Privacy Policy

At Marcos ("we," "us," or "our"), we are deeply committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website marcos-pizza.click (the "Website"), place an order with us, or otherwise interact with our services. We encourage you to read this document carefully. If you disagree with the terms of this Privacy Policy, please discontinue use of our Website and services.

This Privacy Policy applies to all users in the United States and is designed to comply with applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable state and federal consumer protection regulations.

1. Who We Are

Marcos is a food service business operating in the United States. We provide food ordering, delivery, and related services to our customers through our website and other channels.

2. Information We Collect

We collect several types of information from and about users of our Website and services. Below is a detailed breakdown of the categories of personal information we may collect.

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, or contact us, we may collect the following personal identification details:

• Full name
• Email address
• Phone number
• Billing and delivery address
• Date of birth (where required for age verification)
• Username and password for account access
• Profile preferences (e.g., dietary preferences, favorite orders)

2.2 Payment and Financial Information

When you make a purchase through our Website, we collect payment-related information. Please note that we do not store full credit card numbers or CVV codes on our servers. Payment processing is handled by trusted third-party payment processors.

• Payment card type (e.g., Visa, MasterCard)
• Last four digits of your card number
• Billing address associated with your payment method
• Transaction history and order records

2.3 Usage and Behavioral Data

We automatically collect information about how you interact with our Website, including:

• Pages visited and time spent on each page
• Links clicked and features used
• Search queries made within our Website
• Order history and browsing behavior
• Referring URLs (the website that directed you to ours)
• Exit pages and actions taken before leaving the site

2.4 Device and Technical Information

We collect technical information about the devices and systems you use to access our services:

• IP address
• Browser type and version
• Operating system and platform
• Screen resolution and device type (desktop, mobile, tablet)
• Device identifiers and unique hardware identifiers
• Time zone settings and location data (where permitted)
• Language preferences

2.5 Location Data

With your permission, we may collect precise or approximate location information from your device to facilitate food delivery services, show you nearby offerings, or tailor our services to your geographic area. You may disable location access at any time through your browser or device settings.

2.6 Communications Data

If you contact us by email, phone, or through a contact form, we collect records of that communication, including:

• The content of messages you send us
• Customer service correspondence
• Feedback and survey responses
• Reviews and testimonials you submit

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activities. For a full description of our cookie practices, please refer to Section 9 of this Privacy Policy.

2.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms if you choose to log in or connect your social media accounts
• Analytics providers who provide aggregated demographic and behavioral data
• Advertising partners who share information about your interactions with their platforms
• Delivery partners and service providers involved in fulfilling your orders

3. How We Use Your Information

We use the information we collect for the following purposes, always in accordance with applicable law and with your privacy in mind.

3.1 Provision of Services

• To process and fulfill your food orders
• To manage your account and preferences
• To facilitate payment transactions
• To coordinate delivery and logistics
• To respond to customer inquiries and provide support
• To send order confirmations, receipts, and delivery updates

3.2 Analytics and Performance Improvement

• To analyze usage patterns and improve our Website's functionality
• To understand customer behavior and optimize the user experience
• To identify and fix technical problems
• To measure the effectiveness of our content and promotional campaigns
• To conduct internal research and product development

3.3 Marketing and Communications

• To send you promotional offers, deals, and newsletters (with your consent)
• To personalize marketing content based on your preferences and order history
• To retarget you with relevant advertisements on third-party platforms
• To notify you of new menu items, seasonal promotions, or service updates

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send, or by contacting us at [email protected].

3.4 Legal and Compliance Purposes

• To comply with applicable laws, regulations, and legal processes
• To enforce our Terms of Service and other agreements
• To detect, prevent, and investigate fraud, security incidents, or illegal activity
• To protect the rights, property, and safety of Marcos, our customers, and others

3.5 Business Operations

• To manage and improve our overall business operations
• To evaluate potential business transactions or partnerships
• To meet insurance, audit, or financial reporting requirements

4. Legal Basis for Processing

While U.S. federal law does not mandate a single "legal basis" framework as strictly as the European GDPR, we ground our data processing activities in the following recognized justifications under U.S. law:

• Contractual necessity: Processing required to fulfill orders and provide the services you have requested.
• Legitimate business interests: Processing for analytics, fraud prevention, and operational improvements, balanced against your privacy rights.
• Consent: For marketing communications and optional data sharing, we rely on your express consent.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements.

5. How We Share Your Information

We do not sell your personal information to third parties. We may, however, share your information in the following circumstances:

5.1 Service Providers and Business Partners

We work with trusted third-party vendors and service providers who assist us in operating our business. These parties are permitted to use your information only to perform services on our behalf and are contractually obligated to maintain the confidentiality and security of your data. Such providers include:

• Payment processors (e.g., Stripe, Square, or similar platforms)
• Delivery logistics and courier services
• Cloud hosting and data storage providers
• Email marketing platforms
• Customer relationship management (CRM) tools
• Analytics providers (e.g., Google Analytics)
• Advertising networks and retargeting platforms

5.2 Legal Requirements and Law Enforcement

We may disclose your information if required to do so by law or in response to valid requests from public authorities, including:

• Court orders, subpoenas, or other legal processes
• Requests from law enforcement agencies
• Regulatory or government investigations
• Situations requiring disclosure to protect national security or public safety

5.3 Business Transfers

If Marcos undergoes a merger, acquisition, restructuring, bankruptcy, or sale of all or substantially all of its assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change and the choices available to you in accordance with applicable law.

5.4 Aggregate and De-Identified Data

We may share aggregated or anonymized data with partners, investors, or the public for research, marketing, or business development purposes. This information cannot reasonably be used to identify you personally.

5.5 With Your Consent

We may share your information with other third parties when you have given us your explicit consent to do so.

6. Data Security

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, alteration, disclosure, or destruction.

6.1 Security Measures We Employ

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers.
• Access controls: Access to personal information is restricted to authorized personnel on a need-to-know basis.
• Secure servers: Our servers are hosted in secure, access-controlled data centers.
• Regular audits: We conduct periodic security assessments and vulnerability testing.
• Password protection: User account passwords are stored using industry-standard hashing algorithms.
• Employee training: Staff members are trained on data privacy and security best practices.

6.2 Limitations

Despite our best efforts, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

7. Your Privacy Rights

Depending on your state of residence in the United States, you may have the following rights regarding your personal information. We are committed to honoring these rights in a timely and transparent manner.

7.1 Right to Know and Access

You have the right to request that we disclose what personal information we have collected about you, including the categories of data, the sources of collection, the purposes for use, and any third parties with whom we have shared your data.

7.2 Right to Correction

You have the right to request that we correct any inaccurate personal information we hold about you. You may also update your information directly through your account settings.

7.3 Right to Deletion

You have the right to request that we delete the personal information we have collected about you, subject to certain exceptions. For example, we may retain information that is necessary to complete a transaction, comply with a legal obligation, or exercise our legal rights.

7.4 Right to Data Portability

Where technically feasible, you have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to transfer that data to another service provider.

7.5 Right to Opt-Out of Sale or Sharing

Under the California Consumer Privacy Act (CCPA) and CPRA, California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. We do not sell personal information in the traditional sense; however, if our use of third-party advertising technologies constitutes a "sale" or "sharing" under California law, you may exercise your opt-out rights by contacting us at [email protected].

7.6 Right to Limit Use of Sensitive Personal Information

If we collect sensitive personal information (as defined under CPRA), California residents have the right to direct us to limit the use and disclosure of such information to only what is necessary to provide the requested services.

7.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you goods or services, charge you different prices, or provide you with a lower quality of service because you exercised your privacy rights.

7.8 How to Submit a Request

To exercise any of the rights described above, please submit a verifiable consumer request to us by:

• Email: [email protected]
• Website: marcos-pizza.click

We will verify your identity before processing your request and will respond within 45 days of receipt. If additional time is needed, we will notify you of the extension in writing. You may designate an authorized agent to submit requests on your behalf, provided the agent submits written proof of authorization.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

When your personal information is no longer required, we will securely delete, destroy, or anonymize it in accordance with our data retention and disposal procedures.

9. Cookie Policy Summary

Our Website uses cookies and similar tracking technologies to enhance your experience, analyze site traffic, and serve personalized content and advertisements. This section provides a brief overview of our cookie practices.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Website to function properly, including shopping cart functionality and user authentication.
• Performance and Analytics Cookies: Used to collect information about how visitors use our Website (e.g., Google Analytics), helping us improve performance.
• Functional Cookies: Allow our Website to remember your preferences, such as language and location settings.
• Targeting and Advertising Cookies: Set by us and our advertising partners to build a profile of your interests and show you relevant ads on other websites.

9.2 Managing Cookies

You can manage your cookie preferences through your browser settings or through any cookie consent mechanism available on our Website. Please note that disabling certain cookies may affect the functionality of our Website and your user experience.

For more detailed information about the specific cookies we use and how to manage them, please refer to our full Cookie Policy, available on our Website at marcos-pizza.click.

10. Children's Privacy

Our Website and services are intended for individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 13, or between 13 and 17 without appropriate parental consent.

If we become aware that we have inadvertently collected personal information from a child under 13 without verified parental consent, we will take prompt steps to delete that information from our records. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

We comply with the Children's Online Privacy Protection Act (COPPA) and applicable state laws governing the privacy of minors online.

11. International Data Transfers

Marcos is based in the United States, and your personal information is primarily collected and processed within the United States. Our servers and service providers may also be located in the United States.

If you are accessing our Website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using our services, you acknowledge and consent to the transfer of your personal information to the United States as described in this Privacy Policy.

When we transfer data internationally, we take appropriate steps to ensure that your information receives an adequate level of protection, including through the use of standard contractual clauses, data processing agreements, and other recognized transfer mechanisms where applicable.

12. Third-Party Websites and Links

Our Website may contain links to third-party websites, applications, or services that are not owned or controlled by Marcos. This Privacy Policy does not apply to those third-party platforms. We encourage you to review the privacy policies of any third-party sites you visit, as we are not responsible for their privacy practices or content.

The inclusion of a link on our Website does not imply endorsement or a relationship with the linked site or its operators.

13. Social Media and Third-Party Integrations

Our Website may feature social media buttons, plugins, or widgets (such as Facebook, Instagram, or Twitter) that allow you to share content or interact with social platforms. When you use these features, your browser may send information directly to those social media providers. Please note that these interactions are subject to the privacy policies of the respective social media platforms, not this Privacy Policy.

If you choose to log in to our Website using your social media credentials, we may receive certain profile information as permitted by your social media account settings. You can revoke this access at any time through your social media account settings.

14. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. There is currently no universally accepted standard for how websites should respond to DNT signals. At this time, our Website does not respond to DNT browser signals. However, you can manage tracking preferences through your browser settings and our cookie management tools.

15. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), which took full effect on January 1, 2023.

15.1 Categories of Personal Information Collected

In the past 12 months, we have collected personal information in the following CCPA-defined categories:

• Identifiers (name, email, IP address, account username)
• Commercial information (order history, purchase records)
• Internet or electronic network activity information (browsing behavior, interactions with our Website)
• Geolocation data (approximate location for delivery purposes)
• Inferences drawn from personal information (customer preferences and interests)

15.2 Shine the Light Law

Under California Civil Code Section 1798.83 ("Shine the Light" law), California residents who have an established business relationship with us may request, once per year, information about the categories of personal information we disclosed to third parties for their direct marketing purposes. To make such a request, please contact us at [email protected].

15.3 Authorized Agents

California residents may authorize an agent to submit privacy requests on their behalf. To do so, the agent must provide written proof of authorization, and we may verify your identity directly before processing the request.

16. How to File a Complaint

If you have concerns about our privacy practices or believe we have handled your personal information inappropriately, we encourage you to contact us first so we may address your concerns directly.

16.1 Contact Marcos

Please reach out to us at:

• Email: [email protected]
• Website: marcos-pizza.click

16.2 Filing a Complaint with Government Authorities

If you are not satisfied with our response or believe your privacy rights have been violated, you may file a complaint with the following authorities:

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you by email (if you have provided one) or through a prominent notice on our Website
• Where required by law, seek your renewed consent

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Website and services after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to responding promptly and transparently.

We are dedicated to working with you to resolve any privacy concerns in a fair, timely, and respectful manner. Thank you for trusting Marcos with your personal information. Your privacy matters to us, and we remain committed to upholding the highest standards of data protection.