Privacy Policy

Welcome to Taco Time. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website tacotime.rest, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our site and services.

This Privacy Policy applies to all users located in the United States and is designed to comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable state privacy regulations. If you are a California resident, please pay particular attention to the sections marked as applicable to California residents.

1. Who We Are

Taco Time is a food service business operating in the United States. We operate the website located at tacotime.rest and provide food ordering, delivery coordination, and related services to our customers.

For all privacy-related inquiries, requests, or complaints, you may contact us directly using the information provided above. We have designated a Privacy Contact responsible for overseeing compliance with this Privacy Policy and applicable privacy laws.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of information we collect are described below.

2.1 Personal Information You Provide Directly

When you interact with Taco Time — whether by creating an account, placing an order, signing up for a newsletter, contacting customer support, or otherwise engaging with us — you may provide us with the following categories of personal information:

• Identity Information: First name, last name, username, or similar identifiers.
• Contact Information: Email address, telephone number, billing address, delivery address, and other similar contact details.
• Account Credentials: Username, password, and security question answers (stored in encrypted form).
• Order and Transaction Information: Details about the food items you order, special dietary instructions, payment method type (e.g., credit card, debit card), transaction history, and billing records.
• Payment Information: We collect payment card details (card number, expiration date, CVV) solely to process your transactions. Payment data is processed through secure, PCI-DSS-compliant third-party payment processors, and we do not store full payment card numbers on our servers.
• Preferences and Communication Data: Your food preferences, dietary restrictions, marketing preferences, feedback, survey responses, and records of communications you have had with us.
• Loyalty Program Information: If you participate in any loyalty or rewards program, we collect your participation data, points balance, and redemption history.

2.2 Information We Collect Automatically

When you access or use our website, we automatically collect certain technical and usage information, including:

• Device Information: IP address, device type, operating system, browser type and version, device identifiers, and mobile network information.
• Usage Data: Pages visited on our website, links clicked, time and date of visits, time spent on individual pages, referring URLs, and other diagnostic data.
• Location Data: We may collect general geographic location information based on your IP address. If you permit us through your device settings, we may collect more precise location information for delivery purposes.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies (see Section 7 for more detail).
• Log Data: Server logs that record your use of our website, including error reports, crash data, and performance metrics.

2.3 Information We Collect from Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you choose to log in or create an account using a social media account (such as Google or Facebook), we may receive certain profile information from that platform, consistent with your privacy settings on that platform.
• Delivery Partners: When we coordinate food delivery through third-party delivery services, we may receive delivery status information and confirmation data.
• Analytics Providers: We work with analytics partners who may provide aggregated or anonymized data about how users interact with websites similar to ours.
• Marketing Partners: We may receive information about you from advertising or marketing partners to help us improve our outreach efforts.
• Payment Processors: Our payment processors may provide us with confirmation of successful transactions and fraud screening results.

2.4 Sensitive Personal Information

In limited circumstances, we may collect sensitive personal information, such as dietary information that may indicate religious beliefs or health conditions (e.g., requests for halal, kosher, or allergen-free options). We collect this information solely to fulfill your food order and do not use it for any other purpose unless required by law. We apply enhanced security measures to any sensitive personal information we collect.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Provision

• To process and fulfill your food orders and delivery requests.
• To create and manage your user account.
• To process payments and send you transaction confirmations, receipts, and order updates.
• To coordinate with delivery partners to ensure your order arrives correctly and on time.
• To respond to your customer service inquiries, complaints, and feedback.
• To operate and maintain our loyalty or rewards programs.

3.2 Communication

• To send you order confirmations, delivery notifications, and service-related communications that are necessary for your use of our services.
• To send you promotional emails, special offers, new menu announcements, and other marketing materials — where you have provided your consent or where we are otherwise legally permitted to do so.
• To send you surveys, feedback requests, and invitations to participate in promotions or contests.
• To respond to your inquiries submitted via email, contact forms, or other communication channels.

3.3 Analytics and Service Improvement

• To analyze how users interact with our website and services in order to improve our offerings, fix technical issues, and enhance user experience.
• To understand ordering patterns and customer preferences so we can personalize our menu recommendations and promotions.
• To conduct internal research and development to improve our products and technology.
• To generate aggregated, anonymized statistical data about our user base and service usage.

3.4 Security and Fraud Prevention

• To monitor our website and systems for security threats, fraud, and unauthorized access.
• To verify user identities and detect potentially fraudulent transactions.
• To enforce our Terms of Service and other policies.
• To maintain the integrity and security of our platform.

3.5 Legal and Compliance

• To comply with applicable federal, state, and local laws, regulations, and legal obligations.
• To respond to lawful requests from government authorities and law enforcement agencies.
• To establish, exercise, or defend legal claims involving our business.
• To fulfill our food safety, health, and regulatory reporting obligations.

3.6 Legal Basis for Processing

We process your personal information based on one or more of the following legal grounds:

• Contractual Necessity: Processing necessary to fulfill your orders and provide you with our services.
• Legitimate Interests: Processing based on our legitimate business interests (such as fraud prevention, service improvement, and marketing), balanced against your rights and expectations.
• Legal Obligation: Processing required to comply with applicable laws and regulations.
• Consent: Where we rely on your consent (such as for certain marketing communications), you have the right to withdraw your consent at any time.

4. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own independent marketing purposes. However, we may share your information in the following circumstances:

4.1 Service Providers

We engage trusted third-party companies and individuals to assist in operating our business and delivering our services. These service providers have access to your personal information only as necessary to perform their functions and are contractually obligated to protect it. Our service providers include:

• Payment Processors: To securely handle payment transactions on our behalf.
• Delivery Partners: To coordinate food delivery to your location.
• Cloud and Hosting Providers: To store data and host our website and services.
• Analytics Providers: To help us understand website usage and user behavior (e.g., Google Analytics).
• Email and Marketing Platforms: To send transactional and marketing communications on our behalf.
• Customer Support Tools: To manage customer inquiries and support tickets.
• Fraud Prevention Services: To detect and prevent fraudulent activity.

4.2 Legal Requirements

We may disclose your personal information if we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request.
• Protect the rights, property, or safety of Taco Time, our customers, or the public.
• Investigate or take action regarding illegal activities, suspected fraud, or violations of our Terms of Service.
• Fulfill our obligations under the FTC Act and other applicable consumer protection laws.

4.3 Business Transfers

In the event that Taco Time undergoes a merger, acquisition, asset sale, reorganization, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any change in ownership or uses of your personal information and the choices you may have regarding your information.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data with third parties, including industry partners, advertisers, or researchers. This data does not identify any individual and is used for statistical, research, or marketing analysis purposes.

4.5 With Your Consent

We may share your personal information with additional third parties if you have explicitly consented to such sharing.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, and destruction.

5.1 Security Measures We Use

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our website. Sensitive data stored in our systems is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal information is restricted to authorized employees and service providers who require it to perform their job functions. All access is governed by role-based access controls and least-privilege principles.
• Password Security: User account passwords are stored using secure, one-way hashing algorithms. We encourage users to use strong, unique passwords.
• PCI-DSS Compliance: Payment processing is handled by PCI-DSS-compliant third-party processors. We do not store full payment card numbers on our servers.
• Regular Security Assessments: We conduct regular reviews of our security practices, including vulnerability assessments and penetration testing, to identify and remediate potential risks.
• Incident Response: We maintain an incident response plan to quickly detect, contain, and address any data security incidents.

5.2 Limitations

Despite our best efforts, no method of data transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are also responsible for maintaining the confidentiality of your account credentials and for restricting access to your devices. If you believe your account has been compromised, please contact us immediately at [email protected].

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

6.1 Rights Available to All U.S. Users

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the purposes for which it is used, and the third parties with whom it is shared.
• Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Delete: You have the right to request the deletion of your personal information, subject to certain legal exceptions (e.g., where we are required to retain it by law or for legitimate business purposes).
• Right to Opt-Out of Marketing: You may opt out of receiving promotional communications from us at any time by using the unsubscribe link in any marketing email or by contacting us at [email protected].
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide a different quality of service based solely on your exercise of privacy rights.

6.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023:

• Right to Know (Specific Pieces): You may request a copy of the specific pieces of personal information we have collected about you over the past 12 months.
• Right to Data Portability: You may request that we provide your personal information in a portable, readily usable format.
• Right to Limit Use of Sensitive Personal Information: You have the right to direct us to limit the use of your sensitive personal information to uses that are necessary for providing our services.
• Right to Opt-Out of Sale or Sharing: We do not sell personal information as defined under the CCPA/CPRA. However, if this changes, California residents will have the right to opt out.
• Authorized Agent: California residents may designate an authorized agent to submit requests on their behalf. We may require verification of the agent's authorization before processing such requests.

6.3 How to Submit a Privacy Request

To exercise any of your privacy rights, please contact us by:

• Email: [email protected] (please include "Privacy Request" in the subject line)

We will respond to verifiable consumer requests within 45 days of receipt, as required by applicable law. If we require more time, we will inform you of the reason and the extension period. We may need to verify your identity before processing your request to protect your information from unauthorized disclosure or deletion. Verification may involve confirming details associated with your account.

7. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website performance, and deliver relevant content and advertisements.

7.1 What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They allow the website to recognize your device and remember certain information about your preferences or past actions.

7.2 Types of Cookies We Use

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse, delete, or get notified about cookies. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders. For more detailed information about the specific cookies we use and your choices, please refer to our full Cookie Policy.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

8.1 Retention Periods

After the applicable retention period expires, we will securely delete or anonymize your personal information so that it can no longer be associated with you.

9. Children's Privacy

Taco Time is a food service platform designed for adult consumers. We do not intentionally market our services to minors, and our website is not directed at individuals under the age of 18. In compliance with the Children's Online Privacy Protection Act (COPPA) and applicable federal regulations, we do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent.

If you are a parent or guardian and you believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete the information from our records.

We reserve the right to terminate any account we believe belongs to a minor and to delete all associated personal information.

10. International Data Transfers

Taco Time operates in the United States, and your personal information is primarily collected, stored, and processed in the United States. However, some of our third-party service providers may operate in other countries, which means your personal information may be transferred to, stored in, or processed in a country other than your country of residence.

When we transfer personal information internationally, we take appropriate steps to ensure that your information receives an adequate level of protection wherever it is processed, including:

• Entering into data processing agreements with our service providers that include standard contractual clauses or equivalent safeguards.
• Ensuring that any international transfers comply with applicable U.S. and foreign privacy laws.
• Evaluating the privacy and security practices of third-party recipients before transferring data.

By using our website and services from outside the United States, you acknowledge that your personal information may be transferred to and processed in the United States, which may have different data protection laws than your home country.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not operated by Taco Time. These may include delivery platforms, social media sites, payment processors, and partner restaurants. This Privacy Policy does not apply to those third-party websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We encourage you to review the privacy policies of any third-party websites you visit through links on our site. The presence of a link on our website does not constitute an endorsement of that website or its privacy practices.

12. Do Not Track Signals

Some web browsers may transmit "Do Not Track" (DNT) signals to websites. Currently, there is no universally accepted standard for how websites should respond to DNT signals, and we do not currently respond to DNT browser signals. We will update our practices if and when a DNT standard is established and adopted by applicable regulations.

California residents may also visit the Network Advertising Initiative (NAI) opt-out page or the Digital Advertising Alliance (DAA) opt-out page to opt out of interest-based advertising from participating companies.

13. Marketing Communications

With your consent or where otherwise legally permitted, we may use your contact information to send you promotional communications about our menu, special offers, seasonal promotions, loyalty program updates, and new services.

13.1 Opting Out of Marketing

You may opt out of receiving marketing emails from us at any time by:

• Clicking the "Unsubscribe" link found at the bottom of any marketing email we send you.
• Contacting us directly at [email protected] with the subject line "Marketing Opt-Out."
• Updating your communication preferences in your account settings (if applicable).

Please note that even if you opt out of marketing communications, we will continue to send you transactional and service-related emails necessary for your use of our services (e.g., order confirmations, delivery updates, and account notifications).

14. How to File a Complaint

If you have concerns about how we handle your personal information and feel that your privacy rights have been violated, we encourage you to contact us first so that we can try to resolve the issue.

14.1 Contact Us

Please reach out to our Privacy Contact at:

• Email: [email protected]
• Website: tacotime.rest

We will investigate your complaint and respond within 30 days of receiving it. We take all privacy complaints seriously and will work diligently to resolve any concerns.

14.2 Regulatory Complaints

If you are a California resident and you are not satisfied with our response, you have the right to lodge a complaint with the California Privacy Protection Agency (CPPA), which is the primary state authority responsible for enforcing the CCPA/CPRA:

For general consumer protection matters in the United States, complaints may also be directed to the Federal Trade Commission (FTC):

Depending on your state of residence, you may also have the right to lodge a complaint with your state's attorney general office or relevant consumer protection authority.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or for other operational reasons. When we make changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify you via email (for material changes) or through a prominent notice on our website.
• Where required by law, obtain your consent before implementing material changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us:

We are committed to working with you to resolve any privacy concerns fairly, transparently, and in accordance with applicable law. Our goal is to ensure that your personal information is handled with the highest standards of care, integrity, and respect.