Privacy Policy

This Privacy Policy explains how Papa Ginos ("we," "us," "our," or "the Company") collects, uses, discloses, and safeguards your personal information when you visit our website at food-papaginos.digital, place orders online, use our services, or interact with us in any way. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services immediately.

We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy is designed to comply with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable regulations governing the collection and use of personal information.

1. About Us

Papa Ginos is a food service business operating in the United States. Our contact details are as follows:

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us using the information provided above or refer to the dedicated contact section at the end of this document.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All visitors to our website at food-papaginos.digital
• Customers who place orders online or through our digital platforms
• Users who create accounts or register on our website
• Individuals who sign up for our newsletters, promotions, or loyalty programs
• Any person who contacts us for customer support or general inquiries
• Users who interact with us through social media or third-party platforms linked to our services

This policy does not apply to third-party websites, applications, or services that may be linked to or from our website. We encourage you to review the privacy policies of those third parties independently.

3. Information We Collect

We collect several types of information in connection with your use of our website and services. The categories of personal information we may collect include:

3.1 Personal Identification Information

When you register an account, place an order, or otherwise interact with us, we may collect personal information that identifies you, including but not limited to:

• Full name
• Email address
• Mailing address and delivery address
• Phone number
• Date of birth (for age verification and promotional purposes)
• Account username and password

3.2 Payment and Financial Information

To process your orders and transactions, we may collect certain payment-related information, including:

• Credit card or debit card details (processed through secure third-party payment processors)
• Billing address
• Transaction history and order records

Please note that we do not store your full payment card number on our servers. Payment information is processed by PCI-DSS-compliant third-party payment processors who maintain their own security standards.

3.3 Order and Transaction Data

When you place orders through our website, we collect information such as:

• Items ordered, including menu selections and customizations
• Order date, time, and frequency
• Delivery preferences and special instructions
• Order history and past purchases

3.4 Usage and Technical Data

We automatically collect certain technical information when you visit our website or use our digital services, including:

• IP address
• Browser type and version
• Operating system and device type
• Pages visited and time spent on each page
• Links clicked and navigation paths
• Referring URLs (the website or search engine that referred you to us)
• Date and time of your visit
• Crash reports and error logs

3.5 Cookie and Tracking Data

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing behavior and preferences. For more detailed information about how we use cookies, please refer to Section 9 of this policy.

3.6 Location Data

With your consent, we may collect approximate or precise location data to help you find nearby store locations, provide relevant delivery options, and personalize your experience. You can disable location sharing through your browser or device settings at any time.

3.7 Communications and Customer Support Data

When you contact us for support, submit feedback, or communicate with us by email, telephone, or through our website forms, we may collect:

• The content of your messages and inquiries
• Your contact information as provided in the communication
• Records of correspondence for quality assurance and legal compliance purposes

3.8 Marketing Preferences

If you sign up for our email newsletters, promotional offers, or loyalty programs, we will collect your preferences, interests, and subscription status to send you relevant communications.

3.9 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms if you connect your account or interact with our social media pages
• Analytics providers
• Advertising partners
• Delivery and logistics partners

4. How We Use Your Information

We use the personal information we collect for a variety of purposes, all of which are described below. We only process your personal information where we have a lawful basis to do so.

4.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, including arranging delivery or pickup
• To create and manage your account
• To send order confirmations, receipts, and delivery updates
• To process payments and handle billing inquiries
• To respond to customer service requests and resolve disputes

4.2 Website and Service Improvement

• To analyze usage patterns and improve the functionality and design of our website
• To identify and fix technical issues or bugs
• To develop new features, products, and services
• To conduct internal research and analytics

4.3 Marketing and Promotional Communications

• To send you promotional emails, special offers, discount codes, and newsletters (where you have consented or as otherwise permitted by law)
• To personalize content and advertisements based on your preferences and order history
• To run loyalty programs and reward campaigns
• To conduct surveys and collect feedback

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send or by contacting us at [email protected].

4.4 Legal Compliance and Safety

• To comply with applicable federal and state laws and regulations
• To enforce our Terms of Service and other applicable agreements
• To detect, prevent, and investigate fraud, unauthorized access, or other illegal activities
• To protect the rights, property, and safety of our customers, employees, and the public
• To respond to lawful requests from law enforcement or government authorities

4.5 Business Operations

• To manage our business operations and internal administrative functions
• To evaluate and conduct mergers, acquisitions, or other corporate transactions
• To maintain accurate business records

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our website and delivering our services. These may include:

• Payment processors — to handle secure payment transactions
• Delivery and logistics partners — to fulfill food delivery orders
• Email and communications platforms — to send transactional and marketing emails
• Analytics providers (e.g., Google Analytics) — to analyze website usage
• Cloud hosting and IT infrastructure providers — to store and manage data
• Customer support software providers — to manage inquiries and support tickets
• Marketing and advertising platforms — to deliver targeted advertisements

All third-party service providers are contractually required to process your data only for specified purposes and in accordance with applicable privacy laws and our instructions. They are not permitted to use your data for their own independent purposes.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal processes, including:

• Court orders, subpoenas, or other legal demands
• Requests from federal, state, or local law enforcement agencies
• Regulatory investigations or proceedings
• Situations where disclosure is necessary to prevent harm, fraud, or illegal activity

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as part of the business transaction. We will notify you by email and/or a prominent notice on our website before your information becomes subject to a different privacy policy.

5.4 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or business development purposes.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards to protect it from unauthorized access, loss, misuse, alteration, or disclosure.

6.1 Security Measures We Employ

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols.
• Access Controls: We restrict access to personal information to authorized employees and contractors who have a business need to access it.
• Firewalls and Intrusion Detection: We use firewalls, intrusion detection systems, and other security technologies to protect our networks and servers.
• Data Minimization: We collect only the personal information necessary for the purposes described in this policy.
• Regular Security Audits: We periodically review and update our security practices to address emerging threats.
• Secure Payment Processing: Payment card data is processed by PCI-DSS-compliant payment processors.

6.2 Data Breach Response

In the event of a data breach that affects your personal information, we will notify affected individuals and relevant regulatory authorities in accordance with applicable state breach notification laws, including those applicable in your state of residence. Notifications will be provided within the timeframes required by law.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We respect and honor these rights as required by applicable law.

7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

7.2 General Privacy Rights for All U.S. Users

Regardless of your state of residence, we offer all users the following options:

• Access and Review: You may access and review the personal information associated with your account by logging in and visiting your account settings.
• Correction: You may update or correct your personal information through your account settings or by contacting us.
• Deletion: You may request deletion of your account and associated personal data by contacting us.
• Opt-Out of Marketing: You may unsubscribe from marketing emails at any time using the unsubscribe link in any promotional communication.
• Cookie Preferences: You may manage cookie settings through your browser or our cookie consent tool.

7.3 How to Submit a Privacy Rights Request

To exercise any of your privacy rights, please contact us by:

• Email: [email protected]
• Website: food-papaginos.digital

We will acknowledge your request within 10 business days and respond substantively within 45 calendar days of receipt. If we require additional time, we will notify you of the extension and the reason for the delay. We may need to verify your identity before processing your request to protect the security of your information.

7.4 Authorized Agents

California residents may designate an authorized agent to submit a privacy rights request on their behalf. The authorized agent must provide written authorization signed by you, and we may require you to verify your identity directly before fulfilling the request.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention periods we apply are as follows:

When personal information is no longer needed for any of the above purposes, we will securely delete, destroy, or anonymize it in accordance with our data retention procedures.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content and advertising.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the basic functionality of our website, such as maintaining your login session and processing orders. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting usage data. We use tools such as Google Analytics for this purpose.
• Functional Cookies: Allow our website to remember your preferences, such as your location, language, and stored cart items.
• Targeting and Advertising Cookies: Used to deliver relevant advertisements on our website and across third-party platforms based on your browsing behavior.

9.2 Managing Your Cookie Preferences

You can control cookie settings through:

• Your web browser settings (most browsers allow you to refuse or delete cookies)
• Our on-site cookie consent banner or preference center
• Third-party opt-out tools such as the Network Advertising Initiative Opt-Out Tool or Digital Advertising Alliance Opt-Out

Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders or access certain features.

For more information about the specific cookies we use, their purpose, and their retention periods, please refer to our Cookie Policy available on our website.

10. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or use personal information from children under the age of 13 without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA).

We also do not knowingly market to, or target users under the age of 18. If you are under 18 years of age, please do not use our website or submit any personal information to us without the supervision and consent of a parent or legal guardian.

If we discover that we have inadvertently collected personal information from a child under the age of 13, we will promptly delete such information from our records. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected].

11. International Data Transfers

Papa Ginos is based in the United States, and your personal information is primarily collected, stored, and processed within the United States. However, we may use service providers or technology partners that process data in other countries.

If your personal information is transferred outside the United States, we will ensure that appropriate safeguards are in place to protect your information and that such transfers comply with applicable U.S. privacy laws. These safeguards may include:

• Data processing agreements with service providers that include standard contractual clauses
• Ensuring that recipient countries provide an adequate level of data protection
• Other legally recognized transfer mechanisms as applicable

By using our website and services, you acknowledge and consent to the potential transfer of your personal information to countries outside your country of residence, including the United States, which may have different data protection laws than those in your jurisdiction.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or embedded content from third-party providers. These third-party services operate independently and have their own privacy policies. We have no control over and assume no responsibility for the content, privacy practices, or actions of third-party websites or services.

We encourage you to review the privacy policies of any third-party websites or services you visit through links on our website before providing them with your personal information.

13. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not wish to be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our website does not currently alter its data collection and use practices in response to DNT signals. We will update this policy if our practices change in the future.

California residents may also exercise their right to opt out of the "sharing" of their personal information for cross-context behavioral advertising by contacting us at [email protected] or through our website's cookie preference settings.

14. California-Specific Disclosures

In addition to the rights described in Section 7, the following disclosures apply specifically to California residents under the CCPA/CPRA:

14.1 Categories of Personal Information Collected (Last 12 Months)

14.2 Shine the Light Law

Under California's Shine the Light law (California Civil Code Section 1798.83), California residents may request information regarding the disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us at [email protected].

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website homepage or login page
• Send an email notification to registered users if the changes are significant

Your continued use of our website or services after the effective date of any changes constitutes your acknowledgment and acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we are protecting your information.

16. How to File a Complaint with a Data Protection Authority

If you believe that we have not handled your personal information in accordance with applicable law, you have the right to file a complaint with the relevant regulatory authority.

16.1 California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA), which is the state agency responsible for enforcing the CCPA/CPRA:

• Website: cppa.ca.gov
• Address: 2101 Arena Blvd, Sacramento, CA 95834

16.2 Federal Consumer Protection

All U.S. consumers may also file complaints with the Federal Trade Commission (FTC) regarding unfair or deceptive practices in connection with privacy:

• Website: reportfraud.ftc.gov
• Phone: 1-877-382-4357

16.3 State Attorneys General

Depending on your state of residence, you may also have the right to file a complaint with your state Attorney General's office regarding privacy violations. We encourage you to visit your state's official government website for contact information.

Before filing a formal complaint, we encourage you to first contact us directly so that we may have an opportunity to address your concern. We are committed to resolving privacy-related disputes in a fair and timely manner.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, the handling of your personal information, or to exercise your privacy rights, please contact us using the information below:

We will make every effort to respond to your inquiry promptly and in accordance with the timelines required by applicable law. For California residents submitting formal CCPA/CPRA requests, please clearly indicate "California Privacy Rights Request" in the subject line of your email to ensure timely processing.