Privacy Policy

This Privacy Policy describes how Costa Vida ("we," "us," "our," or "the Company") collects, uses, discloses, and safeguards your personal information when you visit our website at costsvida.click, place orders, use our services, or otherwise interact with us. Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Costa Vida is committed to protecting your privacy and handling your personal information with transparency, integrity, and respect. We comply with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act governing unfair or deceptive practices in commerce.

If you do not agree with the terms of this Privacy Policy, please discontinue your use of our website and services immediately. If you have questions, please contact us at the information provided at the end of this document.

1. About Costa Vida

Costa Vida is a food service business operating in the United States. We are dedicated to providing our customers with fresh, high-quality food and an exceptional dining experience. Our website, costsvida.click, serves as our primary online platform for information, ordering, and customer engagement.

For all privacy-related inquiries, you may contact us using the following details:

2. Information We Collect

We collect various types of information in connection with your use of our website, services, and interactions with Costa Vida. The categories of personal information we may collect include the following:

2.1 Personal Information You Provide Directly

When you voluntarily interact with our website or services, you may provide us with the following types of personal information:

• Contact Information: Your full name, email address, mailing address, phone number, and other contact details.
• Account Information: Username, password, and profile details when you create an account on our platform.
• Order Information: Details related to food orders placed through our website, including items ordered, quantity, special instructions, delivery address, and billing information.
• Payment Information: Credit card numbers, debit card numbers, billing address, and other payment-related data. Please note that payment information is processed through secure, third-party payment processors and we do not store full payment card details on our servers.
• Communications: Messages, feedback, reviews, complaints, or other correspondence you send to us via email, contact forms, or other communication channels.
• Marketing Preferences: Your preferences regarding receiving promotional materials, newsletters, and marketing communications from us.
• Survey Responses: Information you provide when participating in surveys, contests, or promotional activities.

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical and usage data, including:

• Device Information: Information about the device you use to access our website, including device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Log Data: Your IP address, access times and dates, pages visited, referring URLs, links clicked, and other browsing activity on our website.
• Usage Data: Information about how you interact with our website, including the features you use, the time spent on pages, and navigation patterns.
• Location Data: General geographic location information derived from your IP address. With your explicit consent, we may also collect more precise location data through your device.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies (see Section 8 for more details).

2.3 Information From Third Parties

We may also receive information about you from third parties, including:

• Social Media Platforms: If you connect your social media account to our website or interact with our social media pages, we may receive information from those platforms, such as your name, profile photo, and public profile details.
• Business Partners and Service Providers: We may receive information from partners, delivery platforms, payment processors, and other service providers who help us deliver our services.
• Analytics Providers: Data enrichment and analytics companies that help us understand how our website is used and improve our services.
• Publicly Available Sources: We may collect information that is publicly available online or in government records.

2.4 Sensitive Personal Information

In some cases, we may collect sensitive personal information, such as payment card details or information related to dietary restrictions and allergies that you voluntarily provide. We handle sensitive personal information with heightened protection measures and use it only for the purposes for which it was collected.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Providing and Improving Our Services

• To process and fulfill your food orders and delivery requests.
• To create and manage your account on our website.
• To communicate with you about your orders, reservations, and service inquiries.
• To provide customer support and respond to your questions, complaints, and feedback.
• To personalize your experience on our website and tailor our content and offerings to your preferences.
• To improve the functionality, features, and user experience of our website and services.
• To develop new products, services, and menu offerings based on customer feedback and preferences.

3.2 Analytics and Research

• To analyze website traffic, usage patterns, and user behavior to understand how our services are being used.
• To conduct internal research and business analysis to improve our operations.
• To generate aggregate, anonymized statistics about our user base and service usage.
• To measure the effectiveness of our marketing campaigns and promotional activities.

3.3 Marketing and Communications

• To send you promotional emails, newsletters, special offers, and other marketing communications, where you have opted in or where we have a legitimate interest to do so.
• To inform you about new menu items, seasonal promotions, events, and other updates related to Costa Vida.
• To serve you targeted advertisements on our website and on third-party platforms, based on your browsing history and preferences.
• To conduct loyalty programs and reward you for your continued patronage.

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any email we send you, or by contacting us at [email protected]. Note that even if you opt out of marketing communications, we may still send you transactional and service-related messages.

3.4 Legal Compliance and Safety

• To comply with applicable laws, regulations, legal processes, and governmental requests.
• To enforce our Terms of Service and other applicable agreements and policies.
• To detect, investigate, prevent, and address fraud, security incidents, and other potentially prohibited or illegal activities.
• To protect the rights, property, and safety of Costa Vida, our customers, employees, and the public.

3.5 Business Operations

• To manage our business relationships and operations.
• To process payments and manage billing.
• To conduct audits and quality assurance reviews.
• To maintain records as required by law or for our legitimate business purposes.

4. Sharing Your Personal Information

We do not sell your personal information to third parties. However, we may share your information with certain third parties in the following circumstances:

4.1 Service Providers

We work with trusted third-party service providers who assist us in operating our website, processing payments, delivering orders, sending communications, and performing other business functions. These providers are contractually obligated to use your information only as instructed by us and in accordance with this Privacy Policy. Categories of service providers include:

• Payment processors and financial institutions
• Cloud hosting and data storage providers
• Email and marketing communication platforms
• Analytics and data analysis companies
• Delivery and logistics partners
• Customer support software providers
• Cybersecurity and fraud prevention services

4.2 Business Transfers

If Costa Vida is involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information in accordance with applicable law.

4.3 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request.
• Enforce our Terms of Service or other agreements.
• Protect the rights, property, or safety of Costa Vida, our users, or the public.
• Detect, prevent, or address fraud, security breaches, or other illegal activities.

4.4 With Your Consent

We may share your personal information with third parties when you have given us your explicit consent to do so.

4.5 Aggregate and De-Identified Information

We may share aggregate or de-identified information that cannot reasonably be used to identify you with third parties for marketing, advertising, research, or other purposes.

5. Data Security

Costa Vida takes the security of your personal information seriously and has implemented a range of technical, administrative, and physical safeguards to protect your data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: We use industry-standard Secure Socket Layer (SSL) and Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website.
• Access Controls: Access to personal information is restricted to authorized employees, contractors, and service providers who need it to perform their job functions. All personnel with access to personal data are bound by confidentiality obligations.
• Secure Storage: Personal information is stored on secure servers with appropriate physical and technical protections, including firewalls and intrusion detection systems.
• Payment Security: We use PCI DSS-compliant payment processors to handle payment card information securely. We do not store full payment card numbers on our servers.
• Regular Security Assessments: We conduct regular security audits and vulnerability assessments to identify and address potential security risks.
• Incident Response: We have established procedures for detecting, reporting, and responding to data security incidents. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

6. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. Costa Vida respects and honors these rights as described below.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

6.2 General Privacy Rights for All U.S. Users

Regardless of your state of residence, we provide all users with the following rights and controls:

• Access: You may request access to the personal information we hold about you.
• Correction: You may request that we correct or update inaccurate or incomplete personal information.
• Deletion: You may request that we delete your personal information, subject to applicable legal requirements and legitimate business needs.
• Opt-Out of Marketing: You may opt out of receiving marketing communications at any time.
• Withdraw Consent: Where we process your personal information based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a request to us using the following methods:

• Email: [email protected]

We will respond to your request within 45 days, or within the timeframe required by applicable law. In some cases, we may need to verify your identity before processing your request. We may request additional information to verify your identity and may deny requests that we cannot verify or that are manifestly unfounded or excessive.

You may designate an authorized agent to submit a privacy rights request on your behalf. Authorized agents must provide written authorization or a power of attorney, and we may require you to verify your identity directly with us before processing the request.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The retention periods vary depending on the type of information and the purpose for which it is used:

• Account Information: We retain your account information for as long as your account is active. If you close your account, we will retain certain information for up to 3 years to comply with legal obligations and resolve disputes.
• Order and Transaction Records: We retain records of your food orders and transactions for a minimum of 7 years to comply with tax, accounting, and financial reporting requirements.
• Marketing Information: We retain your marketing preferences and communication history until you opt out. Upon opting out, we maintain a record of your opt-out preference to ensure compliance.
• Usage and Analytics Data: We retain anonymized usage and analytics data for up to 2 years for business analysis and improvement purposes.
• Customer Support Records: We retain customer support communications for up to 3 years to improve service quality and resolve disputes.
• Legal and Compliance Records: We retain records required for legal compliance for the period prescribed by applicable law, which may be up to 7 years or longer.

When personal information is no longer needed, we will securely delete, destroy, or anonymize it in accordance with our data retention and disposal procedures.

8. Cookies and Tracking Technologies

Our website uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising.

8.1 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the proper functioning of our website and cannot be disabled. They enable core features such as page navigation, security, and order processing.
• Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information about website traffic and usage patterns. We use tools such as Google Analytics for this purpose.
• Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences, language settings, and saved items.
• Marketing and Advertising Cookies: These cookies are used to deliver advertisements that are relevant to you and your interests. They may also limit the number of times you see an advertisement and help us measure the effectiveness of marketing campaigns.

8.2 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a website sets a cookie. Please note that disabling certain cookies may affect the functionality of our website. For more detailed information about our use of cookies, please refer to our full Cookie Policy available on our website.

You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance's opt-out portal at www.aboutads.info/choices or the Network Advertising Initiative's opt-out page at www.networkadvertising.org/choices.

9. Children's Privacy

Our website and services are intended for adults aged 18 and older. Costa Vida does not knowingly collect, use, or disclose personal information from individuals under the age of 18. Our services are not directed at children, and we do not knowingly market to children.

If you are a parent or legal guardian and you believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete such information from our records.

We comply with the Children's Online Privacy Protection Act (COPPA) and will not knowingly collect personal information from children under the age of 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will delete that information as quickly as possible.

10. International Data Transfers

Costa Vida is based in the United States, and the personal information we collect is primarily processed and stored in the United States. If you access our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

Data protection laws in the United States and other countries may differ from those in your country of residence. By using our website and providing us with your personal information, you consent to the transfer of your information to the United States and other countries as described in this Privacy Policy.

We take appropriate measures to ensure that any international transfers of personal information are conducted in compliance with applicable laws and with adequate protections in place for your privacy rights. These measures may include standard contractual clauses, data processing agreements, and other appropriate safeguards.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, and services that are not operated by Costa Vida. We have no control over the privacy practices of these third parties and are not responsible for their privacy policies or content. We encourage you to review the privacy policies of any third-party websites you visit.

This Privacy Policy applies only to information collected by Costa Vida through our website at costsvida.click and through our direct services. It does not apply to information collected by any third-party websites, applications, or services, even if accessed through links on our website.

12. California-Specific Disclosures

In addition to the rights described in Section 6, California residents are entitled to the following disclosures under the CCPA/CPRA:

12.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

12.2 Shine the Light Law

California Civil Code Section 1798.83 permits California residents to request certain information about the disclosure of personal information to third parties for their direct marketing purposes. If you are a California resident and would like to make such a request, please contact us at [email protected].

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no universally accepted standard for responding to DNT signals. Our website does not currently respond to DNT signals from browsers. However, you can manage your cookie and tracking preferences as described in Section 8 of this Privacy Policy.

14. How to File a Complaint

If you believe that we have violated your privacy rights or that your personal information has been mishandled, we encourage you to contact us first so that we may address your concerns:

• Email: [email protected]

We take all privacy complaints seriously and will investigate your complaint and respond within a reasonable timeframe.

14.1 Filing a Complaint with Regulatory Authorities

If you are not satisfied with our response, or if you believe we are processing your personal information in violation of applicable law, you have the right to file a complaint with the appropriate regulatory authority:

• Federal Trade Commission (FTC): The FTC enforces federal consumer protection laws, including those relating to data privacy and security. You can file a complaint with the FTC at www.ftc.gov/complaint or by calling 1-877-382-4357.
• California Privacy Protection Agency (CPPA): If you are a California resident, you may file a complaint with the California Privacy Protection Agency, which enforces the CCPA/CPRA, at cppa.ca.gov.
• State Attorney General: You may also file a complaint with the Attorney General of your state, as many state attorneys general have authority to investigate and enforce consumer privacy laws.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, applicable laws, or for other operational, legal, or regulatory reasons. When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on our website at costsvida.click with a new "Last Updated" date.
• Sending you an email notification if we have your email address and the changes are material.
• Displaying a prominent notice on our website for a reasonable period following the update.

Your continued use of our website and services after the effective date of any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. We are committed to addressing your concerns promptly and transparently.

We strive to respond to all privacy-related inquiries within 45 business days. For urgent matters or potential data breaches, please clearly indicate the nature of your concern in the subject line of your email so that we can prioritize your request accordingly.