Privacy Policy

Welcome to Papa Ginos. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website papaginos.digital, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you disagree with the terms of this Privacy Policy, please discontinue use of our website and services.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. This policy applies to all users located in the United States and is designed to comply with applicable federal and state laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant consumer protection regulations.

1. About Us

Papa Ginos is a food business operating in the United States. We provide food ordering services, delivery information, and related content through our website and digital platforms.

For all privacy-related inquiries, complaints, and requests, please contact us using the information provided above or through the dedicated contact details listed in the Contact Us section at the end of this policy.

2. Information We Collect

We collect several types of information in connection with the operation of our business and the provision of our services. The categories of information we may collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, participate in promotions, or contact us directly, we may collect personally identifiable information, including but not limited to:

• Full name
• Email address
• Mailing or delivery address
• Phone number
• Date of birth (where relevant for age verification or promotional purposes)
• Username and password (for account holders)
• Payment information (processed securely through third-party payment processors; we do not store full card numbers)

2.2 Order and Transaction Data

When you place an order through our website or affiliated platforms, we collect information about the transaction, including:

• Items ordered and order history
• Order value and payment method type
• Delivery address and delivery instructions
• Special requests or dietary preferences you provide
• Customer feedback and review submissions

2.3 Usage and Behavioral Data

When you browse our website, we automatically collect certain information about your device and browsing activity, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type
• Referring URLs and exit pages
• Pages viewed, time spent on pages, and clickstream data
• Search queries entered on our website
• Time and date of your visit

2.4 Device Information

We may collect information about the devices you use to access our website and services, including:

• Device identifiers (such as mobile device ID or advertising ID)
• Hardware model and settings
• Network information and connection type
• Mobile carrier (if applicable)

2.5 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. For detailed information about how we use cookies and your choices regarding cookie usage, please see Section 9 of this policy.

2.6 Communications Data

If you contact us via email, phone, online form, or any other communication channel, we may retain records of those communications, including:

• The content of your messages
• Contact details you provide
• Records of correspondence and customer service interactions

2.7 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you interact with our pages or use social login features)
• Third-party delivery partners or platforms through which you place orders
• Analytics providers and advertising networks
• Fraud detection and identity verification services

3. How We Use Your Information

We use the information we collect for a variety of purposes related to the operation and improvement of our business. Specifically, we may use your information for the following purposes:

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders and delivery requests
• To create and manage your customer account
• To send order confirmations, receipts, and status updates
• To facilitate payment processing through our secure payment partners
• To respond to your inquiries, requests, and complaints
• To provide customer support and resolve disputes

3.2 Business Operations and Improvement

• To analyze and understand how our website and services are used
• To improve our website functionality, menu offerings, and user experience
• To conduct internal research and product development
• To monitor and prevent fraud, unauthorized access, and misuse of our services
• To maintain the security and integrity of our systems

3.3 Marketing and Communications

• To send you promotional emails, offers, and newsletters (with your consent or where permitted by law)
• To personalize marketing messages based on your order history and preferences
• To deliver targeted advertising through our website and third-party platforms
• To notify you about new menu items, special deals, loyalty rewards, and promotions
• To conduct surveys and gather feedback to improve our services

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email, or by contacting us directly at [email protected]. Please note that even after opting out of marketing communications, you may still receive transactional or service-related communications necessary to fulfill your orders.

3.4 Legal and Compliance Purposes

• To comply with applicable federal, state, and local laws and regulations
• To enforce our Terms of Service and other legal agreements
• To respond to lawful requests from law enforcement, government authorities, or courts
• To protect the rights, property, and safety of Papa Ginos, our customers, and the public
• To detect, investigate, and prevent fraudulent or illegal activity

4. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own commercial purposes, except as described in this section. We may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf. These service providers are given access to your information only to the extent necessary to perform their functions and are contractually obligated to protect your information. Service providers may include:

• Payment processors and financial institutions (e.g., credit card processors)
• Delivery and logistics partners who fulfill your orders
• Cloud hosting and data storage providers
• Email marketing and communication platforms
• Website analytics providers (e.g., Google Analytics)
• Customer relationship management (CRM) software providers
• Fraud prevention and security service providers
• Legal, accounting, and professional service advisors

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal process, including:

• Compliance with court orders, subpoenas, or legal proceedings
• Requests from federal, state, or local law enforcement agencies
• Compliance with applicable regulatory requirements
• Protection of our legal rights or defense against legal claims

4.3 Business Transfers

In the event that Papa Ginos is involved in a merger, acquisition, sale of assets, bankruptcy, or other business transition, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

4.4 Protection of Rights and Safety

We may share information when we believe disclosure is necessary to protect the safety of our customers, employees, or the public, or to prevent illegal activity, fraud, or abuse.

4.5 With Your Consent

We may share your information with third parties for purposes not described in this policy when we have obtained your explicit consent to do so.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, destruction, or misuse.

5.1 Security Measures We Employ

• Encryption: We use Secure Socket Layer (SSL) and Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations.
• Secure Payment Processing: Payment card data is processed through PCI-DSS compliant third-party payment processors. We do not store complete credit card numbers on our systems.
• Regular Security Audits: We conduct periodic reviews and assessments of our security practices and systems to identify and address vulnerabilities.
• Data Minimization: We collect only the data necessary for the purposes described in this policy and retain it only for as long as necessary.
• Firewall and Intrusion Detection: Our servers are protected by industry-standard firewalls and monitoring systems designed to detect and prevent unauthorized access.

5.2 Limitations of Security

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach that affects your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

You also play an important role in keeping your information secure. Please use a strong, unique password for your account, do not share your login credentials with others, and contact us immediately if you suspect unauthorized access to your account.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The specific retention periods we apply are as follows:

After the applicable retention period expires, we will securely delete or anonymize your personal information so that it can no longer be associated with you. In some cases, we may retain anonymized, aggregated data indefinitely for statistical and business intelligence purposes, as this data cannot identify you personally.

7. Your Privacy Rights

Depending on your state of residence and applicable law, you may have certain rights with respect to your personal information. We are committed to honoring these rights and providing you with the means to exercise them.

7.1 General Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (e.g., where retention is required by law).
• Right to Opt Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal information in a structured, commonly used, machine-readable format.

7.2 California Residents — Additional CCPA/CPRA Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including:

• Right to Know: The right to know what categories of personal information we have collected about you, the sources of that information, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete: The right to request deletion of personal information we have collected, subject to limited exceptions.
• Right to Correct: The right to request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: The right to opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising purposes.
• Right to Limit Use of Sensitive Personal Information: Where applicable, the right to limit the use and disclosure of sensitive personal information.
• Right to Non-Discrimination: You have the right not to be discriminated against for exercising any of your CCPA/CPRA rights. We will not deny you services, charge you different prices, or provide you with a lesser quality of service because you exercised your privacy rights.

7.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a verifiable consumer request to us using one of the following methods:

• Email: [email protected]
• Website: papaginos.digital

Your request must include sufficient information to allow us to verify your identity and locate your records in our systems. We may ask you to provide your name, email address, order history, or other information to verify your identity before processing your request. We will respond to your verifiable request within 45 days of receipt. If we require additional time, we will notify you of the extension and the reason for the delay.

You may designate an authorized agent to submit a request on your behalf. The authorized agent must provide written proof of authorization, and we may require verification of your identity directly with you to confirm the agent's authority.

8. Children's Privacy

Papa Ginos does not direct its website or marketing activities to individuals under the age of 18. If you are under 18 years of age, please do not use our website, create an account, or submit any personal information to us.

If we become aware that we have inadvertently collected personal information from a child under the age of 18 without verifiable parental consent, we will take immediate steps to delete that information from our records. This policy is consistent with the requirements of the Children's Online Privacy Protection Act (COPPA), which applies to online collection of information from children under the age of 13 in the United States.

If you are a parent or guardian and you believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver relevant advertising. This section provides a brief overview of our cookie practices.

9.1 What Are Cookies?

Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit our website. They allow us to recognize your browser and capture certain information about your browsing activity.

9.2 Types of Cookies We Use

9.3 Managing Your Cookie Preferences

You have the right to accept, reject, or manage your cookie preferences. Most web browsers allow you to control cookies through their settings. You can typically find cookie settings in the "Settings," "Preferences," or "Privacy" section of your browser. Please note that disabling certain cookies may affect the functionality of our website and your ability to use certain features.

You may also opt out of interest-based advertising by visiting:

• Network Advertising Initiative (NAI): optout.networkadvertising.org
• Digital Advertising Alliance (DAA): optout.aboutads.info

For more detailed information about the specific cookies we use, their purpose, and duration, please refer to our full Cookie Policy available on our website at papaginos.digital.

10. International Data Transfers

Papa Ginos is based in the United States and primarily processes data within the United States. However, some of our third-party service providers may be located in other countries, which means your personal information may be transferred to, stored in, or processed in countries outside the United States.

When we transfer personal information outside the United States to service providers located in other jurisdictions, we take steps to ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law. These safeguards may include:

• Entering into data processing agreements with service providers that include standard contractual clauses or equivalent protections
• Transferring data only to countries or organizations that provide an adequate level of data protection
• Obtaining your explicit consent where required

By using our website and services, you acknowledge and consent to the transfer of your personal information to the United States and, where applicable, to other countries as described in this section.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Papa Ginos. These third-party services have their own privacy policies, and we are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

Our website may integrate third-party services including:

• Social media platforms (Facebook, Instagram, Twitter/X)
• Third-party delivery platforms
• Online review platforms
• Payment gateways
• Map and location services (e.g., Google Maps)

When you interact with these third-party services through our website, those services may collect information about you independently of Papa Ginos, and their collection and use of your data will be governed by their own privacy policies.

12. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your browsing activity tracked. Currently, there is no industry-wide standard for how websites should respond to DNT signals. As a result, our website does not currently respond to DNT browser signals. We will revisit this position if and when a uniform standard is established.

California residents who wish to exercise rights related to the collection of personal information by third parties for tracking purposes may be entitled to certain disclosures under California Business and Professions Code Section 22575. Please contact us at [email protected] for more information.

13. Your Choices and Opt-Out Options

We respect your right to control how your personal information is used. In addition to the rights described in Section 7, you have the following choices:

13.1 Email Marketing

If you no longer wish to receive promotional emails from us, you may opt out by clicking the "unsubscribe" link included at the bottom of any marketing email, or by sending an opt-out request to [email protected]. Please allow up to 10 business days for your request to be processed. Note that even after opting out, you may continue to receive service-related and transactional communications.

13.2 Account Information

If you have created an account with us, you may review and update your personal information by logging into your account settings. You may also request account deletion by contacting us at [email protected].

13.3 SMS and Text Messages

If you have opted in to receive SMS or text marketing messages from us, you may opt out at any time by replying "STOP" to any text message or by contacting us directly. Standard message and data rates may apply.

14. How to File a Privacy Complaint

If you have concerns about how we handle your personal information, we encourage you to contact us first so that we can attempt to resolve your concern directly.

14.1 Contacting Papa Ginos

To submit a privacy complaint or inquiry, please contact us at:

• Email: [email protected]
• Website: papaginos.digital

We will acknowledge receipt of your complaint within 5 business days and aim to provide a substantive response within 30 days. If we require additional time, we will notify you promptly.

14.2 Filing a Complaint with a Regulatory Authority

If you are not satisfied with our response to your privacy complaint, or if you believe that we are processing your personal information in a manner that violates applicable law, you have the right to file a complaint with the relevant regulatory authority:

15. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy on our website at papaginos.digital
• Send an email notification to registered account holders where required by applicable law
• Display a prominent notice on our website where appropriate

Your continued use of our website and services following the posting of any updated Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this policy periodically to stay informed about how we are protecting your personal information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

We strive to respond to all privacy-related inquiries within 5 business days. For formal rights requests under the CCPA/CPRA or other applicable privacy laws, please allow up to 45 days for a full response.