Privacy Policy

This Privacy Policy describes how Marcos ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at marcosgrill.click, place orders, interact with our digital platforms, or otherwise engage with our food services. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act).

Please read this Privacy Policy carefully. By using our website or services, you acknowledge that you have read, understood, and agree to the practices described herein. If you do not agree with this policy, please discontinue use of our website and services immediately.

1. About Us

Marcos is a food service business operating in the United States. We are dedicated to providing high-quality food products and dining experiences to our customers. For all privacy-related matters, you may contact us using the information provided below:

2. Information We Collect

We collect several categories of personal information depending on how you interact with our website and services. The types of data we gather include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, make a reservation, sign up for our newsletter, or contact us directly, we may collect:

• Full name
• Email address
• Phone number
• Mailing or delivery address
• Date of birth (where applicable for age verification)
• Username and password (for account registration)
• Dietary preferences or restrictions (if voluntarily provided)

2.2 Payment and Transaction Information

When you make a purchase through our platform, we collect information necessary to process your transaction, including:

• Credit or debit card information (processed securely through third-party payment processors)
• Billing address
• Order history and transaction records
• Refund and dispute information

We do not store full payment card numbers on our servers. All payment data is handled through PCI-DSS compliant third-party payment processors.

2.3 Usage and Behavioral Data

We automatically collect certain information when you visit or interact with our website, including:

• Pages visited and content viewed
• Time and duration of your visit
• Links clicked and navigation paths
• Search queries made on our site
• Items added to cart and purchasing behavior
• Referral sources (how you arrived at our website)

2.4 Device and Technical Information

Our website and servers automatically collect certain technical information from your device, such as:

• IP address
• Browser type and version
• Operating system and device type
• Screen resolution
• Language settings
• Time zone
• Unique device identifiers
• Mobile network information (where applicable)

2.5 Location Data

With your permission, we may collect precise geolocation data to facilitate delivery services or to recommend nearby offerings. You may disable location sharing through your browser or device settings at any time.

2.6 Communications Data

When you contact us by email, phone, or through our online contact forms, we may retain:

• The content of your messages or inquiries
• Your contact information provided during communication
• Records of previous correspondence

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience and gather analytical data. For a detailed explanation of how we use cookies and your choices regarding them, please refer to Section 8 of this Privacy Policy.

2.8 User-Generated Content

If you submit reviews, ratings, comments, photos, or other content through our website or associated social media channels, we may collect and store that content along with the account information associated with it.

3. How We Use Your Information

We use the personal information we collect for a range of legitimate business purposes, always in accordance with applicable law. These purposes include:

3.1 Providing and Managing Our Services

• Processing and fulfilling food orders, deliveries, and reservations
• Creating and managing your account
• Sending order confirmations, receipts, and status updates
• Responding to customer service inquiries and support requests
• Processing payments and handling refunds or disputes

3.2 Improving Our Services

• Analyzing usage patterns to enhance website functionality
• Conducting research and development to improve our menu, offerings, and user experience
• Monitoring technical performance and resolving bugs or errors
• Gathering feedback to evaluate customer satisfaction

3.3 Marketing and Promotional Communications

• Sending promotional emails, special offers, and newsletters with your consent
• Personalizing your experience based on preferences and order history
• Serving targeted advertisements on third-party platforms (with appropriate opt-out options)
• Conducting loyalty and rewards programs
• Notifying you about new menu items, seasonal promotions, and events

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send or by contacting us at [email protected].

3.4 Legal and Compliance Purposes

• Complying with applicable federal and state laws and regulations
• Enforcing our Terms of Service and other agreements
• Preventing fraud, unauthorized access, and other illegal activities
• Responding to lawful requests from government authorities or courts
• Protecting the rights, safety, and property of Marcos, our customers, and the public

3.5 Analytics and Business Intelligence

• Understanding customer demographics and preferences
• Evaluating the performance of marketing campaigns
• Generating internal reports and business analytics
• Making data-driven decisions about our menu and operations

4. Sharing Your Information with Third Parties

We respect your privacy and do not sell your personal information to third parties. However, we may share your data in certain limited circumstances as described below:

4.1 Service Providers and Vendors

We engage trusted third-party companies and individuals to perform services on our behalf. These service providers may have access to your personal information only to the extent necessary to perform their functions and are contractually obligated to protect your data. Examples include:

• Payment processors and financial institutions
• Delivery and logistics partners
• Email marketing platforms
• Website hosting and cloud infrastructure providers
• Analytics and data intelligence tools (e.g., Google Analytics)
• Customer support and CRM software providers
• Advertising and remarketing platforms

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we are required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to:

• Comply with applicable laws or government requests
• Protect the legal rights or property of Marcos
• Prevent or investigate potential fraud or illegal activity
• Ensure the personal safety of our customers, employees, or the public

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your personal information with additional third parties when you have given us explicit consent to do so, such as when participating in co-branded promotions or partnerships.

4.5 Aggregated or De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with partners, advertisers, or for research purposes, without restriction.

5. Data Security Measures

Protecting your personal information is a top priority for us. We implement a variety of technical, administrative, and physical safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include:

5.1 Technical Safeguards

• Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption for all data transmitted between your browser and our servers
• Encrypted storage of sensitive data, including passwords (hashed and salted)
• Firewalls and intrusion detection systems
• Regular vulnerability assessments and penetration testing
• Two-factor authentication for administrative access
• PCI-DSS compliant payment processing infrastructure

5.2 Administrative Safeguards

• Access control policies limiting employee access to personal data on a need-to-know basis
• Regular staff training on data privacy and security best practices
• Data processing agreements with all third-party service providers
• Internal policies for managing and responding to data breaches

5.3 Physical Safeguards

• Secure data center facilities with restricted physical access
• Locked workstations and clean desk policies
• Secure disposal of physical records containing personal information

6. Your Privacy Rights

Depending on your location within the United States, you may have specific rights regarding your personal information. We are committed to honoring these rights in compliance with applicable law.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

6.2 Rights for All U.S. Customers

Regardless of your state of residence, we honor the following general privacy rights for all our customers:

• Right to Access: Request access to the personal information we hold about you.
• Right to Correction: Request that we correct inaccurate or incomplete data.
• Right to Deletion: Request that we delete your personal data where we have no lawful basis to retain it.
• Right to Opt-Out of Marketing: Unsubscribe from promotional communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request by:

• Emailing us at: [email protected]

We will acknowledge your request within 10 business days and respond substantively within 45 calendar days. If we require additional time, we will notify you of the reason and the extension period (up to an additional 45 days, as permitted by law).

We may need to verify your identity before processing your request. This may involve asking you to confirm information we already have on file. We will not process your request if we cannot verify your identity to a reasonable degree of certainty.

You may authorize an agent to submit a request on your behalf. The authorized agent must provide written permission signed by you, and we may require you to verify your identity directly with us.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention guidelines are as follows:

When personal information is no longer required, we will securely delete or anonymize it in accordance with our data retention and disposal procedures.

8. Cookie Policy Overview

Our website uses cookies and similar tracking technologies to improve your experience, analyze site traffic, and deliver personalized content and advertisements. This section provides a brief overview of our cookie practices.

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device and remember information about your visit, such as your preferences or login status.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly. These cannot be disabled without affecting core functionality, such as shopping cart and checkout processes.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data (e.g., Google Analytics).
• Functional Cookies: Remember your preferences, such as language settings or saved items, to enhance your experience.
• Marketing and Targeting Cookies: Track your browsing behavior to deliver relevant advertisements and measure the effectiveness of our marketing campaigns.
• Social Media Cookies: Set by social media platforms (e.g., Facebook, Instagram) when you interact with embedded social media features on our site.

8.3 Managing Your Cookie Preferences

You may control and manage cookie settings through your browser settings or by using our cookie consent tool available on our website. Please note that disabling certain cookies may affect the functionality of our website and your ability to use certain features.

For more detailed information about the specific cookies we use, their duration, and your choices, please refer to our full Cookie Policy available on our website.

9. Children's Privacy

Our website and services are intended for individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, in compliance with the Children's Online Privacy Protection Act (COPPA), or from individuals under 16 years of age without verifiable parental consent, in compliance with the CPRA.

If you are under 18 years of age, please do not use our website or submit any personal information through our platform. If you are a parent or legal guardian and believe your child has provided us with personal information without your consent, please contact us immediately at [email protected] and we will take prompt action to remove that information from our records.

If we become aware that we have inadvertently collected personal information from a child under the age of 13, we will delete such information as quickly as possible. We will also take appropriate steps to prevent such collection from occurring in the future.

10. International Data Transfers

Marcos is based in the United States, and our primary data processing activities occur within the United States. However, some of our third-party service providers may be located in or operate from other countries, which may result in your personal information being transferred to and processed in countries outside of the United States.

When we transfer personal data internationally, we take appropriate steps to ensure that such transfers comply with applicable law and that your personal information receives an adequate level of protection. These steps may include:

• Entering into data transfer agreements with our third-party service providers that include standard contractual clauses or other appropriate safeguards
• Ensuring that recipient countries provide an adequate level of data protection
• Implementing technical and organizational measures to secure transferred data

By using our website and services, you acknowledge and consent to the transfer of your personal information to the United States and to other countries as described in this section, understanding that data protection laws in such countries may differ from those in your home jurisdiction.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services, including social media platforms, delivery partners, and payment processors. This Privacy Policy applies solely to information collected by Marcos through our own website and services. We are not responsible for the privacy practices or content of any third-party websites or services.

We encourage you to review the privacy policies of any third-party websites or services you visit or use. The inclusion of a link to a third-party site on our website does not constitute an endorsement of that site's privacy practices or content.

12. California-Specific Disclosures

The following disclosures apply specifically to California residents in accordance with the CCPA and CPRA:

12.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email address, IP address, account credentials)
• Customer records (contact details, payment information, order history)
• Commercial information (products purchased, purchasing history)
• Internet and network activity (browsing history, search queries on our site)
• Geolocation data (with your permission)
• Inferences drawn from personal information (preferences, characteristics, behavior)

12.2 Business or Commercial Purposes for Collection

We collect the categories of personal information listed above for the business purposes described in Section 3 of this Privacy Policy.

12.3 Do Not Sell or Share My Personal Information

We do not sell your personal information for monetary consideration. However, to the extent that sharing data with advertising partners for cross-context behavioral advertising constitutes a "sale" or "share" under the CPRA, you have the right to opt out. To exercise this right, please contact us at [email protected].

12.4 Shine the Light Law

Under California Civil Code Section 1798.83 (the "Shine the Light" law), California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us at [email protected].

13. Federal Trade Commission (FTC) Compliance

We operate in compliance with the Federal Trade Commission Act and FTC guidelines regarding unfair or deceptive practices. Our data collection and use practices are designed to be transparent and to accurately reflect what we represent to consumers. If we make material changes to our data practices, we will notify you through our website or by email, as required by the FTC's standards.

We are committed to providing consumers with clear notice and meaningful choice regarding the collection and use of their personal data, consistent with FTC principles of notice, choice, access, security, and enforcement.

14. How to File a Complaint

If you have concerns about how we handle your personal information, we encourage you to contact us directly first so we have the opportunity to address your concerns.

14.1 Contact Us

To raise a privacy-related complaint or concern, please contact our privacy team at:

• Email: [email protected]
• Website: marcosgrill.click

We will acknowledge your complaint within 5 business days and endeavor to provide a substantive response within 30 days.

14.2 Regulatory Complaints

If you are not satisfied with our response or believe we are processing your personal information in violation of applicable law, you have the right to file a complaint with the relevant regulatory authority:

• Federal Trade Commission (FTC): You may file a complaint with the FTC at reportfraud.ftc.gov or by calling 1-877-FTC-HELP (1-877-382-4357).
• California Privacy Protection Agency (CPPA): California residents may file a complaint with the California Privacy Protection Agency at cppa.ca.gov.
• Your State Attorney General: Many states have consumer protection offices that handle privacy-related complaints. You may contact your state's Attorney General office for guidance.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time in response to changes in our business practices, applicable law, or for any other reason. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post the updated Privacy Policy on our website at marcosgrill.click
• Where required by law or where changes are significant, notify you by email or through a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services following the posting of any changes constitutes your acceptance of those changes. If you do not agree with the updated Privacy Policy, please discontinue use of our website and contact us to request deletion of your personal information.

16. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please do not hesitate to contact our privacy team. We are committed to addressing all privacy-related inquiries promptly and transparently.