Privacy Policy

This Privacy Policy describes how Costa Vida ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at costavida-cafe.top, place orders, interact with our services, or otherwise engage with us. We are committed to protecting your privacy and handling your data with transparency and responsibility.

Please read this Privacy Policy carefully. By using our website or services, you agree to the practices described herein. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services immediately.

This policy applies to all users located in the United States and is written in compliance with applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations.

1. Who We Are

Costa Vida is a food service business operating through the website costavida-cafe.top. We provide customers with food-related products, services, and digital ordering experiences. For the purposes of this Privacy Policy, Costa Vida is the data controller responsible for your personal information.

For all privacy-related inquiries, including requests to exercise your rights under applicable law, please contact us using the information provided above.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of information we collect are described below.

2.1 Personal Information You Provide Directly

When you interact with our website, create an account, place an order, subscribe to our newsletter, or otherwise communicate with us, you may provide us with personal information, including:

• Identification Information: Your full name, username, and similar identifiers.
• Contact Information: Email address, telephone number, mailing address, and delivery address.
• Account Credentials: Username and password when you create an account with us.
• Order and Transaction Information: Details about the food items you order, order history, special dietary preferences, and preferences you communicate to us.
• Payment Information: Billing address, credit or debit card details, and other financial information necessary to process transactions. Note that full payment card numbers are processed by our secure third-party payment processors and are not stored on our servers.
• Communications: Messages, feedback, reviews, and complaints you send us through email, contact forms, or other communication channels.
• Marketing Preferences: Your preferences regarding receiving promotional communications from us.

2.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies, web beacons, pixels, and similar tracking technologies. This includes:

• Usage Data: Pages you visit, links you click, time spent on pages, referring URLs, and navigation paths through our website.
• Device Information: IP address, browser type and version, operating system, device type, screen resolution, and language settings.
• Log Data: Server logs including the date and time of your visit, the features you use, and error reports.
• Location Data: General geographic location based on your IP address. We do not collect precise GPS location without your explicit consent.
• Cookie Data: Information stored in cookies and similar technologies on your device. Please see Section 8 of this Privacy Policy for more detailed information about our use of cookies.

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Social Media Platforms: If you choose to log in or connect your account using a social media platform (such as Facebook or Google), we may receive basic profile information from that platform in accordance with your privacy settings.
• Analytics Providers: Third-party analytics services that help us understand how visitors interact with our website.
• Payment Processors: Transaction confirmation and fraud prevention data from our authorized payment service providers.
• Delivery Partners: Delivery address and contact information shared by third-party delivery platforms when applicable.
• Marketing Partners: Contact information or demographic data from marketing partners, where permitted by law.

2.4 Sensitive Information

We generally do not seek to collect sensitive personal information such as Social Security numbers, government-issued identification numbers, racial or ethnic origin, religious beliefs, or health information. However, if you voluntarily share information about dietary restrictions or food allergies in connection with your orders, we will process such information solely for the purpose of fulfilling your food order safely and appropriately.

3. How We Use Your Information

We use the information we collect for a variety of purposes related to operating and improving our food service business. Specifically, we use your personal information for the following purposes:

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, including managing delivery and pickup logistics.
• To manage your account and provide customer support.
• To communicate with you about your orders, including confirmation emails, delivery updates, and changes to your order status.
• To process payments and issue refunds when applicable.
• To accommodate dietary preferences and food allergy information you provide.

3.2 Website Operation and Improvement

• To maintain, operate, and improve the functionality and user experience of our website.
• To diagnose technical problems, fix bugs, and ensure website security.
• To analyze usage patterns and trends to better understand how customers interact with our services.
• To develop new features, products, and services based on user feedback and usage data.

3.3 Marketing and Communications

• To send you promotional emails, newsletters, special offers, and information about new menu items, if you have opted in to receive such communications.
• To personalize your experience on our website and show you content and promotions relevant to your interests.
• To conduct surveys, sweepstakes, and contests.
• To retarget advertisements to you on other websites and platforms, based on your previous interactions with our website.

3.4 Legal Compliance and Safety

• To comply with applicable laws, regulations, legal processes, and governmental requests.
• To enforce our Terms of Service and other agreements.
• To detect, prevent, and address fraud, security breaches, and other harmful or illegal activities.
• To protect the rights, property, or safety of Costa Vida, our customers, or others.

3.5 Business Operations

• To conduct internal business operations such as auditing, accounting, and financial reporting.
• To evaluate or conduct a merger, acquisition, reorganization, bankruptcy, or other sale or transfer of some or all of our assets.

4. Legal Basis for Processing (California Residents)

If you are a resident of California, the following legal bases apply to our processing of your personal information under the CCPA and CPRA:

• Contractual Necessity: Processing is necessary to fulfill the contract we have with you (e.g., to process your food orders).
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and marketing, provided these interests are not overridden by your rights.
• Legal Obligation: Processing is necessary to comply with a legal obligation.
• Consent: Where required by law, we process your information based on your explicit consent, which you may withdraw at any time.

5. Sharing Your Information with Third Parties

We respect your privacy and do not sell your personal information to third parties. However, we may share your information with certain categories of third parties as described below.

5.1 Service Providers and Business Partners

We share personal information with trusted third-party vendors and service providers who assist us in operating our business and providing services to you. These include:

• Payment Processors: To securely handle payment card transactions.
• Delivery and Logistics Partners: To fulfill food delivery orders to your specified address.
• Technology and Hosting Providers: To host our website, manage databases, and provide cloud computing services.
• Email and Marketing Service Providers: To send transactional and promotional emails on our behalf.
• Analytics Providers: Such as Google Analytics, to help us understand website traffic and user behavior.
• Customer Support Platforms: To manage customer inquiries, complaints, and support tickets.

All service providers are contractually required to use your personal information only as necessary to perform services on our behalf and to maintain appropriate security measures. They are not permitted to use your data for their own marketing purposes.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in good faith belief that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or governmental regulation.
• Protect and defend the rights or property of Costa Vida.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of users of our services or the public.
• Protect against legal liability.

5.3 Business Transfers

In the event that Costa Vida undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information through the email address associated with your account or by posting a notice on our website.

5.4 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes. This data is not considered personal information under applicable privacy laws.

5.5 With Your Consent

We may share your personal information with other third parties when you have given us your explicit consent to do so.

6. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, use, disclosure, alteration, or destruction.

6.1 Security Measures We Employ

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers.
• Secure Payment Processing: Payment card information is processed through PCI-DSS compliant payment processors. We do not store full credit card numbers on our servers.
• Access Controls: We restrict access to personal information to employees and contractors who need it to perform their job functions. All personnel with access to personal data are bound by confidentiality obligations.
• Regular Security Audits: We conduct regular reviews of our information collection, storage, and processing practices to guard against unauthorized access.
• Password Protection: User accounts are protected by passwords, and we encourage the use of strong, unique passwords.
• Incident Response: We have procedures in place to detect, report, and investigate personal data breaches.

6.2 Limitations of Security

While we take reasonable steps to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the appropriate authorities as required by applicable law, including requirements under state breach notification laws.

You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. Please notify us immediately at [email protected] if you suspect any unauthorized use of your account.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

7.1 Rights Available to California Residents (CCPA/CPRA)

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

7.2 Rights Available to All Users

Regardless of your location, we provide the following rights to all users of our services:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct or update inaccurate information about you.
• Deletion: You may request that we delete your personal information, subject to legal retention requirements.
• Opt-Out of Marketing: You may opt out of receiving promotional communications from us at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly.
• Account Management: If you have an account with us, you may access and update your personal information by logging into your account settings.

7.3 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us using one of the following methods:

• Email: [email protected]
• Website: costavida-cafe.top

When submitting a request, please provide sufficient information to allow us to verify your identity and locate your records. We will respond to your request within 45 days as required by the CCPA/CPRA. If we need additional time, we will notify you of the extension and the reason for it. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

You may designate an authorized agent to submit requests on your behalf. We may require the authorized agent to provide proof of written authorization and may require you to verify your identity directly with us.

8. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing efforts.

8.1 What Are Cookies?

Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website. They help the website recognize your device on return visits and remember your preferences and actions over time.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website. Without these cookies, services such as shopping cart functionality and login sessions cannot be provided.
• Performance and Analytics Cookies: Allow us to recognize and count visitors and understand how visitors move around the website. This helps us improve how our website works.
• Functionality Cookies: Enable the website to remember choices you make (such as your preferred language or location) and provide enhanced, personalized features.
• Targeting and Advertising Cookies: Used to deliver advertisements more relevant to you and your interests. They are also used to limit the number of times you see an advertisement and to measure the effectiveness of advertising campaigns.

8.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or to indicate when a cookie is being sent. However, please note that disabling certain cookies may affect the functionality of our website.

For California residents, you may also opt out of certain cookies that constitute the "sharing" of personal information for cross-context behavioral advertising by using the "Do Not Sell or Share My Personal Information" option, which can be accessed by contacting us at [email protected].

We honor browser-based Global Privacy Control (GPC) signals as an opt-out of the sale or sharing of personal information, as required by California law.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When your personal information is no longer needed, we will securely delete or anonymize it. In some cases, we may be unable to delete your information due to legal, regulatory, or technical constraints, in which case we will isolate your data from further active processing until deletion is possible.

10. Children's Privacy

Our website and services are intended for individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 18.

In compliance with the Children's Online Privacy Protection Act (COPPA) and other applicable laws, if we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take prompt steps to delete such information from our records.

If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

We do not direct our food service website or any of its content toward children, and we do not knowingly permit minors to place orders or create accounts on our platform.

11. International Data Transfers

Costa Vida is based in the United States and primarily processes personal information within the United States. However, some of our third-party service providers may be located in other countries, which means your personal information may be transferred to, stored in, and processed in countries outside of the United States.

When we transfer personal information internationally, we take appropriate steps to ensure that your information receives an adequate level of protection in the jurisdictions in which it is processed. These steps may include:

• Entering into data processing agreements with service providers that include appropriate data protection clauses.
• Ensuring that service providers maintain security practices consistent with applicable data protection laws.
• Using standard contractual clauses or other lawful transfer mechanisms where applicable.

By using our website or services, you understand that your personal information may be processed in the United States or other jurisdictions that may have different data protection standards than your country of residence.

12. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked. Our website currently does not respond to DNT browser signals because there is no consistent industry standard for how to respond to such signals.

However, as noted in Section 8, we do honor Global Privacy Control (GPC) signals as an opt-out of the sale or sharing of personal information, as required by California law under the CPRA.

You can also limit tracking by managing your cookie preferences through your browser settings, as described in Section 8 of this Privacy Policy.

13. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to those third-party websites or services. When you click on a link to a third-party site, you will be subject to that website's privacy policy and practices.

We strongly encourage you to review the privacy policies of any third-party websites you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.

Additionally, if you use a third-party delivery application or platform to order from us, that platform's separate privacy policy will govern the collection and use of your information by that platform.

14. How to File a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response to your privacy inquiry or request, you have the right to file a complaint with the appropriate data protection authority.

14.1 Complaints to Costa Vida

We encourage you to first contact us directly to resolve any privacy-related concerns. You can reach our privacy team at:

• Email: [email protected]
• Website: costavida-cafe.top

We will acknowledge receipt of your complaint and aim to resolve it within 30 business days.

14.2 Complaints to Regulatory Authorities

If you are a resident of California and believe we have not complied with your rights under the CCPA/CPRA, you may file a complaint with:

Additionally, complaints regarding unfair or deceptive business practices may be submitted to:

Residents of other states may also have rights under their respective state privacy laws and may contact their state's attorney general office or relevant consumer protection agency for assistance.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post the revised policy on our website at costavida-cafe.top.
• Where required by law or where we deem appropriate, notify you by email or through a prominent notice on our website.

Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you disagree with the updated Privacy Policy, you should discontinue your use of our website and services and may request deletion of your personal information as described in Section 7 of this policy.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our privacy practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and thoroughly.

When contacting us about a privacy matter, please include your full name, contact information, and a clear description of your request or concern. This will help us process your inquiry as efficiently as possible.

We value your trust and are committed to protecting your privacy. Thank you for choosing Costa Vida.