Privacy Policy

This Privacy Policy explains how Cabana Taco ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects your personal information when you visit our website at cabana.click, place orders, interact with our services, or otherwise engage with our business. Please read this document carefully before using our website or providing any personal information.

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of information in accordance with its terms. If you do not agree with any part of this policy, please discontinue use of our website and services immediately.

Cabana Taco is committed to protecting your privacy and handling your personal information responsibly, in full compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and any other applicable data protection regulations.

1. About Us

Cabana Taco is a food service business operating in the United States. Our contact details for all privacy-related matters are as follows:

For all privacy-related inquiries, data requests, or complaints, please contact us using the information above. We are committed to responding to all inquiries in a timely and professional manner.

2. Information We Collect

We collect several categories of personal information depending on how you interact with our website and services. Below, we outline each category in detail.

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, participate in a promotion, or contact us for support, we may collect the following personal identification information:

• Full name — to identify you as a customer and personalize your experience
• Email address — to send order confirmations, receipts, promotional communications, and account-related notifications
• Phone number — to contact you regarding your orders or for delivery coordination
• Mailing and delivery address — to fulfill delivery orders and process returns or refunds when applicable
• Date of birth — in certain cases, to verify age eligibility for specific promotions or offers
• Payment information — such as credit/debit card details, billing address, and transaction data processed through secure third-party payment processors

2.2 Account and Profile Information

If you register for an account on our website, we collect information you provide during registration and any updates you make to your profile, including saved preferences, order history, and favorite menu items.

2.3 Usage and Behavioral Data

When you visit our website, we automatically collect certain usage data through cookies, web beacons, and similar tracking technologies. This data includes:

• Pages visited and time spent on each page
• Links and buttons clicked
• Search queries entered on our website
• Items viewed or added to your cart
• Referring URLs (the website that directed you to ours)
• Frequency and duration of visits
• Conversion events such as completed purchases or form submissions

2.4 Device and Technical Information

We automatically collect device and technical information when you access our website, including:

• IP address — used to determine approximate geographic location and for security purposes
• Browser type and version
• Operating system and device type (desktop, mobile, tablet)
• Screen resolution
• Cookie identifiers and session tokens
• Time zone and language settings

2.5 Location Data

With your consent, we may collect your precise or approximate geographic location to provide location-based services such as finding the nearest Cabana Taco location, estimating delivery zones, or personalizing offers available in your area.

2.6 Communications Data

When you contact us via email, contact forms, or customer support channels, we collect and retain the content of your communications, including your name, contact details, and the substance of your inquiry or feedback.

2.7 Marketing and Survey Data

If you participate in surveys, contests, or marketing campaigns, we may collect additional information such as your opinions, preferences, and demographic information voluntarily provided by you.

2.8 Information from Third Parties

We may receive personal information about you from third parties, including:

• Social media platforms if you choose to log in using your social media account
• Third-party delivery platforms and food ordering services
• Analytics and advertising partners
• Publicly available sources

3. How We Use Your Information

We use the personal information we collect for various legitimate business purposes, as described below:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling food orders, including delivery and pickup arrangements
• Managing your account and authenticating your identity
• Processing payments and issuing receipts or invoices
• Coordinating with delivery partners to ensure timely order delivery
• Responding to your inquiries, complaints, and support requests
• Sending transactional notifications such as order confirmations, status updates, and delivery alerts

3.2 Business Improvement and Analytics

• Analyzing usage patterns and customer behavior to improve our website functionality and menu offerings
• Conducting internal research and analysis to understand customer preferences
• Monitoring website performance and diagnosing technical issues
• Measuring the effectiveness of our marketing campaigns
• Developing new features, services, and menu items based on customer feedback

3.3 Marketing and Promotional Communications

With your consent or where otherwise permitted by law, we may use your personal information to:

• Send you promotional emails, newsletters, and special offers about Cabana Taco products and services
• Notify you about new menu items, seasonal specials, loyalty rewards, and limited-time promotions
• Deliver personalized advertising based on your preferences and order history
• Conduct retargeting campaigns through third-party advertising platforms

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected]. Opting out of marketing communications will not affect our ability to send you transactional messages related to your orders or account.

3.4 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities and law enforcement agencies
• Enforcing our Terms of Service and other agreements
• Detecting, investigating, and preventing fraud, security breaches, and other illegal or unauthorized activities
• Protecting the rights, property, and safety of Cabana Taco, our customers, and the public

3.5 Personalization

• Customizing your website experience based on your preferences and past interactions
• Recommending menu items or promotions that may be of interest to you
• Saving your order preferences and payment methods for faster future checkouts

4. Sharing of Your Information with Third Parties

We respect your privacy and do not sell your personal information for monetary compensation. However, we may share your information with certain third parties under the circumstances described below.

4.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering services to you. These service providers may have access to your personal information solely to perform services on our behalf and are contractually prohibited from using it for any other purpose. Categories of service providers include:

• Payment processors — to securely handle payment transactions
• Delivery and logistics partners — to fulfill delivery orders
• Cloud hosting and IT service providers — to host our website and store data securely
• Email marketing platforms — to manage and send communications
• Analytics providers — such as Google Analytics, to analyze website performance
• Customer support platforms — to manage customer inquiries
• Advertising networks — to serve relevant advertisements

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Enforce our Terms of Service or other applicable agreements
• Protect and defend the rights or property of Cabana Taco
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users or the public

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, or similar corporate transaction, your personal information may be transferred to the acquiring or successor entity. We will notify you of any such change via email or a prominent notice on our website and inform you of any choices you may have regarding your personal information.

4.4 With Your Consent

We may share your information with third parties for purposes not described in this policy when we have obtained your explicit consent to do so.

4.5 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized information that cannot reasonably be used to identify you with partners, researchers, or for marketing purposes.

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising. Cookies are small text files stored on your device when you visit our website.

5.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data.
• Functional Cookies: Enable enhanced functionality and personalization, such as remembering your preferences.
• Marketing and Targeting Cookies: Used to deliver advertisements relevant to you and your interests.

5.2 Managing Cookies

You can control and manage cookies through your browser settings. Most web browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality and features of our website. For detailed information about the specific cookies we use, their purpose, and how to opt out, please refer to our full Cookie Policy available on our website.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical security measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

6.1 Security Measures We Implement

• Encryption: We use Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Access Controls: Access to personal information is restricted to authorized personnel who require it to perform their job functions, and all staff are subject to confidentiality obligations.
• Secure Payment Processing: Payment card data is processed by PCI-DSS compliant third-party payment processors. We do not store your full credit card numbers on our servers.
• Firewalls and Intrusion Detection: We maintain firewalls and intrusion detection systems to protect our network infrastructure.
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing to identify and remediate potential weaknesses.
• Data Minimization: We collect only the personal information necessary for the purposes described in this policy.

6.2 Breach Notification

In the event of a data breach that is likely to result in significant harm to your rights or freedoms, we will notify affected individuals and, where required, relevant regulatory authorities in accordance with applicable law. Notification will be provided promptly and will include information about the nature of the breach, the data involved, and the steps we are taking to address it.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention procedures.

8. Your Privacy Rights

Depending on your location and applicable law, you may have various rights regarding your personal information. We are committed to honoring these rights and making it easy for you to exercise them.

8.1 Rights Available to All Users

• Right of Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions (e.g., where we are required to retain data for legal or financial compliance).
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications at any time.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format.

8.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: The right to know what personal information we collect, use, disclose, and sell or share about you.
• Right to Delete: The right to request deletion of personal information we have collected from you, subject to exceptions.
• Right to Correct: The right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: The right to direct us not to sell or share your personal information with third parties. To exercise this right, click "Do Not Sell or Share My Personal Information" on our website or contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: Where we process sensitive personal information, you have the right to limit its use to that which is necessary to perform the services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality because you exercised your privacy rights.

8.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a request to us by:

• Email: [email protected]
• Website: cabana.click

We will respond to your request within 45 days of receipt. If we require additional time (up to 90 days total), we will notify you of the extension and the reason for the delay. We may need to verify your identity before processing your request. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded, in which case we may charge a reasonable fee or decline to process the request.

8.4 Authorized Agents

California residents may designate an authorized agent to submit privacy rights requests on their behalf. The authorized agent must provide written authorization signed by you, and we may require additional verification of your identity directly from you before processing the request.

9. Children's Privacy

Cabana Taco's website, online ordering system, and related services are not directed to children under the age of 18. We do not knowingly collect, solicit, or process personal information from minors. If we become aware that we have inadvertently collected personal information from a child under the age of 13 without appropriate parental consent, we will take immediate steps to delete that information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. We comply with the Children's Online Privacy Protection Act (COPPA) and will promptly address any such concerns.

10. International Data Transfers

Cabana Taco is based in the United States, and your personal information is primarily collected, stored, and processed within the United States. However, some of our third-party service providers may be located in or operate from other countries, which may result in your personal information being transferred to and processed in countries outside of the United States.

When we transfer personal information internationally, we take appropriate steps to ensure that your information receives an adequate level of protection. These steps may include:

• Entering into data processing agreements with service providers that include appropriate data protection provisions
• Using standard contractual clauses or other legally recognized transfer mechanisms
• Ensuring that our service providers are certified under recognized data protection frameworks

By using our website and providing us with your personal information, you acknowledge and consent to the transfer, storage, and processing of your information in the United States and potentially in other countries as described in this policy.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, delivery apps, or other online services. These third-party websites have their own privacy policies, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit through links on our website. The inclusion of a link to a third-party website does not constitute our endorsement of that website or its privacy practices.

12. Do Not Track Signals

Some web browsers and mobile devices allow you to transmit "Do Not Track" (DNT) signals to websites you visit. As of the effective date of this Privacy Policy, there is no universally accepted standard for how websites should respond to DNT signals. Therefore, our website does not currently respond to DNT signals. However, you can control cookie tracking through your browser settings as described in Section 5 of this policy.

13. FTC Compliance

Cabana Taco operates in compliance with the Federal Trade Commission Act (FTC Act) and associated FTC regulations governing unfair or deceptive trade practices. We are committed to:

• Providing truthful and transparent disclosures about our data collection and use practices
• Honoring all commitments made in this Privacy Policy
• Maintaining reasonable security measures appropriate to the nature and scope of the personal information we collect
• Not engaging in unfair or deceptive acts or practices in connection with the collection, use, or disclosure of consumer information

14. How to File a Complaint with a Data Protection Authority

If you believe that we have not handled your personal information in compliance with applicable privacy laws, you have the right to lodge a complaint with the relevant regulatory authority.

14.1 California Residents

California residents who wish to file a complaint regarding our data practices may contact the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Address: 2101 Arena Blvd, Sacramento, CA 95834

14.2 Federal Complaints

Consumers in the United States who wish to report unfair or deceptive business practices may file a complaint with the Federal Trade Commission (FTC):

• Website: reportfraud.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)

We encourage you to contact us first at [email protected] before filing a regulatory complaint so that we may have the opportunity to address your concerns directly.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or data processing activities. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on our website at cabana.click with the new effective date
• Send a notification email to registered users where the changes are significant
• Display a prominent notice on our website alerting you to the update

Your continued use of our website and services following the posting of any updated Privacy Policy constitutes your acceptance of the changes. We encourage you to periodically review this page to stay informed about how we protect your information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team:

We are committed to resolving any privacy-related concerns promptly and professionally. Upon receiving your inquiry, we will acknowledge receipt within 5 business days and work to provide a full response within 30 business days, or within the timeframe required by applicable law.