Privacy Policy

This Privacy Policy describes how Marcos ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website at marcosmeal.rest, place orders through our platform, or otherwise interact with our food services. Please read this policy carefully. By using our website or services, you agree to the practices described in this Privacy Policy.

We are committed to protecting your privacy and handling your personal data responsibly and transparently. This Privacy Policy has been prepared in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations.

1. Who We Are

Marcos is a food service business operating through the website marcosmeal.rest. We provide online food ordering, delivery information, menu browsing, and related customer services. For all matters related to your privacy and personal data, you may contact us using the information below:

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we may collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and shipping/delivery address
• Username and password (stored in encrypted form)
• Profile picture (if voluntarily provided)

2.2 Transaction and Order Information

When you place an order through our platform, we collect:

• Order details, including items ordered, quantities, and special instructions
• Payment information (processed securely through third-party payment processors; we do not store full credit card numbers)
• Transaction history and purchase records
• Delivery address and delivery preferences
• Order confirmation and fulfillment communications

2.3 Usage and Behavioral Data

We automatically collect information about how you interact with our website, including:

• Pages visited, time spent on each page, and navigation paths
• Search queries entered on our platform
• Items viewed, added to cart, or saved
• Clicks, scrolling behavior, and other interaction data
• Referral URLs and exit pages
• Date and time of access

2.4 Device and Technical Information

We automatically collect technical data about the device and browser you use, including:

• IP address
• Browser type and version
• Operating system and version
• Device type (desktop, mobile, tablet)
• Screen resolution
• Internet service provider (ISP)
• Geolocation data (city/region level, derived from IP address)
• Mobile device identifiers (if applicable)

2.5 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing activity. Please refer to Section 8 of this policy for a detailed explanation of our cookie practices.

2.6 Communications and Feedback

When you contact us or interact with us, we may collect:

• Content of your messages, emails, or live chat communications
• Customer service inquiry records
• Feedback, reviews, and ratings you submit
• Survey responses

2.7 Information From Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you log in using a social media account or interact with our social media pages)
• Analytics providers
• Advertising partners
• Delivery service partners
• Payment processing companies

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders
• Creating and managing your account
• Facilitating delivery or pickup arrangements
• Processing payments and issuing receipts
• Sending order confirmations, updates, and delivery status notifications
• Responding to your inquiries and providing customer support
• Resolving disputes and troubleshooting issues

3.2 Improving Our Website and Services

• Analyzing usage patterns to understand how our platform is used
• Conducting research and internal analytics to improve menu offerings, website functionality, and customer experience
• Testing new features and site improvements
• Diagnosing technical problems and maintaining the security and integrity of our platform

3.3 Marketing and Promotional Communications

• Sending you promotional emails, special offers, discounts, and newsletters about our food services (with your consent where required)
• Personalizing content, recommendations, and advertisements based on your order history and browsing behavior
• Retargeting you with relevant advertisements on third-party platforms
• Conducting surveys, contests, or promotional campaigns

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected].

3.4 Legal and Compliance Purposes

• Complying with applicable federal and state laws and regulations
• Enforcing our Terms of Service and other legal agreements
• Preventing fraud, unauthorized access, and other illegal activities
• Responding to lawful requests from law enforcement or government authorities
• Protecting the rights, property, and safety of Marcos, our customers, and the public

3.5 Legitimate Business Interests

We may also process your information where it is necessary for our legitimate business interests, provided those interests do not override your fundamental privacy rights. These interests include maintaining the safety and security of our platform, preventing fraud, and improving the quality of our food and services.

4. Sharing Your Information With Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our business. These providers may have access to your personal information only to the extent necessary to perform their functions and are contractually obligated to protect your data. These include:

• Payment processors (e.g., Stripe, PayPal) — to securely process your transactions
• Delivery and logistics partners — to fulfill your food orders
• Cloud hosting and IT infrastructure providers — to store and manage our website data
• Email and marketing platforms (e.g., Mailchimp, SendGrid) — to send transactional and promotional emails
• Analytics providers (e.g., Google Analytics) — to help us understand website usage
• Customer support tools — to manage and respond to customer inquiries

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal processes, including:

• Subpoenas, court orders, or other legal demands
• Requests from government authorities or regulatory agencies
• Situations where disclosure is necessary to prevent imminent harm or criminal activity
• Compliance with the FTC Act and other applicable federal consumer protection laws

4.3 Business Transfers

In the event that Marcos undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal data through a notice on our website or direct communication.

4.4 With Your Consent

We may share your information with other third parties when you have given us explicit consent to do so, such as when you choose to share your experience on social media or participate in joint promotions with our partners.

4.5 Aggregated and De-Identified Data

We may share aggregated, de-identified, or anonymized data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes. This data does not constitute personal information under applicable privacy laws.

5. Data Security

We take the security of your personal information seriously and implement appropriate technical, administrative, and physical safeguards to protect it from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: We use Secure Socket Layer (SSL)/TLS encryption to protect data transmitted between your browser and our servers.
• Secure payment processing: All payment transactions are processed through PCI-DSS compliant third-party payment processors. We do not store full credit card details on our servers.
• Access controls: Access to your personal information is restricted to authorized personnel who need it to perform their job functions.
• Password security: User passwords are stored using strong cryptographic hashing algorithms.
• Regular security assessments: We conduct periodic reviews of our data collection, storage, and processing practices to identify and address vulnerabilities.
• Data minimization: We collect only the personal information that is necessary for the purposes described in this policy.

Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data. If you believe your account or personal information has been compromised, please contact us immediately at [email protected].

6. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We respect and honor these rights as required by applicable law. These rights include:

6.1 Right to Know and Access

You have the right to request that we disclose information about the personal data we have collected about you, including the categories of data collected, the purposes for collection, the sources of data, and the third parties with whom we have shared your information.

6.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. You may update your account information directly through your profile settings or by contacting us.

6.3 Right to Deletion

You have the right to request that we delete your personal information, subject to certain exceptions (such as when we are required to retain data for legal compliance, fraud prevention, or completing a transaction you initiated).

6.4 Right to Data Portability

You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to request that we transfer that information to another entity where technically feasible.

6.5 Right to Opt-Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the "sale" or "sharing" of their personal information for cross-context behavioral advertising. While we do not sell personal information for monetary compensation, we may share certain data with advertising partners. To opt out, please contact us at [email protected] or follow the instructions provided on our website.

6.6 Right to Limit Use of Sensitive Personal Information

California residents have the right to limit the use and disclosure of sensitive personal information (such as precise geolocation, financial account information, and health data) to what is necessary to provide the services you have requested.

6.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. You will not be denied services, charged different prices, or provided a lower quality of service because you exercised your rights under applicable privacy law.

6.8 How to Submit a Privacy Request

To exercise any of the rights described above, please contact us using the following methods:

• Email: [email protected]
• Website: marcosmeal.rest

We will respond to your request within 45 days of receipt. In some cases, we may extend this period by an additional 45 days with notice to you. We may ask you to verify your identity before processing your request to protect your personal information from unauthorized access.

If you are a California resident submitting a request on behalf of a household, or if you are an authorized agent submitting a request on behalf of another person, you must provide proof of authorization.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with applicable legal obligations, resolve disputes, and enforce our agreements. The specific retention periods we apply are:

When personal information is no longer needed, we will securely delete, destroy, or anonymize it in accordance with our data retention and disposal procedures.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze traffic, and deliver personalized content and advertising. This section provides a brief overview of our cookie practices.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly. These include session cookies that keep you logged in and shopping cart cookies that remember your order selections.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often. We use tools like Google Analytics to gather this data.
• Functional Cookies: These cookies remember your preferences (such as your preferred language or delivery address) to provide a more personalized experience.
• Marketing and Advertising Cookies: These cookies track your online activity to help us deliver relevant advertising and measure the effectiveness of our marketing campaigns.

8.2 Managing Cookie Preferences

You can manage or disable cookies through your browser settings. Most browsers allow you to block or delete cookies. However, please note that disabling certain cookies may affect the functionality of our website and your ability to place orders. You may also opt out of interest-based advertising by visiting:

• Network Advertising Initiative (NAI) Opt-Out
• Digital Advertising Alliance (DAA) Opt-Out

For more detailed information about the cookies we use and how to manage them, please refer to our full Cookie Policy available on our website at marcosmeal.rest.

9. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 13, or from individuals under the age of 18 without verifiable parental or guardian consent.

If you are under 18 years of age, please do not use our website or submit any personal information to us. If we become aware that we have inadvertently collected personal information from a child under the age of 13 without appropriate consent, we will take immediate steps to delete such information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected], and we will promptly investigate and take the necessary steps to remove such information.

We comply with the Children's Online Privacy Protection Act (COPPA) and applicable state laws regarding the privacy of minors.

10. International Data Transfers

Marcos is based in the United States, and all data we collect is primarily processed and stored within the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

If we transfer personal data to third-party service providers located outside the United States, we take appropriate measures to ensure that such transfers are conducted in compliance with applicable law and that your personal information receives an adequate level of protection. These measures may include:

• Entering into data processing agreements with international service providers that include standard contractual clauses
• Ensuring that international recipients are certified under recognized privacy frameworks
• Conducting transfer impact assessments where required

By using our services, you acknowledge and consent to the transfer of your personal information to the United States and other jurisdictions as described in this policy.

11. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights regarding your personal information. In addition to the rights described in Section 6, California residents have the following protections:

• Right to Know (Specific Pieces): You have the right to request the specific pieces of personal information we have collected about you over the past 12 months.
• Right to Know (Categories): You have the right to request information about the categories of personal information collected, the sources of collection, the business or commercial purposes for collecting it, and the categories of third parties with whom it is shared.
• Shine the Light Law: Under California Civil Code Section 1798.83, California residents may request a list of categories of personal information disclosed to third parties for direct marketing purposes and the names and addresses of those third parties during the preceding calendar year.
• Do Not Track: Some browsers include a "Do Not Track" feature that signals websites not to track your activity. Our website does not currently respond to Do Not Track signals; however, you may manage your preferences through our cookie settings.

To submit a California privacy rights request, please contact us at [email protected]. We will verify your identity and process your request within the timeframes required by law.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not operated by us. These may include social media platforms, payment gateways, or partner websites. We are not responsible for the privacy practices or content of any third-party websites.

We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link on our website does not imply our endorsement of the linked site's privacy practices or data handling procedures.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the services we provide. When we make significant changes to this policy, we will notify you by:

• Posting the updated policy on our website at marcosmeal.rest with a revised "Last Updated" date
• Sending a notification email to registered account holders
• Displaying a prominent notice on our website homepage

Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

14. How to File a Complaint

If you believe that we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to contact us first so that we can address your concerns.

To contact us with a privacy complaint:
Email: [email protected]
Website: marcosmeal.rest

We will acknowledge your complaint within 10 business days and work to resolve it within 30 days. If you are not satisfied with our response, you may have the right to file a complaint with the relevant regulatory authority.

14.1 For California Residents

California residents who believe their CCPA/CPRA rights have been violated may file a complaint with the California Privacy Protection Agency (CPPA):

14.2 For All US Consumers

US consumers who believe a business has engaged in unfair or deceptive trade practices regarding privacy may file a complaint with the Federal Trade Commission (FTC):

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your inquiries promptly and transparently.

When contacting us regarding a privacy matter, please include your name, email address, and a clear description of your request or concern so that we can respond effectively and verify your identity as required. We look forward to assisting you and ensuring that your experience with Marcos respects your privacy at all times.