Privacy Policy

This Privacy Policy describes how Taco Time ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at tacotime-meal.rest, place orders, use our services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and respect.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please discontinue use of our website and services immediately.

This Privacy Policy applies to all users located in the United States. Where applicable, we comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable federal and state privacy laws.

1. About Us

Taco Time is a food service business operating in the United States. We provide food ordering, delivery, and related services to consumers through our website and other platforms.

For all privacy-related inquiries, requests, or concerns, please contact us at the email address listed above.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we may collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and shipping address (including street address, city, state, and ZIP code)
• Date of birth (where required for age verification)
• Username and password for account access
• Profile photo (if voluntarily uploaded)

2.2 Payment and Financial Information

When you make a purchase or complete a transaction on our platform, we may collect:

• Credit card or debit card details (card number, expiration date, CVV — processed securely through third-party payment processors)
• PayPal, Apple Pay, Google Pay, or other digital wallet information
• Billing address associated with your payment method
• Transaction history and order records

Please note that we do not store complete credit card numbers on our servers. Payment data is handled by PCI-DSS-compliant third-party payment processors.

2.3 Order and Food Preference Information

As a food service provider, we collect information related to your dining preferences and orders, including:

• Food items selected and ordered
• Dietary restrictions and preferences (e.g., vegetarian, gluten-free, allergies)
• Delivery instructions and special requests
• Order history and frequency
• Reviews, ratings, and feedback submitted about our food and services

2.4 Usage and Technical Data

When you visit our website, we automatically collect certain technical information about your device and browsing activity, including:

• IP address
• Browser type and version
• Operating system and device type (desktop, tablet, mobile)
• Pages visited and time spent on each page
• Referring website or URL (the page you came from before visiting our site)
• Links clicked and features used
• Date and time of your visits
• Unique device identifiers
• Crash reports and error logs

2.5 Location Data

With your permission, we may collect:

• Precise geolocation data from your device (GPS-based)
• Approximate location derived from your IP address
• Delivery address information you provide

You can disable location access through your device settings at any time.

2.6 Communications Data

If you contact us by email, phone, or through our website, we may collect:

• The content of your messages, emails, and support tickets
• Records of correspondence
• Information you provide when completing contact forms or surveys

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. For detailed information about how we use cookies, please refer to Section 8 of this policy.

2.8 Information from Third Parties

We may receive personal information about you from third-party sources, such as:

• Social media platforms (if you choose to log in or connect your account via Facebook, Google, or similar services)
• Third-party delivery platforms and partner services
• Analytics and advertising partners
• Fraud detection and identity verification services

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders and delivery requests
• To create and manage your user account
• To communicate order confirmations, updates, and delivery status notifications
• To respond to your customer service inquiries and support requests
• To process payments and manage billing
• To facilitate refunds, returns, or complaints

3.2 Personalization and User Experience

• To personalize your experience on our website and app
• To remember your food preferences and past orders for convenience
• To recommend menu items based on your order history and preferences
• To provide location-based services and nearby restaurant recommendations

3.3 Marketing and Promotional Communications

• To send you promotional emails, newsletters, special offers, and discount codes (with your consent where required)
• To conduct targeted advertising campaigns on third-party platforms
• To inform you about new menu items, seasonal promotions, and upcoming events
• To measure the effectiveness of our marketing campaigns

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected].

3.4 Analytics and Business Improvement

• To analyze website traffic and user behavior patterns
• To understand which menu items and features are most popular
• To improve our website performance, usability, and features
• To conduct market research and business analysis
• To identify and fix technical issues and bugs

3.5 Legal Compliance and Security

• To comply with applicable federal and state laws and regulations
• To detect, prevent, and investigate fraud, security breaches, and illegal activity
• To enforce our Terms of Service and other agreements
• To respond to legal requests, court orders, or government inquiries
• To protect the rights, property, and safety of Taco Time, our customers, and others

3.6 Legitimate Business Operations

• To maintain business records and audit trails
• To manage our business relationships with vendors and partners
• To evaluate and improve the quality of our food and services
• To conduct internal training and quality assurance programs

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information with trusted third parties in the following circumstances:

4.1 Service Providers and Vendors

We work with third-party service providers who assist us in operating our business and delivering services to you. These providers may have access to your personal information only to the extent necessary to perform their services on our behalf. Categories of service providers include:

• Payment processors (e.g., Stripe, Square, PayPal) — to securely handle transactions
• Delivery logistics partners — to fulfill delivery orders
• Email and marketing platforms — to send communications
• Analytics providers (e.g., Google Analytics) — to analyze website usage
• Cloud hosting and IT infrastructure providers — to store and manage data
• Customer support software providers — to manage support tickets
• Fraud prevention services — to detect and prevent fraudulent activity

All service providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.

4.2 Business Transfers

In the event of a merger, acquisition, sale of assets, corporate reorganization, or other business transaction, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and if your data will be subject to a different privacy policy.

4.3 Legal Requirements and Law Enforcement

We may disclose your personal information to government authorities, law enforcement agencies, or other third parties when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or governmental request
• Enforce our Terms of Service or protect our legal rights
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our services or the general public
• Protect against legal liability

4.4 Advertising and Analytics Partners

We may share aggregated, anonymized, or de-identified data with advertising networks and analytics companies to help us understand how our services are being used and to deliver relevant advertising. This data cannot be used to directly identify you.

4.5 With Your Consent

We may share your personal information with other third parties when you have given us explicit consent to do so, or when you have directed us to share your information as part of a specific service or feature.

5. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical security measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

5.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive personal data stored on our servers is encrypted using strong encryption algorithms.
• Firewalls and Intrusion Detection: We use firewalls and intrusion detection systems to monitor and protect our network infrastructure.
• Secure Payment Processing: We rely on PCI-DSS compliant third-party processors and do not store sensitive payment card information on our own systems.
• Access Controls: Access to personal data is restricted to authorized personnel who have a legitimate business need to access it.

5.2 Administrative Safeguards

• Regular employee training on data privacy and security best practices
• Data handling policies and internal procedures to minimize data access
• Confidentiality agreements with employees and contractors who handle personal data
• Regular security risk assessments and policy reviews

5.3 Incident Response

In the event of a data breach that affects your personal information, we will notify you in accordance with applicable state and federal breach notification laws. If you are a California resident, we will comply with notification requirements under California Civil Code Section 1798.29 and 1798.82.

6. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. We are committed to honoring these rights in accordance with applicable law.

6.1 Rights for All U.S. Users

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you.
• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information about you.
• Right to Deletion: You may request that we delete your personal information, subject to certain exceptions (e.g., where retention is required by law or for legal proceedings).
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time.

6.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know (Detailed): The right to know the categories of personal information collected, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom it is shared.
• Right to Data Portability: The right to receive a copy of your personal information in a portable, readily usable format.
• Right to Opt-Out of Sale or Sharing: The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. You may submit an opt-out request by contacting us at [email protected].
• Right to Limit Use of Sensitive Personal Information: The right to limit our use of your sensitive personal information to only what is necessary to provide the services you request.
• Right to Non-Discrimination: You have the right not to be discriminated against for exercising any of your CCPA/CPRA privacy rights. We will not deny you goods or services, charge you different prices, or provide a lower quality of service because you exercised your privacy rights.
• Right to Correct: The right to request correction of inaccurate personal information we maintain about you.

6.3 How to Submit a Privacy Rights Request

To exercise any of the rights described above, please contact us using one of the following methods:

• Email: [email protected] (include "Privacy Rights Request" in the subject line)
• Website: tacotime-meal.rest

We will respond to verifiable consumer requests within 45 days of receipt. If we require more time (up to 90 days), we will notify you of the extension within the initial 45-day period. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

To protect your security, we may need to verify your identity before processing your request. We will ask you to provide information that matches the information we have on file.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, to provide you with our services, to comply with legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

When your personal data is no longer required, we will securely delete or anonymize it in accordance with our data retention schedule and applicable legal requirements.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising.

8.1 What Are Cookies?

Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit our website. They allow us to recognize your browser, remember your preferences, and provide a personalized experience.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website, including enabling you to log in, add items to your cart, and complete orders. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting anonymous usage information.
• Functionality Cookies: Allow us to remember your preferences (such as language settings, saved addresses, and food preferences) to provide a more personalized experience.
• Targeting and Advertising Cookies: Used to deliver relevant advertisements to you on our website and across other websites based on your browsing behavior.

8.3 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings or our cookie consent manager on the website. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders.

You can also opt out of targeted advertising from certain providers by visiting:

• Network Advertising Initiative Opt-Out
• Digital Advertising Alliance Opt-Out

For more detailed information about the specific cookies we use, their purposes, and how to manage them, please refer to our full Cookie Policy available on our website at tacotime-meal.rest.

9. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or use personal information from children under the age of 13, or process personal data from minors under the age of 18 without parental or guardian consent.

Our practices are consistent with the Children's Online Privacy Protection Act (COPPA), which restricts the online collection of personal information from children under 13.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without verified parental consent, we will take immediate steps to delete that information from our systems. If you believe that we may have collected information from a minor, please contact us immediately at [email protected].

Parents and guardians who discover that their child has provided personal information to us without consent should contact us so that we can promptly remove such information and cancel any associated account.

10. International Data Transfers

Taco Time is a United States-based business, and your personal information is primarily stored and processed within the United States. However, we may use third-party service providers and technology partners whose servers or operations may be located in other countries.

If your personal information is transferred to, stored in, or processed in a country other than the United States, we will ensure that appropriate safeguards are in place to protect your information in accordance with applicable privacy laws. These safeguards may include:

• Contractual clauses requiring adequate data protection measures by the receiving party
• Transfers to countries or organizations that provide an adequate level of data protection as recognized by relevant authorities
• Other legally approved transfer mechanisms

By using our website and services from outside the United States, you acknowledge that your personal information may be transferred to and processed in the United States, where privacy laws may differ from those in your home country.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Taco Time. This Privacy Policy does not apply to those third-party sites or services. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We strongly encourage you to review the privacy policy of every website you visit before submitting any personal information. The inclusion of a link on our website does not imply our endorsement of that website or service.

Third-party integrations that may be present on our website include, but are not limited to:

• Google Analytics (website analytics)
• Google Maps (delivery location services)
• Meta/Facebook Pixel (advertising and retargeting)
• Payment gateway providers
• Social media share and login buttons

12. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. At this time, there is no universally accepted standard for how websites should respond to DNT signals, and our website does not currently alter its data collection practices in response to DNT signals.

However, we do provide you with choices regarding the collection and use of your personal information through our cookie management tools and opt-out mechanisms described in this Privacy Policy.

13. California-Specific Disclosures

This section provides additional disclosures required under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) for California residents.

13.1 Categories of Personal Information Collected (Past 12 Months)

13.2 Shine the Light Law

California Civil Code Section 1798.83 (the "Shine the Light" law) permits California residents who have provided personal information to us to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us at [email protected].

14. How to File a Privacy Complaint

If you have concerns about how we handle your personal information and you are not satisfied with our response, you have the right to file a complaint with applicable data protection or consumer protection authorities.

14.1 Contacting Us First

We encourage you to contact us directly first so we can address your concern promptly:

• Email: [email protected]
• Subject Line: "Privacy Complaint"
• Website: tacotime-meal.rest

We will acknowledge receipt of your complaint within 5 business days and aim to resolve all privacy complaints within 30 days.

14.2 Regulatory Authorities

If you are a California resident, you may also file a complaint with:

• California Privacy Protection Agency (CPPA)
  Website: cppa.ca.gov
  The CPPA is responsible for enforcing the CCPA/CPRA.
• California Attorney General's Office
  Website: oag.ca.gov/privacy

For general consumer protection complaints, any U.S. resident may contact:

• Federal Trade Commission (FTC)
  Website: ftc.gov
  Consumer Helpline: 1-877-FTC-HELP (1-877-382-4357)

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website
• Send an email notification to registered users where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the posting of changes constitutes your acceptance of those changes.

If we make changes that materially affect your rights or our use of your personal information in ways that require your consent, we will obtain that consent before implementing the changes.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your inquiries promptly and transparently.

When contacting us regarding a privacy matter, please include the following information to help us address your request efficiently:

• Your full name and contact information
• A description of your privacy concern or the right you wish to exercise
• Your account username or order number (if applicable)
• Your state of residence