Privacy Policy

Welcome to Cabana Taco. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cabana-taco.click, place orders, or interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

This Privacy Policy applies to all information collected through our website, and any related services, sales, marketing, or events (collectively referred to as the "Services").

1. About Us

Cabana Taco is a food service business operating in the United States. We take your privacy seriously and are dedicated to being transparent about the data we collect and how we use it.

2. Information We Collect

We collect information about you in a variety of ways to provide and improve our Services. The categories of information we may collect include the following:

2.1 Personal Information You Provide to Us

When you interact with our website, place an order, sign up for a newsletter, create an account, or contact us directly, you may voluntarily provide us with personally identifiable information, including but not limited to:

• Contact Information: First name, last name, email address, phone number, mailing address, and billing address.
• Account Credentials: Username, password, and account preferences if you create an account with us.
• Order and Transaction Information: Details about the food items or services you purchase, order history, and special dietary requirements or preferences you share with us.
• Payment Information: Credit card numbers, debit card numbers, billing details, and other financial information necessary to process your payment. Please note that payment information is processed by secure, third-party payment processors, and we do not store full card details on our servers.
• Communications: Any messages, feedback, reviews, inquiries, or other content you submit to us via contact forms, email, or customer support channels.
• Marketing Preferences: Your preferences for receiving promotional communications and newsletters from us.

2.2 Information Collected Automatically

When you visit our website, certain information is automatically collected by our systems and third-party tools. This may include:

• Log and Usage Data: Internet Protocol (IP) address, browser type and version, operating system, referring URLs, pages visited, time spent on pages, links clicked, and date/time stamps of your visit.
• Device Information: Hardware model, device identifiers, mobile network information, and screen resolution.
• Location Data: General geographic location based on your IP address (city, state, country). We do not collect precise GPS-level location data unless you explicitly grant permission.
• Cookie and Tracking Data: Information collected via cookies, web beacons, pixel tags, and similar tracking technologies. Please see our Cookie Usage section (Section 8) for more details.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms if you interact with our social media accounts or log in using a social media account (e.g., Facebook, Google).
• Third-party delivery platforms and food ordering services that partner with us.
• Analytics and advertising partners who provide aggregated and/or pseudonymous data about website traffic and user behavior.
• Public databases and data brokers where permitted by law.

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes, including:

3.1 To Provide and Manage Our Services

• Processing and fulfilling your food orders and transactions.
• Managing your account and providing customer support.
• Sending order confirmations, receipts, and updates regarding your orders.
• Facilitating delivery logistics and coordinating with third-party delivery services.
• Responding to your inquiries, questions, and feedback.

3.2 To Improve and Personalize Our Services

• Analyzing website usage and user behavior to improve the functionality, layout, and content of our website.
• Understanding customer preferences and purchasing habits to refine our menu and service offerings.
• Personalizing your experience on our website, such as displaying menu items or promotions relevant to your past orders or browsing history.
• Conducting internal research, analytics, and product development.

3.3 For Marketing and Promotional Communications

• Sending you promotional emails, newsletters, special offers, and information about new menu items if you have opted in to receive such communications.
• Administering contests, promotions, surveys, and other marketing events.
• Displaying targeted advertisements on our website and third-party platforms based on your interests and browsing behavior.
• Measuring the effectiveness of our marketing campaigns.

You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any email we send, or by contacting us at [email protected].

3.4 For Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal obligations under United States federal and state law.
• Enforcing our Terms of Service and other agreements.
• Preventing fraud, unauthorized access, and other illegal activities.
• Protecting the rights, property, and safety of Cabana Taco, our customers, and the public.
• Responding to lawful requests from governmental and regulatory authorities.

3.5 For Business Operations

• Managing our business relationships and operations.
• Processing payments and preventing fraudulent transactions.
• Maintaining the security and integrity of our systems and website.
• Evaluating or conducting business transactions such as mergers, acquisitions, or asset sales.

4. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf. These service providers have access to your personal information only as necessary to perform their functions and are contractually obligated not to disclose or use it for any other purpose. Examples include:

• Payment Processors: To securely process payment transactions (e.g., Stripe, PayPal, Square).
• Delivery Services: Third-party delivery platforms and logistics providers to fulfill your orders.
• Email and Communication Services: To send transactional emails, newsletters, and marketing communications.
• Analytics Providers: Such as Google Analytics, to help us understand website usage and user behavior.
• Hosting and Technology Providers: Cloud hosting and IT service providers who support our website and data infrastructure.
• Customer Support Tools: Platforms that help us manage and respond to customer inquiries.
• Marketing and Advertising Platforms: Including social media advertising services (e.g., Meta Ads, Google Ads) to deliver targeted advertisements.

4.2 Legal Requirements and Law Enforcement

We may disclose your information when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request.
• Enforce our Terms of Service or protect against legal liability.
• Protect the rights, property, or safety of Cabana Taco, our users, or others.
• Investigate potential violations of applicable law, including under the Federal Trade Commission Act (FTC Act) and applicable state consumer protection statutes.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with other parties when we have obtained your explicit consent to do so.

5. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical security measures to protect your data from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website. Sensitive information such as payment details is encrypted in transit and at rest.
• Access Controls: Access to personal information is restricted to authorized personnel on a need-to-know basis. All employees and contractors with access to personal data are subject to confidentiality obligations.
• Secure Payment Processing: We work with PCI-DSS compliant payment processors and do not store full credit card information on our servers.
• Regular Security Audits: We periodically review and update our security practices and conduct vulnerability assessments to identify and address potential risks.
• Data Minimization: We collect only the personal information necessary for the purposes described in this Privacy Policy.
• Incident Response: We maintain procedures for detecting, investigating, and notifying affected individuals and relevant authorities of data breaches in accordance with applicable law.

6. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights with respect to your personal information. We are committed to honoring these rights in compliance with applicable federal and state law, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) for California residents, and other applicable state privacy laws.

6.1 Rights Available to All Users

• Right to Access: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the categories of third parties with whom we have shared it.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., where retention is necessary to complete a transaction, comply with a legal obligation, or for other lawful purposes).
• Right to Opt-Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you services, charge you different prices, or provide a different level of service because you exercised your rights.

6.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: The right to know what personal information we collect, use, disclose, and sell or share.
• Right to Data Portability: The right to receive a copy of your personal information in a portable and readily usable format.
• Right to Opt-Out of Sale or Sharing: The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. If we engage in such activities, we will provide a "Do Not Sell or Share My Personal Information" link on our website.
• Right to Limit Use of Sensitive Personal Information: The right to limit the use and disclosure of your sensitive personal information (as defined under CPRA) to what is necessary to perform the services you requested.
• Right to Correct: The right to request correction of inaccurate personal information.

To exercise your California privacy rights, please submit a verifiable consumer request to us using the contact information provided in Section 12 of this policy. We will respond to your request within 45 days of receipt, as required by the CCPA/CPRA.

6.3 How to Exercise Your Rights

To exercise any of your privacy rights, you may:

• Email us at: [email protected]
• Submit a written request using the contact details provided in Section 12.

We may need to verify your identity before processing your request. We will acknowledge your request and provide a substantive response within the timeframes required by applicable law. We will not charge a fee to process your request unless it is excessive or repetitive.

7. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, we do not currently respond to DNT browser signals. However, you can control tracking technologies through your browser settings and our Cookie preference tools, as described in Section 8 below.

8. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertisements. Cookies are small text files stored on your device when you visit a website.

8.1 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the website to function properly. They enable core features such as shopping cart functionality, login sessions, and security. You cannot opt out of these cookies.
• Performance and Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use tools such as Google Analytics for this purpose.
• Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences, language settings, and previous orders.
• Marketing and Advertising Cookies: These cookies are used to deliver relevant advertisements and track the effectiveness of our marketing campaigns across websites and social media platforms.

8.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for certain websites. Please note that disabling cookies may affect the functionality of our website and your ability to place orders online.

You may also opt out of interest-based advertising by visiting:

• Network Advertising Initiative Opt-Out
• Digital Advertising Alliance Opt-Out
• Google Analytics Opt-Out

For more detailed information about the cookies we use, their purposes, and how to manage them, please refer to our separate Cookie Policy available on our website.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention and disposal policies.

10. Children's Privacy

Cabana Taco's website and Services are not directed to individuals under the age of 18. We do not knowingly collect, use, or disclose personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected].

If we become aware that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete such information from our systems. We comply with the Children's Online Privacy Protection Act (COPPA) to the extent applicable and do not target our Services to minors.

We encourage parents and guardians to monitor their children's online activity and to help us ensure a safe online environment by informing us if they have any concerns about data collected from minors.

11. International Data Transfers

Cabana Taco is a United States-based business and our primary data processing activities occur within the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home country.

If we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law. These safeguards may include:

• Entering into standard contractual clauses approved by relevant data protection authorities.
• Ensuring that recipients of your data are certified under recognized data privacy frameworks.
• Implementing appropriate technical and organizational security measures.

By using our Services, you acknowledge and consent to the transfer and processing of your personal information in the United States as described in this Privacy Policy.

12. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us using the information below. We are committed to addressing your inquiries promptly and transparently.

When contacting us about a privacy request, please provide sufficient information for us to verify your identity and understand the nature of your request. We aim to respond to all privacy inquiries within 30 days, or within the timeframes required by applicable law.

13. Filing Complaints with Data Protection Authorities

If you believe that we have not adequately addressed your privacy concerns, you have the right to file a complaint with relevant governmental or regulatory authorities. In the United States, the following bodies handle consumer privacy complaints:

13.1 Federal Trade Commission (FTC)

The Federal Trade Commission enforces consumer protection laws, including those related to privacy and data security, under the FTC Act (15 U.S.C. § 41 et seq.). If you believe your privacy rights have been violated, you may file a complaint with the FTC:

• Website: reportfraud.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580

13.2 California Residents — California Privacy Protection Agency (CPPA)

If you are a California resident and believe your rights under the California Consumer Privacy Act (CCPA) or California Privacy Rights Act (CPRA) have been violated, you may file a complaint with the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Address: California Privacy Protection Agency, 2101 Arena Blvd, Sacramento, CA 95834

13.3 State Attorneys General

Many U.S. states have consumer protection offices within the State Attorney General's office that handle privacy-related complaints. You may also contact the attorney general of your state for assistance with privacy complaints related to businesses operating in your state.

We encourage you to contact us first at [email protected] so that we have the opportunity to address your concerns directly before you escalate to regulatory authorities.

14. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, and services that are not operated by us. If you click on a third-party link, you will be directed to that third party's website. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. Our inclusion of a link to a third-party website does not constitute an endorsement of that website or its privacy practices.

15. California "Shine the Light" Law

California Civil Code Section 1798.83, also known as the "Shine the Light" law, permits California residents to request and obtain, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year, and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year.

If you are a California resident and would like to make such a request, please submit your request in writing to us at [email protected].

16. Nevada Privacy Rights

Nevada Revised Statutes Chapter 603A allows Nevada residents to opt out of the sale of certain covered information to third parties. If you are a Nevada resident and wish to submit an opt-out request, please contact us at [email protected] with the subject line "Nevada Privacy Opt-Out Request."

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post the revised Privacy Policy on our website at cabana-taco.click.
• Where required by law or where changes are material, notify you by email at the address associated with your account, or by posting a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree with any modifications to this Privacy Policy, you should stop using our Services and, if applicable, delete your account by contacting us at [email protected].

18. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United States of America and applicable state laws. By using our Services, you agree that any dispute arising from or related to this Privacy Policy will be resolved in accordance with our Terms of Service and applicable United States law, including but not limited to:

• The Federal Trade Commission Act (15 U.S.C. § 41 et seq.) for consumer protection and unfair or deceptive practices.
• The California Consumer Privacy Act (Cal. Civ. Code § 1798.100 et seq.) and the California Privacy Rights Act, for California residents.
• The Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.
• The Electronic Communications Privacy Act (ECPA), 18 U.S.C. § 2510 et seq.
• Other applicable federal and state privacy and consumer protection statutes.

This Privacy Policy was last reviewed and updated on May 20, 2026. If you have any questions about this policy, please contact Cabana Taco at [email protected].