Privacy Policy

This Privacy Policy describes how Marcos ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website at eat-marcos.click, place orders, use our services, or otherwise interact with us. Please read this policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.

We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy complies with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act), among other applicable regulations.

1. About Us

Marcos is a food service business operating in the United States. We provide food ordering, delivery, and dining services to our customers through our website and other channels.

2. Information We Collect

We collect several types of information in connection with the services we provide. The categories of personal information we may collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, or otherwise interact with us, we may collect the following personal identification information:

• Full name
• Email address
• Phone number
• Home or delivery address
• Billing address
• Date of birth (for age verification purposes)
• Username and password for your account
• Profile photo (if you choose to provide one)

2.2 Payment and Financial Information

When you make a purchase or payment on our platform, we collect payment-related information necessary to process your transaction. This may include:

• Credit or debit card details (processed securely through third-party payment processors)
• PayPal or digital wallet identifiers
• Billing address and payment history
• Transaction amounts and order details

Please note that we do not store full payment card numbers on our servers. All payment processing is handled by PCI-DSS compliant third-party payment processors.

2.3 Order and Transaction Information

As part of providing our food services, we collect information related to your orders, including:

• Order history and details (items ordered, quantities, special requests)
• Dietary preferences and food allergies (if voluntarily provided)
• Delivery preferences and instructions
• Feedback, ratings, and reviews you submit
• Promotional codes or vouchers used

2.4 Usage Data and Technical Information

When you visit our website or use our digital services, we automatically collect certain technical and usage information, including:

• IP address
• Browser type and version
• Operating system and device type
• Pages visited and time spent on each page
• Referring URL and exit pages
• Clickstream data and navigation paths
• Search queries made on our website
• Time and date of your visits
• Crash reports and error logs

2.5 Device Information

We may collect information about the device you use to access our services, including:

• Device identifiers (such as device ID or advertising ID)
• Mobile network information
• Hardware model and specifications
• Software version information
• Geolocation data (with your consent, to facilitate delivery services)

2.6 Communication Data

If you contact us via email, phone, chat, or other communication channels, we may collect and retain records of those communications, including:

• Content of messages or inquiries
• Customer service interaction records
• Voicemail recordings (where applicable and disclosed)

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. For more detailed information, please see Section 9 (Cookie Usage) of this policy.

2.8 Information from Third Parties

We may receive personal information about you from third-party sources, such as:

• Social media platforms (if you connect your account or log in via social media)
• Third-party food delivery platforms
• Marketing and advertising partners
• Analytics providers
• Fraud prevention and identity verification services

3. How We Use Your Information

We use the personal information we collect for a variety of purposes related to operating our business and providing you with the best possible food service experience. Specifically, we use your information for the following purposes:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders and deliveries
• Managing your account and providing customer support
• Sending order confirmations, delivery updates, and receipts
• Facilitating payments and preventing fraudulent transactions
• Personalizing your experience based on your preferences and order history
• Responding to your inquiries and resolving disputes

3.2 Analytics and Service Improvement

• Analyzing usage patterns to improve our website functionality and user experience
• Understanding customer preferences to enhance our menu offerings
• Conducting internal research and development
• Monitoring and improving the performance and security of our systems
• Measuring the effectiveness of our marketing campaigns

3.3 Marketing and Promotional Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required)
• Delivering targeted advertisements based on your interests and behavior
• Notifying you of new menu items, promotions, and loyalty program benefits
• Running contests, sweepstakes, and other promotional activities

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected].

3.4 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal obligations
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of our business, customers, and third parties
• Detecting, investigating, and preventing fraud, abuse, and other illegal activities
• Responding to lawful requests from law enforcement and government authorities

4. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing purposes without your explicit consent. However, we may share your personal information with the following categories of third parties under certain circumstances:

4.1 Service Providers and Vendors

We engage trusted third-party service providers to perform various functions on our behalf. These providers are contractually obligated to use your information only to provide services to us and may not use it for their own purposes. Service providers may include:

• Payment processing companies (e.g., Stripe, PayPal, Square)
• Delivery and logistics partners
• Cloud hosting and IT infrastructure providers
• Email and communication service providers
• Customer relationship management (CRM) platforms
• Analytics and data analysis companies (e.g., Google Analytics)
• Marketing and advertising technology platforms
• Fraud detection and cybersecurity services

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request
• Enforce our Terms of Service or other applicable agreements
• Protect the safety, rights, or property of Marcos, our users, or the public
• Investigate and prevent fraud or other illegal activity

4.3 Business Transfers

In the event that Marcos undergoes a merger, acquisition, sale of assets, reorganization, or similar business transaction, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on our website if such a transaction occurs, and your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your personal information with other third parties when we have obtained your explicit consent to do so. You may withdraw your consent at any time by contacting us using the details provided in this policy.

5. Data Security Measures

We take the security of your personal information very seriously and implement a comprehensive set of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, loss, or destruction.

5.1 Technical Safeguards

• Encryption: All data transmitted between your browser and our servers is protected using Transport Layer Security (TLS) encryption. Sensitive data such as passwords is stored using industry-standard hashing algorithms.
• Secure Payment Processing: Payment card information is processed using PCI-DSS compliant payment gateways. We do not store full card numbers on our servers.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, with role-based access controls and multi-factor authentication in place.
• Firewalls and Intrusion Detection: Our systems are protected by firewalls and monitored for unauthorized access attempts.
• Regular Security Audits: We conduct periodic security assessments and vulnerability scans of our systems.

5.2 Administrative Safeguards

• Employee training on data privacy and security best practices
• Confidentiality agreements for all personnel with access to personal data
• Documented data handling procedures and incident response plans
• Vendor security assessments for third-party service providers

5.3 Limitations

Despite our best efforts, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

6. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights and providing you with meaningful control over your data.

6.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a readable format within the timeframes required by applicable law.

6.2 Right to Correction

If any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. You may also update certain information directly through your account settings.

6.3 Right to Deletion

You have the right to request that we delete your personal information, subject to certain exceptions (such as where we are required to retain data by law, or where it is necessary for legitimate business purposes such as resolving disputes or enforcing agreements).

6.4 Right to Data Portability

To the extent required by applicable law, you have the right to receive a copy of your personal information in a structured, commonly used, machine-readable format, and to request that we transmit this data to another service provider where technically feasible.

6.5 Right to Opt Out of Marketing

You have the right to opt out of receiving marketing communications from us at any time. You can exercise this right by:

• Clicking the "unsubscribe" link in any marketing email
• Adjusting your communication preferences in your account settings
• Contacting us at [email protected]

6.6 Right to Opt Out of the Sale or Sharing of Personal Information (California Residents)

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. If you are a California resident and wish to exercise this right, please contact us at [email protected].

6.7 Right to Limit Use of Sensitive Personal Information (California Residents)

California residents also have the right to limit our use and disclosure of sensitive personal information to certain permitted purposes as defined under the CPRA.

6.8 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you services, charge you different prices, or provide you with a different level of service because you exercised your rights under applicable privacy law.

6.9 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us using the following contact information:

• Email: [email protected]
• Website: eat-marcos.click

We will respond to your request within 45 days (or as otherwise required by applicable law). In certain circumstances, we may need to verify your identity before processing your request to protect the security of your account.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected and as required or permitted by applicable law. The specific retention periods we apply depend on the nature of the data and the purpose for which it is used:

When your personal information is no longer needed for the purposes for which it was collected, we will securely delete, destroy, or anonymize it in accordance with our data retention procedures.

8. Children's Privacy

Our website, services, and food ordering platform are intended exclusively for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or use personal information from individuals under the age of 18.

If you are under 18 years of age, you are not permitted to use our services, create an account, or provide us with any personal information. If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving such a request, we will take reasonable steps to promptly delete the child's personal information from our systems.

Our practices are consistent with the requirements of the Children's Online Privacy Protection Act (COPPA) and other applicable laws governing the privacy of minors online.

9. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content and advertisements.

9.1 What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They help websites recognize your device, remember your preferences, and provide a more personalized experience on subsequent visits.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the website to function properly and cannot be disabled. They enable core features such as shopping cart functionality, account login, and security.
• Performance and Analytics Cookies: These cookies collect anonymized information about how visitors use our website, such as which pages are most popular, to help us improve our services. We use tools such as Google Analytics for this purpose.
• Functional Cookies: These cookies allow the website to remember your preferences, such as your language settings and location, to provide a more personalized experience.
• Targeting and Advertising Cookies: These cookies are used to deliver relevant advertisements to you both on and off our website, based on your browsing behavior and interests.

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies; however, doing so may affect the functionality of our website and your ability to use certain features. You may also opt out of interest-based advertising by visiting industry opt-out tools such as the Digital Advertising Alliance's opt-out page at optout.aboutads.info.

For more detailed information about the specific cookies we use, their purposes, and how to manage your preferences, please refer to our full Cookie Policy, which is available on our website at eat-marcos.click.

10. International Data Transfers

Marcos is based in the United States. If you access our services from outside the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our website and services, you acknowledge that your personal information may be transferred to and processed in the United States. We will take appropriate measures to ensure that any international transfers of personal data are subject to adequate safeguards as required by applicable law, including the use of standard contractual clauses or other legally approved transfer mechanisms where applicable.

We also work with service providers and vendors who may be located outside the United States. In such cases, we take steps to ensure that these providers offer an adequate level of protection for your personal information consistent with this Privacy Policy and applicable laws.

11. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights regarding your personal information. This section supplements the general privacy rights described elsewhere in this policy.

11.1 Categories of Personal Information Collected

Over the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email, phone, IP address)
• Personal records (payment information, billing address)
• Commercial information (order history, purchasing behavior)
• Internet or electronic network activity (browsing and search history on our site)
• Geolocation data (delivery location, with consent)
• Inferences drawn from personal information (preferences, characteristics)

11.2 Your California Privacy Rights

California residents have the following rights under the CCPA/CPRA:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us and our service providers
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information
• Right to limit the use of sensitive personal information
• Right to non-discrimination for exercising these rights

To submit a verifiable consumer request under the CCPA/CPRA, please contact us at [email protected]. You may submit a request on behalf of yourself or, in certain circumstances, on behalf of a minor child. We will respond to verifiable requests within 45 calendar days, with up to two extensions of 45 days each if necessary.

11.3 Authorized Agent

California residents may designate an authorized agent to submit privacy requests on their behalf. If you wish to use an authorized agent, we may require proof of the agent's authority and may verify your identity directly before processing the request.

12. Federal Privacy Protections

In addition to state-specific laws, we comply with applicable federal privacy and consumer protection regulations, including:

• FTC Act (Federal Trade Commission Act): We adhere to the FTC's guidelines on fair information practices and unfair or deceptive trade practices. We are committed to maintaining the security of your data and being transparent about our data practices.
• CAN-SPAM Act: Our marketing emails comply with the CAN-SPAM Act requirements, including providing clear identification, a valid physical address, and an easy opt-out mechanism.
• COPPA (Children's Online Privacy Protection Act): We do not knowingly collect personal information from children under 13, and our services are intended for individuals 18 years of age and older.

13. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Marcos. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of third-party websites or services, and we encourage you to review the privacy policies of any third-party sites you visit.

Third-party service providers that we use, such as payment processors and analytics providers, operate under their own privacy policies. We recommend reviewing their policies to understand how they collect and use your information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on this page with a new "Last Updated" date
• Send you an email notification if we have your email address on file
• Display a prominent notice on our website for a reasonable period of time

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

15. How to File a Complaint

If you believe that we have violated your privacy rights or handled your personal information in a manner inconsistent with this Privacy Policy or applicable law, you have the right to file a complaint.

15.1 Contact Us First

We encourage you to contact us directly first so that we have the opportunity to address your concern:

• Email: [email protected]
• Website: eat-marcos.click

We will acknowledge receipt of your complaint within 5 business days and aim to resolve the matter within 30 days.

15.2 Regulatory Authorities

If you are not satisfied with our response, or if you prefer to go directly to a regulatory authority, you may file a complaint with:

• Federal Trade Commission (FTC): The FTC handles consumer protection complaints related to unfair or deceptive business practices. You may file a complaint at reportfraud.ftc.gov or by calling 1-877-FTC-HELP (1-877-382-4357).
• California Attorney General (for California residents): California residents may contact the California Office of the Attorney General regarding CCPA/CPRA complaints at oag.ca.gov/privacy/ccpa.
• Your State Attorney General: Residents of other states may file complaints with their respective state attorney general's office.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us using the following contact details:

We are committed to working with you to obtain a fair resolution of any privacy concern or complaint. Thank you for trusting Marcos with your personal information. We value your privacy and are dedicated to maintaining the highest standards of data protection in everything we do.