Privacy Policy

This Privacy Policy describes how Marcos ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website at meals-marcos.rest, place orders through our platform, or otherwise interact with our food services. Please read this policy carefully. If you do not agree with its terms, please discontinue use of our website and services immediately.

We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy is designed to comply with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act), among other applicable regulations governing the food and restaurant industry.

1. Who We Are

Marcos is a food service business operating through its online platform at meals-marcos.rest. We provide customers with the ability to browse our menu, place food orders, make reservations, and interact with our team online.

For any questions or concerns about this Privacy Policy, you may contact us using the following details:

2. Information We Collect

We collect various types of information in connection with your use of our website, mobile experience, and services. The categories of personal information we may collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, make a reservation, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and shipping address (for delivery orders)
• Date of birth (where age verification is required)
• Username and password (for registered accounts)
• Profile photo or avatar (if uploaded)

2.2 Payment and Financial Information

When you make a purchase through our platform, we collect payment information necessary to complete the transaction. This may include:

• Credit or debit card number (processed securely through our payment processors)
• Billing address
• Transaction amounts and history
• Refund and dispute records

Please note that we do not store complete credit card numbers on our servers. All payment processing is handled by PCI-DSS compliant third-party payment processors.

2.3 Order and Transaction Data

We maintain records related to your food orders and interactions with our services, including:

• Items ordered and order history
• Dietary preferences and special requests
• Delivery instructions and addresses
• Order timestamps and fulfillment records
• Loyalty program activity and reward redemptions

2.4 Usage Data and Technical Information

When you visit our website, we automatically collect certain technical data, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type
• Referring website URLs
• Pages visited, time spent on each page, and navigation paths
• Click patterns and interactions on our website
• Search queries entered on our platform
• Date and time of access

2.5 Cookie and Tracking Technology Data

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect information about how you use our website. For detailed information about our use of cookies, please refer to Section 8 of this Privacy Policy.

2.6 Communications Data

If you contact us directly, we may collect:

• Content of messages, emails, or chat conversations
• Feedback, reviews, and survey responses
• Records of customer support interactions
• Social media messages or posts directed at us

2.7 Marketing and Preference Data

With your consent or as otherwise permitted by law, we may collect:

• Marketing communication preferences
• Subscription and opt-in records for newsletters and promotions
• Preferences related to food type, cuisine, and dietary needs

2.8 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms (if you link your account or log in via social login)
• Third-party delivery platforms and food ordering aggregators
• Analytics providers and advertising partners
• Publicly available databases or records

3. How We Use Your Information

We use the personal information we collect for legitimate business purposes, including to provide and improve our services. Specifically, we may use your information for the following purposes:

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders and reservations
• To create and manage your account
• To communicate with you regarding your orders, including confirmation emails and delivery updates
• To process payments and issue refunds where applicable
• To provide customer support and resolve disputes

3.2 Analytics and Service Improvement

• To analyze website traffic patterns and user behavior
• To improve the design, functionality, and content of our website
• To develop new features, products, and services
• To conduct internal research, auditing, and quality assurance
• To measure the effectiveness of our marketing campaigns

3.3 Marketing and Promotional Communications

• To send you promotional emails, newsletters, special offers, and discount codes (with your consent where required)
• To personalize your experience on our platform and recommend relevant menu items
• To display targeted advertisements on our site and on third-party platforms
• To manage loyalty programs and reward schemes

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us at [email protected].

3.4 Legal Compliance and Safety

• To comply with applicable federal, state, and local laws and regulations
• To respond to lawful requests from government authorities or law enforcement
• To enforce our Terms of Service and other agreements
• To detect, prevent, and investigate fraud, security incidents, or other illegal activities
• To protect the rights, safety, and property of Marcos, our customers, and the public

3.5 Business Operations

• To manage business transactions such as mergers, acquisitions, or asset transfers
• To perform accounting, auditing, and financial reporting functions
• To maintain business records as required by law

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the circumstances described below:

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform certain functions on our behalf. These service providers only have access to personal information necessary to perform their specific tasks and are contractually obligated to maintain its confidentiality. Examples include:

• Payment processors and financial institutions
• Food delivery and logistics companies
• Website hosting and cloud infrastructure providers
• Email marketing and communication service providers
• Analytics platforms (e.g., Google Analytics)
• Customer support software providers
• Advertising and retargeting technology platforms
• Fraud detection and security service providers

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, or government request
• Enforce our Terms of Service or other agreements
• Protect and defend the rights or property of Marcos
• Prevent or investigate fraud or other illegal activities
• Protect the personal safety of users or the general public

4.3 Business Transfers

In the event that Marcos undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs.

4.4 Aggregated and Anonymized Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes.

4.5 With Your Consent

We may share your personal information with third parties when you have explicitly consented to such sharing, or where you have directed us to share your information.

5. Data Security

We take the security of your personal information seriously and implement a variety of administrative, technical, and physical safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers.
• Access Controls: Access to personal data is restricted to authorized personnel who have a legitimate business need to access it.
• Secure Payment Processing: Payment transactions are processed through PCI-DSS compliant payment processors.
• Regular Security Audits: We conduct periodic reviews of our data collection, storage, and processing practices.
• Employee Training: Our staff receive training on data protection and privacy best practices.
• Incident Response: We maintain a data breach response plan and will notify affected individuals and authorities as required by applicable law.

Despite our best efforts, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your personal information and encourage you to take steps to protect your own data, such as using a strong, unique password for your account.

6. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

6.1 Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose what personal information we have collected about you, including the categories, sources, purposes, and third parties with whom we share it.
• Right to Delete: You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell personal information for monetary compensation.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to certain permitted purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please submit a verifiable consumer request to us at [email protected]. We will respond to verified requests within 45 days, with the possibility of one 45-day extension if reasonably necessary.

6.2 General Privacy Rights

Regardless of your location, we strive to honor the following requests from all users:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may ask us to correct any inaccurate or incomplete personal data.
• Right to Erasure: You may request that we delete your personal information where it is no longer necessary for the purposes for which it was collected.
• Right to Restrict Processing: You may ask us to restrict how we process your personal data under certain circumstances.
• Right to Data Portability: You may request that we provide your personal information in a structured, machine-readable format that you can transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Object: You may object to our processing of your personal data for direct marketing purposes.

6.3 How to Submit a Privacy Request

To exercise any of the rights listed above, please contact us using one of the following methods:

• Email: [email protected]
• Website: meals-marcos.rest

To protect your privacy and verify your identity, we may require you to provide additional information before we can process your request. We will not use this information for any purpose other than verification.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention periods we apply are as follows:

When personal information is no longer required, we will securely delete or anonymize it in accordance with our data retention procedures.

8. Cookie Policy Summary

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website performance, and deliver personalized content and advertisements.

8.1 Types of Cookies We Use

• Essential Cookies: These are necessary for the website to function properly and cannot be disabled. They enable core features such as security, network management, and account access.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often and any error messages received. This helps us improve how our website works.
• Functional Cookies: These cookies allow the website to remember choices you make (such as your preferred language or region) and provide enhanced, more personalized features.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements more relevant to you and your interests. They may also be used to limit the number of times you see an advertisement and help measure the effectiveness of advertising campaigns.

8.2 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse to accept cookies, delete cookies already stored on your device, and receive notifications when new cookies are set. Please note that disabling certain cookies may affect the functionality of our website.

For more detailed information about the cookies we use, how we use them, and how you can control them, please refer to our full Cookie Policy available on our website at meals-marcos.rest.

9. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, as defined by the Children's Online Privacy Protection Act (COPPA), or from minors under the age of 18.

If we become aware that we have inadvertently collected personal information from a child under 13 (or a minor under 18 where required by applicable law), we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us promptly at [email protected].

By using our website and services, you represent and warrant that you are at least 18 years of age. If you are under 18, please do not use our services or provide us with any personal information.

10. International Data Transfers

Marcos is based in the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your home country.

In the event that we transfer personal information internationally, we take steps to ensure that such transfers are subject to appropriate safeguards and protections, including:

• Contractual clauses requiring recipients to maintain standards of data protection equivalent to those in the originating jurisdiction
• Compliance with applicable international data transfer frameworks and regulations
• Implementation of technical and organizational measures to protect transferred data

By using our website and providing us with your personal information, you acknowledge and consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy.

11. Third-Party Links and Integrations

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Marcos. This Privacy Policy applies only to information collected directly by us through our website and services. We are not responsible for the privacy practices of third-party websites.

We encourage you to review the privacy policies of any third-party websites you visit through links on our platform. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services.

If you connect your account with third-party services or social media platforms (such as Facebook or Google), those platforms may collect information about you in accordance with their own privacy policies.

12. Your Choices and Opt-Out Options

We offer you the following choices regarding how we use your personal information:

12.1 Marketing Communications

You may opt out of receiving promotional emails from us by clicking the "unsubscribe" link in any marketing email, or by contacting us at [email protected]. Please note that even after you opt out of marketing communications, you will continue to receive transactional emails related to your orders and account activity.

12.2 Cookies and Tracking

You can manage your preferences for cookies and tracking technologies through your browser settings or through any cookie consent management tool we provide on our website.

12.3 Account Information

You may update or correct your account information at any time by logging into your account on our website. If you wish to deactivate or delete your account, please contact us at [email protected].

12.4 Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your browsing activity not be tracked. Currently, there is no universal standard for interpreting DNT signals. We will continue to monitor developments in this area and update our practices accordingly.

13. Complaint Resolution and Regulatory Authorities

If you have a concern about the way we are handling your personal information, we encourage you to contact us first so that we may attempt to resolve your concern directly. Please reach out to us at:

• Email: [email protected]

We will acknowledge your complaint within 5 business days and aim to resolve the matter within 30 business days.

13.1 Filing a Complaint with Regulatory Authorities

If you are not satisfied with our response to your privacy concern, you have the right to file a complaint with the relevant data protection or consumer protection authority. In the United States, these may include:

• Federal Trade Commission (FTC): The FTC enforces federal consumer protection laws, including those related to online privacy. You may file a complaint at www.ftc.gov/complaint.
• California Privacy Protection Agency (CPPA): California residents may file complaints regarding CCPA/CPRA violations with the California Privacy Protection Agency at cppa.ca.gov.
• State Attorney General: Residents of all states may contact their state Attorney General's office to report privacy violations or consumer protection concerns.

14. Changes to This Privacy Policy

We reserve the right to update, modify, or replace this Privacy Policy at any time in response to changes in our business practices, applicable law, or technological developments. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Post a prominent notice on our website
• Send an email notification to registered users where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

15. Legal Basis for Processing

We rely on the following legal bases for collecting and processing your personal information under applicable United States law and, where relevant, other applicable frameworks:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you, including processing your orders and managing your account.
• Legal Obligation: Processing is required to comply with applicable federal, state, or local laws and regulations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring the security of our platform, provided that such interests are not overridden by your rights and freedoms.
• Consent: Where required by applicable law, we process your personal information only with your prior consent, such as for marketing communications and certain cookies.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please do not hesitate to contact us: