Privacy Policy

This Privacy Policy describes how Costa Vida ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at costavida-meals.click, place food orders, use our services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data in a transparent, responsible, and lawful manner consistent with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act).

Please read this Privacy Policy carefully before using our website or services. By accessing costavida-meals.click or providing us with your personal information, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of our services immediately.

For questions, concerns, or requests related to your privacy, you may contact us at any time using the contact information provided at the end of this document.

1. Who We Are

Costa Vida is a food service business operating through the website costavida-meals.click. We provide online food ordering, meal delivery, catering, and related food services to customers across the United States. As the operator of this website and the provider of these services, Costa Vida acts as the data controller responsible for the personal information we collect from you.

2. Information We Collect

We collect various types of information in connection with your use of our website, food ordering services, and related interactions. The categories of personal information we collect are described below.

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, or otherwise engage with our services, we may collect personally identifiable information, including but not limited to:

• Full name
• Email address
• Phone number or mobile number
• Delivery address, billing address, and other location-related data
• Username and password (stored in encrypted form)
• Date of birth (where applicable, for age verification purposes)
• Profile photos or avatars (if voluntarily provided)

2.2 Payment and Financial Information

When you make a purchase through our website, we collect payment-related information necessary to process your transaction. This may include:

• Credit card or debit card details (card number, expiration date, CVV — processed through secure third-party payment processors)
• Billing address associated with your payment method
• Transaction history and order records
• Gift card numbers or promotional codes used

Please note that we do not store full credit or debit card numbers on our servers. All payment card data is processed and stored by our PCI-DSS compliant third-party payment processors.

2.3 Order and Food Preference Information

As a food service provider, we collect information about your food orders and preferences, including:

• Items ordered, meal customizations, and dietary preferences
• Order frequency and history
• Favorite menu items or saved orders
• Allergen information or dietary restrictions you voluntarily disclose
• Feedback, ratings, and reviews submitted about our food or service

2.4 Usage Data and Website Interaction Data

We automatically collect certain technical and behavioral information when you visit or interact with our website, including:

• IP address and approximate geographic location derived from it
• Browser type, browser version, and language settings
• Operating system and device type
• Pages visited, time spent on pages, and navigation paths
• Links clicked, buttons activated, and features used
• Referring URLs and exit pages
• Date and time of visits and sessions
• Search queries entered within our website

2.5 Device Information

We may collect information about the device you use to access our website, including:

• Device identifiers (such as mobile advertising IDs where applicable)
• Screen resolution and display settings
• Mobile carrier information (if accessing via mobile device)
• Hardware model and software version

2.6 Communications and Customer Support Data

If you contact us via email, phone, or through our website's contact forms, we collect:

• The content of your messages and correspondence
• Your contact details provided in communications
• Records of customer service interactions
• Feedback, complaints, and dispute-related information

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect data about your browsing behavior on our website. For detailed information, please refer to the Cookie Usage section of this Privacy Policy (Section 8) and our separate Cookie Policy available on our website.

2.8 Information from Third Parties

We may receive information about you from third parties, such as:

• Social media platforms if you interact with our social media accounts or use social login features
• Marketing and advertising partners who provide us with demographic or interest-based data
• Analytics providers who enrich our data with aggregated behavioral insights
• Delivery partners and third-party logistics providers who handle your orders

3. How We Use Your Information

We use the personal information we collect for a variety of purposes, all of which are consistent with providing you with our food services and maintaining our business operations. The primary purposes for which we use your data include:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including communicating with delivery partners
• Managing your account and providing access to account features
• Sending order confirmations, receipts, and delivery status updates
• Handling returns, refunds, complaints, and dispute resolution
• Facilitating payment processing through our third-party payment processors

3.2 Customer Communication

• Responding to your inquiries, questions, and customer support requests
• Notifying you about changes to our menu, services, policies, or terms
• Sending transactional emails and service-related notifications
• Contacting you about your orders, deliveries, or account activity

3.3 Marketing and Promotional Activities

• Sending you promotional emails, special offers, and discounts (where you have opted in to receive such communications)
• Personalizing marketing content based on your order history and preferences
• Running loyalty programs, contests, or sweepstakes with your participation
• Retargeting you with relevant advertisements on third-party platforms
• Analyzing the effectiveness of our marketing campaigns

You have the right to opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us directly at [email protected].

3.4 Analytics and Service Improvement

• Analyzing website traffic, user behavior, and usage patterns to improve our website and services
• Conducting research and data analysis to understand customer preferences
• Testing new features, menu items, and website improvements
• Monitoring website performance, identifying technical issues, and ensuring reliability

3.5 Legal Compliance and Security

• Complying with applicable federal and state laws and regulations, including the FTC Act
• Responding to lawful requests from government authorities, law enforcement, or regulatory agencies
• Detecting, preventing, and investigating fraudulent activity, unauthorized access, or security breaches
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Costa Vida, our customers, and the public

3.6 Business Operations

• Managing our internal business operations, accounting, and record-keeping
• Evaluating and improving the quality of our food and service
• Supporting corporate transactions such as mergers, acquisitions, or asset sales

4. Sharing Your Information with Third Parties

We respect your privacy and do not sell your personal information to third parties for monetary compensation. However, we may share your personal information with the following categories of third parties under specific circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering our services. These providers are contractually obligated to use your information only for the purposes of providing services to us and must maintain appropriate data security standards. Service providers include:

• Payment Processors: Companies that securely process your payment card transactions
• Delivery and Logistics Partners: Third-party delivery drivers and courier services that fulfill your food orders
• Email Service Providers: Platforms used to send transactional and marketing emails
• Analytics Providers: Services such as Google Analytics that help us understand website usage (data is typically aggregated or pseudonymized)
• Cloud Hosting Providers: Companies that host our website, databases, and technical infrastructure
• Customer Support Tools: Software platforms used to manage customer service inquiries
• Marketing and Advertising Platforms: Third-party advertising networks and social media platforms used to deliver relevant advertisements

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request
• Enforce our Terms of Service or other agreements
• Protect and defend the rights, property, or safety of Costa Vida, our customers, or the public
• Prevent or investigate possible wrongdoing, fraud, or illegal activity in connection with our services

4.3 Business Transfers

In the event that Costa Vida undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your personal information with additional third parties when you have given us your explicit consent to do so, such as participation in co-branded promotions, referral programs, or partner integrations that you choose to use.

4.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes. Such data does not constitute personal information under applicable privacy laws.

5. Data Security

The security of your personal information is extremely important to us. We implement a comprehensive set of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, destruction, or misuse.

5.1 Technical Safeguards

• Secure Socket Layer (SSL) and Transport Layer Security (TLS) encryption for all data transmitted between your browser and our servers
• Encryption of sensitive data at rest, including passwords stored using industry-standard hashing algorithms (bcrypt or equivalent)
• Firewalls, intrusion detection systems, and network monitoring tools
• Regular security vulnerability scans and penetration testing
• Multi-factor authentication for administrative access to systems containing personal data
• PCI-DSS compliance standards for all payment card data handling

5.2 Administrative Safeguards

• Access controls limiting employee access to personal data on a need-to-know basis
• Employee training on data privacy, security awareness, and acceptable use policies
• Contractual data processing agreements with all third-party service providers
• Documented incident response procedures for potential data breaches

5.3 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and applicable regulatory authorities in accordance with applicable state data breach notification laws, including those enacted across the United States. Notification will be provided without undue delay and, where required by law, within the timeframes specified by applicable statutes.

6. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information under applicable United States privacy laws. We are committed to honoring these rights to the fullest extent required by law.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

6.2 Rights Available to All Users

Regardless of your state of residence, we provide all users with the following privacy-related options:

• Access and Review: You may log into your account to view and update your personal profile information at any time.
• Correction: You may request correction of inaccurate or incomplete personal data we hold about you.
• Deletion: You may request the deletion of your account and associated personal data, subject to legal retention obligations.
• Marketing Opt-Out: You may unsubscribe from marketing communications at any time.
• Cookie Management: You may adjust your cookie preferences through your browser settings or our cookie consent management tool.

6.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a verifiable request to us through one of the following methods:

• Email: [email protected]
• Website: costavida-meals.click (via our contact form or privacy request portal)

We will respond to verifiable consumer requests within 45 days of receipt. If we require additional time (up to 90 days total), we will notify you of the reason for the extension within the initial 45-day period. You may designate an authorized agent to make requests on your behalf, subject to identity verification requirements.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The following general retention periods apply:

When personal information is no longer needed for the purposes for which it was collected and no legal basis for further retention exists, we will securely delete, destroy, or anonymize the information using commercially reasonable methods.

8. Cookie Usage

Our website costavida-meals.click uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertisements. A cookie is a small text file placed on your device by your web browser when you visit a website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential cookies required for the website to function properly, including session management, login authentication, and shopping cart functionality. These cookies cannot be disabled.
• Performance and Analytics Cookies: Cookies that collect information about how visitors use our website, such as page views and error messages, to help us improve our website performance. These include third-party analytics tools such as Google Analytics.
• Functional Cookies: Cookies that enable enhanced functionality and personalization, such as remembering your food preferences, location, and language settings.
• Targeting and Advertising Cookies: Cookies placed by us or our advertising partners to deliver relevant advertisements and track the effectiveness of our marketing campaigns across websites.

8.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to block cookies, delete existing cookies, or receive alerts when cookies are set. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders or use certain features.

You may also opt out of interest-based advertising by visiting the Network Advertising Initiative (NAI) opt-out page at www.networkadvertising.org/choices or the Digital Advertising Alliance (DAA) opt-out page at www.aboutads.info/choices.

For full details about the cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy, which is available on our website at costavida-meals.click.

9. Children's Privacy

Our website and food ordering services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or maintain personal information from children under the age of 13 in violation of the Children's Online Privacy Protection Act (COPPA), or from individuals under 18 years of age without verifiable parental consent where required.

If you are under 18 years of age, you are not permitted to use our services, create an account, or provide us with any personal information without the supervision and consent of a parent or legal guardian. By using our website, you represent and warrant that you are at least 18 years of age.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without appropriate parental consent, we will take prompt steps to delete such information from our records. If you believe we may have collected information from a minor, please contact us immediately at [email protected].

10. International Data Transfers

Costa Vida is based in and primarily operates within the United States. Your personal information is processed and stored on servers located within the United States. However, some of our third-party service providers, technology partners, and cloud infrastructure providers may process or store data in other countries.

If your personal information is transferred outside of the United States to countries that may not provide the same level of data protection as your country of residence, we will take appropriate steps to ensure that such transfers are conducted in compliance with applicable law and with appropriate safeguards in place. These safeguards may include:

• Standard contractual clauses approved by relevant regulatory authorities
• Data processing agreements with service providers requiring equivalent data protection standards
• Ensuring service providers are certified under recognized privacy frameworks

By using our services from outside the United States, you acknowledge and consent to the transfer and processing of your personal information in the United States and in any other countries where our service providers operate, subject to the safeguards described in this section.

11. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or integrated services that are not owned or operated by Costa Vida. We are not responsible for the privacy practices or content of these third-party sites. When you click on a link to a third-party website or interact with a social media plugin on our site, you leave our website and your interactions are governed by that third party's own privacy policy.

We encourage you to review the privacy policies of any third-party websites or services that you visit or use through links on our website. Costa Vida has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party sites or services.

12. Your California Privacy Rights — CCPA/CPRA Supplemental Disclosure

In addition to the general rights described in Section 6, California residents are entitled to the following specific disclosures required under the CCPA as amended by the CPRA, effective January 1, 2023:

12.1 Categories of Personal Information Collected in the Past 12 Months

• Identifiers (name, email, IP address, device ID)
• Customer records information (address, phone number, payment card information)
• Commercial information (order history, food preferences, purchase records)
• Internet or other electronic network activity information (browsing history on our site, click data)
• Geolocation data (approximate location derived from IP address or delivery address)
• Inferences drawn from personal information to create profiles about preferences and behavior
• Sensitive personal information (such as dietary restrictions or allergen information, if voluntarily provided)

12.2 Shine the Light Law

Under California Civil Code Section 1798.83, also known as the "Shine the Light" law, California residents who have an established business relationship with us may request information once per year about categories of personal information we share with third parties for those third parties' direct marketing purposes. To make such a request, please contact us at [email protected].

13. How to File a Complaint with a Data Protection Authority

If you believe that your privacy rights have been violated and you are dissatisfied with our response to your privacy request or concern, you have the right to file a complaint with applicable regulatory authorities.

13.1 California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA), which is responsible for enforcing the CCPA/CPRA:

13.2 Federal Consumer Protection

For matters involving unfair or deceptive business practices under the FTC Act, consumers may file a complaint with the Federal Trade Commission (FTC):

13.3 State Attorney General Offices

Depending on your state of residence, you may also have the right to file a complaint with your state's Attorney General office. Many states have consumer protection divisions that handle privacy-related complaints. We encourage you to contact your state's Attorney General for more information about your rights under applicable state law.

Before filing a complaint with any authority, we encourage you to contact us directly so that we may have an opportunity to address your concern promptly and satisfactorily.

14. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Post a prominent notice on our website at costavida-meals.click
• Where required by law or where we deem appropriate, notify you by email at the address associated with your account

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this Privacy Policy will constitute your acceptance of such changes. If you do not agree with the revised policy, you must discontinue your use of our services.

15. Contact Us

We value your privacy and are committed to addressing any questions, concerns, or requests you may have about this Privacy Policy or our data practices. If you have any inquiries, wish to exercise your privacy rights, or need to report a privacy concern, please contact our Privacy Team using the information below:

We will make every effort to respond to your privacy-related inquiries and requests within the timeframes required by applicable law, and in all cases within a reasonable period. Our Privacy Team is dedicated to ensuring that your personal information is handled with the utmost care and in accordance with this Privacy Policy and applicable United States privacy laws.