Privacy Policy

At Cabana Taco, we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cabana-taco.rest, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services.

We take your privacy seriously. This document is designed to help you understand:

• What information we collect and why
• How we use and share your information
• Your rights and choices regarding your personal data
• How we protect your information
• How to contact us with questions or concerns

1. About Us

Cabana Taco is a food service business operating in the United States. We operate the website located at cabana-taco.rest and provide food ordering, delivery, and related services to our customers. For the purposes of this Privacy Policy, Cabana Taco acts as the data controller for personal information we collect from you.

2. Information We Collect

We collect information in several ways: information you provide to us directly, information collected automatically when you use our website, and information obtained from third-party sources. The categories of information we collect are described below.

2.1 Personal Information You Provide

When you interact with Cabana Taco — whether by creating an account, placing an order, signing up for our newsletter, contacting customer support, or participating in promotions — you may provide us with personal information, including:

• Contact Information: Your full name, email address, phone number, and mailing or delivery address.
• Account Information: Username, password (stored in encrypted form), and account preferences.
• Order Information: Details of food items ordered, special instructions, delivery preferences, and order history.
• Payment Information: Credit card numbers, debit card numbers, billing address, and other financial information necessary to process your payments. Note that we do not store full payment card details on our servers; this information is processed through our secure third-party payment processors.
• Communications: Messages, feedback, reviews, and correspondence you send to us through email, contact forms, or other communication channels.
• Marketing Preferences: Information about your preferences for receiving marketing communications from us, including your opt-in or opt-out status.
• Loyalty Program Information: If you participate in any loyalty or rewards program we offer, we collect information about your participation, rewards earned, and redemption history.

2.2 Information Collected Automatically

When you visit our website or use our digital services, certain information is collected automatically through the use of cookies, web beacons, pixel tags, and similar tracking technologies. This includes:

• Device Information: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), device identifiers, and hardware model.
• Usage Data: Pages visited, links clicked, time spent on pages, referring URLs, search queries entered on our website, and navigation paths through our site.
• Location Data: General geographic location derived from your IP address, and, if you grant permission, more precise location data from your device to facilitate delivery services.
• Cookie Data: Information stored in cookies placed on your browser, including session identifiers, authentication tokens, and preference settings.
• Log Data: Server logs that record your requests to our web servers, including timestamps, request methods, response codes, and data transferred.

2.3 Information from Third-Party Sources

We may receive information about you from third parties, including:

• Social Media Platforms: If you connect your social media account to our services or interact with our social media pages, we may receive certain profile information from those platforms.
• Payment Processors: Our payment processing partners may provide us with transaction confirmation details, fraud detection signals, and billing information.
• Analytics Providers: Third-party analytics services may provide us with aggregated or de-identified information about how users interact with websites similar to ours.
• Delivery Partners: If we use third-party delivery services, those partners may share delivery confirmation and related logistics information with us.

3. How We Use Your Information

We use the information we collect for a variety of purposes related to providing, improving, and marketing our services. Specifically, we use your information to:

3.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders, including coordinating delivery or pick-up logistics.
• Create and manage your account on our website.
• Process payments and send transactional communications such as order confirmations, receipts, and updates.
• Communicate with you about your orders, account, or inquiries submitted to our customer support team.
• Provide you with technical support and respond to your questions and feedback.

3.2 Improving Our Services

• Analyze usage patterns and trends to understand how customers interact with our website and menu offerings.
• Conduct research and analysis to improve the quality, functionality, and user experience of our website and food services.
• Monitor and address technical issues, bugs, and security vulnerabilities on our platform.
• Develop new features, products, and menu items based on customer preferences and feedback.

3.3 Marketing and Promotions

• Send you promotional emails, newsletters, and special offers about Cabana Taco products, services, and events, where you have opted in to receive such communications or where we have a legitimate basis for doing so.
• Personalize your experience on our website by displaying relevant menu items, promotions, and content based on your order history and preferences.
• Conduct marketing analytics to measure the effectiveness of our advertising campaigns and promotional efforts.
• Engage in retargeting and interest-based advertising on third-party platforms, subject to applicable opt-out rights.

3.4 Legal and Safety Purposes

• Comply with applicable federal, state, and local laws and regulations.
• Detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities.
• Enforce our Terms of Service and other agreements.
• Protect the rights, property, and safety of Cabana Taco, our customers, and the public.
• Respond to lawful requests from courts, law enforcement agencies, regulatory authorities, and other government entities.

4. How We Share Your Information

We do not sell your personal information to third parties. However, we may share your information in the circumstances described below.

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf, such as:

• Payment Processors: To securely handle credit card transactions and other payment methods.
• Delivery Partners: To facilitate the delivery of your orders to your specified address.
• Email and Marketing Platforms: To send transactional and marketing communications on our behalf.
• Analytics Providers: Such as Google Analytics, to help us understand website traffic and user behavior.
• Cloud Hosting Providers: To host our website and store data securely.
• Customer Support Tools: Platforms we use to manage customer inquiries and support tickets.

These service providers are contractually obligated to use your information only for the purposes of providing services to us and are required to maintain the confidentiality and security of your information in accordance with applicable law.

4.2 Legal Requirements and Law Enforcement

We may disclose your information if required to do so by law or in response to valid legal process, including:

• Compliance with a subpoena, court order, or other legal obligation.
• Requests from law enforcement agencies or government authorities.
• When we believe disclosure is necessary to prevent imminent harm, fraud, or illegal activity.
• When necessary to protect the rights and safety of Cabana Taco, our employees, customers, or the public.

4.3 Business Transfers

In the event that Cabana Taco undergoes a merger, acquisition, sale of assets, reorganization, or similar corporate transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or use of your personal information, as well as any choices you may have regarding your information.

4.4 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so, such as when you authorize a third-party application to access your account data.

4.5 Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes. This data does not constitute personal information under applicable privacy laws.

5. Cookies and Tracking Technologies

Our website uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising.

5.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the website to function properly. They enable core functionalities such as security, account login, and shopping cart management.
• Performance and Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use tools such as Google Analytics for this purpose.
• Functional Cookies: These cookies allow our website to remember choices you make (such as your preferred language or location) and provide enhanced, personalized features.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements that are more relevant to you and your interests. They may also be used to limit the number of times you see an advertisement.

5.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website and your ability to use certain features, such as placing orders.

For more detailed information about the cookies we use and your options for managing them, please refer to our Cookie Policy, which is available on our website at cabana-taco.rest.

6. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: We use Secure Socket Layer (SSL) and Transport Layer Security (TLS) technology to encrypt data transmitted between your browser and our servers. Sensitive data, including passwords and payment information, is encrypted at rest and in transit.
• Access Controls: We restrict access to personal information to employees, contractors, and service providers who need to know that information to operate, develop, or improve our services. These individuals are bound by confidentiality obligations.
• Secure Payment Processing: We use PCI DSS-compliant third-party payment processors to handle financial transactions. We do not store full credit card numbers on our servers.
• Regular Security Assessments: We conduct periodic reviews of our information collection, storage, and processing practices, including physical security measures, to ensure compliance with applicable security standards.
• Incident Response: We maintain procedures for detecting, reporting, and responding to data breaches. In the event of a breach that affects your personal information, we will notify you in accordance with applicable law.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

After the applicable retention period expires, we will securely delete or anonymize your personal information so that it can no longer be associated with you. In some cases, we may retain information for a longer period if required by law or if necessary to resolve disputes and enforce our agreements.

8. Your Privacy Rights

Depending on your state of residence, you may have specific legal rights with respect to your personal information. We respect and honor these rights as required by applicable law.

8.1 Rights Under U.S. Privacy Laws

As a business operating in the United States, we comply with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive practices in commerce, including with respect to consumer privacy. We also comply with applicable state privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) where applicable to our operations and California residents.

8.2 California Residents — CCPA/CPRA Rights

If you are a resident of California, you have the following rights under the CCPA and CPRA:

• Right to Know: You have the right to request that we disclose what personal information we have collected about you, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Access: You have the right to request a copy of the specific pieces of personal information we hold about you.
• Right to Deletion: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., when retention is required by law or necessary to complete a transaction).
• Right to Correction: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing: We do not sell personal information. However, if we engage in any activities that could be considered "sharing" under the CPRA (such as cross-context behavioral advertising), you have the right to opt out.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to certain permitted purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights, including by denying services, charging different prices, or providing a different level of service.

8.3 General Privacy Rights for All Users

Regardless of your location within the United States, we extend the following privacy rights to all users of our services:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct or update inaccurate or incomplete personal information.
• Right to Deletion: You may request deletion of your personal information, subject to applicable legal requirements and legitimate business needs.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly.
• Right to Data Portability: Where technically feasible, you may request a copy of your personal information in a structured, commonly used, and machine-readable format.

8.4 How to Exercise Your Rights

To exercise any of the rights described in this section, please submit a request to us through one of the following methods:

• Email: [email protected]
• Website: Through the contact form available at cabana-taco.rest

We will acknowledge your request within 10 business days and respond to your request within 45 days of receipt. If we require additional time, we will notify you of the extension and the reason for the delay. We may need to verify your identity before processing your request to protect your privacy and security.

You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide written proof of authorization and may be required to verify their identity.

9. Children's Privacy

Cabana Taco does not direct its services to individuals under the age of 18, and we do not knowingly collect, use, or disclose personal information from children under 18 years of age. Our website is not designed to attract children, and we do not knowingly market food products to children in a manner that would require parental consent under applicable law.

If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt steps to investigate and delete such information from our records. We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under the age of 13 without verifiable parental consent.

10. International Data Transfers

Cabana Taco is a United States-based business and primarily processes and stores your personal information within the United States. However, some of our service providers and third-party partners may be located in, or have operations in, other countries. When your personal information is transferred outside of the United States, we take appropriate measures to ensure that such transfers are conducted in compliance with applicable privacy laws and that your information remains protected.

These measures may include:

• Entering into data processing agreements with service providers that include appropriate data protection clauses.
• Ensuring that our service providers are located in countries or certified under frameworks that provide an adequate level of data protection.
• Implementing contractual, organizational, and technical safeguards to protect personal information during international transfers.

If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated. Data protection laws in the United States may differ from those in your country of residence. By using our services, you acknowledge this transfer.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, and services that are not operated by us. These third-party sites have their own privacy policies, and we have no responsibility or liability for their content, privacy practices, or activities. We encourage you to review the privacy policy of every website you visit.

This Privacy Policy applies only to our website at cabana-taco.rest and the services we provide. It does not apply to any third-party websites or services, even if accessed through links on our website.

12. Social Media and User-Generated Content

Cabana Taco maintains a presence on various social media platforms. When you interact with our social media pages, the respective social media platforms collect and process your personal information according to their own privacy policies. Any information you post publicly on social media platforms, including reviews of Cabana Taco, may be visible to other users of those platforms.

If you submit reviews, comments, or other user-generated content through our website or social media channels, please be aware that this content may be publicly visible. We recommend that you do not include sensitive personal information in public reviews or comments.

13. Marketing Communications and Opt-Out

We may send you marketing emails, newsletters, and promotional offers about Cabana Taco when you have opted in to receive such communications or when we have another lawful basis for doing so. You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" or "opt-out" link included in any marketing email we send you.
• Emailing us at [email protected] with a request to unsubscribe.
• Updating your communication preferences in your account settings on our website.

Please note that even if you opt out of marketing communications, we will continue to send you transactional emails related to your orders, account activity, and customer service inquiries, as these communications are necessary for the provision of our services.

We comply with the requirements of the CAN-SPAM Act, which establishes rules for commercial email. All marketing emails we send will clearly identify the sender, include a valid physical mailing address, and provide a clear and easy mechanism to opt out of future emails.

14. Do Not Track Signals

Some web browsers may transmit "Do Not Track" (DNT) signals to websites. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, our website does not currently respond to browser DNT signals. We will continue to monitor developments in this area and update our practices accordingly.

You may, however, manage your tracking preferences through your browser settings and by opting out of specific tracking and advertising technologies as described in Section 5 of this Privacy Policy.

15. How to File a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority.

15.1 Contacting Cabana Taco First

We encourage you to contact us first so that we can address your concerns directly:

• Email: [email protected]
• Website: cabana-taco.rest

15.2 Federal Trade Commission (FTC)

If you are a consumer in the United States and believe that we have engaged in unfair or deceptive privacy practices, you may file a complaint with the Federal Trade Commission (FTC), which enforces consumer protection laws, including privacy-related regulations under the FTC Act:

• Website: www.ftc.gov
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

15.3 California Attorney General (California Residents)

If you are a California resident and believe we have violated your rights under the CCPA/CPRA, you may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

15.4 State Attorneys General

Residents of other states may also have the right to file complaints with their respective state attorney general's office regarding privacy concerns. We encourage you to consult your state's official government website for information about your specific rights and complaint procedures.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on our website notifying users of the changes.
• Where required by law or where we deem it appropriate, send you a notification via email.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. We are committed to resolving any privacy concerns you may have in a timely and transparent manner.

We will endeavor to respond to all privacy inquiries within 10 business days of receipt. For formal rights requests (such as data access, deletion, or correction requests), we will respond within the timeframes required by applicable law.

This Privacy Policy was last updated on May 20, 2026. © 2026 Cabana Taco. All rights reserved.