Privacy Policy

This Privacy Policy describes how Papa Ginos ("we," "us," "our," or "the Company") collects, uses, shares, and protects your personal information when you visit our website at food-papaginos.rest, place an order, or otherwise interact with our services. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

By accessing or using our website, placing an order, or otherwise providing us with your personal information, you acknowledge that you have read, understood, and agree to the terms described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our services or provide us with your personal information.

We are committed to protecting your privacy and handling your personal information responsibly, in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act governing unfair or deceptive practices.

1. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we may collect include the following:

1.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, participate in promotions, or contact our customer service team, we may collect personal identification information such as:

• Full name
• Email address
• Phone number
• Billing and delivery address (street address, city, state, ZIP code)
• Date of birth (where required for age verification or promotional purposes)
• Username and password for account access

1.2 Payment and Financial Information

To process your orders, we may collect payment-related information, including:

• Credit or debit card number (last four digits only, stored for reference)
• Billing address associated with your payment method
• Payment processor transaction identifiers

Please note that full payment card details are processed securely through our third-party payment processors and are not stored on our servers. We do not directly store complete credit or debit card numbers.

1.3 Order and Transaction Information

We collect information about your purchases and transactions with us, including:

• Items ordered and quantities
• Order history and preferences
• Special instructions or dietary preferences you provide
• Delivery address and instructions
• Transaction dates, times, and amounts

1.4 Usage Data and Technical Information

When you visit our website, we automatically collect certain technical and usage data, including:

• IP address
• Browser type and version
• Operating system
• Referring URLs (the page that brought you to our site)
• Pages viewed and time spent on each page
• Links clicked
• Search queries entered on our website
• Date and time of your visit
• Geographic location (city and state level, derived from IP address)

1.5 Device Information

We may collect information about the device you use to access our website, including:

• Device type (desktop, mobile, tablet)
• Device identifiers
• Mobile network information
• Screen resolution and display settings

1.6 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. This includes session cookies, persistent cookies, and third-party cookies used for analytics and advertising purposes. For more detailed information about our use of cookies, please refer to Section 7 of this Privacy Policy.

1.7 Communications and Feedback

When you contact us via email, phone, or through our website's contact form, we collect the content of your communications, including any feedback, complaints, or inquiries you submit. We may also record calls to our customer service team for training and quality assurance purposes, with appropriate notice given at the time of the call.

1.8 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Third-party food delivery platforms (if you place an order through a partner platform)
• Social media platforms (if you choose to connect your account or interact with our social media pages)
• Analytics providers
• Advertising partners
• Fraud prevention and security services

2. How We Use Your Information

We use the personal information we collect for the following purposes:

2.1 Service Provision and Order Fulfillment

We use your personal information primarily to provide you with our food ordering and delivery services, including:

• Processing and fulfilling your food orders
• Communicating with you about your order status, delivery updates, and any issues that arise
• Managing your account and preferences
• Processing payments and refunds
• Providing customer support and resolving disputes

2.2 Analytics and Service Improvement

We analyze how our website is used to improve our services and user experience:

• Understanding which menu items are most popular
• Analyzing website traffic patterns and user behavior
• Identifying technical issues and improving website performance
• Developing new features and services
• Conducting internal research and business analytics

2.3 Marketing and Promotions

With your consent where required by law, we may use your information to:

• Send you promotional emails about special offers, new menu items, and discounts
• Deliver targeted advertisements on our website and third-party platforms
• Send text message (SMS) marketing communications, where you have opted in
• Notify you about loyalty program updates and rewards
• Conduct surveys and request feedback about your experience

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails, replying "STOP" to SMS messages, or by contacting us directly at [email protected].

2.4 Legal Compliance and Safety

We may use your personal information to:

• Comply with applicable laws, regulations, and legal processes
• Respond to lawful requests from law enforcement and government authorities
• Enforce our Terms of Service and other agreements
• Detect, prevent, and investigate fraud, security breaches, and other illegal activities
• Protect the rights, property, and safety of Papa Ginos, our customers, and the public

2.5 Personalization

We use your order history and preferences to personalize your experience on our website, including suggesting menu items you may enjoy, remembering your delivery address, and customizing promotional content relevant to your interests.

3. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your information in the following circumstances:

3.1 Service Providers

We engage trusted third-party companies and individuals to perform services on our behalf. These service providers have access to your personal information only as necessary to perform their functions and are contractually obligated to maintain the confidentiality and security of your data. Our service providers include:

• Payment Processors: To securely process your payment transactions
• Delivery Partners: To fulfill and deliver your food orders
• Cloud Hosting Providers: To store our data and host our website
• Email Marketing Platforms: To send you communications and promotional emails
• Analytics Providers: Such as Google Analytics, to help us understand website usage
• Customer Support Platforms: To manage and respond to customer inquiries
• Fraud Prevention Services: To detect and prevent fraudulent activity

3.2 Business Transfers

If Papa Ginos is involved in a merger, acquisition, asset sale, or other business combination, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

3.3 Legal Requirements

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, or governmental request
• Enforce our Terms of Service or other agreements
• Protect and defend the rights or property of Papa Ginos
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our services or the public
• Protect against legal liability

3.4 Advertising Partners

We may share limited information with advertising partners to deliver targeted advertisements. This may include sharing anonymized or aggregated data, or sharing data through cookies and tracking technologies. We require our advertising partners to comply with applicable privacy laws and our data sharing agreements.

3.5 With Your Consent

We may share your personal information with other third parties with your explicit consent, in cases not described above.

4. Data Security

We take the security of your personal information seriously and implement a variety of technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction.

4.1 Security Measures

Our security practices include:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology to encrypt data transmitted between your browser and our servers.
• Access Controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions.
• Secure Data Storage: Personal data is stored on secure servers with appropriate technical safeguards.
• Regular Security Assessments: We conduct periodic reviews of our security practices and systems.
• Employee Training: Our staff receive training on data protection and privacy best practices.
• Incident Response Plan: We maintain procedures for detecting, reporting, and investigating personal data breaches.

4.2 Payment Security

Our payment processing systems are designed to comply with the Payment Card Industry Data Security Standard (PCI-DSS). We do not store full credit or debit card numbers on our servers. All payment transactions are processed through our secure, third-party payment processors.

4.3 Limitations

While we implement robust security measures, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your personal information, and we encourage you to take steps to protect your own account, such as using a strong password and keeping your login credentials confidential.

5. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We respect and honor these rights in accordance with applicable law.

5.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

5.2 General Privacy Rights (All Users)

Regardless of your state of residence, we provide the following privacy rights to all users:

• Right to Access: You may request access to the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Data Portability: Where technically feasible, you may request a copy of your personal information in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where we rely on your consent to process your personal information, you may withdraw your consent at any time.
• Right to Object to Marketing: You may object to receiving direct marketing communications from us at any time.

5.3 How to Exercise Your Rights

To exercise any of the rights described in this section, please contact us using the following methods:

• Email: [email protected]
• Website: food-papaginos.rest

We will respond to your request within 45 days. If we need additional time, we will notify you of the extension and the reason for it within the initial 45-day period. We may need to verify your identity before processing your request. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations.

6.1 Retention Periods

After the applicable retention period, we will securely delete or anonymize your personal information so that it can no longer be associated with you. In some cases, we may retain anonymized, aggregated data for analytical purposes indefinitely.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website, analyze website traffic, and deliver personalized content and advertisements.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the operation of our website, enabling you to navigate the site and use its features, such as adding items to your cart.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often. We use this information to improve our website.
• Functional Cookies: These cookies allow our website to remember choices you make (such as your preferred language or delivery address) and provide enhanced features.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements relevant to you and your interests. They may also be used to limit the number of times you see an advertisement.

7.2 Managing Your Cookie Preferences

You can control and manage cookies in several ways. Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies, delete existing cookies, or alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of our website.

For more detailed information about the specific cookies we use and how to manage them, please refer to our separate Cookie Policy available on our website at food-papaginos.rest.

8. Children's Privacy

Papa Ginos does not direct its services to minors, and we do not knowingly collect, use, or disclose personal information from individuals under the age of 18 without verifiable parental consent. Our website and online ordering services are not designed for or directed at children.

If we become aware that we have inadvertently collected personal information from a child under 18 without appropriate parental consent, we will take prompt steps to delete such information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

Our practices regarding children's privacy are also governed by the Children's Online Privacy Protection Act (COPPA), where applicable.

9. International Data Transfers

Papa Ginos operates primarily within the United States. However, some of our service providers and partners may be located in other countries, which means that your personal information may be transferred to, stored, and processed in countries outside the United States.

9.1 Data Transfer Safeguards

When we transfer personal information outside the United States, we take appropriate measures to ensure that your information receives an adequate level of protection, including:

• Entering into data transfer agreements with our international service providers that incorporate appropriate data protection clauses
• Ensuring that third countries to which data is transferred provide an adequate level of protection
• Implementing technical and organizational security measures to protect data during transfer

9.2 Consent to Transfer

By using our website and services, you consent to the transfer of your personal information to the United States and other countries where our service providers operate, subject to the safeguards described in this section.

10. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to those third-party sites, and we are not responsible for the privacy practices of those websites.

We encourage you to review the privacy policies of any third-party websites you visit. Links to third-party websites do not constitute an endorsement by Papa Ginos of those websites or their content, products, or services.

11. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Currently, there is no universally accepted standard for how to respond to DNT signals. At this time, our website does not alter its data collection and use practices in response to DNT signals from web browsers.

However, we do provide you with other mechanisms to control your privacy, including cookie preferences and marketing opt-outs, as described in this Privacy Policy.

12. FTC Act Compliance

Our privacy practices are designed to comply with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce. We are committed to transparent and accurate disclosure of our data collection and use practices, and we will not engage in deceptive practices regarding the privacy of your personal information.

If you believe that we have engaged in unfair or deceptive privacy practices, you have the right to file a complaint with the Federal Trade Commission (FTC). Information on how to contact the FTC is provided in Section 14 of this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on our website with a new "Last Updated" date at the top
• Send you an email notification if the changes are significant and we have your email address on file
• Display a prominent notice on our website for a reasonable period

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website or services after the posting of an updated Privacy Policy constitutes your acceptance of the changes.

14. How to File a Complaint

If you have concerns about our privacy practices that we have not satisfactorily resolved, you have the right to file a complaint with the relevant data protection or consumer protection authorities.

14.1 Federal Trade Commission (FTC)

The FTC is the primary federal consumer protection agency in the United States. You can file a complaint about our privacy practices with the FTC:

• Online: reportfraud.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Mail: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

14.2 California Attorney General (California Residents)

If you are a California resident, you may also submit a complaint to the California Privacy Protection Agency (CPPA) or the California Attorney General's office regarding our compliance with the CCPA/CPRA:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

14.3 State Attorney General Offices

Residents of other states may contact their respective state attorney general's office for consumer protection and privacy-related complaints. Contact information for your state attorney general can typically be found through your state government's official website.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

When contacting us about a privacy matter, please include the following information to help us respond to your request efficiently:

• Your full name
• Your email address or account details
• A clear description of your question, concern, or request
• Your state of residence (for rights-specific requests)

We will respond to your inquiry as promptly as possible, and in no event later than 45 days from receipt of your request, unless a longer period is permitted by applicable law.