Privacy Policy

This Privacy Policy describes how Taco Time ("we," "us," "our," or the "Company") collects, uses, discloses, and safeguards your personal information when you visit our website tacotime-food.click, place orders, use our services, or otherwise interact with us. Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described herein.

We are committed to protecting the privacy and security of your personal information. We comply with all applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations.

1. Who We Are

Taco Time is a food service business operating in the United States. Our contact information for all privacy-related inquiries is as follows:

For all privacy-related requests, inquiries, or concerns, please contact us using the email address listed above. We will respond to all legitimate privacy inquiries within the timeframes required by applicable law.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All visitors to our website at tacotime-food.click
• Customers who place food orders online or through our platform
• Individuals who create accounts or register with our service
• Newsletter subscribers and marketing communication recipients
• Any individual who contacts us via email, phone, or other communication channels
• Users who interact with us on third-party platforms or social media

This Privacy Policy does not apply to third-party websites, applications, or services that may be linked to from our website. We encourage you to review the privacy policies of any third-party services you visit.

3. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we collect include the following:

3.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name – to identify you and personalize communications
• Email address – for order confirmations, account management, and marketing (where consented)
• Phone number – for order delivery coordination and customer support
• Delivery address and billing address – to fulfill your food orders
• Date of birth or age verification data – where required by applicable law or our terms
• Username and password – to secure your account

3.2 Payment Information

When you make a purchase through our website, we collect payment-related information necessary to complete your transaction. Please note that we do not store your full credit or debit card numbers directly on our servers. Payment card data is processed by trusted, PCI-DSS compliant third-party payment processors. We may retain the last four digits of your card number, the card type, and expiration date solely for order reference and fraud prevention purposes.

3.3 Order and Transaction Data

We collect details about the food items you purchase, your order history, special requests or dietary preferences you communicate to us, delivery instructions, timestamps of purchases, and any loyalty or rewards program participation data.

3.4 Usage Data and Website Analytics

When you visit our website, we automatically collect certain information about how you interact with our digital properties, including:

• IP address
• Browser type and version
• Operating system
• Referring URLs (the page you visited before arriving at our website)
• Pages viewed and time spent on each page
• Clickstream data and navigation paths
• Search queries entered on our website
• Date and time of your visit
• Error logs and crash reports

3.5 Device Information

We may collect information about the device you use to access our services, including:

• Device type (desktop, mobile, tablet)
• Device identifier or unique device ID
• Mobile network information
• Screen resolution and display settings
• Hardware model and firmware version (for mobile applications, if applicable)

3.6 Location Data

If you permit location access through your browser or device settings, we may collect approximate or precise geolocation data to help determine delivery zones, recommend nearby options, or improve the accuracy of your orders. You can disable location tracking at any time through your browser or device settings.

3.7 Communications and Customer Support Data

When you contact us via email, telephone, or our website contact form, we collect the contents of those communications, including any personal information you choose to share in your messages, feedback forms, reviews, or survey responses.

3.8 Cookie and Tracking Technology Data

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect information about your browsing behavior and preferences. For more detailed information, please refer to Section 9: Cookie Usage of this Privacy Policy.

3.9 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms (if you connect your account or engage with our social media pages)
• Third-party food delivery aggregators or platforms that feature our menu
• Marketing partners and analytics providers
• Fraud prevention and identity verification services

4. How We Use Your Information

We use the personal information we collect for the following purposes, relying on applicable legal bases including your consent, contractual necessity, legitimate business interests, and compliance with legal obligations:

4.1 Service Provision and Order Fulfillment

• To process, confirm, and fulfill your food orders
• To coordinate delivery or pick-up logistics
• To manage your account and provide customer support
• To communicate with you about the status of your order
• To process payments and issue receipts or refunds

4.2 Communications

• To send order confirmations, receipts, and transactional notifications
• To respond to your inquiries, questions, or support requests
• To send service updates, policy changes, or important account-related information
• To notify you about changes to our menu, pricing, or operating hours

4.3 Marketing and Promotional Activities

Where you have provided consent or where permitted by applicable law, we may use your contact information to:

• Send newsletters, promotional offers, discount codes, and special deals
• Notify you about new menu items, seasonal promotions, or loyalty rewards
• Conduct targeted advertising campaigns through email or digital channels
• Invite you to participate in surveys, contests, or feedback programs

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

4.4 Analytics and Website Improvement

• To analyze how users interact with our website and identify areas for improvement
• To understand ordering patterns, popular menu items, and peak demand times
• To conduct A/B testing and usability research
• To monitor and improve website performance, speed, and reliability

4.5 Security and Fraud Prevention

• To detect, prevent, and investigate fraudulent, unauthorized, or illegal activities
• To protect the integrity of our website and payment systems
• To verify user identities where necessary
• To enforce our Terms of Service and other policies

4.6 Legal and Regulatory Compliance

• To comply with applicable federal and state laws and regulations
• To respond to lawful requests from government authorities or law enforcement
• To establish, exercise, or defend legal claims
• To maintain records required by tax, accounting, or food safety regulations

5. Sharing Your Information with Third Parties

We do not sell, rent, or lease your personal information to third parties for their independent marketing purposes. However, we may share your personal information with certain trusted third parties under the following circumstances:

5.1 Service Providers and Business Partners

We engage third-party companies and individuals to assist in operating our business and providing our services. These service providers may have access to your personal information only to the extent necessary to perform their services and are contractually obligated to maintain the confidentiality and security of your data. Categories of service providers include:

• Payment processors – to securely handle financial transactions
• Delivery and logistics partners – to coordinate food delivery
• Email and SMS marketing platforms – to send communications on our behalf
• Website hosting and cloud infrastructure providers
• Analytics services (such as Google Analytics) – to analyze website usage
• Customer support platforms – to manage support tickets and inquiries
• Fraud detection and cybersecurity firms

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request
• Protect and defend the rights or property of Taco Time
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our services or the public
• Protect against legal liability

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to a successor entity. We will notify you via email or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with other third parties when you have provided explicit consent for us to do so.

5.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or other purposes.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

6.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols.
• Secure Payment Processing: Payment information is handled by PCI-DSS compliant payment processors, ensuring your financial data is protected at the highest industry standards.
• Firewalls and Intrusion Detection Systems: Our servers are protected by firewalls and monitored by intrusion detection systems to identify and respond to potential threats.
• Data Encryption at Rest: Sensitive personal data stored in our databases is encrypted at rest to prevent unauthorized access.
• Access Controls: Access to personal data is restricted to authorized personnel who need the information to perform their job functions. All access is logged and monitored.

6.2 Administrative and Organizational Measures

• Regular employee training on data protection and privacy best practices
• Internal data protection policies and procedures
• Vendor due diligence and contractual data protection obligations
• Periodic security audits and vulnerability assessments

6.3 Data Breach Response

Despite our best efforts, no security system is impenetrable. In the event of a data breach that is reasonably likely to result in harm to you, we will notify affected individuals and relevant authorities in accordance with applicable state and federal breach notification laws, including the requirements of the FTC Act and applicable state data breach statutes.

7. Your Privacy Rights

Depending on your state of residence within the United States, you may have specific rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources from which we collected it, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (such as where retention is necessary for legal compliance or completing a transaction).
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. We do not sell your personal information for monetary compensation.
• Right to Limit Use of Sensitive Personal Information: Where we process sensitive personal information, you have the right to direct us to limit its use to what is necessary to perform the services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. We will not deny you services, charge different prices, or provide a different level of service because you exercised a privacy right.

To submit a verifiable consumer request under the CCPA/CPRA, please contact us at [email protected] with the subject line "California Privacy Rights Request." We will respond within 45 days of receiving your request, with the possibility of a 45-day extension where necessary.

7.2 Rights Available to All Users

Regardless of your state of residence, we extend the following rights to all users of our website and services:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You may request that we delete your personal information, subject to applicable legal retention requirements.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal information in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where we process your personal information based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time.

7.3 How to Exercise Your Rights

To exercise any of the rights described in this section, please submit a request to us by:

• Email: [email protected] with the subject line "Privacy Rights Request"

We may need to verify your identity before processing your request to protect you and ensure that personal information is not disclosed to unauthorized parties. Verification may involve confirming information already on file with us, such as your email address or order history.

We will not charge a fee for reasonable requests. If your request is excessive or unfounded, we may charge a reasonable fee or decline to respond, with written notice explaining our reasoning.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention principles are as follows:

When personal data is no longer required for its original purpose and no legal obligation requires its retention, we will securely delete, anonymize, or de-identify the data in accordance with our internal data disposal procedures.

9. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver relevant content and advertisements. By continuing to use our website, you consent to our use of cookies in accordance with this policy.

9.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function efficiently, provide information to website owners, and deliver personalized experiences to users.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly. Without these cookies, services such as the shopping cart and order placement cannot work.
• Performance and Analytics Cookies: These help us understand how visitors interact with our website by collecting and reporting information anonymously (e.g., Google Analytics).
• Functionality Cookies: These remember your preferences (such as your saved address or language preferences) to provide a more personalized experience.
• Targeting and Advertising Cookies: These may be set by our advertising partners to build a profile of your interests and display relevant advertisements on other websites.

9.3 Managing Cookies

You can control or disable cookies through your browser settings. Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling certain cookies may affect the functionality of our website. Instructions for managing cookies in popular browsers can be found at the browser manufacturer's help pages.

For more detailed information about our use of cookies, the specific cookies we use, and how to manage your preferences, please refer to our full Cookie Policy, which is available on our website.

10. Children's Privacy

Our services are not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are under the age of 18, please do not use our website or services without the supervision and consent of a parent or legal guardian.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take immediate steps to delete that information from our records. If you believe that a child under 13 has provided us with personal information without appropriate parental consent, please contact us immediately at [email protected].

This commitment is consistent with the requirements of the Children's Online Privacy Protection Act (COPPA), enforced by the Federal Trade Commission (FTC).

11. International Data Transfers

Taco Time is based in the United States, and your personal information is primarily collected, processed, and stored within the United States. However, some of our third-party service providers, technology partners, or infrastructure providers may be located in or operate from other countries.

If your personal information is transferred outside the United States, we take appropriate measures to ensure that such transfers comply with applicable privacy laws and that your information remains protected to the standards described in this Privacy Policy. These measures may include:

• Contractual clauses requiring third-party recipients to protect personal information
• Vendor assessments and due diligence reviews
• Data Processing Agreements that mandate compliance with applicable privacy standards

By using our services, you acknowledge and consent to the potential transfer of your information to countries outside your country of residence, including the United States, where privacy laws may differ from those in your jurisdiction.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, food delivery aggregators, or other online services that are not operated or controlled by us. This Privacy Policy does not apply to those third-party websites or services. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We strongly encourage you to review the privacy policy of every third-party website or service you visit. The inclusion of a link on our website does not imply any endorsement, sponsorship, or recommendation by Taco Time.

13. Do Not Track Signals

Some web browsers may transmit "Do Not Track" (DNT) signals to websites and online services. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our website does not currently alter its data collection and use practices in response to DNT signals from web browsers. We will continue to monitor the development of privacy standards in this area and update our practices accordingly.

California residents may also exercise their rights under the California "Shine the Light" law (California Civil Code Section 1798.83) to request information regarding the disclosure of their personal information to third parties for direct marketing purposes.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised Privacy Policy on our website at tacotime-food.click
• Where required by law or where we consider it appropriate, notify you by email or through a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this Privacy Policy are posted will constitute your acknowledgment of the changes and your consent to be bound by the updated policy.

15. Filing a Complaint

If you believe that we have not handled your personal information in accordance with applicable privacy laws or this Privacy Policy, we encourage you to contact us first so that we may address your concerns.

15.1 Contact Us Directly

Please submit your complaint or concern in writing to:

• Email: [email protected]
• Subject Line: Privacy Complaint

We will acknowledge receipt of your complaint within 10 business days and endeavor to resolve the matter within 45 days.

15.2 Filing a Complaint with the Federal Trade Commission (FTC)

If you are a United States resident and believe your privacy rights have been violated under applicable federal law, including the FTC Act, you may file a complaint with the Federal Trade Commission (FTC):

• Online: reportfraud.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, D.C. 20580

15.3 Filing a Complaint with State Authorities (California Residents)

If you are a California resident and believe your rights under the CCPA/CPRA have been violated, you may file a complaint with the California Privacy Protection Agency (CPPA):

• Online: cppa.ca.gov
• Email: [email protected]
• Address: California Privacy Protection Agency, 2101 Arena Boulevard, Sacramento, CA 95834

You may also contact the California Attorney General's Office regarding CCPA violations at oag.ca.gov/privacy/ccpa.

16. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us using the information below. We are committed to addressing your privacy-related inquiries promptly and transparently.