Privacy Policy

At Marcos Meals, we are deeply committed to protecting your privacy and handling your personal information with care, transparency, and respect. This Privacy Policy explains how we collect, use, share, and safeguard your personal data when you visit our website at marcosmeals.rest, place food orders, use our services, or otherwise interact with us. Please read this document carefully. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy applies to all users of marcosmeals.rest and covers all personal information collected through our website, mobile platforms, email communications, telephone interactions, and any other means through which you engage with Marcos Meals.

1. Who We Are

Marcos Meals is a food service business operating in the United States. We provide food ordering, delivery, and dining-related services to our customers. For the purposes of this Privacy Policy, Marcos Meals acts as the data controller responsible for your personal information.

If you have any questions, concerns, or requests related to your privacy or this Policy, please contact us using the details provided in the Contact Us section at the end of this document.

2. Information We Collect

We collect various types of information in connection with your use of our website and food services. The categories of data we collect are described below.

2.1 Personal Identification Information

When you register an account, place a food order, sign up for our newsletter, contact our support team, or otherwise engage with our services, we may collect personal identification information, including but not limited to:

• Full name
• Email address
• Phone number
• Mailing and delivery address
• Date of birth (where required for age verification)
• Account username and password (stored in encrypted form)
• Profile photograph (if voluntarily provided)
• Payment information (including credit card numbers, billing address, and payment provider details — processed through secure third-party payment processors)

2.2 Order and Transaction Data

When you place orders through our platform, we collect details related to those transactions, including:

• Order history and details (items ordered, quantities, special instructions)
• Delivery preferences and instructions
• Payment amounts and transaction records
• Promotional codes or discount vouchers used
• Feedback and reviews submitted about your orders

2.3 Usage Data and Technical Information

When you visit marcosmeals.rest, we automatically collect certain technical and usage information through your browser or device, including:

• IP address and approximate geographic location
• Browser type, version, and settings
• Operating system and device type
• Pages visited on our website and time spent on each page
• Clickstream data and navigation paths
• Date and time of access
• Referring URLs (the website you came from before visiting ours)
• Search queries used on our platform

2.4 Cookie and Tracking Technology Data

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect information about your interactions with our website. Please refer to our dedicated Cookie Policy for detailed information. Cookie-collected data may include session identifiers, preference settings, and behavioral data used for analytics and personalization purposes.

2.5 Communications Data

If you contact us via email, phone, live chat, or any other communication channel, we may retain records of those communications, including the content of your messages, any attachments you provide, and metadata associated with those communications.

2.6 User-Generated Content

If you submit reviews, ratings, photos of meals, comments, or other content on our platform or through social media channels associated with Marcos Meals, we collect and store that content, along with any associated metadata.

2.7 Location Data

With your permission, we may collect precise or approximate location data from your mobile device or computer to facilitate food delivery services, suggest nearby options, and improve the relevance of your experience on our platform. You may disable location access at any time through your device settings.

2.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you log in using social media credentials such as Google or Facebook)
• Payment processors and financial institutions
• Marketing partners and data analytics providers
• Publicly available sources

3. How We Use Your Information

Marcos Meals uses the information we collect for a variety of lawful business purposes. We do not sell your personal information to third parties. Below are the specific purposes for which we use your data:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Managing your account and preferences
• Coordinating delivery logistics and communicating order status updates
• Processing payments and issuing receipts or invoices
• Responding to your inquiries, complaints, and customer support requests

3.2 Communication and Marketing

• Sending transactional communications (order confirmations, delivery notifications, receipts)
• Sending promotional emails, newsletters, and special offers — where you have provided consent or where permitted by applicable law
• Notifying you about changes to our menu, services, pricing, or terms
• Conducting surveys and gathering feedback to improve our offerings
• Personalizing marketing messages based on your order history and preferences

You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any promotional email or by contacting us at [email protected].

3.3 Analytics and Service Improvement

• Analyzing usage patterns to improve our website performance and user experience
• Understanding which menu items and promotions are most popular
• Testing new features, layouts, and functionality
• Conducting internal research and data analysis
• Generating aggregate, anonymized statistical reports

3.4 Safety, Security, and Fraud Prevention

• Detecting, investigating, and preventing fraudulent transactions or unauthorized access
• Verifying user identities where necessary
• Protecting the rights, property, and safety of Marcos Meals, our users, and the public
• Monitoring for suspicious activity and enforcing our Terms of Service

3.5 Legal and Regulatory Compliance

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities or law enforcement agencies
• Fulfilling our tax and accounting obligations
• Resolving disputes and enforcing our legal agreements

4. Sharing Your Information with Third Parties

We respect your privacy and do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering our services. These providers may have access to your personal information only as necessary to perform their functions and are contractually obligated to maintain the confidentiality and security of your data. Service providers include:

• Payment processors (e.g., Stripe, Square, PayPal) — to process your payments securely
• Delivery and logistics partners — to fulfill and track your food deliveries
• Email and SMS communication platforms — to send you order updates and marketing communications
• Cloud hosting providers — to store data and run our website infrastructure
• Analytics providers (e.g., Google Analytics) — to help us understand website usage
• Customer support software providers — to manage support tickets and communications
• Marketing and advertising platforms — to deliver targeted advertisements where applicable

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in good faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request
• Enforce our Terms of Service or other agreements
• Protect and defend the rights or property of Marcos Meals
• Prevent or investigate possible wrongdoing or fraud
• Protect the personal safety of our users, customers, or the public

4.3 Business Transfers

In the event that Marcos Meals undergoes a merger, acquisition, restructuring, sale of assets, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website if such a transfer occurs and will inform you of any choices you may have regarding your data.

4.4 With Your Consent

We may share your information with third parties not listed above when we have obtained your explicit consent to do so.

5. Data Security

We take the security of your personal information seriously and implement a range of technical and organizational measures to protect it from unauthorized access, disclosure, alteration, loss, or destruction. Our security practices include:

• Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology. Sensitive data such as passwords are stored using strong cryptographic hashing algorithms.
• Access Controls: Access to personal data within our organization is restricted on a need-to-know basis. Employees and contractors who handle personal data are required to maintain strict confidentiality.
• Secure Payment Processing: We do not store full credit card numbers on our servers. Payment data is handled by PCI-DSS compliant third-party payment processors.
• Regular Security Assessments: We conduct periodic reviews of our data security practices, systems, and infrastructure to identify and address vulnerabilities.
• Incident Response: We maintain procedures for detecting, reporting, and responding to data security incidents in compliance with applicable state breach notification laws.
• Two-Factor Authentication: Where available, we encourage users to enable two-factor authentication on their accounts for an additional layer of security.

6. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights with respect to your personal information. We are committed to honoring these rights in compliance with applicable federal and state laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable state privacy laws.

6.1 Right to Know and Access

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the business purposes for collecting it, and the categories of third parties with whom we share it.

6.2 Right to Correction

You have the right to request that we correct inaccurate personal information we hold about you, taking into account the nature of the information and our purposes for processing it.

6.3 Right to Deletion

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions where retention is required by law or is necessary for specific legitimate purposes (such as completing a transaction or complying with a legal obligation).

6.4 Right to Data Portability

Where technically feasible and where required by law, you have the right to receive a copy of your personal information in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.

6.5 Right to Opt Out of Sale or Sharing of Personal Information

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising purposes. We do not sell your personal information. However, we may share certain data with advertising partners for targeted advertising. California residents may exercise this right by contacting us at [email protected].

6.6 Right to Limit Use of Sensitive Personal Information

California residents have the right to direct us to limit the use of sensitive personal information (such as precise geolocation, account login credentials, or health information) to only those uses necessary to perform our services.

6.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, provide you with a different quality of service, or retaliate against you in any way for exercising your rights under applicable privacy laws.

6.8 How to Submit a Privacy Request

To exercise any of the rights described above, you may contact us using any of the following methods:

• Email: [email protected] (include "Privacy Request" in the subject line)

We will verify your identity before processing your request by asking you to confirm certain account details. We will respond to verifiable consumer requests within 45 days of receipt. If we require additional time (up to 90 days total), we will notify you of the reason and extension period in writing. We do not charge a fee for processing verifiable requests unless they are manifestly unfounded, repetitive, or excessive.

You may designate an authorized agent to submit a request on your behalf. If you use an authorized agent, we may require written proof of authorization and may contact you directly to verify the request.

7. Cookie Policy Overview

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing efforts. Cookies are small text files placed on your device when you visit a website.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly (e.g., maintaining your shopping cart, session management).
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymized usage data.
• Functional Cookies: Remember your preferences (such as language settings and delivery address) to improve your experience.
• Marketing and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.

7.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, please note that disabling certain cookies may impact the functionality of our website and your ability to place orders. You can also adjust your preferences through our cookie consent banner displayed when you first visit our website.

For more detailed information about the specific cookies we use, the data they collect, and how to manage them, please refer to our full Cookie Policy, which is available on our website at marcosmeals.rest.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. The following general retention periods apply:

After the applicable retention period expires, your personal data will be securely deleted, anonymized, or archived in accordance with our internal data management procedures and applicable law. In some cases, we may retain data longer if required to do so by law, regulatory obligation, or ongoing legal proceedings.

9. Children's Privacy

Marcos Meals does not direct its services to minors under the age of 18. Our website and food ordering platform are designed for adult users. We do not knowingly collect, solicit, or maintain personal information from individuals under 18 years of age.

If you are under the age of 18, please do not use our website, submit any personal information through our platform, or register for an account. Use of our services by minors is strictly prohibited.

If we become aware that we have inadvertently collected personal information from a child under the age of 18, we will take immediate steps to delete such information from our records. If you believe we may have collected information from a minor, please contact us immediately at [email protected].

Parents and guardians who believe their child has provided us with personal information without their consent are encouraged to contact us so that we can promptly take appropriate action.

10. International Data Transfers

Marcos Meals is a United States-based business, and your personal information is primarily collected, stored, and processed within the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home country.

By using our services, you acknowledge and consent to the transfer of your personal information to the United States. We take appropriate safeguards to ensure that any such transfers comply with applicable law and that your data receives adequate protection, including through the use of:

• Standard contractual clauses or data processing agreements with international service providers
• Ensuring that third-party providers meet equivalent security standards
• Conducting due diligence on the privacy and security practices of international partners

If you have questions about how your data is handled when transferred internationally, please contact us at [email protected].

11. Applicable Law and Legal Framework

This Privacy Policy is governed by and construed in accordance with the laws of the United States. The following key legal frameworks govern our data processing activities:

• Federal Trade Commission Act (FTC Act): We comply with the FTC's guidelines on unfair or deceptive acts and practices, including with respect to privacy and data security.
• California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA): We honor the privacy rights of California residents as required under these laws, including rights to know, delete, correct, and opt out.
• CAN-SPAM Act: All commercial email communications from Marcos Meals comply with the requirements of the CAN-SPAM Act.
• Telephone Consumer Protection Act (TCPA): We comply with TCPA requirements when sending SMS or marketing text messages to customers.
• Children's Online Privacy Protection Act (COPPA): We do not knowingly collect personal information from children under 13 years of age in violation of COPPA requirements.
• State-Specific Privacy Laws: We monitor and comply with applicable state privacy laws across the United States, including but not limited to Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), and others as they apply.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, delivery partner portals, or other external services. This Privacy Policy does not apply to those third-party websites or services. We are not responsible for the privacy practices or content of external websites and encourage you to review the privacy policies of any third-party sites you visit.

The inclusion of a link to a third-party website on our platform does not constitute an endorsement, recommendation, or representation by Marcos Meals of that website or its privacy practices.

13. How to File a Complaint

If you believe that Marcos Meals has violated your privacy rights or failed to comply with applicable data protection laws, we encourage you to first contact us directly so that we can work to resolve your concern promptly.

13.1 Contact Marcos Meals

You may submit your complaint or concern to us via:

• Email: [email protected] (subject line: "Privacy Complaint")

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days of receipt.

13.2 Filing a Complaint with a Regulatory Authority

If you are not satisfied with our response, or if you believe your rights under applicable law have been violated, you have the right to file a complaint with the appropriate regulatory authority. Depending on your state of residence, this may include:

• California Residents: The California Privacy Protection Agency (CPPA) at cppa.ca.gov, or the California Attorney General's Office at oag.ca.gov
• All U.S. Residents: The Federal Trade Commission (FTC) at ftc.gov/complaint
• Other State Residents: Your respective state Attorney General's office or designated state privacy authority

14. Automated Decision-Making and Profiling

We may use automated processes to personalize your experience on our website, such as recommending menu items based on your previous orders or browsing behavior, and to detect and prevent fraudulent activity. These automated processes help us deliver a better and safer service to you.

We do not use fully automated decision-making that produces legal or similarly significant effects on you without human oversight. If you have concerns about automated processing of your data, please contact us at [email protected].

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our website at marcosmeals.rest with a new effective date
• Sending a notification email to the email address associated with your account
• Displaying a prominent notice on our website homepage

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after any changes to this Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, please discontinue your use of our services and contact us to request deletion of your personal data.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal information, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

When contacting us regarding a privacy matter, please include the following information to help us process your request efficiently:

• Your full name and the email address associated with your account
• A clear description of your inquiry or request
• The specific right(s) you wish to exercise, if applicable
• Any relevant details or documentation that may help us verify your identity