Privacy Policy

This Privacy Policy describes how Cabana Taco ("we," "us," "our," or "the Company") collects, uses, discloses, and protects your personal information when you visit our website at food-cabanataco.click, place orders, interact with our services, or otherwise engage with us. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and respect for your rights under applicable United States law.

Please read this Privacy Policy carefully. By accessing or using our website, placing an order, or otherwise interacting with Cabana Taco, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the practices described herein, please do not use our website or services.

1. About Us and How to Contact Us

Cabana Taco is a food service business operating in the United States. We are dedicated to providing our customers with high-quality food products and exceptional service. For any questions, concerns, or requests related to this Privacy Policy or your personal information, you may contact us using the details below:

We aim to respond to all privacy-related inquiries within 30 business days of receipt. For time-sensitive matters, we encourage you to clearly indicate the urgency in your communication.

2. Applicable Laws and Legal Framework

As a business operating in the United States, we comply with all applicable federal and state privacy and data protection laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act) — which prohibits unfair or deceptive practices in commerce, including misrepresentations about data collection and privacy.
• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) — which grants California residents specific rights regarding their personal information.
• The CAN-SPAM Act — which governs commercial email communications.
• The Children's Online Privacy Protection Act (COPPA) — which restricts the collection of personal information from children under 13.
• Other applicable state consumer protection and privacy laws across the United States.

Where applicable, we also follow industry best practices and guidelines established by the Federal Trade Commission (FTC) to ensure fair information practices and transparent data handling.

3. Information We Collect

We collect various categories of personal and non-personal information to provide, improve, and personalize our services. The types of information we collect are described below:

3.1 Personal Information You Provide Directly

When you use our website, place orders, create an account, subscribe to our newsletter, or otherwise communicate with us, you may voluntarily provide the following personal information:

• Identity Information: Full name, username or display name, and similar identifiers.
• Contact Information: Email address, phone number, billing address, delivery address, and other contact details.
• Account Information: Login credentials (username and password), account preferences, and profile information.
• Order and Transaction Information: Details of food orders placed, purchase history, payment method type (we do not store full credit card numbers), order preferences, dietary restrictions or preferences you choose to disclose, and transaction records.
• Communications: Messages, feedback, reviews, complaints, and other content you send to us via email, contact forms, or other channels.
• Marketing Preferences: Your subscription preferences, opt-in/opt-out choices for marketing communications, and survey responses.

3.2 Information Collected Automatically

When you visit our website, we and our third-party service providers may automatically collect certain technical and usage information, including:

• Device Information: IP address, device type, operating system and version, browser type and version, unique device identifiers, and mobile network information.
• Usage Data: Pages you visit on our website, links you click, search queries you enter, time and duration of visits, referring URLs, and navigation patterns.
• Location Data: General geographic location derived from your IP address (city, state, country). We do not collect precise GPS location without your explicit consent.
• Log Data: Server log files that include date and time of access, pages requested, server response codes, and other standard web log data.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies. See Section 8 (Cookie Usage) for more details.

3.3 Information From Third Parties

We may also receive information about you from third parties, including:

• Payment Processors: Confirmation of payment and transaction status from third-party payment processors.
• Analytics Providers: Aggregated analytics data from providers like Google Analytics.
• Social Media Platforms: If you interact with us on social media or use social login features, we may receive information from those platforms in accordance with your privacy settings on those platforms.
• Food Delivery Platforms: If you order through third-party delivery apps or platforms that partner with us, those platforms may share certain order-related information with us.

3.4 Sensitive Personal Information

We do not intentionally collect sensitive personal information such as Social Security numbers, financial account numbers, racial or ethnic origin, religious beliefs, or health information unless strictly necessary for a specific service (for example, dietary restriction information you voluntarily provide for customizing food orders). We handle any such sensitive information with heightened care and only for the stated purpose.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including confirming order receipt, preparing your order, and coordinating delivery or pickup.
• Managing your account and providing customer support.
• Sending you transactional communications, such as order confirmations, receipts, delivery updates, and important service notifications.
• Processing payments and preventing fraudulent transactions.

4.2 Business Operations and Service Improvement

• Analyzing usage patterns and trends to improve our website, menu offerings, and overall customer experience.
• Conducting internal research and development to create new features and services.
• Monitoring and maintaining the security and integrity of our website and systems.
• Complying with legal obligations and enforcing our Terms of Service.
• Detecting, investigating, and preventing fraudulent, harmful, or illegal activities.

4.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, special offers, discount codes, and updates about new menu items — but only where you have provided consent or where permitted by applicable law.
• Personalizing your experience on our website, including displaying relevant promotions, recommended menu items, and tailored content.
• Running loyalty programs, contests, sweepstakes, and other promotional activities.
• Retargeting and digital advertising campaigns through authorized third-party advertising platforms.

4.4 Legal and Compliance Purposes

• Complying with applicable federal, state, and local laws and regulations.
• Responding to lawful requests from government agencies, courts, or law enforcement authorities.
• Protecting the legal rights, property, and safety of Cabana Taco, our employees, customers, and the public.
• Resolving disputes and enforcing our agreements.

5. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill orders, provide services, and maintain your account.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, network security, and service improvement, provided those interests are not overridden by your privacy rights.
• Consent: Where required by law, we obtain your explicit consent before processing your data for specific purposes, such as marketing communications. You may withdraw consent at any time.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations.

6. Sharing Your Information With Third Parties

We do not sell, rent, or trade your personal information to third parties for their independent marketing purposes. However, we may share your information in the following circumstances:

6.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our business and delivering our services. These include:

• Payment Processors: To securely process transactions and prevent fraud.
• Cloud Hosting and Infrastructure Providers: To host our website and store data securely.
• Analytics Providers: Such as Google Analytics, to help us understand website usage and improve our services.
• Email and Marketing Service Providers: To send you transactional and promotional communications.
• Delivery and Logistics Partners: To coordinate food delivery services.
• Customer Support Platforms: To manage and respond to customer inquiries.

All our service providers are contractually obligated to use your personal information only as necessary to provide their services to us and to maintain appropriate security measures. They are prohibited from using your information for their own independent purposes.

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request.
• Enforce or apply our Terms of Service or other agreements.
• Protect the rights, property, or safety of Cabana Taco, our customers, employees, or others.
• Detect, prevent, or address fraud, security breaches, or technical issues.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar business transaction, your personal information may be transferred to the successor entity or acquiring party. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy, where required by law.

6.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data — which cannot reasonably be used to identify you — with third parties for research, analytics, marketing, or other business purposes without restriction.

7. Data Security

The security of your personal information is a top priority for Cabana Taco. We implement a comprehensive set of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, and destruction.

7.1 Security Measures We Employ

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our website. Sensitive data stored in our systems is encrypted at rest where appropriate.
• Access Controls: Access to personal information is restricted to authorized personnel who have a legitimate business need to access it. We enforce role-based access controls and require strong authentication.
• Secure Payment Processing: We use PCI-DSS compliant payment processors to handle payment card information. We do not store full credit card numbers on our servers.
• Regular Security Assessments: We conduct periodic security reviews, vulnerability assessments, and testing of our systems.
• Employee Training: Our staff members who handle personal data receive training on data protection and privacy best practices.
• Incident Response: We maintain a data breach response plan to promptly detect, investigate, and address any security incidents.

7.2 Limitations

Despite our best efforts, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activities that occur under your account.

8. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and support our marketing efforts. Cookies are small text files placed on your device by your web browser when you visit our website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly. These include session cookies, authentication cookies, and shopping cart cookies. These cannot be disabled.
• Performance and Analytics Cookies: Collect information about how visitors use our website, such as which pages are visited most often and any error messages encountered. We use tools like Google Analytics for this purpose.
• Functional Cookies: Allow the website to remember your preferences (such as your preferred language or region) and provide enhanced, more personalized features.
• Marketing and Advertising Cookies: Used to deliver advertisements relevant to you and your interests, and to limit the number of times you see an ad. They also help us measure the effectiveness of advertising campaigns.

8.2 Managing Your Cookie Preferences

You can control and manage cookies in several ways. Most web browsers allow you to refuse cookies or delete cookies that have already been set. You can also opt out of certain analytics and advertising cookies through tools such as the Google Analytics Opt-Out Browser Add-on and the Network Advertising Initiative's opt-out page.

Please note that disabling certain cookies may affect the functionality of our website and your ability to use certain features, such as placing orders online.

For more detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy, which is available on our website.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

When personal information is no longer required for any legitimate purpose, we will securely delete or anonymize it. In some circumstances, we may anonymize your personal information so that it can no longer be associated with you, in which case we may use such data without further notice to you.

10. Your Privacy Rights

Depending on your state of residence within the United States, you may have specific rights regarding your personal information. We respect and honor these rights as described below:

10.1 Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you, including details about how it is used and with whom it has been shared.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You may request that we delete your personal information, subject to certain exceptions (for example, where we are required to retain data for legal or accounting purposes).
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly.

10.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: The right to know what categories and specific pieces of personal information we collect, use, disclose, and sell about you.
• Right to Delete: The right to request deletion of personal information we have collected from you, subject to exceptions.
• Right to Correct: The right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: The right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. We do not currently sell personal information as defined under CCPA/CPRA.
• Right to Limit Use of Sensitive Personal Information: The right to limit our use of sensitive personal information to what is necessary to provide the services you requested.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality of service because you exercised your privacy rights.
• Right to Data Portability: The right to receive your personal information in a portable, readily usable format so that it can be transferred to another entity.

10.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a request to us by:

• Email: [email protected] — Please include "Privacy Rights Request" in the subject line.

We will verify your identity before processing your request to protect your privacy and prevent unauthorized access to your data. We will respond to verified requests within 45 days, and may extend this period by an additional 45 days where reasonably necessary, with prior notice to you.

You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide written authorization from you and will be required to verify their identity and authority.

11. Children's Privacy

Cabana Taco's website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, in compliance with the Children's Online Privacy Protection Act (COPPA).

We also strongly encourage parents and guardians to supervise their children's online activities and to educate them about safe internet practices. If you are between the ages of 13 and 17, please do not use our website without the consent and supervision of a parent or legal guardian.

If we discover that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete such information from our systems. If you are a parent or guardian and believe that your child has provided personal information to us without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

12. International Data Transfers

Cabana Taco is based in the United States, and the information we collect is governed by United States law. Our website is operated primarily for users located in the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers and service providers are located.

The data protection laws in the United States may differ from those in your country of residence. By using our website and services, you acknowledge and consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy and applicable U.S. law.

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with cross-border data transfer restrictions, we note that we rely on appropriate transfer mechanisms to legitimize any transfer of personal data outside your jurisdiction, including Standard Contractual Clauses where applicable. Please contact us for more information about the specific safeguards we use.

13. Third-Party Links and Services

Our website may contain links to third-party websites, apps, and services, including social media platforms, food delivery apps, and payment gateways. These third-party services operate independently of Cabana Taco and have their own privacy policies, which we encourage you to review.

We are not responsible for the privacy practices of third-party websites or services. Providing a link to a third-party website does not constitute an endorsement of that site or its privacy practices. Once you leave our website or are redirected to a third-party website, you are no longer governed by this Privacy Policy.

14. Do Not Track (DNT) Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. At this time, our website does not respond to DNT browser signals. However, you can manage your tracking preferences through cookie settings and the opt-out tools described in Section 8 of this Privacy Policy.

15. Marketing Communications and Opt-Out

With your consent, or where otherwise permitted under applicable law, we may send you promotional emails, newsletters, special offers, and other marketing communications about Cabana Taco's products and services.

You can opt out of receiving marketing communications from us at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email we send you.
• Contacting us directly at [email protected] with your opt-out request.

Please note that even if you opt out of marketing communications, we may still send you transactional and service-related communications, such as order confirmations, receipts, and important account notifications. These communications are necessary for the provision of our services and cannot be opted out of while you remain a customer.

We comply with the CAN-SPAM Act in all our commercial email communications. All marketing emails clearly identify Cabana Taco as the sender, include a valid physical postal address, and provide a clear and easy mechanism to opt out.

16. Filing Complaints

If you believe that we have handled your personal information in a manner that is inconsistent with this Privacy Policy or applicable law, we encourage you to first contact us directly so that we can attempt to resolve your concern:

• Email: [email protected]

If you are not satisfied with our response, you may have the right to file a complaint with a relevant regulatory authority. In the United States, applicable authorities include:

• Federal Trade Commission (FTC): Responsible for enforcing consumer protection and privacy laws at the federal level. You can file a complaint at ftc.gov/complaint.
• California Privacy Protection Agency (CPPA): For California residents, the CPPA enforces the CCPA/CPRA. You can learn more at cppa.ca.gov.
• State Attorney General's Office: Many state attorneys general have consumer protection divisions that handle privacy-related complaints. You may contact your state's attorney general for assistance.

17. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or improvements to our privacy practices. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post the revised Privacy Policy on our website at food-cabanataco.click.
• Where required by law or where we consider it appropriate, notify you by email or through a prominent notice on our website.

Your continued use of our website and services after the posting of any updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. If you do not agree with the changes, please discontinue your use of our website and contact us to close your account.

18. Accessibility

We are committed to making this Privacy Policy accessible and understandable to all users. If you have difficulty reading or understanding this Privacy Policy due to a disability or language barrier, please contact us at [email protected] and we will do our best to provide this information in an accessible format.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

This Privacy Policy was last reviewed and updated on May 27, 2026. Cabana Taco is committed to protecting your privacy and your trust in us as your preferred food service provider.