Privacy Policy

This Privacy Policy describes how Costa Vida ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at cost-vida.top, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

By accessing or using our website, submitting an order, creating an account, or otherwise interacting with Costa Vida, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with this policy, please discontinue use of our website and services immediately.

We are committed to protecting your privacy in compliance with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection statutes. We recognize that privacy is a fundamental right and we take our obligations seriously.

1. Who We Are

Costa Vida is a food service business operating in the United States. We provide fresh, flavorful food offerings to our customers through our website and affiliated locations. For all privacy-related matters, you may contact us using the details below:

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we collect are described below.

2.1 Personal Information You Provide Directly

When you interact with our website, create an account, place an order, subscribe to our newsletter, participate in a promotion, or contact us, you may provide us with personal information, including:

• Identity Information: Your full name, username, or similar identifiers.
• Contact Information: Email address, telephone number, billing address, delivery address, and postal code.
• Account Credentials: Username and password when you register for an account on our website.
• Payment Information: Credit card numbers, debit card numbers, billing details, and other financial information necessary to process transactions. Note that payment card data is processed by secure third-party payment processors; we do not store full card numbers on our servers.
• Order Information: Your food preferences, dietary restrictions, special requests, and order history.
• Communications Data: Any messages, feedback, complaints, or correspondence you submit to us through contact forms, email, or other communication channels.
• Promotional Information: Information you provide when entering contests, promotions, surveys, or loyalty programs.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information about your device and browsing activity, including:

• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, search queries entered on our site, and other interaction data.
• Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, language preferences, and unique device identifiers.
• Log Data: Server logs that record requests made to our website, error reports, and performance data.
• Location Data: General geographic location inferred from your IP address, and, if you grant permission, more precise location data from your device's GPS or location services to help you find nearby Costa Vida locations.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies. Please refer to Section 8 of this policy for detailed information about our use of cookies.

2.3 Information from Third Parties

We may also receive personal information about you from third-party sources, including:

• Social Media Platforms: If you choose to connect your social media account or log in through a social media platform (such as Facebook, Google, or Instagram), we may receive profile information such as your name, email address, and profile picture as permitted by that platform's privacy settings.
• Analytics Providers: Third-party analytics services that help us understand how our website is used.
• Marketing Partners: Business partners who may share contact and interest data with us for marketing purposes, subject to their own privacy policies and your consent where required.
• Payment Processors: Limited transaction confirmation details from our payment processing partners.
• Delivery Partners: Delivery service providers who may share order status and delivery confirmation information with us.

2.4 Aggregated and De-Identified Data

We may collect, use, and share aggregated or de-identified data that cannot reasonably be used to identify you. For example, we may compile statistics about food ordering trends or website traffic. This data is not subject to the restrictions in this Privacy Policy, as it is not personal information.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes, as described below. We only process your personal data when we have a lawful basis for doing so under applicable law.

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, including coordinating with delivery partners or notifying you of in-store pickup readiness.
• To create and manage your customer account.
• To process payments and issue receipts or invoices.
• To communicate with you about your orders, including order confirmations, status updates, and delivery notifications.
• To handle returns, refunds, or complaints related to your orders.

3.2 Customer Support

• To respond to your inquiries, requests, and complaints.
• To troubleshoot technical issues you encounter on our website.
• To provide you with information about our menu, services, and promotions when you request it.

3.3 Marketing and Communications

• To send you promotional emails, newsletters, special offers, and information about new menu items, if you have opted in to receive such communications.
• To personalize your experience on our website and show you content, offers, and recommendations that are relevant to your preferences and order history.
• To administer contests, promotions, surveys, and loyalty programs.
• To serve targeted advertisements on our website or on third-party platforms, based on your browsing behavior and interests, where permitted by law.

3.4 Analytics and Website Improvement

• To analyze how visitors use our website and identify popular features, pages, and content.
• To monitor website performance, detect errors, and improve the functionality and user experience of our website.
• To understand customer preferences and trends in order to improve our menu offerings and services.
• To conduct research and development for new products and services.

3.5 Legal and Compliance Purposes

• To comply with applicable federal, state, and local laws and regulations, including food safety, consumer protection, and tax obligations.
• To enforce our Terms of Service and other legal agreements.
• To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities.
• To protect the rights, property, and safety of Costa Vida, our customers, and the public.
• To respond to lawful requests from government authorities, courts, and law enforcement agencies.

3.6 Business Operations

• To manage our business operations, including accounting, auditing, and record-keeping.
• To evaluate or conduct mergers, acquisitions, or other corporate transactions.
• To train our staff and improve our internal processes.

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own marketing purposes. However, we do share your personal information with certain categories of third parties as described in this section.

4.1 Service Providers

We engage trusted third-party companies and individuals to perform services on our behalf, including:

• Payment Processors: To securely process credit card and debit card transactions.
• Delivery Partners: To fulfill food delivery orders to your specified address.
• Cloud Hosting Providers: To host our website and store data securely.
• Email Marketing Platforms: To send promotional emails and newsletters on our behalf.
• Analytics Providers: Such as Google Analytics, to help us understand website traffic and user behavior.
• Customer Support Tools: Software platforms that enable us to manage customer inquiries and support tickets.
• Advertising Networks: To display targeted advertisements on our behalf.

All service providers are contractually required to use your personal information only for the purpose of providing services to us, to keep your data confidential, and to implement appropriate security measures.

4.2 Business Partners

We may share limited personal information with business partners, such as food delivery aggregators or loyalty program partners, where necessary to provide a service you have requested or to fulfill an order. These partners are subject to their own privacy policies, and we encourage you to review them.

4.3 Legal Requirements

We may disclose your personal information when required to do so by law or in good-faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request.
• Enforce our Terms of Service or other legal agreements.
• Protect and defend the rights or property of Costa Vida.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of our customers, employees, or the public.
• Protect against legal liability.

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any change in ownership or material changes to how your personal information is used, as well as any choices you may have regarding your information.

4.5 With Your Consent

We may share your personal information with other third parties when you have given us your explicit consent to do so.

5. Data Security

We take the security of your personal information very seriously. We implement a combination of technical, administrative, and physical safeguards designed to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction.

5.1 Security Measures

Our security measures include, but are not limited to:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website. Payment data is encrypted during transmission and processing.
• Access Controls: Access to personal data is restricted to authorized employees, contractors, and service providers who have a legitimate need to access such data to perform their job functions.
• Password Protection: User accounts are protected by passwords, which are stored in hashed form. We encourage you to use strong, unique passwords.
• Regular Security Audits: We conduct periodic reviews and assessments of our security practices and systems.
• Data Minimization: We collect only the personal information that is necessary for the purposes described in this policy.
• Vendor Security: We require our service providers to maintain appropriate security standards to protect your personal data.

5.2 Data Breach Response

In the event of a data breach that affects your personal information, we will notify you as required by applicable law, including applicable state data breach notification laws. We will take prompt action to investigate and mitigate any security incidents.

5.3 Limitation of Liability

Despite our best efforts, no method of data transmission or storage is 100% secure. We cannot guarantee the absolute security of your personal information. You provide your personal information to us at your own risk. If you believe your account has been compromised, please contact us immediately at [email protected].

6. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, or as required or permitted by applicable law.

After the applicable retention period expires, we will securely delete or anonymize your personal information. In some cases, we may retain certain information in a de-identified or aggregated form that cannot be linked back to you.

7. Your Privacy Rights

Depending on your state of residence in the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights as required by applicable law.

7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a resident of California, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources from which we collected it, our business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (such as information needed to complete a transaction or comply with legal obligations).
• Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. You may exercise this right by contacting us or using the "Do Not Sell or Share My Personal Information" link on our website.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to certain permitted purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. We will not deny you goods or services, charge you different prices, provide a different quality of service, or suggest that you will receive a different quality of service because you exercised your rights.

7.2 General Privacy Rights for All U.S. Residents

Regardless of your state of residence, we provide all users with the ability to:

• Access Your Information: Request a copy of the personal information we hold about you.
• Correct Your Information: Update or correct inaccurate personal information by logging into your account or contacting us.
• Delete Your Account: Request the deletion of your account and associated personal information, subject to certain legal exceptions.
• Opt Out of Marketing: Unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in our emails or contacting us at [email protected].
• Data Portability: Request a copy of your personal data in a structured, commonly used, and machine-readable format.

7.3 How to Submit a Privacy Rights Request

To exercise any of the privacy rights described in this section, please contact us by:

• Email: [email protected] (with the subject line "Privacy Rights Request")

We will respond to your request within 45 days of receipt. If we need additional time (up to 90 days), we will inform you of the extension and the reason within the initial 45-day period. We may need to verify your identity before processing your request to protect your personal information from unauthorized access. Verification may include confirming your email address, account details, or other identifying information.

You may also designate an authorized agent to submit requests on your behalf. We will require written proof of authorization before processing requests from authorized agents.

8. Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on our website, analyze how our website is used, and deliver targeted advertisements.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the operation of our website and cannot be disabled. They include cookies that enable you to log into your account, add items to your cart, and complete the checkout process.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often and whether users receive error messages. This helps us improve how our website works.
• Functionality Cookies: These cookies allow our website to remember choices you make (such as your preferred language or location) and provide enhanced, more personalized features.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements that are relevant to you and your interests. They may also be used to limit the number of times you see an advertisement and to measure the effectiveness of advertising campaigns.

8.2 Managing Your Cookie Preferences

Most web browsers allow you to control cookies through their settings preferences. You can set your browser to refuse cookies, delete cookies that have already been set, or be notified when cookies are being placed on your device. Please note that disabling certain cookies may affect the functionality of our website.

You may also opt out of interest-based advertising by visiting the Network Advertising Initiative (NAI) opt-out page at www.networkadvertising.org/choices/ or the Digital Advertising Alliance (DAA) opt-out page at www.aboutads.info/choices/.

For more detailed information about the specific cookies we use and how to manage them, please refer to our full Cookie Policy, which is available on our website.

9. Children's Privacy

Our website and services are intended for users who are 18 years of age or older. We do not knowingly collect, solicit, or maintain personal information from children under the age of 13, and we do not target our services at children. Our practices are consistent with the requirements of the Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take steps to delete any such information from our records as quickly as possible.

If we discover that we have inadvertently collected personal information from a child under 13, we will promptly delete that information and, where required, notify the relevant authorities.

10. International Data Transfers

Costa Vida is a United States-based business and our servers and operations are primarily located in the United States. If you access our website or use our services from outside the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

The data protection laws in the United States and other countries may differ from those in your home country. By using our website and services, you consent to the transfer of your personal information to the United States and other countries as described in this Privacy Policy.

Where we transfer personal data internationally, we take appropriate safeguards to ensure that your personal information receives an adequate level of protection, including through the use of contractual protections and ensuring that our service providers adhere to appropriate data protection standards.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, and services that are not operated or controlled by Costa Vida. This Privacy Policy does not apply to those third-party websites or services. We encourage you to review the privacy policies of any third-party websites or services you visit.

We are not responsible for the content, privacy practices, or data handling of third-party websites or services, even if they are linked to or from our website. The inclusion of a link to a third-party website does not constitute our endorsement of that website or its privacy practices.

12. Your Choices Regarding Marketing Communications

We may send you marketing communications about our menu, special offers, promotions, and new services. You can opt out of receiving these communications at any time by:

• Clicking the "Unsubscribe" or "Opt Out" link at the bottom of any marketing email we send you.
• Logging into your account and updating your communication preferences.
• Contacting us directly at [email protected] and requesting to be removed from our marketing list.

Please note that even if you opt out of marketing communications, we may still send you non-promotional emails related to your account, order confirmations, and important service announcements. These transactional communications are necessary for us to provide you with the services you have requested.

13. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. At this time, our website does not respond to DNT signals because there is no industry-standard interpretation of how to respond to such signals. We will continue to monitor developments in this area and update our practices accordingly.

However, you can manage your tracking preferences through cookie settings and the opt-out mechanisms described in Section 8 of this Privacy Policy.

14. How to File a Complaint

If you have concerns about how we handle your personal information, we encourage you to contact us first so that we can address your concerns directly.

14.1 Contact Us

Please send your privacy-related complaints or concerns to:

We will acknowledge your complaint within 10 business days and aim to fully resolve it within 30 business days. If your complaint is complex or requires additional investigation, we will inform you of this and provide an expected timeframe for resolution.

14.2 Complaint with the Federal Trade Commission (FTC)

If you are a United States resident and believe that we have violated applicable consumer protection or privacy laws, you have the right to file a complaint with the Federal Trade Commission (FTC), which is the primary federal agency responsible for enforcing consumer privacy laws in the United States:

14.3 Complaint with the California Attorney General (California Residents)

If you are a California resident and believe your rights under the CCPA/CPRA have been violated, you may also file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

14.4 State Attorney General Offices (Other States)

Residents of other states may also file privacy-related complaints with their respective state Attorney General offices. Many states have enacted comprehensive consumer privacy legislation, and we are committed to complying with all applicable state privacy laws.

15. Applicable Law and Compliance

This Privacy Policy is governed by and construed in accordance with the laws of the United States. Our data practices are designed to comply with applicable federal and state privacy and consumer protection laws, including:

• The Federal Trade Commission Act (FTC Act), 15 U.S.C. § 45 – Prohibits unfair or deceptive acts or practices in or affecting commerce, including deceptive privacy practices.
• The California Consumer Privacy Act (CCPA), Cal. Civ. Code § 1798.100 et seq., as amended by the California Privacy Rights Act (CPRA) – Provides California residents with significant rights regarding their personal information.
• The Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq. – Governs the collection of personal information from children under 13.
• The CAN-SPAM Act, 15 U.S.C. § 7701 et seq. – Governs the sending of commercial email messages.
• Other applicable state consumer privacy laws, including but not limited to laws in Virginia, Colorado, Connecticut, Texas, and other jurisdictions where such laws may apply to our operations.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on our website at cost-vida.top with a new "Last Updated" date.
• Send you an email notification if you have an account with us or have subscribed to our communications.
• Display a prominent notice on our website for a reasonable period after the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us:

We are committed to working with you to resolve any concerns about your privacy and the handling of your personal information. We aim to respond to all privacy-related inquiries within 10 business days.