Privacy Policy

Effective Date: June 3, 2026  |  Last Updated: June 3, 2026

1. Introduction and Who We Are

Welcome to Cabana Taco. We are a food service business operating in the United States, committed to protecting the privacy and personal information of our customers, website visitors, and anyone who interacts with our digital platforms. This Privacy Policy has been prepared in accordance with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable federal regulations governing consumer data protection.

Throughout this Privacy Policy, references to "Cabana Taco," "we," "us," or "our" refer to the business entity operating under the Cabana Taco brand. References to "you," "your," or "user" refer to any individual who accesses our website, places an order, subscribes to our communications, or otherwise interacts with our services.

Our contact details for privacy-related matters are as follows:

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected through the following channels:

• Our official website at eat-cabanataco.rest and all associated subdomains
• Online ordering and reservation platforms linked to or operated by Cabana Taco
• Email communications, newsletters, and promotional messages sent by or on behalf of Cabana Taco
• Social media interactions and third-party platforms where Cabana Taco maintains an official presence
• In-restaurant digital touchpoints, including loyalty programs, digital menus, or point-of-sale systems that collect personal data
• Any other means by which you voluntarily provide personal information to Cabana Taco

This Privacy Policy does not apply to the practices of third-party websites, applications, or services that may be linked from our website. We encourage you to review the privacy policies of any third-party platforms you access through links on our site.

3. Information We Collect

We collect various categories of personal information depending on how you interact with our business. The following sections describe the types of data we may collect.

3.1 Personal Identification Information

When you place an online order, create an account, sign up for our loyalty program, make a reservation, or contact us directly, we may collect the following personal identification details:

• Full name
• Email address
• Mailing or delivery address
• Telephone or mobile phone number
• Date of birth (where required for age verification or promotional offers)
• Username and password for account access
• Billing information including payment card details (processed securely through third-party payment processors)

3.2 Order and Transaction Information

When you place orders through our website or affiliated ordering platforms, we collect information about your transactions, including:

• Items ordered, quantities, and order amounts
• Order history and purchase frequency
• Special dietary requests or food allergy information you provide
• Delivery instructions and preferred delivery times
• Payment method type (we do not store full payment card numbers; this information is handled by PCI-compliant payment processors)
• Promotional codes or discount vouchers applied to orders

3.3 Usage and Behavioral Data

When you visit our website, we automatically collect certain technical and behavioral data about your interactions, including:

• Pages viewed and navigation patterns within our website
• Links clicked and buttons interacted with
• Time and duration of website visits
• Search queries entered on our website
• Referring websites or URLs that directed you to our site
• Frequency and recency of visits

3.4 Device and Technical Information

We automatically collect certain technical information from the devices you use to access our website:

• IP address and approximate geographic location derived from IP address
• Browser type and version
• Operating system and device type (desktop, mobile, tablet)
• Screen resolution and display settings
• Language and time zone settings
• Device identifiers and mobile advertising IDs where applicable

3.5 Cookie and Tracking Data

Our website uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience and support our analytics and marketing efforts. For detailed information about the specific cookies we use and how to manage your cookie preferences, please refer to our Cookie Policy available on our website. A summary of our cookie usage is also provided in Section 9 of this Privacy Policy.

3.6 Communications and Feedback

When you contact us through email, online contact forms, or engage with us through customer service channels, we collect:

• The content of your messages and inquiries
• Feedback, reviews, and ratings you submit regarding our food or services
• Complaint details and resolution history
• Survey responses when you voluntarily participate in customer satisfaction surveys

3.7 Marketing and Communication Preferences

If you subscribe to our email newsletters, promotional offers, or loyalty program communications, we collect:

• Your opt-in preferences and subscription status
• Communication frequency preferences
• Engagement data such as email open rates and click-through activity

4. How We Use Your Information

Cabana Taco uses the personal information we collect for the following purposes, each grounded in legitimate business needs or your explicit consent:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including delivery and pickup arrangements
• Managing reservations and table bookings
• Processing payments and issuing receipts or invoices
• Communicating order confirmations, status updates, and delivery notifications
• Administering loyalty programs and applying earned rewards or discounts
• Responding to your customer service inquiries, complaints, and feedback

4.2 Account Management

• Creating and maintaining your customer account
• Verifying your identity and securing your account
• Enabling you to review your order history and manage your preferences
• Facilitating password resets and account recovery

4.3 Analytics and Service Improvement

• Analyzing website traffic patterns and user behavior to improve our digital platforms
• Understanding customer preferences to refine our menu offerings
• Identifying technical issues, bugs, and areas for performance improvement
• Conducting internal research and data analysis to support business decisions
• Measuring the effectiveness of our marketing campaigns and promotional activities

4.4 Marketing and Promotional Communications

With your consent, or where we have a legitimate interest to do so under applicable law, we may use your information to:

• Send you promotional emails, special offers, seasonal deals, and new menu announcements
• Deliver personalized marketing content based on your order history and preferences
• Display targeted advertisements on third-party platforms such as social media networks
• Invite you to participate in surveys, contests, or promotional events

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us directly at [email protected].

4.5 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from law enforcement agencies or regulatory authorities
• Detecting, preventing, and addressing fraud, unauthorized access, or other illegal activities
• Enforcing our Terms of Service and other applicable policies
• Protecting the rights, property, and safety of Cabana Taco, our customers, and the public

5. Sharing Your Information with Third Parties

Cabana Taco does not sell your personal information to third parties for their own independent marketing or business purposes. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business. These providers may access your personal information only to perform specific tasks on our behalf and are contractually obligated to protect it. Categories of service providers include:

• Payment processors: To securely handle payment card transactions (e.g., Stripe, Square, or similar PCI DSS-compliant processors)
• Delivery platforms: Third-party delivery services that facilitate the delivery of your orders
• Website hosting and cloud services: Providers that host our website and store data securely
• Email marketing platforms: Services used to manage and send our email communications
• Analytics providers: Tools such as Google Analytics that help us understand website usage patterns
• Customer support platforms: Software used to manage and respond to customer inquiries
• Loyalty program administrators: Platforms that manage customer rewards and points systems

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information to government authorities, law enforcement agencies, or other third parties when we believe disclosure is necessary or required to:

• Comply with a legal obligation, court order, or lawful government request
• Enforce our Terms of Service or defend against legal claims
• Investigate suspected fraud, security breaches, or violations of our policies
• Protect the safety and rights of our customers, employees, or the public

5.3 Business Transfers

In the event that Cabana Taco undergoes a merger, acquisition, sale of assets, or other business restructuring, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you via email and/or a prominent notice on our website if such a transfer occurs and advise you of any changes to this Privacy Policy that may result.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data with third parties for research, analytical, or marketing purposes. Such data does not identify any individual and cannot reasonably be used to identify you.

6. Data Security

Cabana Taco takes the security of your personal information seriously. We implement a range of technical, administrative, and physical security measures designed to protect your data against unauthorized access, disclosure, alteration, or destruction. These measures include:

6.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocols
• Secure Payment Processing: Payment card data is processed exclusively through PCI DSS-compliant third-party payment processors; we do not store full card numbers on our servers
• Firewalls and Intrusion Detection: Our servers are protected by firewalls and monitored for unauthorized access attempts
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, with strong authentication requirements
• Regular Security Assessments: We conduct periodic security audits and vulnerability assessments of our systems

6.2 Organizational Safeguards

• Employee training on data protection best practices and privacy obligations
• Data processing agreements with all third-party service providers who handle personal data
• Internal policies governing the collection, use, and retention of personal information
• Designated personnel responsible for overseeing privacy compliance

7. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

7.1 Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

7.2 General Privacy Rights for All U.S. Residents

Regardless of your state of residence, we extend the following rights to all users of our services where technically feasible:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we update or correct inaccurate data in your profile.
• Right to Deletion: You may request that we delete your personal information, subject to applicable legal and operational exceptions.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Opt-Out of Marketing: You may unsubscribe from promotional communications at any time.

7.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us using one of the following methods:

• Email: [email protected] with the subject line "Privacy Rights Request"

We will respond to verifiable consumer requests within 45 days of receipt. If we require additional time (up to an additional 45 days), we will inform you of the extension and the reasons for the delay. We may need to verify your identity before processing your request. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. The following general retention periods apply:

When data is no longer required for any of the above purposes, we securely delete or anonymize it in accordance with industry best practices.

9. Cookie Usage

Our website uses cookies and similar tracking technologies to improve your experience, analyze site performance, and support our marketing efforts. Cookies are small text files placed on your device that allow us to recognize your browser and capture certain information.

9.1 Types of Cookies We Use

• Essential/Necessary Cookies: Required for the website to function properly. These enable core features such as shopping cart functionality, user authentication, and session management. These cookies cannot be disabled without affecting website functionality.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most frequently and whether users encounter error messages. We use tools such as Google Analytics for this purpose.
• Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences (e.g., language, location, or dietary filters).
• Marketing and Advertising Cookies: These cookies track your browsing activity across websites to deliver relevant advertisements. They are placed by our advertising partners and may be used to build a profile of your interests.

9.2 Managing Your Cookie Preferences

You may manage your cookie preferences at any time through our on-site cookie consent tool or through your browser settings. Please note that disabling certain cookies may impact the functionality of our website. For full details on the specific cookies we use, their purposes, and their duration, please review our Cookie Policy available at eat-cabanataco.rest.

10. Children's Privacy

Cabana Taco does not knowingly solicit, collect, or retain personal information from individuals under the age of 18. Our website is not designed, directed, or intended for use by children. In compliance with the Children's Online Privacy Protection Act (COPPA) and applicable state laws, we take the following measures:

• We do not knowingly allow persons under 18 to create accounts or make purchases on our website
• We do not knowingly collect personal information from children under 18
• If we discover that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete such information from our records
• Parents or legal guardians who believe that their child has provided personal information to us are encouraged to contact us immediately at [email protected] so that we may take appropriate action

11. International Data Transfers

Cabana Taco is based in the United States, and the personal information we collect is primarily processed and stored on servers located within the United States. If you are accessing our website from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our website and providing us with your personal information, you acknowledge and consent to the transfer of your data to the United States for the purposes described in this Privacy Policy. We take appropriate safeguards to ensure that your personal information is protected in accordance with this Privacy Policy regardless of where it is processed.

Where we transfer personal data to third-party service providers located outside the United States, we ensure that appropriate data transfer mechanisms and contractual protections are in place to safeguard your information.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, delivery apps, or other services that are not operated or controlled by Cabana Taco. This Privacy Policy applies solely to information collected by Cabana Taco and our website. We are not responsible for the privacy practices of any third-party websites or services, and we encourage you to review their privacy policies before providing any personal information.

Third-party services that may be integrated with or linked from our website include but are not limited to:

• Online ordering and delivery platforms (such as DoorDash, Uber Eats, or Grubhub)
• Social media platforms (such as Facebook, Instagram, or Twitter/X)
• Map and navigation services (such as Google Maps)
• Review platforms (such as Yelp or Google Reviews)

13. California-Specific Disclosures

In addition to the rights described in Section 7.1 of this Privacy Policy, California residents are entitled to the following additional disclosures under California law:

13.1 Categories of Personal Information Collected

In the preceding 12 months, Cabana Taco has collected the following categories of personal information as defined under the CCPA/CPRA:

• Identifiers (name, email address, phone number, IP address)
• Commercial information (order history, transaction records, purchasing preferences)
• Internet or other electronic network activity information (website browsing history, interactions with our website)
• Geolocation data (approximate location derived from IP address or delivery address)
• Inferences drawn from the above categories (customer preferences and likely interests)

13.2 Do Not Sell or Share My Personal Information

Cabana Taco does not sell personal information to third parties in exchange for monetary compensation. We also do not share personal information for cross-context behavioral advertising without providing you with an opportunity to opt out. To exercise your opt-out rights, please contact us at [email protected].

13.3 Shine the Light Law

California's "Shine the Light" law (Civil Code Section 1798.83) permits California residents to request information about the disclosure of personal information to third parties for their direct marketing purposes. To submit such a request, please contact us at the email address provided in this Privacy Policy.

14. How to File a Complaint

We are committed to resolving any privacy concerns you may have. If you believe that we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to first contact us directly so that we may address your concern:

• Email: [email protected]
• Subject Line: Privacy Complaint

We will acknowledge your complaint within 10 business days and aim to resolve it within 30 days.

14.1 Regulatory Authorities

If you are not satisfied with our response, or if you believe your privacy rights have been violated, you may file a complaint with the following regulatory authorities:

• California Privacy Protection Agency (CPPA): California residents may file complaints with the CPPA at cppa.ca.gov
• Federal Trade Commission (FTC): For consumer privacy concerns at the federal level, you may file a complaint with the FTC at ftc.gov/complaint
• State Attorney General: You may also contact your state's Attorney General office if you believe a state privacy law has been violated

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or business operations. When we make material changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on our website at eat-cabanataco.rest with the revised "Last Updated" date at the top of the document
• Send an email notification to customers with active accounts or subscriptions, where required by law or where changes are material
• Display a prominent notice on our website homepage for a reasonable period following the update

Your continued use of our website and services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact us. We are committed to responding promptly and transparently to all privacy-related inquiries.

This Privacy Policy was last updated on June 3, 2026, and is effective as of that date. © 2026 Cabana Taco. All rights reserved.