Privacy Policy

This Privacy Policy describes how Costa Vida ("we," "us," "our," or "the Company") collects, uses, discloses, and protects your personal information when you visit our website at costavida-meal.top, place orders, interact with our services, or otherwise engage with our food business. We are committed to protecting your privacy and handling your personal data with transparency and integrity.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any portion of this policy, please discontinue your use of our services immediately.

This Privacy Policy applies to all users located in the United States and is designed to comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant U.S. federal and state regulations.

1. Who We Are

Costa Vida is a food service business operating through our digital platform located at costavida-meal.top. We provide customers with access to food ordering, menu information, delivery coordination, and related services.

For any questions, concerns, or requests regarding this Privacy Policy or your personal information, you may contact us using the details provided above or by referring to the Contact Us section at the end of this policy.

2. Information We Collect

We collect various categories of personal information depending on how you interact with our website and services. The categories below outline the types of data we may collect from you.

2.1 Personal Identification Information

When you create an account, place a food order, sign up for our newsletter, participate in a promotion, or contact our customer service team, we may collect the following personal identifiers:

• Full name
• Email address
• Phone number
• Billing address and delivery address
• Username and password (for registered accounts)
• Date of birth (where required for age verification)
• Profile photos or avatars (if voluntarily uploaded)

2.2 Payment and Financial Information

When you make a purchase through our platform, we collect payment-related information necessary to process your transaction. This may include:

• Credit or debit card details (processed through secure third-party payment gateways)
• Billing address associated with your payment method
• Transaction history and order details
• Refund and dispute records

2.3 Order and Transaction Data

We collect information related to the food orders you place, including:

• Items ordered and order history
• Special dietary requests or preferences
• Delivery instructions
• Order timestamps and delivery confirmations
• Customer service communications related to your orders

2.4 Usage and Behavioral Data

When you visit our website, we automatically collect certain technical and behavioral data about your interaction with our platform:

• Pages visited and time spent on each page
• Links clicked and features accessed
• Search queries entered on our website
• Referring URLs (how you arrived at our website)
• Navigation paths through our website
• Bounce rates and session duration

2.5 Device and Technical Information

We collect technical information about the devices and systems you use to access our website:

• IP address
• Browser type and version
• Operating system and platform
• Device type (desktop, mobile, tablet)
• Screen resolution
• Time zone settings
• Language preferences
• Cookie identifiers and session tokens

2.6 Location Data

With your permission, we may collect precise or approximate geolocation data from your device to facilitate delivery services, show nearby menu options, or improve the accuracy of order fulfillment. You can disable location sharing through your device settings at any time.

2.7 Communications and Feedback

If you contact us by email, phone, or through any contact forms on our website, we collect and retain the content of those communications, including:

• Your name and contact information
• The subject matter of your inquiry
• Any feedback, reviews, or ratings you submit
• Records of communications for quality and training purposes

2.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you connect your account or log in via social media)
• Marketing partners and advertising networks
• Analytics providers
• Delivery and logistics partners
• Fraud prevention and identity verification services

3. How We Use Your Information

Costa Vida uses the personal information we collect for a variety of legitimate business purposes. We will only use your information as described below or in ways consistent with the context in which it was collected.

3.1 Service Provision and Order Fulfillment

• Processing and confirming your food orders
• Coordinating delivery or pickup services
• Communicating order status updates and confirmations
• Managing your account and preferences
• Processing payments and issuing refunds
• Responding to customer service inquiries

3.2 Business Operations and Improvement

• Improving the functionality and user experience of our website
• Conducting internal research and data analysis
• Monitoring website performance and identifying technical issues
• Developing new menu items, features, and services
• Training our staff and improving service quality

3.3 Marketing and Promotional Communications

• Sending promotional emails, newsletters, and special offers (with your consent or as permitted by law)
• Personalizing marketing messages based on your preferences and order history
• Running loyalty programs and customer reward initiatives
• Displaying targeted advertising on our website and third-party platforms
• Conducting surveys and customer satisfaction research

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

3.4 Legal Compliance and Safety

• Complying with applicable laws, regulations, and legal obligations
• Detecting, preventing, and investigating fraud, security breaches, or illegal activity
• Enforcing our Terms of Service and other agreements
• Responding to lawful requests from law enforcement or government authorities
• Protecting the rights, property, and safety of Costa Vida, our customers, and the public

3.5 Analytics and Performance Measurement

• Analyzing website traffic patterns and user behavior
• Measuring the effectiveness of our marketing campaigns
• Generating aggregated and anonymized statistical reports
• Understanding customer demographics and preferences

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and support our marketing activities.

4.1 Types of Cookies We Use

• Essential Cookies: Necessary for the basic functionality of our website, including shopping cart functionality, login sessions, and security features.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting aggregated data about page views, traffic sources, and user behavior (e.g., Google Analytics).
• Marketing and Advertising Cookies: Used to track your activity across websites and deliver targeted advertisements relevant to your interests.
• Preference Cookies: Remember your settings and preferences, such as language choice and delivery address, to improve your experience on return visits.

4.2 Managing Your Cookie Preferences

You can manage and control cookie settings through your browser settings or our cookie consent tool (where available). Please note that disabling certain cookies may affect the functionality of our website. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy available on our website.

Under the California Consumer Privacy Act (CCPA/CPRA), California residents have the right to opt out of the sale or sharing of their personal information, which may include certain uses of advertising cookies. For more information, see Section 8 of this policy.

5. Sharing Your Information with Third Parties

Costa Vida does not sell your personal information to third parties for their own independent marketing purposes, except as may be permitted under applicable law. However, we may share your information with trusted third parties in the following circumstances:

5.1 Service Providers and Business Partners

We work with third-party vendors and service providers who perform functions on our behalf, including:

• Payment processing companies (e.g., Stripe, PayPal, Square)
• Delivery and logistics services
• Cloud hosting and data storage providers
• Email marketing platforms
• Customer support tools and helpdesk software
• Website analytics providers (e.g., Google Analytics)
• Fraud detection and security services
• Advertising and retargeting networks

These service providers are contractually obligated to use your personal information only as necessary to provide the services to us and to maintain appropriate security standards.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Enforce our Terms of Service or other legal agreements
• Protect and defend our legal rights and property
• Prevent or investigate potential wrongdoing in connection with our services
• Protect the personal safety of users of our services or the public

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our website prior to any such transfer and inform you of any changes to this Privacy Policy.

5.4 Aggregated or Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes.

6. Data Security

The security of your personal information is a top priority for Costa Vida. We implement a comprehensive set of technical, administrative, and physical security measures designed to protect your data against unauthorized access, disclosure, alteration, or destruction.

6.1 Security Measures We Employ

• Encryption: We use SSL/TLS encryption to secure data transmitted between your browser and our servers.
• Secure Payment Processing: All payment transactions are processed through PCI-DSS compliant payment processors.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions, governed by role-based access controls.
• Data Minimization: We collect only the personal information necessary for the purposes described in this policy.
• Regular Security Audits: We conduct periodic security assessments and vulnerability scans to identify and address potential risks.
• Employee Training: Our staff receive regular training on data protection best practices and security protocols.
• Incident Response: We maintain a data breach response plan to quickly identify, contain, and report security incidents as required by law.

6.2 Limitations

Despite our best efforts, no method of data transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

When your personal information is no longer required, we will securely delete or anonymize it in accordance with our data retention procedures and applicable law.

8. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. Costa Vida respects these rights and provides mechanisms for you to exercise them.

8.1 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which it is used, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request the deletion of personal information we have collected about you, subject to certain exceptions (e.g., where retention is required to complete a transaction, comply with a legal obligation, or for other permitted purposes).
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information with third parties for cross-context behavioral advertising. To exercise this right, please contact us at [email protected] or use the "Do Not Sell or Share My Personal Information" link on our website.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit how we use and disclose your sensitive personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality as a result of your exercising these rights.
• Right to Data Portability: You have the right to receive your personal information in a portable, readily usable format.

8.2 General Rights for All U.S. Users

Regardless of your state of residence, we provide the following options to all users:

• Access and Review: You may request access to the personal information we hold about you by contacting us at [email protected].
• Correction: You may update or correct inaccurate information in your account profile at any time by logging in or by contacting us.
• Deletion: You may request the deletion of your account and associated personal data, subject to legal retention requirements.
• Opt-Out of Marketing: You may opt out of receiving marketing communications at any time using the unsubscribe link in emails or by contacting us directly.
• Cookie Management: You may manage your cookie preferences through your browser settings or our cookie consent tool.

8.3 How to Submit a Privacy Request

To exercise any of the rights described above, please submit a verifiable consumer request by:

• Emailing us at: [email protected]

We will respond to your request within 45 days of receipt. In some cases, we may extend this period by an additional 45 days when reasonably necessary, and we will notify you of such an extension. We may need to verify your identity before processing your request to protect the security of your information.

You may designate an authorized agent to submit requests on your behalf. To do so, the authorized agent must provide written proof of authorization, and we may require you to verify your identity directly.

9. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13 in violation of the Children's Online Privacy Protection Act (COPPA), or from individuals under the age of 18 without appropriate consent.

If you are under 18 years of age, please do not use our website or submit any personal information to us. If we become aware that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete such information from our records.

If you believe that we may have collected personal information from a child under 13, please contact us immediately at [email protected].

10. International Data Transfers

Costa Vida is based in the United States, and your personal information is primarily processed and stored on servers located within the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our website and services, you consent to the transfer of your personal information to the United States. We take appropriate steps to ensure that any international transfers of personal data are conducted in compliance with applicable laws and that adequate protections are in place to safeguard your information.

If you have questions about international data transfers or the safeguards we use, please contact us at [email protected].

11. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to websites. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our website does not currently respond to DNT signals. However, you can control tracking through your browser settings and through our cookie consent mechanisms as described in Section 4 of this policy.

California residents may also exercise their rights under the California "Shine the Light" law (Cal. Civ. Code § 1798.83) to request information regarding the disclosure of personal information to third parties for those third parties' direct marketing purposes. To make such a request, please contact us at [email protected].

12. Third-Party Websites and Links

Our website may contain links to third-party websites, services, or social media platforms that are not owned or controlled by Costa Vida. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of third-party websites and encourage you to review the privacy policies of any third-party sites you visit.

Third-party integrations on our website may include, but are not limited to:

• Social media sharing buttons (e.g., Facebook, Instagram, Twitter/X)
• Google Maps or location services
• Third-party payment processors
• Review platforms and customer feedback tools

13. Sensitive Personal Information

In certain limited circumstances, we may collect sensitive personal information, such as:

• Precise geolocation data (with your permission, for delivery purposes)
• Dietary restrictions or food allergies (when voluntarily provided for order customization)
• Financial information (limited to what is necessary for payment processing)

We use sensitive personal information only for the purposes for which it was collected or as otherwise permitted by applicable law. Under the CPRA, California residents have the right to limit the use and disclosure of sensitive personal information. To exercise this right, please contact us at [email protected].

14. How to File a Complaint

If you believe that Costa Vida has not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to first contact us directly so we can address your concerns.

To file a complaint with us, please contact:

• Email: [email protected]

We will acknowledge your complaint within 10 business days and work to resolve your concern within 45 days.

14.1 Complaints to Regulatory Authorities

If you are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority:

• Federal Trade Commission (FTC): The FTC enforces consumer protection laws, including unfair or deceptive privacy practices. You may file a complaint at www.ftc.gov/complaint or call 1-877-FTC-HELP (1-877-382-4357).
• California Residents: You may file a complaint with the California Privacy Protection Agency (CPPA) at www.cppa.ca.gov or with the California Attorney General's Office at www.oag.ca.gov.
• Other States: Residents of other states may contact their respective state Attorney General's office for guidance on filing privacy-related complaints.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy on our website at costavida-meal.top
• Send an email notification to registered users where required by law or where we deem appropriate

Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

16. Legal Basis for Processing (FTC Act Compliance)

Under the Federal Trade Commission Act (FTC Act), we are prohibited from engaging in unfair or deceptive acts or practices in commerce. Our data collection and processing activities are conducted in accordance with this standard. We process your personal information based on the following grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (e.g., processing your food orders and delivering services).
• Legitimate Business Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, improving our services, and marketing, provided those interests are not overridden by your privacy rights.
• Legal Obligation: Processing is necessary to comply with applicable laws, regulations, and legal processes.
• Consent: Where required by law, we will obtain your explicit consent before processing your personal information for specific purposes (e.g., marketing communications, certain uses of cookies).

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please do not hesitate to contact us using the information below. We are committed to resolving any privacy-related inquiries in a timely and transparent manner.

When contacting us regarding a privacy request, please include your full name, email address, and a clear description of your request or concern to help us process your inquiry efficiently. We will respond to your inquiry within the timeframes required by applicable law and no later than 45 days from receipt of your request.