, persistent cookies, and third-party cookies used for analytics and advertising purposes. For more detailed information about our use of cookies, please refer to our Cookie Policy, which is available on our website at food-tacotime.rest/cookie-policy.

2.6 Communications Data

When you contact us through email, web forms, phone, or any other communication channel, we collect and retain:

• The content of your messages and inquiries
• Records of correspondence
• Feedback, reviews, and ratings you submit
• Support ticket information

2.7 Location Data

With your permission, we may collect general geographic location information to help provide relevant local offers, menus, or delivery services. This may include:

• Approximate location derived from your IP address
• Precise GPS location (only if you explicitly grant permission through your device)
• Delivery addresses you have provided

2.8 Information Collected from Third Parties

We may receive additional information about you from third parties, including social media platforms (if you log in using a social media account), advertising partners, and publicly available sources. We combine this information with data we collect directly from you to enhance our services and improve your experience.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Creating and managing your user account
• Sending order confirmations, receipts, and delivery updates
• Facilitating payment processing through our third-party payment partners
• Providing customer support and responding to your inquiries
• Resolving disputes and addressing complaints

3.2 Website Operation and Improvement

• Maintaining the security, reliability, and performance of our website
• Diagnosing technical issues and troubleshooting errors
• Analyzing user behavior to improve website design and functionality
• Developing new features, products, and services
• Conducting internal research and analytics

3.3 Marketing and Promotional Communications

With your consent, or as otherwise permitted by applicable law, we may use your contact information to:

• Send promotional emails, newsletters, and special offers
• Provide personalized recommendations based on your order history
• Conduct surveys and request feedback
• Deliver targeted advertising through our website and third-party platforms
• Notify you of loyalty program updates, rewards, and exclusive deals

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send or by contacting us at [email protected]. Please note that even if you opt out of marketing emails, we may still send you transactional communications related to your account or orders.

3.4 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Enforcing our Terms of Service and other agreements
• Detecting, investigating, and preventing fraud, abuse, and security incidents
• Protecting the rights, property, and safety of Taco Time, our users, and the public
• Responding to lawful requests from government authorities and law enforcement

3.5 Business Operations

• Evaluating and facilitating mergers, acquisitions, or business transfers
• Preparing aggregated, anonymized reports for internal business analysis
• Maintaining records required for accounting and tax purposes

4. Legal Basis for Processing

As a United States-based business, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing required to fulfill your orders, provide our services, or perform our obligations under our Terms of Service.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, security, and improving our services, provided these interests are not overridden by your rights.
• Consent: Where we rely on your explicit consent, such as for marketing communications or the use of certain cookies. You may withdraw consent at any time.
• Legal Obligation: Processing required to comply with applicable federal and state laws, court orders, or regulatory requirements.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of third parties under appropriate safeguards:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our website and delivering our services. These providers are contractually obligated to use your data only for the purposes we specify and to maintain appropriate security measures. Categories of service providers include:

• Payment Processors: To handle payment transactions securely (e.g., Stripe, PayPal, or similar providers).
• Delivery and Logistics Partners: To fulfill and deliver your food orders.
• Cloud Hosting and IT Infrastructure: To store data and maintain our website and systems.
• Analytics Providers: To help us understand website usage and improve our services (e.g., Google Analytics).
• Email Service Providers: To send transactional and marketing emails on our behalf.
• Customer Support Tools: To manage customer service interactions and support tickets.
• Advertising Networks: To deliver targeted advertising on our behalf across digital platforms.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or other legal process
• Respond to a lawful request by government authorities, including law enforcement agencies
• Protect our legal rights, interests, or property
• Investigate, prevent, or take action against illegal activities, fraud, or threats to safety

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, asset sale, or similar transaction, your personal information may be transferred to the successor entity. We will notify you of any such transfer and any material changes to this Privacy Policy through a prominent notice on our website or by email.

5.4 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes. This information does not constitute personal information.

6. Data Security

We take the security of your personal information very seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers. Sensitive data such as passwords is stored using strong cryptographic hashing algorithms.
• Access Controls: Access to personal data is restricted to authorized employees and contractors who have a legitimate need to access it in the course of their job responsibilities. All personnel with access to personal data are subject to confidentiality obligations.
• Secure Payment Processing: Payment card information is processed through PCI-DSS compliant third-party payment processors. We do not store full card details on our systems.
• Regular Security Audits: We conduct regular vulnerability assessments and security testing of our systems and infrastructure.
• Incident Response: We maintain an incident response plan to address potential data breaches promptly. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable state data breach notification laws.
• Data Minimization: We collect only the personal information necessary for the purposes described in this Privacy Policy.

7. Your Privacy Rights

Depending on your state of residence, you may have various rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

7.1 Rights Under California Law (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:

7.2 General Privacy Rights for All Users

Regardless of your state of residence, we extend the following privacy rights to all users of our services:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may update or correct inaccurate information through your account settings or by contacting us directly.
• Right to Deletion: You may request deletion of your account and associated personal data, subject to our legal and legitimate business obligations to retain certain information.
• Right to Withdraw Consent: Where our processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Object to Marketing: You may opt out of receiving marketing communications from us at any time.

7.3 How to Exercise Your Rights

To exercise any of the privacy rights described above, please submit a verifiable request through one of the following methods:

• Email: [email protected] — Please include "Privacy Rights Request" in the subject line.
• Website: food-tacotime.rest — Visit our website for our privacy request form.

We will verify your identity before processing your request to protect your privacy and security. We will respond to verifiable consumer requests within 45 days of receipt. If we require additional time (up to 90 days in total), we will notify you of the extension and the reason for the delay. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

You may designate an authorized agent to submit requests on your behalf. We will require verification of the authorized agent's authority and your identity before processing such requests.

8. Cookie Policy Summary

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, personalize content, and deliver targeted advertising. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the basic functionality of our website, such as remembering your login status and shopping cart contents. These cookies cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage statistics. We use tools such as Google Analytics for this purpose.
• Functionality Cookies: Remember your preferences and settings to provide a more personalized experience.
• Targeting and Advertising Cookies: Track your browsing activity to deliver relevant advertisements on our website and third-party platforms. These cookies may be set by our advertising partners.

You can manage your cookie preferences through our cookie consent banner displayed upon your first visit to the website, or through your browser settings. Please note that disabling certain cookies may impact the functionality of our website.

For comprehensive information about how we use cookies, including a complete list of cookies we use and instructions for managing your preferences, please visit our full Cookie Policy.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention practices include:

After the applicable retention period expires, we will securely delete, destroy, or anonymize your personal information. Where deletion is not immediately possible (such as data stored in backup archives), we will isolate the data from further processing until deletion is feasible.

10. Children's Privacy

We do not knowingly collect, use, or disclose personal information from individuals under 18 years of age. Our services, including online food ordering and account creation, are designed for adults only. If you are under 18, please do not use our website or submit any personal information to us.

If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will investigate the matter and promptly delete any personal information from our records upon verification.

In accordance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13 years of age. Any such information discovered in our systems will be deleted without delay.

11. International Data Transfers

Taco Time is based in the United States, and the personal information we collect is primarily stored and processed within the United States. However, our service providers and partners may be located in other countries, which means your personal information may be transferred to, stored, and processed in countries outside the United States.

If you are accessing our website from outside the United States, please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence. By using our services, you consent to the transfer of your information to the United States.

When we transfer personal information internationally, we take appropriate measures to ensure that adequate levels of data protection are in place, including:

• Implementing data processing agreements with third-party service providers
• Ensuring service providers adhere to equivalent data protection standards
• Relying on applicable legal bases for international data transfers
• Maintaining transparency about cross-border data flows

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or other online services. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of third-party websites or services, and we encourage you to review the privacy policies of any third-party sites you visit.

Social media features, such as share buttons or embedded feeds, may collect your IP address, the page you are visiting, and set cookies to enable the feature to function properly. Your interactions with these features are governed by the privacy policy of the company providing them.

13. Do Not Track Signals

Some web browsers may send "Do Not Track" (DNT) signals to websites indicating that you do not want to be tracked across websites. Currently, there is no uniform standard for how websites should respond to DNT signals. Our website does not respond to DNT signals from browsers at this time. However, you can manage tracking preferences through our cookie consent tools and your browser settings.

14. Your California Privacy Rights — Additional Disclosures

In addition to the rights described in Section 7, California residents are entitled to the following additional disclosures under the CCPA/CPRA:

14.1 Categories of Personal Information Collected

Over the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email address, IP address, account username)
• Personal information listed in California's Customer Records statute (phone number, address, payment information)
• Commercial information (purchase history, preferences)
• Internet or electronic network activity (browsing history, interactions with our website)
• Geolocation data (approximate location based on IP address or delivery address)
• Inferences drawn from personal information (user preferences and characteristics)

14.2 "Shine the Light" Law

California Civil Code Section 1798.83 (the "Shine the Light" law) permits California residents to request information about the disclosure of their personal information to third parties for direct marketing purposes. To make such a request, please contact us at [email protected].

15. Filing a Complaint

If you have a complaint about how we have handled your personal information and are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority.

15.1 California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Address: 2101 Arena Boulevard, Sacramento, CA 95834

15.2 Federal Consumer Protection

For concerns related to unfair or deceptive business practices, you may file a complaint with the Federal Trade Commission (FTC):

• Website: www.ftc.gov
• FTC Consumer Response Center: 1-877-FTC-HELP (1-877-382-4357)

15.3 State Attorneys General

Residents of any U.S. state may also contact their state's Attorney General's office regarding privacy concerns or consumer protection matters. We encourage you to contact us first to attempt to resolve any concerns before escalating to a regulatory body.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or services. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date
• Sending a notification email to registered users
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our website and services after the posting of changes constitutes your acceptance of such changes.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

When contacting us about a privacy matter, please provide sufficient information to allow us to locate your records, verify your identity, and respond to your request effectively. We aim to respond to all privacy inquiries within 30 business days.