Privacy Policy

This Privacy Policy describes how Taco Time ("we," "us," "our," or "the Company") collects, uses, discloses, and protects your personal information when you visit our website at tacotime-meal.click, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with the terms of this policy, please discontinue use of our website and services immediately.

We are committed to protecting your privacy and complying with all applicable federal and state privacy laws in the United States, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), the Children's Online Privacy Protection Act (COPPA), and the CAN-SPAM Act.

1. About Us and How to Contact Us

Taco Time is a food service business operating in the United States. We provide online ordering, menu browsing, and related food service features through our website.

For any privacy-related questions, concerns, requests to exercise your rights, or complaints, please contact us using the information provided above. We aim to respond to all legitimate privacy requests within 45 days of receipt.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All visitors to our website at tacotime-meal.click
• Individuals who create accounts or register with our platform
• Customers who place food orders through our website
• Individuals who subscribe to our newsletters or promotional communications
• Anyone who contacts us via email, phone, or other means of communication
• Users who participate in surveys, promotions, or loyalty programs

This policy does not apply to third-party websites, applications, or services that may be linked from our website. We encourage you to review the privacy policies of any third-party services you access through links on our website.

3. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we collect are described below.

3.1 Personal Information You Provide Directly

When you interact with our website or services, you may voluntarily provide us with the following categories of personal information:

3.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical and usage information through cookies, web beacons, pixel tags, and similar tracking technologies. This includes:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers
• Log Data: IP address, date and time of your visit, pages viewed, time spent on pages, links clicked, and referring URL
• Usage Data: Browsing behavior on our website, search queries, menu items viewed, and interaction patterns
• Location Data: General geographic location derived from your IP address (city, state, country level); precise location only if you grant explicit permission
• Cookie Data: Information collected through cookies and similar tracking technologies (see Section 9 for more details)
• Performance Data: Website load times, error logs, and technical performance metrics

3.3 Information from Third Parties

We may receive additional information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media accounts or log in via social login features (e.g., Facebook, Google), we may receive your public profile information, email address, and authentication tokens
• Analytics Providers: Aggregated demographic and behavioral data from analytics partners
• Delivery Partners: Order status updates and delivery confirmation information from our fulfillment partners
• Marketing Partners: Information to help us reach you with relevant advertising
• Payment Processors: Transaction confirmation and fraud prevention signals

3.4 Sensitive Personal Information

In limited circumstances, we may collect sensitive personal information such as food allergy information that could indicate health-related data. We collect this information solely for the purpose of fulfilling your food orders safely and will not use it for any other purpose without your explicit consent. We implement enhanced security measures to protect this category of information.

4. How We Use Your Information

We use the personal information we collect for the following purposes, which are grounded in legitimate business interests, contractual necessity, legal compliance, or your consent:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Managing your account and providing access to account features
• Scheduling and managing delivery or pickup orders
• Sending order confirmations, receipts, and status updates
• Processing payments and preventing fraudulent transactions
• Accommodating dietary restrictions and food allergy notifications

4.2 Customer Communications

• Responding to your inquiries, feedback, and customer support requests
• Sending transactional communications related to your orders
• Providing important notices about changes to our services or policies
• Sending appointment reminders or delivery notifications

4.3 Marketing and Promotions

• Sending promotional emails, newsletters, and special offers (with your consent or as permitted by law)
• Personalizing your experience and showing relevant menu recommendations
• Conducting loyalty programs and promotional campaigns
• Delivering targeted advertising through third-party platforms based on your interests
• Remarketing to users who have previously visited our website

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us at [email protected].

4.4 Analytics and Business Intelligence

• Analyzing website traffic, user behavior, and ordering patterns to improve our services
• Measuring the effectiveness of our marketing campaigns
• Conducting market research and developing new menu items
• Generating aggregated, anonymized reports about our business performance

4.5 Legal and Compliance Purposes

• Complying with applicable federal and state laws and regulations
• Enforcing our Terms of Service and other agreements
• Protecting our legal rights and defending against legal claims
• Detecting, investigating, and preventing fraudulent or illegal activities
• Responding to lawful requests from law enforcement agencies or government authorities

4.6 Website Improvement and Safety

• Diagnosing technical problems and maintaining website functionality
• Improving the user interface and overall user experience
• Ensuring the security and integrity of our website and systems
• Conducting A/B testing and feature development

5. How We Share Your Information

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our business and delivering services to you. These providers are contractually obligated to use your information only as directed by us and to maintain appropriate security measures. Our service providers include:

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Protect and defend the rights, property, or safety of Taco Time, our customers, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Enforce our Terms of Service or other applicable agreements

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, reorganization, or bankruptcy, your personal information may be transferred to the acquiring entity as part of the transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data with third parties for research, analytics, or marketing purposes. This data does not identify you personally and cannot reasonably be used to identify you.

5.5 With Your Consent

We may share your personal information with other parties when you have given us explicit consent to do so, or where you have requested a specific service that requires such sharing.

6. Data Security

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction.

6.1 Security Measures We Employ

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our website. Payment information is encrypted using PCI-DSS compliant systems.
• Access Controls: Access to personal information is limited to authorized personnel who have a legitimate need to access it for business purposes. All staff with access to personal data are subject to confidentiality obligations.
• Secure Password Storage: User passwords are hashed and salted using strong cryptographic algorithms and are never stored in plain text.
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing to identify and address potential weaknesses in our systems.
• Firewall and Intrusion Detection: Our network infrastructure is protected by firewalls and intrusion detection systems to prevent unauthorized access.
• Data Minimization: We only collect personal information that is necessary for the purposes described in this policy.
• Incident Response: We maintain a data breach response plan and will notify affected individuals and relevant authorities as required by applicable law in the event of a security incident.

6.2 Limitations

While we take every reasonable precaution to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data. You are also responsible for maintaining the security of your account credentials and should never share your password with others.

If you believe your account has been compromised, please contact us immediately at [email protected].

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When your personal information is no longer required, we will securely delete, anonymize, or de-identify it in accordance with our data destruction procedures.

8. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We are committed to honoring these rights and have established processes to facilitate your requests.

8.1 Rights Available to All Users

• Right to Know/Access: You have the right to request information about the personal data we hold about you, including the categories of data collected, purposes of processing, and parties with whom it has been shared.
• Right to Correction/Rectification: You have the right to request that we correct inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request the deletion of your personal information, subject to certain exceptions (e.g., where retention is required for legal compliance or legitimate business purposes).
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge different prices, or provide a lower quality of service because you exercised your privacy rights.

8.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know (Specific Pieces): Request specific pieces of personal information we have collected about you over the past 12 months
• Right to Delete: Request that we delete personal information we collected from you, subject to certain exceptions
• Right to Correct: Request that we correct inaccurate personal information
• Right to Opt Out of Sale or Sharing: Opt out of the sale or sharing of your personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: Request that we limit our use of your sensitive personal information to that which is necessary to perform services
• Right to Data Portability: Receive a copy of your personal information in a portable, usable format
• Right to Non-Retaliation: Exercise your rights without fear of retaliation or discriminatory treatment

To submit a California privacy rights request, please contact us at [email protected] with the subject line "California Privacy Rights Request." We will verify your identity before processing your request and will respond within the timeframes required by law (generally 45 days, with a possible 45-day extension).

8.3 Rights for Residents of Other States

Residents of other U.S. states that have enacted comprehensive privacy laws (including Virginia, Colorado, Connecticut, Texas, and others) may have similar rights to those described above. We will honor verified privacy requests from residents of these states in accordance with applicable law.

8.4 How to Submit a Privacy Rights Request

To exercise any of your privacy rights, you may contact us by:

• Email: [email protected] (Subject: "Privacy Rights Request")
• Website: tacotime-meal.click (through our contact form)

We will need to verify your identity before processing your request. Verification may involve confirming information associated with your account or asking you to provide additional identifying information. You may designate an authorized agent to submit requests on your behalf, provided the agent provides proof of authorization.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, personalize content, and deliver targeted advertising.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the website to function properly and cannot be disabled. They include cookies for user authentication, shopping cart functionality, and security.
• Performance and Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use tools such as Google Analytics for this purpose.
• Functional Cookies: These cookies remember your preferences (such as language settings, location, and saved items) to provide a more personalized experience.
• Marketing and Advertising Cookies: These cookies track your browsing habits to enable us to show you relevant advertisements on our website and across the web. They may be set by us or by third-party advertising partners.

9.2 Managing Your Cookie Preferences

You can manage your cookie preferences through:

• Our cookie consent banner when you first visit our website
• Your browser settings (most browsers allow you to refuse cookies or alert you when cookies are being sent)
• Opt-out tools provided by advertising networks (e.g., the Digital Advertising Alliance's opt-out tool at optout.aboutads.info)
• Google Analytics opt-out browser add-on available at tools.google.com/dlpage/gaoptout

Please note that disabling certain cookies may affect the functionality of our website and your ability to use certain features. For detailed information about our use of cookies, please review our full Cookie Policy available on our website at tacotime-meal.click.

10. Children's Privacy

Our website and services are intended for adults who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, and we do not direct our services to minors under the age of 18.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13 years of age. If we become aware that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete that information from our records.

If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will investigate and, if confirmed, promptly delete the information.

We strongly encourage parents and guardians to monitor and supervise their children's online activities and to teach minors about safe internet practices.

11. International Data Transfers

Taco Time is based in the United States, and our primary data processing operations are conducted within the United States. If you are accessing our website from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your country of residence.

By using our website and services, you consent to the transfer of your personal information to the United States and its processing in accordance with this Privacy Policy.

When we transfer personal information to third-party service providers or partners located outside the United States, we implement appropriate safeguards to ensure that your information receives a level of protection consistent with this Privacy Policy and applicable law. These safeguards may include:

• Contractual protections and data processing agreements with international service providers
• Standard contractual clauses for international data transfers where applicable
• Ensuring that recipient countries provide an adequate level of data protection

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, delivery services, and other external resources. These third-party sites have their own privacy policies, which we encourage you to review. We are not responsible for the privacy practices or content of any third-party websites or services, and this Privacy Policy does not apply to them.

Examples of third-party services you may encounter through our website include:

• Social media platforms (Facebook, Instagram, Twitter/X, TikTok)
• Third-party payment processors (e.g., Stripe, PayPal)
• Food delivery platforms
• Map and location services (e.g., Google Maps)
• Review and rating platforms

13. Do Not Track Signals

Some web browsers allow users to send "Do Not Track" (DNT) signals to websites to indicate that they do not wish to be tracked. Currently, there is no universal standard for how websites should respond to DNT signals. As of the effective date of this Privacy Policy, our website does not alter its data collection practices in response to DNT signals. However, you can manage tracking preferences through your browser settings and our cookie consent tool as described in Section 9.

We will continue to monitor developments regarding DNT standards and update our practices accordingly as consensus emerges.

14. Opt-Out of Sale or Sharing of Personal Information

Under the CCPA/CPRA, California residents have the right to opt out of the "sale" or "sharing" of their personal information. While we do not sell personal information in the traditional sense, certain data sharing practices with advertising partners for the purposes of targeted or cross-context behavioral advertising may constitute "sharing" under California law.

To exercise your right to opt out of such sharing, you may:

• Contact us at [email protected] with the subject line "Do Not Sell or Share My Personal Information"
• Adjust your cookie preferences through our cookie consent tool on the website
• Use the Global Privacy Control (GPC) browser signal, which we will honor as required by applicable law

15. How to File a Complaint with a Data Protection Authority

If you believe that we have not adequately addressed your privacy concerns or have violated applicable privacy laws, you have the right to file a complaint with the relevant regulatory authority.

15.1 Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) is the primary federal consumer protection authority in the United States. The FTC enforces the FTC Act and other consumer protection laws, including certain privacy practices. You may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

15.2 California Privacy Protection Agency (CPPA)

California residents may also file complaints with the California Privacy Protection Agency (CPPA), which is responsible for enforcing the CCPA/CPRA:

• Website: cppa.ca.gov
• Email: [email protected]

15.3 State Attorneys General

Residents of other states may file complaints with their respective state attorney general offices or state consumer protection agencies. We encourage you to contact us first so we can attempt to resolve your concern directly before escalating to a regulatory authority.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the services we offer. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy on our website at tacotime-meal.click
• Send a notification email to registered users where required by law or when changes are significant
• Display a prominent notice on our website for a reasonable period following material changes

Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

17. Contact Us for Privacy Inquiries

We take your privacy seriously and are committed to addressing your concerns promptly and professionally. If you have any questions, comments, or concerns about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please do not hesitate to contact us:

We will acknowledge receipt of your inquiry promptly and will endeavor to provide a substantive response within 30 to 45 days, depending on the nature and complexity of your request. If we need additional time to respond, we will notify you of the extension and the reason for the delay.

We are dedicated to working with you to resolve any privacy concerns fairly and transparently, in accordance with our obligations under applicable United States federal and state privacy laws.