Privacy Policy

This Privacy Policy describes how Costa Vida ("we," "us," "our," or "the Company") collects, uses, discloses, and protects your personal information when you visit our website at food-costavida.digital, place orders, interact with our digital services, or otherwise engage with us. Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

We are committed to protecting the privacy and security of all individuals who interact with our brand. This policy is designed to comply with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations.

1. Who We Are

Costa Vida is a food service business operating in the United States. We provide food-related services, including but not limited to online ordering, menu browsing, promotions, loyalty programs, and customer support through our digital platforms.

For all privacy-related inquiries, please contact us using the information listed in Section 14 of this policy.

2. Information We Collect

We collect various categories of personal information depending on how you interact with us. Below is a detailed breakdown of the types of data we may collect.

2.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, participate in a promotion, or contact us directly, we may collect the following types of personally identifiable information:

• Full name
• Email address
• Phone number
• Mailing and billing address
• Date of birth (when required for age verification or loyalty programs)
• Username and password (for account holders)
• Profile preferences and dietary restrictions (if voluntarily provided)

2.2 Payment and Transaction Information

When you make a purchase through our website or mobile application, we collect payment-related information. We do not store full credit card numbers directly on our servers. Payment transactions are processed through PCI-DSS-compliant third-party payment processors. We may collect:

• Last four digits of credit or debit card numbers
• Billing address associated with the payment method
• Order history and transaction records
• Gift card or loyalty point balances

2.3 Usage and Behavioral Data

We automatically collect certain information about how you interact with our website and digital services. This includes:

• Pages visited and time spent on each page
• Links clicked and features used
• Search queries made within our website
• Items added to cart or wish lists
• Frequency and time of visits
• Referring URLs and exit pages

2.4 Device and Technical Information

When you access our website or applications, we collect certain technical information about your device and connection, including:

• IP address
• Browser type and version
• Operating system and device type
• Screen resolution
• Mobile device identifiers (where applicable)
• Language settings
• Time zone

2.5 Location Data

With your permission, we may collect geolocation data to help you find nearby Costa Vida locations, provide location-based promotions, or facilitate delivery services. You may disable location access at any time through your device or browser settings.

2.6 Communications and Support Data

When you contact our customer support team, submit feedback, or correspond with us by email, phone, or online form, we may collect and retain records of those communications including:

• Message content
• Date and time of contact
• Nature of the inquiry or complaint
• Resolution records

2.7 Cookie and Tracking Data

We use cookies, web beacons, pixels, and similar tracking technologies to enhance your browsing experience and collect analytical data. Please refer to Section 8 of this policy for detailed information about our use of cookies.

2.8 User-Generated Content

If you submit reviews, ratings, photos, comments, or other content through our digital platforms, we collect and may publicly display that content along with associated account information.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes, as outlined below.

3.1 Service Provision and Order Fulfillment

• Processing and confirming food orders placed through our website or app
• Arranging delivery or facilitating in-store pickup
• Managing your account and profile settings
• Processing payments and issuing refunds
• Sending order confirmations and transactional notifications

3.2 Customer Support

• Responding to your inquiries and resolving complaints
• Providing technical assistance and troubleshooting
• Managing feedback and reviews

3.3 Personalization and User Experience

• Remembering your preferences and past orders
• Personalizing menu recommendations based on your history
• Providing customized promotions and offers
• Improving website navigation and layout based on usage patterns

3.4 Marketing and Promotions

With your consent where required, we may use your contact information to send you:

• Promotional emails and newsletters
• Special offers, discounts, and limited-time deals
• Information about new menu items and seasonal offerings
• Loyalty program updates and rewards notifications
• Targeted advertising based on your browsing and purchase behavior

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly at [email protected].

3.5 Analytics and Business Improvement

• Analyzing trends in website usage and customer behavior
• Conducting internal research and development
• Measuring the effectiveness of marketing campaigns
• Improving our food offerings, services, and digital platforms

3.6 Legal Compliance and Security

• Complying with applicable federal, state, and local laws
• Detecting and preventing fraud, abuse, and unauthorized activity
• Enforcing our Terms of Service and other policies
• Responding to lawful requests from government authorities
• Protecting the rights and safety of Costa Vida, our customers, and the public

4. Legal Basis for Processing

We process your personal information on the following legal grounds under applicable United States law:

5. How We Share Your Information

We do not sell your personal information to third parties. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering services to you. These providers are contractually obligated to use your information only as instructed by us and to maintain appropriate security standards. Categories of service providers include:

• Payment processors: To securely process your transactions
• Delivery and logistics partners: To fulfill food delivery orders
• Email and SMS marketing platforms: To send communications
• Cloud hosting and IT providers: To maintain our website and data infrastructure
• Analytics providers: Such as Google Analytics, to understand website usage
• Customer support platforms: To manage support tickets and communications
• Advertising networks: To display targeted advertisements

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required to do so by law, or in good faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, or government request
• Enforce our Terms of Service or protect our legal rights
• Investigate or prevent fraud, security breaches, or illegal activity
• Protect the health and safety of any person

5.3 Business Transfers

In the event that Costa Vida undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with third parties in other ways not described above when we have obtained your explicit consent to do so.

5.5 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other business purposes.

6. Data Security

We take the security of your personal information seriously and implement a combination of administrative, technical, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, and destruction.

6.1 Security Measures We Employ

• Encryption: All data transmitted between your browser and our servers is protected using Transport Layer Security (TLS/SSL) encryption.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, and employees are subject to confidentiality obligations.
• Secure Payment Processing: Payment data is handled by PCI-DSS-compliant processors and is not stored on our servers in full.
• Regular Security Audits: We conduct periodic reviews of our data collection, storage, and processing practices.
• Firewall and Intrusion Detection: We use industry-standard firewalls and monitoring systems to detect unauthorized access attempts.
• Data Minimization: We collect only the personal information that is necessary for the purposes described in this policy.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. We are committed to honoring these rights in accordance with applicable law.

7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

7.2 Rights Available to All Users

Regardless of your state of residence, we offer the following rights to all users of our services:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct any inaccurate or incomplete information.
• Deletion: You may request that we delete your account and associated personal data, subject to legal retention obligations.
• Opt-Out of Marketing: You may unsubscribe from promotional communications at any time.
• Withdraw Consent: Where we rely on your consent to process data, you may withdraw it at any time.

7.3 How to Exercise Your Rights

To exercise any of the rights described above, please contact us by:

• Email: [email protected]
• Website: food-costavida.digital

We will verify your identity before processing any request to protect your privacy and security. We aim to respond to all verified requests within 45 days. If we require additional time (up to 90 days total), we will inform you of the reason and the extension period.

You may also designate an authorized agent to submit requests on your behalf. Authorized agents must provide written authorization, and we may require verification of both the agent's authority and your identity.

8. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance functionality, analyze traffic, and support marketing activities.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow websites to recognize your device, remember your preferences, and collect behavioral data over time.

8.2 Types of Cookies We Use

8.3 Managing Cookies

You can manage or disable cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for certain websites. Please note that disabling certain cookies may affect the functionality of our website.

For more detailed information about our use of cookies and your choices, please refer to our dedicated Cookie Policy available on our website at food-costavida.digital.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, enforce our agreements, and support legitimate business operations.

9.1 Retention Periods

When personal information is no longer required, we securely delete or anonymize it in accordance with industry best practices.

10. Children's Privacy

Our digital services are not directed at, or intended for use by, individuals under the age of 18. We do not knowingly collect, use, or disclose personal information from children under 13 years of age in compliance with the Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and you believe that your child under 13 has provided us with personal information, please contact us immediately at [email protected]. We will take prompt steps to verify the situation and delete any such information from our systems.

Individuals between the ages of 13 and 17 may only use our services with verifiable parental or guardian consent. We reserve the right to restrict access or terminate accounts if we discover that age requirements have not been met.

11. International Data Transfers

Costa Vida is based in the United States, and your personal information is primarily collected, processed, and stored within the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in a country where data protection laws may differ from those in your home country.

By using our services and providing us with your personal information, you acknowledge and consent to the transfer of your data to the United States and its processing in accordance with this Privacy Policy.

Where we engage third-party service providers or partners outside the United States, we take steps to ensure that appropriate safeguards are in place to protect your data, including contractual data protection clauses and compliance with applicable export and data transfer regulations.

12. Third-Party Links and Websites

Our website may contain links to third-party websites, applications, or social media platforms. These third-party sites have their own privacy policies, which are independent of ours. We are not responsible for the content or privacy practices of any third-party websites.

We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link on our website does not imply our endorsement or approval of that website or its practices.

Examples of third-party platforms you may encounter include, but are not limited to:

• Social media platforms (Facebook, Instagram, TikTok, X/Twitter)
• Online food delivery aggregators
• Third-party payment gateways
• Google Maps or location services

13. California-Specific Disclosures

In addition to the rights described in Section 7, California residents are entitled to the following disclosures under the CCPA/CPRA:

13.1 Categories of Personal Information Collected in the Past 12 Months

• Identifiers (name, email, phone number, IP address)
• Commercial information (purchase history, order records)
• Internet or other electronic network activity (browsing data, cookies)
• Geolocation data (with consent)
• Inferences drawn from personal information (preferences, behavioral profiles)
• Sensitive personal information (financial payment data, processed through secure third-party processors)

13.2 Do Not Track

California law requires us to disclose how we respond to "Do Not Track" (DNT) signals. At this time, our website does not respond to DNT signals from browsers. We continue to monitor developments in this area and may update this practice in the future.

13.3 Shine the Light Law

California Civil Code Section 1798.83 ("Shine the Light" law) permits California residents to request information about personal information disclosed to third parties for direct marketing purposes during the preceding calendar year. To make such a request, please contact us at [email protected].

14. Filing a Complaint

If you believe we have violated your privacy rights or failed to handle your personal information in accordance with applicable law, we encourage you to contact us first so we can address your concerns.

14.1 Contact Us

Privacy inquiries and complaints should be directed to:

• Company: Costa Vida
• Email: [email protected]
• Website: food-costavida.digital

14.2 Filing a Complaint with a Regulatory Authority

If you are not satisfied with our response to your privacy concern, or if you believe we are processing your data unlawfully, you have the right to file a complaint with the appropriate regulatory authority. In the United States, the following authorities may be relevant:

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or for other operational, legal, or regulatory reasons. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy on our website at food-costavida.digital
• Where required by law, provide additional notice via email or a prominent on-site notification

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services following the posting of changes constitutes your acceptance of the revised Privacy Policy.

16. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us:

We are dedicated to resolving your privacy concerns promptly and transparently. Our privacy team will acknowledge your inquiry within 5 business days and aim to provide a full response within 45 days, or as otherwise required by applicable law.