Privacy Policy

This Privacy Policy describes how Costa Vida ("we," "us," "our," or "the Company") collects, uses, stores, shares, and protects your personal information when you visit our website at costavidameal.click, place food orders, use our digital services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of our website and services immediately.

This Privacy Policy is governed by and complies with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations at the federal and state levels.

1. About Us

Costa Vida is a food business operating in the United States. We provide food-related products and services through our digital platforms, including our website and any associated online ordering tools. For any privacy-related questions or requests, you may contact us using the information below:

2. Information We Collect

We collect various types of information from and about users of our website and services. The categories of personal information we collect are described below.

2.1 Personal Information You Provide Directly

When you interact with Costa Vida — whether by placing an order, creating an account, subscribing to our newsletter, contacting us, or participating in promotions — you may provide us with personal information, including but not limited to:

• Identification Information: Your full name, username, and date of birth (for age verification purposes).
• Contact Information: Your email address, phone number, and mailing or delivery address.
• Account Credentials: Your password and security questions if you create an account with us.
• Order and Transaction Information: Food items ordered, order history, delivery preferences, special dietary requirements or requests, and special instructions.
• Payment Information: Credit card numbers, debit card details, billing address, and other payment-related data. Note: We do not store full payment card numbers on our servers; this data is processed through secure third-party payment processors.
• Communications: Messages, feedback, reviews, and any other content you submit to us through contact forms, emails, or customer support channels.
• Marketing Preferences: Your preferences for receiving promotional communications, newsletters, and special offers from us.

2.2 Information Collected Automatically

When you visit our website at costavidameal.click, we automatically collect certain technical and usage information through cookies, web beacons, pixels, log files, and similar tracking technologies, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Log Data: IP address, access times, pages viewed, referring URLs, links clicked, and the duration of your visit.
• Location Data: General geographic location derived from your IP address. If you grant permission, we may also collect more precise location data to facilitate food delivery or to find nearby locations.
• Usage Data: Information about how you interact with our website, including which features you use, how you navigate through the site, and which menu items or pages you view most frequently.
• Cookie Data: Data collected through cookies and similar tracking technologies. Please see Section 8 of this Privacy Policy for more detailed information about our use of cookies.

2.3 Information From Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you choose to log in using a social media account (such as Facebook or Google) or interact with our social media pages, we may receive certain profile information from those platforms.
• Delivery Partners: Third-party delivery services that fulfill your food orders may share delivery confirmation and related data with us.
• Analytics Providers: Third-party analytics services that provide us with aggregated and anonymized data about website usage patterns.
• Payment Processors: Payment service providers may share transaction confirmation data with us for order fulfillment purposes.
• Marketing Partners: We may receive information about you from advertising and marketing partners to help us improve our targeted advertising efforts.

2.4 Information We Do Not Collect

We do not intentionally collect sensitive personal information such as Social Security numbers, government-issued identification numbers, biometric data, medical records, or financial account numbers beyond what is strictly necessary for payment processing. If you believe you have inadvertently provided such information, please contact us immediately at [email protected].

3. How We Use Your Information

Costa Vida uses the personal information we collect for a variety of business and operational purposes. We only use your information in ways that are consistent with this Privacy Policy and applicable law.

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, including coordinating delivery or pickup arrangements.
• To create and manage your user account and provide access to account features.
• To process payments and send you order confirmations, receipts, and invoices.
• To communicate with you about your orders, including updates, delays, or issues related to your food delivery.
• To provide customer support and respond to your inquiries, complaints, or feedback.
• To remember your preferences and personalize your experience on our website, such as saving your delivery address or favorite menu items.

3.2 Analytics and Service Improvement

• To analyze how users interact with our website and services in order to improve functionality, user experience, and menu offerings.
• To conduct internal research and development to enhance our food products, services, and digital platforms.
• To monitor, detect, and prevent fraudulent activity, unauthorized access, and other security threats.
• To troubleshoot technical issues and ensure the reliability and security of our website.
• To measure the effectiveness of our marketing campaigns and promotions.

3.3 Marketing and Promotional Communications

• To send you promotional emails, newsletters, special offers, loyalty program updates, and information about new menu items or services, where you have provided your consent or where permitted by applicable law.
• To display targeted advertisements on our website and on third-party platforms based on your browsing history and interests.
• To conduct surveys and solicit feedback to improve our products and services.
• To notify you about contests, sweepstakes, or other promotional opportunities.

You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any promotional email, or by contacting us at [email protected]. Please note that even if you opt out of marketing communications, we may still send you transactional or service-related messages.

3.4 Legal and Compliance Purposes

• To comply with applicable federal, state, and local laws, regulations, and legal obligations.
• To respond to lawful requests from government authorities, law enforcement agencies, or courts.
• To enforce our Terms of Service and other agreements with you.
• To protect the rights, property, and safety of Costa Vida, our employees, customers, and the general public.
• To establish, exercise, or defend legal claims.

4. Sharing Your Information With Third Parties

Costa Vida does not sell your personal information to third parties for monetary compensation. However, we may share your information with certain third parties under the circumstances described below.

4.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating our business and delivering our services. These providers are contractually obligated to use your information only for the purposes we specify and to implement appropriate security measures. Our service providers may include:

• Payment Processors: Companies that securely process your payment transactions (e.g., Stripe, Square, or similar providers).
• Delivery Partners: Third-party delivery services responsible for fulfilling your food orders.
• Cloud Hosting Providers: Companies that host our website and store data on our behalf.
• Email and Communication Services: Providers that help us send transactional emails, marketing communications, and customer support messages.
• Analytics Providers: Companies such as Google Analytics that help us understand website usage and user behavior.
• Customer Relationship Management (CRM) Tools: Platforms that help us manage customer interactions and support requests.
• Advertising Partners: Digital advertising platforms used to deliver targeted advertisements.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information to government agencies, law enforcement authorities, courts, or other third parties when we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or other legal process.
• Protect and defend the rights or property of Costa Vida.
• Prevent or investigate potential wrongdoing in connection with our services.
• Protect the personal safety of users of our services or the public.
• Protect against legal liability.

4.3 Business Transfers

In the event that Costa Vida undergoes a merger, acquisition, reorganization, bankruptcy, dissolution, or the sale of all or a portion of our assets, your personal information may be transferred to the successor entity as part of that transaction. We will notify you of any such change via email or a prominent notice on our website, and you will be informed of your choices regarding your personal information.

4.4 With Your Consent

We may share your personal information with third parties for other purposes when we have obtained your explicit consent to do so. You may withdraw your consent at any time, subject to applicable legal or contractual restrictions, by contacting us at [email protected].

4.5 Aggregated and Anonymized Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you with third parties for industry analysis, research, marketing, or other business purposes. This data does not constitute personal information and is not subject to the same restrictions as personally identifiable data.

5. Data Security

Costa Vida takes the security of your personal information seriously. We implement and maintain a variety of technical, administrative, and physical security measures designed to protect your information from unauthorized access, use, disclosure, alteration, or destruction.

5.1 Security Measures We Employ

• Encryption: We use industry-standard Secure Socket Layer (SSL) and Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Access Controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions, and such personnel are bound by confidentiality obligations.
• Payment Security: We comply with Payment Card Industry Data Security Standards (PCI DSS) by using reputable third-party payment processors. Full payment card details are not stored on our servers.
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing of our systems and infrastructure.
• Data Minimization: We collect only the minimum amount of personal information necessary to fulfill the purposes described in this Privacy Policy.
• Incident Response: We maintain a data breach response plan and will notify affected users and relevant authorities as required by applicable law in the event of a data breach.

5.2 Limitations

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorized access to your account.

6. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information. Costa Vida respects these rights and provides mechanisms for you to exercise them.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the purposes for which we use it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., where we need the information to complete a transaction or comply with a legal obligation).
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. While we do not sell personal information for monetary consideration, if we share data with advertising partners, you may opt out.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to purposes strictly necessary for providing our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, provide you with a lower quality of service, or retaliate against you for exercising your rights under the CCPA/CPRA.

6.2 General Privacy Rights (All Users)

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request that we correct inaccurate or incomplete personal information.
• Right to Erasure: You may request that we delete your personal information under certain circumstances.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Withdraw Consent: Where we process your data based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time.

6.3 How to Exercise Your Rights

To exercise any of the rights listed above, please submit a verifiable request to us using the following contact information:

• Email: [email protected]
• Website: costavidameal.click

We will verify your identity before processing your request. You may be required to provide certain information to confirm your identity. We will respond to your request within 45 days of receipt. If we need additional time, we will notify you of the extension and the reason for it. Authorized agents may submit requests on your behalf, provided they can demonstrate proper authorization.

7. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

When personal information is no longer needed, we will securely delete, anonymize, or de-identify it in accordance with our data disposal procedures.

8. Cookies and Tracking Technologies

Our website at costavidameal.click uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertisements. This section provides a brief overview of our cookie practices.

8.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They help websites remember your preferences and provide a more personalized experience. Cookies can be "session cookies" (which expire when you close your browser) or "persistent cookies" (which remain on your device for a set period of time).

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website, including enabling you to add items to your cart and process your order. These cookies cannot be disabled without affecting the functionality of the site.
• Performance and Analytics Cookies: Used to collect information about how visitors use our website, helping us improve site performance and user experience (e.g., Google Analytics).
• Functionality Cookies: Used to remember your preferences, such as your delivery address, language preferences, and favorite menu items.
• Marketing and Advertising Cookies: Used to deliver relevant advertisements to you on our website and across the web, based on your browsing history and interests.
• Social Media Cookies: Placed by social media platforms to enable you to share content from our website and to track your interactions with our social media content.

8.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or to be alerted when cookies are being sent. Please note that disabling certain cookies may affect the functionality of our website.

For detailed information about the cookies we use, the data they collect, and how to manage your preferences, please refer to our Cookie Policy available on our website.

9. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, as protected by the Children's Online Privacy Protection Act (COPPA), or from minors under 18 in relation to age-restricted services.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected].

We encourage parents and guardians to monitor their children's online activities and to help enforce this policy by instructing their children not to provide personal information on our website without their permission.

10. International Data Transfers

Costa Vida operates primarily within the United States. If you are accessing our website or services from outside the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home country.

By using our services, you consent to the transfer of your personal information to the United States and its processing in accordance with this Privacy Policy. We take appropriate measures to ensure that any international transfers of personal data are carried out in compliance with applicable law and with adequate safeguards to protect your information.

If you have questions about the safeguards we have in place for international data transfers, please contact us at [email protected].

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Costa Vida. This Privacy Policy applies solely to information collected by us through our website and services. We are not responsible for the privacy practices of third-party websites or services.

We encourage you to review the privacy policies of any third-party websites or services you visit through links on our website, as their data collection and processing practices may differ significantly from ours. The inclusion of a link on our website does not imply our endorsement of the linked site or its privacy practices.

12. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. At this time, our website does not respond to DNT signals, as there is currently no industry-wide standard for how websites should respond to such signals. We continue to monitor developments in this area and will update our practices accordingly.

California residents are entitled to know whether we honor DNT signals. As stated above, we currently do not alter our data collection and use practices in response to DNT signals from web browsers.

13. How to File a Complaint

If you believe that Costa Vida has not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to first contact us directly so that we may attempt to resolve your concern.

13.1 Contact Us Directly

Please submit your privacy concern or complaint to:

• Email: [email protected]
• Website: costavidameal.click

We will acknowledge receipt of your complaint within 5 business days and aim to resolve the matter within 30 days. If additional time is required, we will inform you of the expected timeline.

13.2 Filing a Complaint With the Federal Trade Commission (FTC)

If you are not satisfied with our response, or if you believe our data practices violate federal consumer protection law, you may file a complaint with the Federal Trade Commission (FTC), which enforces privacy-related laws under the FTC Act:

• Online: reportfraud.ftc.gov
• Phone: 1-877-382-4357
• Mail: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, D.C. 20580

13.3 Filing a Complaint With the California Attorney General (California Residents)

California residents who wish to exercise their rights under the CCPA/CPRA or file a privacy complaint may contact the California Attorney General's Office:

• Online: oag.ca.gov/privacy/ccpa
• Phone: 1-800-952-5225
• Mail: California Office of the Attorney General, Attn: Privacy Enforcement, 1300 I Street, Suite 1740, Sacramento, CA 95814

13.4 Other State Attorney General Offices

Residents of other US states may also have the right to file complaints with their respective state attorney general's office or state consumer protection agency. We encourage you to consult the relevant authority in your state for guidance on filing privacy-related complaints.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, services, or applicable law. When we make material changes to this Privacy Policy, we will:

• Update the "Effective Date" and "Last Updated" date at the top of this page.
• Post a prominent notice on our website notifying users of the change.
• Send an email notification to registered account holders where required by law.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us: