Privacy Policy

This Privacy Policy describes how Marcos ("we," "us," or "our") collects, uses, discloses, and protects the personal information of visitors and customers who interact with our website located at marcospizzagrill.digital (the "Website") and any related services, platforms, or digital touchpoints we operate. We are committed to protecting your privacy and ensuring that your personal data is handled responsibly, transparently, and in compliance with applicable United States federal and state laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and all other relevant consumer protection regulations.

Please read this Privacy Policy carefully. By accessing or using our Website, placing an order, subscribing to our communications, or otherwise engaging with our services, you acknowledge that you have read, understood, and agree to the practices described in this document. If you do not agree with any part of this Privacy Policy, please discontinue your use of our Website and services immediately.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us using the information provided in the Contact Information section at the bottom of this document.

1. Information We Collect

We collect various categories of personal information depending on how you interact with our Website and services. The types of information we collect include, but are not limited to, the following:

1.1 Personal Identification Information

When you create an account, place an order, make a reservation, submit a contact form, or otherwise engage directly with us, we may collect personal identification information such as:

• Full name
• Email address
• Phone number
• Billing address and delivery address
• Date of birth (where required for age verification or promotional purposes)
• Username and password (for account holders)
• Payment information including credit card numbers, debit card numbers, and billing details (processed securely through third-party payment processors — we do not store full card numbers on our servers)

1.2 Order and Transaction Data

When you place an order through our Website or affiliated platforms, we collect information related to your transaction, including:

• Items ordered, quantities, and customizations
• Order history and purchase frequency
• Delivery preferences and special instructions
• Payment method type and transaction confirmation numbers
• Promotional codes or discounts applied
• Feedback and reviews submitted about orders

1.3 Usage Data and Online Activity

We automatically collect certain information about how you navigate and use our Website, including:

• Pages visited and time spent on each page
• Links clicked and features used
• Search queries entered on the Website
• Referring URLs (the website you came from before visiting ours)
• Exit pages and bounce rates
• Session duration and visit timestamps
• Cart activity, including items added to or removed from your cart

1.4 Device and Technical Information

When you access our Website, our servers and analytics tools may automatically record technical information about your device and connection, such as:

• IP address
• Browser type and version
• Operating system and version
• Device type (desktop, mobile, tablet)
• Screen resolution
• Language settings
• Time zone
• Internet service provider (ISP)
• Unique device identifiers

1.5 Location Data

With your permission, we may collect geolocation data to facilitate delivery services, show you nearby restaurant locations, or provide location-relevant promotions. You may disable location sharing in your browser or device settings at any time.

1.6 Communications and Correspondence

If you contact us via email, phone, our Website contact form, social media, or any other communication channel, we may collect and retain records of that correspondence, including your name, contact details, and the content of your messages.

1.7 Marketing and Preference Data

We collect information about your marketing preferences, including whether you have opted in to receive promotional emails, SMS messages, or push notifications, and your stated preferences regarding menu items, dietary requirements, or promotional interests.

1.8 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage objects, and similar tracking technologies to collect data about your interactions with our Website. For detailed information about the specific cookies we use, please refer to our Cookie Policy. A brief overview of cookie usage is also provided in Section 6 of this Privacy Policy.

2. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes, all of which are designed to provide you with a better experience, fulfill our contractual obligations, and operate our business effectively. Specifically, we use your information to:

2.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders, including online orders, delivery, and pick-up requests
• Communicate with you about the status of your orders, including confirmations, updates, and estimated delivery times
• Manage and administer your customer account
• Process payments and refunds securely
• Respond to your inquiries, questions, and customer service requests
• Handle complaints, disputes, and returns

2.2 Analytics and Service Improvement

• Analyze usage patterns and customer behavior to improve our Website's functionality and user experience
• Monitor and evaluate the performance of our digital platforms
• Conduct internal research and development to create new features and menu offerings
• Measure the effectiveness of our marketing campaigns
• Generate aggregated, anonymized reports and statistics about our customers and operations

2.3 Marketing and Promotions

• Send you promotional emails, newsletters, offers, and discounts that we believe may be of interest to you, where you have provided consent or where permitted by applicable law
• Deliver personalized content and advertisements based on your browsing history and purchase behavior
• Notify you about new menu items, seasonal specials, loyalty rewards, and events
• Run contests, sweepstakes, and loyalty programs
• Send SMS or push notification marketing messages where you have explicitly opted in

You have the right to opt out of marketing communications at any time. See Section 5 for details on how to exercise this right.

2.4 Legal Compliance and Security

• Comply with applicable federal, state, and local laws and regulations
• Detect, prevent, and investigate fraudulent activity, unauthorized access, and security threats
• Enforce our Terms of Service and other agreements
• Respond to lawful requests from government authorities, courts, or law enforcement agencies
• Protect the rights, property, and safety of Marcos, our employees, customers, and the public

2.5 Personalization

• Remember your preferences and previous orders to personalize your experience
• Display relevant product recommendations based on your order history
• Tailor Website content to your location and preferences

3. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your personal information with trusted third parties in the following circumstances:

3.1 Service Providers and Business Partners

We engage third-party service providers to assist us in operating our Website and delivering our services. These providers are contractually obligated to handle your data only as directed by us and in accordance with this Privacy Policy. Categories of service providers include:

• Payment Processors: Companies that securely process your payment card transactions on our behalf
• Delivery Partners: Third-party logistics and delivery companies that fulfill your orders
• Cloud Hosting Providers: Companies that store our data and host our digital infrastructure
• Analytics Providers: Services such as Google Analytics that help us understand Website traffic and user behavior
• Email and SMS Marketing Platforms: Tools we use to send you promotional and transactional communications
• Customer Support Software: Platforms that help us manage customer inquiries and support tickets
• Advertising Networks: Companies that help us deliver targeted online advertising

3.2 Legal Requirements

We may disclose your personal information if required to do so by law or in good faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Protect and defend the legal rights or property of Marcos
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of our customers, employees, or the public
• Protect against legal liability

3.3 Business Transfers

In the event that Marcos undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you of any such change via a prominent notice on our Website or by direct communication where required by law.

3.4 Aggregated and Anonymized Data

We may share aggregated or anonymized information that does not directly identify you with third parties for industry research, analytics, marketing, or other business purposes. This type of information cannot reasonably be used to identify any individual person.

3.5 With Your Consent

We may share your personal information with other third parties when you have given us explicit consent to do so.

4. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, loss, misuse, alteration, or destruction.

4.1 Technical Safeguards

• Encryption: Our Website uses Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers. Look for the padlock icon in your browser's address bar.
• Secure Payment Processing: We use PCI-DSS compliant payment processors to handle your financial information. We do not store full credit card numbers on our servers.
• Firewalls and Intrusion Detection: We employ firewalls and network monitoring tools to detect and prevent unauthorized access to our systems.
• Access Controls: We limit access to personal information to employees and contractors who need it to perform their job functions, and we use role-based access controls.

4.2 Organizational Safeguards

• Staff who handle personal data receive regular training on data protection best practices.
• We conduct periodic reviews of our data security policies and procedures.
• We maintain incident response procedures to address potential data breaches promptly.

4.3 Limitations

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that affects your personal information and triggers notification obligations under applicable law, we will notify you and relevant authorities as required.

5. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights and providing you with straightforward ways to exercise them.

5.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

5.2 General Rights (All Users)

Regardless of your state of residence, all users of our Website may exercise the following choices:

• Opt Out of Marketing: You may unsubscribe from our marketing emails at any time by clicking the "unsubscribe" link at the bottom of any email or by contacting us directly. For SMS opt-out, reply "STOP" to any promotional text message.
• Update Your Information: You may update your account information by logging into your account on our Website or by contacting us.
• Cookie Preferences: You may manage your cookie preferences through our cookie consent banner or your browser settings. Note that disabling certain cookies may affect the functionality of our Website.
• Do Not Track: Some browsers offer a "Do Not Track" signal. Our Website does not currently respond to Do Not Track signals, but you may manage tracking through our cookie settings.

5.3 How to Submit a Privacy Request

To exercise any of the rights described above, please contact us using any of the following methods:

• Email: [email protected]
• Website: marcospizzagrill.digital

We will respond to verifiable consumer requests within 45 days of receipt, as required by the CCPA/CPRA. In complex cases, we may extend this period by an additional 45 days with prior notice. We may need to verify your identity before processing certain requests to protect against unauthorized access to your information.

6. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze traffic, and support our marketing efforts. Cookies are small text files placed on your device when you visit our Website.

6.1 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the Website to function properly. They enable core features such as shopping cart functionality, user authentication, and security. You cannot opt out of these cookies without significantly impairing Website functionality.
• Analytics Cookies: These cookies help us understand how visitors interact with our Website by collecting and reporting information anonymously. We use tools such as Google Analytics for this purpose.
• Functional Cookies: These cookies allow us to remember your preferences and personalize your experience, such as your preferred language or delivery address.
• Marketing and Advertising Cookies: These cookies track your browsing activity across websites to deliver targeted advertisements that are relevant to your interests. They are placed by our advertising partners.

6.2 Managing Your Cookie Preferences

You can control and manage cookie settings in the following ways:

• Using our cookie consent banner, which appears when you first visit our Website
• Adjusting your browser settings to block or delete cookies
• Using opt-out tools provided by third-party analytics and advertising services (e.g., Google Analytics Opt-Out Add-on)

For a complete description of all cookies used on our Website, including the names, purposes, and durations of each cookie, please refer to our full Cookie Policy.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. The specific retention periods we apply are as follows:

When your personal information is no longer needed, we will securely delete or anonymize it in accordance with industry best practices and applicable legal requirements.

8. Children's Privacy

Our Website and services are intended for individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 13, or in some states under the age of 16, without verifiable parental consent.

If you are a parent or legal guardian and believe that your child has provided us with personal information without your knowledge or consent, please contact us immediately at [email protected]. Upon receiving such a notification, we will take prompt steps to delete the relevant information from our records.

We comply with the Children's Online Privacy Protection Act (COPPA) and all applicable state laws regarding the collection of personal information from minors. If we discover that we have inadvertently collected personal information from a child under the applicable minimum age, we will delete such information as quickly as reasonably possible.

9. International Data Transfers

Marcos is based in the United States, and our Website is operated from servers located in the United States. If you are accessing our Website from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home country.

By using our Website and providing us with your personal information, you consent to the transfer of your data to the United States. We take appropriate steps to ensure that any international data transfers are handled in compliance with applicable laws and that your data remains protected to a standard that is consistent with this Privacy Policy.

Where we transfer data internationally on behalf of users in jurisdictions with specific transfer requirements, we ensure that appropriate safeguards are in place, such as standard contractual clauses or other legally recognized mechanisms.

10. Third-Party Links and Services

Our Website may contain links to third-party websites, social media platforms, payment portals, or other external services that are not operated by Marcos. This Privacy Policy applies only to our Website and services. We are not responsible for the privacy practices, content, or security of any third-party websites. We strongly encourage you to review the privacy policies of any third-party sites you visit through links on our Website.

Third-party services that may be integrated with or linked from our Website include, but are not limited to:

• Social media platforms (e.g., Facebook, Instagram, X/Twitter)
• Third-party delivery apps and platforms
• Online review platforms
• Payment gateways
• Google Maps and location services

11. Additional Rights for California Residents

In addition to the rights described in Section 5, California residents are entitled to the following disclosures and protections under the California Shine the Light Law (California Civil Code Section 1798.83) and the CCPA/CPRA:

11.1 Shine the Light Disclosure

California residents may request once per calendar year information about the categories of personal information we disclosed to third parties for their direct marketing purposes in the preceding calendar year, and the names and addresses of those third parties. To make such a request, please contact us at [email protected].

11.2 "Do Not Sell or Share My Personal Information"

Under the CPRA, California residents have the right to opt out of the "sale" or "sharing" of their personal information. While we do not sell personal information for monetary consideration, our use of certain advertising and analytics technologies may constitute "sharing" under California law. To exercise your right to opt out, please contact us using the information below or follow the instructions in our cookie consent tool.

11.3 Sensitive Personal Information

To the extent we collect sensitive personal information as defined by the CPRA (such as precise geolocation data), we use it only to provide the services you request. We do not use or disclose sensitive personal information for purposes other than those specified in California Civil Code Section 1798.121.

12. FTC Act Compliance

We comply with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive practices in or affecting commerce. Our data collection, use, and sharing practices are designed to be transparent, fair, and not misleading. We do not engage in deceptive practices with respect to the personal information of our customers and Website visitors.

If you believe that our privacy practices are unfair or deceptive, you may file a complaint with the Federal Trade Commission (FTC) at www.ftc.gov/complaint.

13. Filing Complaints with Regulatory Authorities

If you believe that we have violated your privacy rights or applicable data protection laws, we encourage you to first contact us directly so that we can address your concerns. Our contact information is provided in Section 15 below.

If you are not satisfied with our response or believe that we are not handling your personal information in accordance with applicable law, you have the right to file a complaint with the relevant regulatory authority:

13.1 Federal Trade Commission (FTC)

For complaints related to unfair or deceptive privacy practices under the FTC Act:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)

13.2 California Privacy Protection Agency (CPPA)

For California residents wishing to exercise rights under the CCPA/CPRA or report potential violations:

• Website: cppa.ca.gov
• Email: [email protected]

13.3 State Attorneys General

Residents of any U.S. state may also contact their state's Attorney General's office to report privacy-related concerns. Contact information for each state's Attorney General can be found through the National Association of Attorneys General at www.naag.org.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on this page with a new "Last Updated" date
• Sending a notification email to registered account holders where required by law
• Displaying a prominent notice on our Website's homepage

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

Archived versions of previous Privacy Policies are available upon request by contacting us at [email protected].

15. Contact Information

If you have any questions, comments, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. Our privacy team is available to assist you.

When submitting a privacy inquiry or rights request, please include your full name, email address, and a clear description of your request so that we can respond efficiently. We are committed to responding to all legitimate privacy inquiries within the timeframes required by applicable law.