Privacy Policy

This Privacy Policy describes how Papa Ginos ("we," "us," "our," or "the Company") collects, uses, shares, and protects your personal information when you visit our website at food-papaginos.click, place orders, interact with our services, or otherwise engage with us. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with applicable United States privacy laws, including the California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA), as well as the Federal Trade Commission Act (FTC Act) and other relevant federal and state regulations.

Please read this Privacy Policy carefully. By accessing or using our website, placing an order, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please discontinue use of our website and services immediately.

For any questions, concerns, or requests regarding this Privacy Policy, you may contact us at any time using the information provided in the Contact Us section at the end of this document.

1. Who We Are

Papa Ginos is a food service business operating in the United States. We provide food ordering, delivery, and related services through our website and other channels. Our contact details are as follows:

We are the "data controller" or "business" as those terms are defined under applicable United States privacy law, meaning we determine the purposes and means by which personal information is collected and processed.

2. Information We Collect

We collect various categories of personal information depending on how you interact with us. Below is a detailed description of the types of information we gather.

2.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing address and delivery address
• Date of birth (where required for age verification or promotional purposes)
• Username and password (when you register an account)
• Payment information, such as credit card details or digital wallet information (processed securely through our payment processors)

2.2 Order and Transaction Information

To fulfill your orders and provide our food services, we collect:

• Details of items ordered, including special instructions and preferences
• Order history and frequency
• Transaction amounts and payment confirmation data
• Delivery instructions and special requests
• Loyalty program activity (if applicable)

2.3 Usage and Technical Data

When you access and use our website, we automatically collect certain technical information, including:

• IP address
• Browser type and version
• Operating system and device type
• Referring URLs and exit pages
• Pages viewed, links clicked, and time spent on each page
• Date and time of visits
• Search queries entered on our website
• Session identifiers and other technical identifiers

2.4 Location Data

We may collect approximate or precise location information to:

• Confirm your delivery address or find nearby locations
• Provide location-relevant promotions and offers
• Improve our delivery accuracy and logistics

Location data is only collected with your consent, and you may withdraw this consent at any time through your device or browser settings.

2.5 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior and preferences. For more details, please refer to Section 8 (Cookie Usage) of this Privacy Policy.

2.6 Communications Data

If you contact us through our website, email, phone, or social media, we may collect:

• The content of your messages and correspondence
• Records of complaints, feedback, or inquiries
• Customer support interaction logs

2.7 Marketing Preferences

We collect your marketing and communication preferences, including whether you have opted in or out of promotional emails, SMS messages, and push notifications.

2.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you connect your account or interact with us on social media)
• Third-party food delivery aggregators and partner platforms
• Analytics providers and advertising networks
• Payment processors and fraud prevention services

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Communicating order confirmations, updates, and delivery notifications
• Managing your account and providing customer support
• Processing payments and preventing fraudulent transactions
• Coordinating delivery logistics and third-party delivery partners

3.2 Personalization and User Experience

• Remembering your preferences, dietary requirements, and favorite items
• Personalizing your browsing experience on our website
• Offering location-based services and relevant menu recommendations
• Administering loyalty programs and reward points

3.3 Marketing and Promotions

• Sending you promotional emails, special offers, and newsletters (with your consent where required by law)
• Displaying targeted advertisements on our website and third-party platforms
• Conducting surveys, contests, and promotional campaigns
• Analyzing your purchasing behavior to send relevant offers

You may opt out of marketing communications at any time by clicking "unsubscribe" in any email we send, by contacting us at [email protected], or by adjusting your account preferences. Please note that opting out of marketing communications does not affect transactional communications related to your orders.

3.4 Analytics and Service Improvement

• Analyzing website traffic, usage patterns, and user behavior to improve our website and services
• Conducting internal research and business intelligence activities
• Testing new features, products, and menu items
• Monitoring the performance and security of our website

3.5 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from law enforcement or government authorities
• Preventing, detecting, and investigating fraud, unauthorized activity, or security incidents
• Enforcing our Terms of Service and other applicable agreements
• Protecting the rights, property, and safety of Papa Ginos, our customers, and the public

3.6 Business Operations

• Managing and operating our business, including accounting, auditing, and record-keeping
• Facilitating mergers, acquisitions, or business transfers (see Section 5.4)
• Training staff and improving internal processes

4. Legal Basis for Processing

In the United States, our data processing activities are governed by applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) for California residents, as well as the Federal Trade Commission Act (FTC Act) which prohibits unfair or deceptive practices in commerce, including privacy-related matters.

We process your personal information based on the following grounds:

• Contractual Necessity: Processing required to fulfill your orders and provide the services you have requested.
• Legitimate Business Interests: Processing for analytics, security, fraud prevention, and general business operations.
• Your Consent: Processing for marketing communications, non-essential cookies, and location tracking, where required.
• Legal Obligation: Processing required to comply with applicable laws, regulations, and lawful government requests.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the circumstances described below.

5.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating our business and delivering our services. These include:

• Payment processors (e.g., Stripe, PayPal, or similar providers) who handle payment transactions securely
• Delivery partners and logistics providers who fulfill and track your food orders
• Cloud hosting and IT service providers who host our website and data infrastructure
• Analytics providers (e.g., Google Analytics) who help us understand website usage
• Email marketing platforms used to send promotional and transactional communications
• Customer support software providers who facilitate our help desk operations
• Fraud detection and security services that protect our platform and customers

All service providers are required to handle your personal information confidentially and securely, and are prohibited from using it for any purpose other than providing the services we have contracted them for. We enter into appropriate data processing agreements with all service providers.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or governmental request
• Enforce our Terms of Service or other legal agreements
• Protect and defend the rights or property of Papa Ginos
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our services or the general public

5.3 Advertising and Analytics Partners

We may share aggregated, de-identified, or pseudonymized data with advertising networks and analytics platforms to improve the relevance of advertisements and measure their effectiveness. This data does not directly identify you personally.

Certain sharing of personal information with advertising partners may constitute a "sale" or "sharing" of personal information under the CPRA. California residents have the right to opt out of such sharing. Please see Section 10 for information on exercising your rights.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring or successor entity. We will notify you via email or prominent notice on our website if such a transfer occurs, and we will inform you of any changes to this Privacy Policy that may result from the transfer.

5.5 With Your Consent

We may share your personal information with other third parties when we have obtained your explicit consent to do so, for specific purposes disclosed at the time of collection.

6. Data Security

We take the security of your personal information very seriously and implement a range of technical, administrative, and physical security measures to protect your data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

6.1 Technical Safeguards

• Encryption of data in transit using industry-standard SSL/TLS protocols
• Encryption of sensitive data at rest, including payment information
• Secure firewalls and intrusion detection systems
• Regular security audits, vulnerability assessments, and penetration testing
• Multi-factor authentication for access to internal systems
• Role-based access controls limiting employee access to personal data

6.2 Organizational Safeguards

• Privacy and data security training for all employees who handle personal information
• Strict internal data handling and access policies
• Confidentiality agreements with employees and contractors
• Regular review and update of security policies and procedures
• Incident response plan for data breaches

6.3 Payment Security

All payment card transactions are processed by PCI-DSS-compliant payment processors. We do not store your full payment card number, CVV, or expiration date on our servers.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods we apply are as follows:

When personal information is no longer needed for its original purpose and no legal retention obligation applies, we will securely delete or anonymize it so it can no longer be associated with you.

8. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertisements. Cookies are small text files stored on your device when you visit our website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website, including enabling you to log in, place orders, and navigate the site securely.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting information about page views, traffic sources, and user behavior. (e.g., Google Analytics)
• Functional Cookies: Allow our website to remember your preferences (such as saved addresses or language settings) to provide a more personalized experience.
• Targeting and Advertising Cookies: Used to deliver relevant advertisements to you on our website and across third-party sites, and to measure the effectiveness of our marketing campaigns.

8.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse, accept, or delete cookies. Please note that disabling certain cookies may impact the functionality of our website. You may also opt out of targeted advertising cookies by visiting industry opt-out tools such as the Network Advertising Initiative (NAI) Opt-Out or the Digital Advertising Alliance (DAA) Opt-Out.

For a comprehensive description of the specific cookies we use and detailed instructions for managing your preferences, please refer to our Cookie Policy, available on our website at food-papaginos.click.

9. Children's Privacy

Our website and services are not directed to children under the age of 18. We do not knowingly solicit or collect personal information from minors. In compliance with the Children's Online Privacy Protection Act (COPPA) and other applicable laws, if we become aware that we have inadvertently collected personal information from a child under 18 without verifiable parental consent, we will take immediate steps to delete such information from our records.

If you are a parent or legal guardian and believe that your child has provided personal information to us without your consent, please contact us immediately at [email protected] so we can take appropriate action.

By using our website and services, you represent and warrant that you are at least 18 years of age. If you are under 18, please do not use our website, create an account, or provide any personal information to us.

10. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights promptly and in accordance with applicable law.

10.1 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the purposes for which it was collected, and the third parties with whom we have shared it.
• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Deletion: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., where retention is required by law or to complete a transaction).
• Right to Correction: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Opt Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information with third parties for cross-context behavioral advertising. To exercise this right, please click the "Do Not Sell or Share My Personal Information" link on our website or contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: Where applicable under CPRA, you have the right to limit our use and disclosure of your sensitive personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge different prices, or provide a lower quality of service because you exercised your privacy rights.
• Right to Data Portability: You may request that we provide your personal information in a portable, readily usable format that allows you to transmit the data to another entity.

10.2 Rights for Residents of Other States

Residents of certain other states, including but not limited to Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and others, may have similar privacy rights under their respective state laws. These rights may include the right to access, correct, delete, and opt out of certain processing activities. We honor these rights to the extent required by applicable law. Please contact us to inquire about your specific rights.

10.3 How to Exercise Your Rights

To exercise any of the rights described above, you may submit a request by:

• Sending an email to [email protected] with the subject line "Privacy Rights Request"
• Visiting our website at food-papaginos.click and completing a privacy request form (where available)

We will verify your identity before processing your request to protect your security and privacy. We may ask you to provide information sufficient to verify that you are the person about whom the request was made (e.g., your name, email address, and order history).

We will respond to your request within 45 days of receipt. If we require additional time, we will notify you of the extension and the reason for the delay. We may extend our response time by an additional 45 days where reasonably necessary.

10.4 Authorized Agents

You may designate an authorized agent to submit a privacy request on your behalf. If you use an authorized agent, we may require written proof of your authorization and may verify your identity directly with you to ensure the request is legitimate.

11. International Data Transfers

Papa Ginos is based in the United States, and your personal information is primarily processed and stored within the United States. If you access our website from outside the United States, please be aware that your information will be transferred to, processed, and stored in the United States, where data protection laws may differ from those in your country of residence.

In the event that we transfer personal information outside the United States to third-party service providers or partners located internationally, we will ensure that appropriate safeguards are in place to protect your information, including:

• Entering into data transfer agreements with international service providers that include appropriate data protection clauses
• Ensuring that service providers adhere to security and privacy standards equivalent to those we apply domestically
• Implementing contractual protections to safeguard your personal information during international transfers

By using our services, you consent to the transfer of your personal information to the United States and acknowledge that such transfer may involve countries with different data protection standards than your home country.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or services that are not operated by us. These third-party sites have their own privacy policies, which we encourage you to review. We are not responsible for the privacy practices or content of third-party websites and do not accept any liability in connection with them.

Similarly, when you log in via third-party platforms (such as Google or Facebook), those platforms may collect and process your information in accordance with their own privacy policies. We recommend reviewing the privacy policies of all third-party platforms you use in connection with our services.

13. Do Not Track Signals

Some browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our website does not currently respond to DNT signals from browsers. However, you can manage your tracking preferences through cookie settings as described in Section 8 (Cookie Usage).

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email (if you have provided us with your email address)
• Post a prominent notice on our website indicating that the Privacy Policy has been updated

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

15. How to File a Complaint

If you believe that we have violated your privacy rights or that we have processed your personal information in a manner inconsistent with applicable law, we encourage you to first contact us directly so we can attempt to resolve your concern.

15.1 Contact Us First

Please send your complaint or concern to:

• Email: [email protected]
• Subject Line: Privacy Complaint

We will acknowledge receipt of your complaint within 10 business days and work to resolve the matter as quickly as possible, typically within 45 days.

15.2 Filing a Complaint with a Data Protection Authority

If you are not satisfied with our response, or if you believe we have not adequately addressed your concern, you may file a complaint with the relevant government authority:

• California Residents: You may file a complaint with the California Privacy Protection Agency (CPPA), which is the state agency responsible for enforcing the CCPA/CPRA.
  Website: cppa.ca.gov
• Federal Complaints: You may file a complaint with the Federal Trade Commission (FTC), which enforces consumer protection laws including privacy-related unfair or deceptive practices.
  Website: reportfraud.ftc.gov
  Phone: 1-877-FTC-HELP (1-877-382-4357)
• State Attorney General Offices: Residents of states with applicable privacy laws (including Virginia, Colorado, Connecticut, Texas, and others) may also file complaints with their respective state Attorney General's office.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team:

We are committed to responding to all privacy-related inquiries promptly and in accordance with our obligations under applicable United States privacy laws. Your privacy matters to us, and we take every inquiry seriously.