Privacy Policy

This Privacy Policy describes how Papa Ginos ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website at papaginosfood.click, place food orders, use our digital services, or otherwise interact with us. Please read this policy carefully. By accessing or using our website or services, you acknowledge that you have read, understood, and agree to the practices described herein.

We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy has been prepared in accordance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act governing unfair or deceptive acts and practices in commerce.

1. Who We Are

Papa Ginos is a food service business operating through the website papaginosfood.click. We provide online food ordering, delivery, and catering services to customers across the United States.

For all privacy-related inquiries, questions, requests, or complaints, please contact us using the information provided in Section 15 of this Privacy Policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information we collect through:

• Our website located at papaginosfood.click
• Online food ordering and delivery platforms connected to our services
• Email communications, customer service interactions, and support tickets
• Promotional campaigns, contests, sweepstakes, or surveys
• Social media pages and channels operated by Papa Ginos
• Any other digital or physical touchpoints where personal information is collected

This policy does not apply to third-party websites, applications, or services that may be linked to or from our website. We encourage you to review the privacy policies of those third parties independently.

3. Information We Collect

We collect various types of information in connection with your use of our services. The categories of personal information we collect include:

3.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and delivery address
• Username and password (encrypted)
• Date of birth (where provided for age verification or loyalty programs)

3.2 Order and Transaction Information

To process your food orders and manage your account, we collect:

• Order history and food preferences
• Payment information (credit/debit card details processed via secure third-party payment processors — we do not store full card numbers)
• Delivery instructions and special requests
• Tip amounts and promotional codes used
• Receipts, invoices, and transaction records

3.3 Usage and Technical Data

When you interact with our website, we automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type, version, and language settings
• Operating system and device type
• Pages visited, time spent on pages, and navigation paths
• Referring URLs and exit pages
• Date and time of access
• Clickstream data and user interactions

3.4 Device Information

When you access our services via a mobile device or app-connected interface, we may collect:

• Device identifiers (device ID, advertising ID)
• Mobile carrier information
• Push notification tokens (if you opt in)
• Location data (if you grant permission for delivery purposes)

3.5 Cookie and Tracking Data

We use cookies, pixel tags, web beacons, and similar tracking technologies to collect information about your browsing behavior. Please refer to Section 9 of this policy for detailed information about our use of cookies.

3.6 Communications and Customer Support Data

When you contact us via email, phone, or web form, we collect:

• The content of your messages and inquiries
• Your contact details as provided in the communication
• Records of our responses and resolutions

3.7 Marketing and Preference Data

With your consent, we may collect information about your marketing preferences, including:

• Email subscription status
• Communication preferences (SMS, email, push notifications)
• Survey responses and feedback
• Participation in promotional events or loyalty programs

3.8 Information from Third Parties

We may receive personal information about you from third parties, such as:

• Social media platforms (if you connect your account or interact with our social media content)
• Third-party food delivery platforms or aggregators
• Analytics providers and advertising partners
• Payment processors for fraud detection purposes

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Managing your customer account and profile
• Facilitating payment processing and issuing receipts
• Coordinating delivery services and providing order tracking
• Responding to your customer service inquiries and resolving disputes

4.2 Business Operations and Improvement

• Analyzing website usage and performance to improve our services
• Conducting internal research and development
• Monitoring and ensuring the security of our systems
• Detecting and preventing fraud, unauthorized access, and abuse
• Training and quality assurance for customer service

4.3 Marketing and Communications

• Sending you promotional emails, special offers, and newsletters (with your consent)
• Delivering personalized food recommendations and targeted advertisements
• Notifying you about new menu items, seasonal promotions, and events
• Conducting surveys and collecting feedback to improve our menu and services

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send, by contacting us at [email protected], or by updating your communication preferences in your account settings.

4.4 Legal Compliance and Protection

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from law enforcement or government authorities
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Papa Ginos, our customers, and the public

4.5 Analytics and Performance Measurement

• Measuring the effectiveness of our marketing campaigns
• Analyzing customer behavior and preferences to improve our digital experiences
• Generating aggregated, anonymized reports for business planning purposes

5. Legal Basis for Processing

Under applicable United States privacy laws, including the CCPA/CPRA, we process your personal information on the following legal grounds:

• Contractual Necessity: Processing required to fulfill your orders and provide the services you have requested.
• Legitimate Business Interests: Processing for fraud prevention, security, analytics, and improving our services.
• Consent: Processing for marketing communications and certain cookie uses, where you have provided explicit consent.
• Legal Obligation: Processing required to comply with applicable laws, regulations, and lawful government orders.

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business. These may include:

• Payment processors (e.g., Stripe, Square, PayPal) for secure transaction handling
• Delivery and logistics partners to fulfill your food orders
• Cloud hosting and IT infrastructure providers for website operation
• Email service providers for sending transactional and marketing communications
• Analytics providers (e.g., Google Analytics) for usage analysis
• Customer support software providers for managing support tickets
• Marketing and advertising platforms for targeted digital advertising

All service providers are contractually obligated to use your information only for the purposes of providing services to us and to maintain appropriate security measures.

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required by law or in good faith belief that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request
• Protect and defend our legal rights and property
• Prevent or investigate possible wrongdoing or illegal activity
• Protect the safety of our customers, employees, or the public

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our website before your personal information becomes subject to a different privacy policy.

6.4 Aggregated and Anonymized Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other business purposes.

6.5 With Your Consent

We may share your information with other third parties with your explicit consent or at your direction.

7. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

7.1 Technical Safeguards

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Encrypted storage of sensitive data, including passwords (using industry-standard hashing)
• Firewalls, intrusion detection systems, and regular security audits
• Secure payment processing through PCI-DSS compliant payment processors
• Access controls and multi-factor authentication for internal systems

7.2 Administrative Safeguards

• Employee training on data privacy and security best practices
• Role-based access control limiting access to personal data on a need-to-know basis
• Vendor security assessments and data processing agreements
• Incident response plans for data breach notification and remediation

7.3 Limitations

While we strive to use commercially reasonable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you in accordance with applicable law.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our general retention periods are as follows:

Upon expiration of the applicable retention period, we will securely delete or anonymize your personal information in accordance with our data disposal procedures.

9. Cookies and Tracking Technologies

Our website uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience, analyze site performance, and deliver relevant advertising.

9.1 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (e.g., session management, shopping cart functionality).
• Analytical/Performance Cookies: Help us understand how visitors use our website by collecting aggregated usage data.
• Functional Cookies: Remember your preferences, such as language settings or saved addresses, for a better user experience.
• Marketing/Advertising Cookies: Used to deliver personalized advertisements and track the effectiveness of our marketing campaigns.

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete cookies already stored on your device. Please note that disabling certain cookies may affect the functionality of our website.

For more detailed information about our use of cookies and your choices, please review our Cookie Policy available on our website at papaginosfood.click.

9.3 Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals to websites. Currently, our website does not respond to DNT signals. However, you may use the cookie management tools described above to limit data collection.

10. Your Privacy Rights

Depending on your location within the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

10.1 Right to Know and Access

You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which we use it, and the third parties with whom we share it.

10.2 Right to Correction

You have the right to request that we correct inaccurate personal information we hold about you. You can also update your information directly through your account settings on our website.

10.3 Right to Deletion

You have the right to request that we delete the personal information we have collected about you, subject to certain exceptions (e.g., where we are required to retain data for legal compliance, fraud prevention, or to complete a transaction).

10.4 Right to Data Portability

Where technically feasible, you have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to request that we transmit that data to another service provider.

10.5 Right to Opt Out of Marketing

You have the right to opt out of receiving marketing communications from us at any time. You may do so by:

• Clicking the "unsubscribe" link in any marketing email
• Texting "STOP" to opt out of SMS marketing
• Contacting us directly at [email protected]

10.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you goods or services, charge you different prices, provide a different level of service quality, or suggest that you will receive a different quality of service because you exercised a privacy right.

10.7 Submitting a Privacy Rights Request

To exercise any of the rights described above, please submit a verifiable consumer request by contacting us at:

• Email: [email protected]
• Website: papaginosfood.click

We will respond to your request within 45 days of receipt. If we require additional time (up to 90 days total), we will inform you of the reason and the extension period in writing. We may need to verify your identity before processing your request.

11. California Residents – Additional Rights Under CCPA/CPRA

11.1 Categories of Personal Information Collected

Under the CCPA/CPRA, we are required to disclose the categories of personal information we collect. Over the past 12 months, we have collected the following categories:

11.2 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information. If you are a California resident and wish to exercise this right, please contact us at [email protected] with the subject line "California Opt-Out Request."

11.3 Right to Limit Use of Sensitive Personal Information

California residents have the right to limit the use and disclosure of sensitive personal information to purposes necessary for providing the services requested. Please contact us at [email protected] to exercise this right.

11.4 Authorized Agent

California residents may designate an authorized agent to submit privacy requests on their behalf. We will require written proof of the authorized agent's permission to act on your behalf, along with verification of your identity.

11.5 California Shine the Light Law

California Civil Code Section 1798.83 permits California residents to request information about personal data disclosed to third parties for direct marketing purposes. To make such a request, please contact us at [email protected].

12. Children's Privacy

Our food ordering and related services are designed for adults aged 18 and over. We do not knowingly solicit, collect, or maintain personal information from individuals under the age of 18. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected].

Upon receiving such notification, we will take prompt steps to verify the information and, if confirmed, delete the child's personal information from our systems. We comply with the Children's Online Privacy Protection Act (COPPA) and do not intentionally collect data from children under 13 years of age.

13. International Data Transfers

Papa Ginos is based in the United States and primarily processes personal information within the United States. However, some of our third-party service providers, partners, or technology vendors may be located in other countries, which means your personal information may be transferred to, stored, or processed in countries outside of the United States.

Where such international transfers occur, we take steps to ensure that your personal information receives an adequate level of protection in accordance with applicable law. These steps may include:

• Entering into data processing agreements with third parties that include standard contractual clauses or equivalent data protection safeguards
• Ensuring that recipients of your data are certified under recognized privacy frameworks or comply with equivalent standards
• Conducting data transfer impact assessments where required

By using our services, you acknowledge and consent to the transfer of your personal information to countries outside of the United States, subject to the protections described in this policy.

14. Third-Party Links and Services

Our website may contain links to third-party websites, applications, social media platforms, and services that are not owned or controlled by Papa Ginos. This Privacy Policy does not apply to the practices of those third parties. We encourage you to review the privacy policies of any third-party sites or services that you visit or interact with.

We are not responsible for the privacy practices, content, or security of third-party websites, even if they are linked from our website. Inclusion of a link does not imply our endorsement of the linked website or its privacy practices.

15. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact us. We are committed to addressing your privacy inquiries promptly and transparently.

When contacting us about a privacy request, please include:

• Your full name and email address associated with your account
• A clear description of your request or concern
• The specific right you wish to exercise (if applicable)
• Sufficient information to allow us to verify your identity

We will acknowledge receipt of your request within 10 business days and provide a substantive response within 45 calendar days, unless an extension is required under applicable law.

16. Filing a Complaint with a Data Protection Authority

If you believe that we have not handled your personal information in accordance with applicable law, you have the right to file a complaint with the relevant regulatory authority.

16.1 Federal Trade Commission (FTC)

For concerns related to unfair or deceptive data practices under the FTC Act, you may file a complaint with the Federal Trade Commission:

• Website: www.ftc.gov/complaint
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

16.2 California Residents – California Privacy Protection Agency (CPPA)

California residents may file complaints regarding CCPA/CPRA violations with the California Privacy Protection Agency:

• Website: cppa.ca.gov
• Email: [email protected]

16.3 State Attorneys General

Residents of other states with applicable privacy laws may contact their state's Attorney General office for assistance with privacy complaints. We encourage you to first contact us directly to resolve any concerns before filing a formal complaint with a regulatory authority.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post a prominent notice on our website homepage
• Send an email notification to registered users (where required by law)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated policy.

If we make changes that materially affect your privacy rights, we will provide at least 30 days' advance notice before the changes take effect, where practicable.

18. Miscellaneous

18.1 Severability

If any provision of this Privacy Policy is found to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect to the maximum extent permitted by applicable law.

18.2 Governing Law

This Privacy Policy and any disputes arising out of or related to it shall be governed by the laws of the United States and the applicable state in which you reside, without regard to conflict of law principles.

18.3 Entire Agreement

This Privacy Policy, together with our Terms of Service and Cookie Policy, constitutes the entire agreement between Papa Ginos and you regarding the collection, use, and protection of your personal information.