Privacy Policy

This Privacy Policy describes how Marcos ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website at pizzamarcos.click, place an order, or otherwise interact with our food services. Please read this policy carefully. By using our website or services, you agree to the practices described herein. If you do not agree with the terms of this Privacy Policy, please discontinue use of our services immediately.

We are committed to protecting your privacy and complying with all applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant regulations. This policy is designed to be transparent, clear, and comprehensive so that you understand exactly how your data is handled at every stage of your interaction with Marcos.

1. About Us

Marcos is a food service business operating within the United States, providing customers with quality food products and related services through our website and other channels. For all privacy-related inquiries, please use the contact information provided at the end of this policy.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories below outline the types of personal information we may collect, depending on how you interact with us.

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, participate in promotions, or contact us directly, we may collect personal identification information, including but not limited to:

• Full name
• Email address
• Phone number
• Billing and shipping address (street address, city, state, ZIP code)
• Payment information (credit/debit card numbers, billing address — processed securely through third-party payment processors)
• Date of birth (when required for age verification)
• Username and password for account management
• Profile photographs or avatars (if voluntarily uploaded)

2.2 Order and Transaction Information

When you place food orders through our website, we collect information related to those transactions, including:

• Items ordered, quantities, and special instructions
• Order history and purchase records
• Payment confirmation details and transaction IDs
• Delivery preferences and special requests
• Loyalty program participation and reward redemptions

2.3 Usage and Behavioral Data

We automatically collect certain information when you visit or interact with our website. This usage data helps us understand how our platform is used and how we can improve your experience. This data includes:

• Pages visited, time spent on each page, and navigation paths
• Search queries entered on our website
• Links and buttons clicked
• Products viewed, added to cart, or purchased
• Referring URLs (the website that directed you to ours)
• Date, time, and duration of visits
• Error logs and crash reports

2.4 Device and Technical Information

We collect technical information about the device and software you use to access our website, including:

• IP address
• Browser type and version
• Operating system and version
• Device type (desktop, mobile, tablet)
• Screen resolution and language settings
• Internet service provider (ISP)
• Geolocation data (general location based on IP address; precise location only if you grant permission)
• Cookie identifiers and similar tracking technology identifiers

2.5 Communications Data

If you contact us via email, contact forms, live chat, or telephone, we collect:

• The content of your messages and communications
• Contact details you provide during correspondence
• Customer service interaction records
• Feedback, reviews, and survey responses

2.6 Information From Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms (if you connect your social media account or log in using social login features)
• Third-party food delivery platforms that integrate with our services
• Analytics providers that enrich our understanding of user behavior
• Advertising partners and marketing services
• Fraud prevention and identity verification services

3. How We Use Your Information

We use the personal information we collect for several legitimate business purposes. These purposes determine how long we retain your data and with whom we share it. Specifically, we use your information for the following purposes:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including delivery and pickup arrangements
• Managing your account registration and authentication
• Processing payments and issuing receipts
• Sending order confirmations, delivery updates, and status notifications
• Coordinating with delivery partners and kitchen operations
• Handling returns, refunds, and complaints

3.2 Customer Support and Communication

• Responding to your inquiries, complaints, and support requests
• Providing personalized customer assistance
• Sending important service-related notices and updates
• Conducting follow-up surveys to improve our services

3.3 Marketing and Promotions

• Sending promotional emails, newsletters, and special offers (with your consent or where permitted by law)
• Personalizing marketing content based on your order history and preferences
• Running loyalty programs, contests, and promotional campaigns
• Displaying targeted advertisements on our website and on third-party platforms
• Retargeting campaigns to remind you of items in your cart or recently viewed products

You may opt out of marketing communications at any time by clicking "unsubscribe" in our emails or by contacting us at [email protected].

3.4 Analytics and Service Improvement

• Analyzing website traffic and user behavior to improve site performance and usability
• Conducting internal research and development to improve our menu and services
• Monitoring and addressing technical issues, errors, and security vulnerabilities
• Testing new features, promotions, and website designs
• Generating aggregated, anonymized statistics about our user base

3.5 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities and law enforcement
• Detecting, preventing, and addressing fraud, unauthorized access, and other harmful activities
• Enforcing our Terms of Service and other agreements
• Protecting the rights, safety, and property of Marcos, our users, and the public

4. Cookies and Tracking Technologies

Our website uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience, understand how you use our services, and deliver personalized content and advertisements.

4.1 Types of Cookies We Use

4.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, please note that disabling certain cookies may affect the functionality of our website and your ability to place orders or access certain features. For more detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy, available on our website.

5. Sharing Your Information With Third Parties

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes without your explicit consent. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our business and delivering services to you. These providers are authorized to use your personal information only as necessary to provide services on our behalf and are contractually obligated to maintain appropriate security measures. Service providers include:

• Payment processors — for secure payment processing (e.g., Stripe, PayPal, Square)
• Delivery partners — for food delivery logistics and coordination
• Email marketing platforms — for sending promotional and transactional communications
• Analytics providers — for understanding website usage (e.g., Google Analytics)
• Cloud hosting providers — for storing data and hosting our website infrastructure
• Customer support tools — for managing inquiries and support tickets
• Fraud prevention services — for detecting and preventing fraudulent transactions

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal processes, including:

• Compliance with applicable federal, state, or local laws and regulations
• Response to a court order, subpoena, or other lawful government request
• Cooperation with law enforcement investigations
• Protection of the rights, property, and safety of Marcos, our users, employees, or the public
• Enforcement of our legal rights or defense against legal claims

5.3 Business Transfers

In the event that Marcos undergoes a merger, acquisition, asset sale, reorganization, bankruptcy, or other business transaction, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you via email and/or a prominent notice on our website before your personal information is transferred or becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes. This data does not constitute "personal information" under applicable privacy laws.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols.
• Secure Payment Processing: We do not store full credit card numbers on our servers. Payment data is processed by PCI-DSS compliant third-party payment processors.
• Access Controls: Access to personal data is restricted to authorized employees and service providers who need it to perform their job functions. All access is governed by role-based permissions.
• Password Hashing: User account passwords are stored using industry-standard cryptographic hashing algorithms and are never stored in plain text.
• Regular Security Audits: We conduct regular security assessments and vulnerability scans of our systems and infrastructure.
• Data Minimization: We only collect and retain personal data that is necessary for the purposes described in this policy.
• Employee Training: Our employees receive regular training on data protection best practices and their obligations under applicable privacy laws.
• Incident Response: We maintain a formal data breach incident response plan and will notify affected users and relevant authorities in the event of a qualifying security breach, as required by applicable law.

7. Your Privacy Rights

Depending on your state of residence within the United States, you may have specific privacy rights regarding your personal information. We respect and honor these rights as required by applicable law.

7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain legal exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information to third parties. We do not sell personal information for monetary compensation; however, some data sharing with advertising partners may constitute "sharing" under CPRA. You may exercise this right by contacting us.
• Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information (such as precise geolocation data), you may have the right to limit our use of such information to specific purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. You will not receive inferior service or be denied any benefits as a result of exercising your rights under the CCPA/CPRA.

7.2 General Privacy Rights (All U.S. Users)

Regardless of your state of residence, we extend the following rights to all of our users to the extent practicable:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct or update inaccurate or incomplete personal information.
• Right to Deletion: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Withdraw Consent: Where our processing of your data is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking "unsubscribe" in our emails or contacting us directly.

7.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us by:

• Email: [email protected]
• Website: pizzamarcos.click

We will respond to your request within 45 days of receipt. If additional time is required, we will notify you and may extend the response period by an additional 45 days, as permitted by applicable law. We may need to verify your identity before processing your request to ensure the security of your personal information.

You may designate an authorized agent to submit a request on your behalf, provided that you supply written authorization and we can verify your identity as the data subject.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data destruction procedures.

9. Children's Privacy

We do not knowingly collect, solicit, or process personal information from children under the age of 13, in compliance with the Children's Online Privacy Protection Act (COPPA). We do not knowingly allow individuals under the age of 18 to register for accounts or place orders through our website without verifiable parental consent.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take prompt steps to delete that information from our systems. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

By using our services, you represent and warrant that you are at least 18 years of age, or that you are a parent or guardian who has provided consent for a minor between the ages of 13 and 17 to use our services under your supervision.

10. International Data Transfers

Marcos is based in the United States, and our primary data processing activities take place within the United States. If you are accessing our services from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy when transferred internationally. These safeguards may include:

• Using service providers that are contractually required to protect personal data to standards equivalent to those in the United States
• Implementing standard contractual clauses or other legally recognized transfer mechanisms
• Ensuring third-party service providers maintain adequate data protection certifications

By submitting your personal information to us and using our services, you consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy.

11. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, delivery applications, and other external services that are not operated by us. When you click on these links and visit those websites, you leave our website and are subject to the privacy policies of those third parties. We are not responsible for the privacy practices or content of any third-party websites or services. We encourage you to review the privacy policies of every website you visit. The inclusion of any third-party link does not constitute an endorsement or recommendation by Marcos.

12. Social Media and Third-Party Login

We may offer you the ability to log in to your account using social media platforms such as Facebook, Google, or Apple. If you choose to use this feature, we will receive certain profile information from your social media provider as permitted by your social media account settings. This information may include your name, email address, profile picture, and other details you have made public on that platform.

We will use such information only in accordance with this Privacy Policy. We recommend reviewing your privacy settings on any social media platform you connect to our services to control what information is shared with us.

13. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Our website currently does not respond to DNT signals because there is no universally accepted standard for how websites should respond to such signals. However, you can manage your tracking preferences through our cookie settings and by using the opt-out mechanisms described in this policy.

14. Your Choices and Opt-Out Options

We respect your right to make choices about how your personal information is used. In addition to the privacy rights described above, you have the following options:

• Marketing Emails: You can unsubscribe from our marketing emails at any time by clicking the "Unsubscribe" link in any marketing email or by contacting us at [email protected]. Please note that even if you opt out of marketing communications, we may still send you transactional or service-related emails (such as order confirmations).
• Cookies: You can manage your cookie preferences through your browser settings or through our cookie preference center on our website.
• Push Notifications: If you have enabled push notifications on your device, you can disable them at any time through your device settings.
• Account Closure: You may request that we close your account at any time. Upon closure, we will delete or anonymize your personal information in accordance with our data retention policy and applicable legal obligations.
• Advertising Opt-Out: You may opt out of interest-based advertising by visiting the Network Advertising Initiative (NAI) opt-out page at optout.networkadvertising.org or the Digital Advertising Alliance (DAA) opt-out page at optout.aboutads.info.

15. Filing Complaints With Regulatory Authorities

If you believe that we have not adequately addressed your privacy concerns or have violated applicable privacy laws, you have the right to file a complaint with the relevant data protection or consumer protection authority.

15.1 Federal Trade Commission (FTC)

The FTC is the primary federal agency responsible for consumer protection and enforcing privacy-related laws in the United States. You can file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, D.C. 20580

15.2 California Attorney General (California Residents)

If you are a California resident and believe your rights under the CCPA/CPRA have been violated, you may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy/ccpa

15.3 State Attorneys General

Residents of other states with applicable consumer privacy laws may file complaints with their respective state attorneys general. We encourage you to research the consumer protection laws applicable in your state of residence.

Before filing a complaint with any regulatory authority, we encourage you to contact us directly at [email protected] so that we can attempt to resolve your concern promptly and fairly.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a notice on our website homepage or send you an email notification (if we have your email address on file)
• In cases of significant changes, obtain your renewed consent where required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the effective date of any updated policy constitutes your acceptance of the revised terms.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact our Privacy Team using the information below. We are committed to addressing your inquiries in a timely and thorough manner.

We will make every effort to respond to all privacy-related inquiries within 30 business days. For requests exercising specific privacy rights (such as data access or deletion requests), we will respond within the timeframes required by applicable law, typically within 45 days.