Privacy Policy

This Privacy Policy describes how Marcos ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at marcos-eat.click, place orders, interact with our services, or otherwise engage with us. We are committed to protecting your privacy and handling your data in a transparent, lawful, and responsible manner.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of our website and services immediately.

This Privacy Policy is governed by the laws of the United States, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable federal and state privacy laws.

1. About Us

Marcos is a food service business operating in the United States. We are dedicated to providing high-quality food products and services to our customers. For all privacy-related matters, you may contact us using the information below:

2. Information We Collect

We collect various types of information in connection with the services we provide. This information is collected in different ways depending on how you interact with us.

2.1 Personal Information You Provide Directly

When you use our services, create an account, place an order, or communicate with us, you may voluntarily provide us with the following categories of personal information:

• Identity Information: Your full name, username, and profile information.
• Contact Information: Email address, phone number, and mailing or delivery address.
• Account Credentials: Username and password created when you register for an account.
• Order and Transaction Information: Details about the food items you order, order history, purchase amounts, special instructions, and delivery preferences.
• Payment Information: Billing address, credit/debit card details, and other payment information. Please note that full payment card numbers are processed by our PCI-DSS compliant third-party payment processors and are not stored directly on our servers.
• Communications: Information you include in messages, feedback forms, customer service inquiries, or reviews you submit to us.
• Dietary Preferences and Allergies: If you voluntarily provide information about dietary restrictions, allergies, or food preferences to personalize your experience.
• Marketing Preferences: Your preferences for receiving promotional communications from us.

2.2 Information Collected Automatically

When you access or use our website, we automatically collect certain technical and usage information, including:

• Device Information: Device type, operating system, browser type and version, unique device identifiers, and mobile network information.
• Log Data: IP address, browser type, pages visited, time and date of visits, time spent on pages, referring URLs, and other diagnostic data.
• Usage Data: Information about how you interact with our website, including the features you use, links you click, items you view, and actions you take.
• Location Data: General geographic location derived from your IP address. If you grant permission, we may also collect precise geolocation data to facilitate delivery services.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixels, and similar tracking technologies. Please see our Cookie Usage section below for more details.

2.3 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media account to our services or interact with us on social platforms, we may receive certain profile information.
• Payment Processors: Confirmation and transaction status information from our payment partners.
• Delivery Partners: Delivery status and logistics information from third-party delivery service providers.
• Analytics Providers: Aggregated and anonymized data from analytics services to help us understand how users engage with our website.
• Publicly Available Sources: We may combine information you provide with publicly available information to enhance our understanding of our customers.

3. How We Use Your Information

We use the personal information we collect for legitimate business purposes, including the following:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders and transactions.
• Coordinating delivery or pickup of your orders.
• Sending order confirmations, receipts, and status updates.
• Managing your account and providing customer support.
• Personalizing your experience based on your order history and preferences.

3.2 Communication

• Responding to your questions, comments, and customer service requests.
• Sending you important notices about changes to our services, policies, or terms.
• Communicating with you about your orders, deliveries, and related matters.

3.3 Marketing and Promotions

• Sending you promotional emails, offers, and newsletters about our menu items, special deals, and new services — but only where you have given consent or where permitted by applicable law.
• Conducting targeted advertising campaigns on social media platforms and other digital channels.
• Notifying you about loyalty rewards, discounts, and special promotions.
• You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us directly at [email protected].

3.4 Analytics and Improvement

• Analyzing usage patterns and trends to improve our website, menu offerings, and overall customer experience.
• Conducting research and surveys to better understand customer preferences.
• Monitoring and troubleshooting technical issues on our website.
• Measuring the effectiveness of our marketing campaigns and promotions.

3.5 Legal and Safety Purposes

• Complying with applicable laws, regulations, legal processes, and government requests.
• Enforcing our Terms of Service and other agreements.
• Detecting, investigating, and preventing fraudulent transactions and other illegal activities.
• Protecting the rights, property, and safety of Marcos, our customers, and the public.

4. Legal Basis for Processing

Depending on applicable law, our legal bases for processing your personal information include:

• Performance of a Contract: Processing necessary to fulfill your orders and provide our services.
• Legitimate Interests: Processing for our legitimate business interests, such as improving services, fraud prevention, and direct marketing to existing customers, provided your interests and rights do not override those interests.
• Consent: Where you have given explicit consent, such as for receiving marketing communications or the use of non-essential cookies.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations.

5. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own independent marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers

We engage trusted third-party companies and individuals to perform services on our behalf, such as:

• Payment processing and fraud prevention
• Food delivery and logistics partners
• Cloud hosting and IT infrastructure providers
• Email and SMS communication platforms
• Customer relationship management (CRM) tools
• Website analytics and performance monitoring services
• Marketing and advertising partners

These service providers are granted access to your personal information only as necessary to perform their functions and are contractually obligated to maintain the confidentiality and security of your information. They may not use your data for their own independent purposes.

5.2 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website if such a transfer occurs and your information is subject to a different privacy policy.

5.3 Legal Requirements

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request.
• Enforce our Terms of Service or other agreements.
• Protect and defend the rights or property of Marcos.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of users of our services or the public.

5.4 Aggregated and Anonymized Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for business, research, or marketing purposes. This type of data sharing does not constitute a disclosure of personal information.

6. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly, enabling core features like shopping cart functionality and account authentication.
• Performance and Analytics Cookies: These collect information about how visitors use our website, helping us improve performance and user experience (e.g., Google Analytics).
• Functional Cookies: These remember your preferences, such as language settings and login details, to provide a more personalized experience.
• Marketing and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.

6.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Most web browsers allow you to refuse cookies or to indicate when a cookie is being sent. However, disabling certain cookies may affect the functionality of our website and services. You may also use opt-out tools provided by analytics and advertising networks, such as the Google Analytics Opt-Out Browser Add-on.

For more detailed information about the specific cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

7. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your information from unauthorized access, use, alteration, or disclosure.

7.1 Security Measures

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Secure Payment Processing: All payment transactions are processed through PCI-DSS compliant payment processors. We do not store complete credit card numbers on our systems.
• Access Controls: We restrict access to personal information to employees, contractors, and service providers who need it to perform their job functions, and they are subject to confidentiality obligations.
• Regular Security Assessments: We conduct periodic security audits and vulnerability assessments to identify and address potential risks.
• Password Protection: User account passwords are stored using industry-standard hashing algorithms.
• Data Minimization: We only collect and retain personal information that is necessary for the purposes outlined in this policy.

7.2 Data Breach Response

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with applicable law and within required timeframes. We will provide details about the nature of the breach, the likely consequences, and the measures we are taking to address it.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data disposal procedures. If deletion is not immediately possible due to technical constraints, we will isolate the data from further processing until deletion is feasible.

9. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We are committed to honoring these rights in compliance with applicable United States privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

9.1 Rights Available to All Users

• Right to Know / Access: You have the right to request information about the personal data we hold about you, including the categories of data collected, the purposes of processing, and the third parties with whom it is shared.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You may request that we delete your personal information, subject to certain exceptions required by law (e.g., completing transactions, legal obligations).
• Right to Data Portability: You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Opt Out of Marketing: You can opt out of receiving marketing communications at any time by using the unsubscribe link in emails or by contacting us directly.

9.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the CCPA/CPRA:

• Right to Know About Selling or Sharing: You have the right to know whether we sell or share your personal information and to opt out of such sale or sharing. We do not sell your personal information as defined under the CCPA/CPRA.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to uses necessary to provide the services you request.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level or quality of service as a result of exercising your privacy rights.
• Authorized Agent: You may designate an authorized agent to make requests on your behalf. We may require verification of the agent's authority before processing such requests.

9.3 How to Exercise Your Rights

To exercise any of the rights described above, please contact us using the following methods:

• Email: [email protected]
• Website: marcos-eat.click

We will acknowledge your request within 10 business days and respond within 45 days of receipt. If we require additional time, we will notify you of the extension and the reason for the delay. We may need to verify your identity before processing your request to protect the security of your personal information.

10. Children's Privacy

Marcos does not direct its services to minors, and our website is not designed to attract children under the age of 18. We do not knowingly collect personal information from anyone under the age of 18. In compliance with the Children's Online Privacy Protection Act (COPPA), if we discover that we have inadvertently collected personal information from a child under 13 years of age, we will take immediate steps to delete that information from our systems.

If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will work promptly to investigate and, where applicable, delete the relevant information.

By using our website and services, you represent and warrant that you are at least 18 years of age. If you are under 18, you must not use or access our services.

11. International Data Transfers

Marcos is based in the United States, and your personal information is primarily processed and stored on servers located within the United States. However, in the course of providing our services, your personal information may be transferred to, accessed from, or processed in other countries by our service providers and partners.

When we transfer personal information internationally, we take appropriate steps to ensure that such transfers comply with applicable law and that your information remains protected to standards consistent with this Privacy Policy. These safeguards may include:

• Standard contractual clauses or data processing agreements with international service providers.
• Ensuring that recipient countries provide an adequate level of data protection.
• Implementing appropriate technical and organizational security measures.

By using our services, you acknowledge and consent to the transfer of your personal information to the United States and potentially to other countries where our service providers operate, which may have different data protection laws than those in your country of residence.

12. Do Not Track Signals

Some web browsers and devices allow users to broadcast a "Do Not Track" (DNT) signal to websites and online services. At this time, our website does not respond to DNT signals because there is no established industry standard for how such signals should be interpreted. We continue to monitor developments in this area and may update our approach if standards emerge.

You may, however, manage your privacy preferences through our cookie consent tools and by adjusting your browser settings as described in the Cookie Usage section of this policy.

13. Third-Party Websites and Links

Our website may contain links to third-party websites, services, or applications that are not operated by Marcos. These links are provided for your convenience and information only. We have no control over the content or privacy practices of those third-party sites and are not responsible for their privacy policies or data handling practices.

When you click on a link to a third-party website, you will be subject to that website's own terms and privacy policy. We strongly encourage you to review the privacy policies of any third-party websites you visit before providing any personal information. The inclusion of any link does not imply our endorsement of the linked site or its operators.

14. How to File a Privacy Complaint

If you have concerns about how we handle your personal information, we encourage you to contact us first so we can try to resolve the matter directly.

14.1 Contact Us Directly

Please send your privacy concerns or complaints to:

• Email: [email protected]
• Website: marcos-eat.click

We will investigate your complaint and respond within a reasonable timeframe, typically within 30 days.

14.2 Filing a Complaint with Regulatory Authorities

If you are not satisfied with our response or believe we are processing your personal information in violation of applicable law, you have the right to file a complaint with the relevant regulatory authorities:

• Federal Trade Commission (FTC):
  The FTC enforces consumer protection laws and investigates deceptive or unfair business practices, including violations of privacy commitments.
  Website: www.ftc.gov
  Phone: 1-877-382-4357
• California Attorney General (for California Residents):
  California residents may also submit complaints regarding CCPA/CPRA violations to the California Privacy Protection Agency (CPPA) or the California Attorney General's office.
  California Privacy Protection Agency: cppa.ca.gov
  California Attorney General: oag.ca.gov/privacy
• Your State Attorney General:
  Residents of other states may also contact their respective state attorney general's office for guidance on privacy rights and complaints.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Post the revised policy on our website at marcos-eat.click.
• Where required by law or where we consider appropriate, send you an email notification about the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes, you should discontinue using our services and may request deletion of your personal information as described above.

16. Accessibility of This Policy

We are committed to making this Privacy Policy accessible to all users. If you require this Privacy Policy in an alternative format or have difficulty understanding any part of it, please contact us at [email protected] and we will do our best to accommodate your needs.

17. Contact Information

For any questions, concerns, or requests related to this Privacy Policy or our data practices, please do not hesitate to reach out to us:

We are committed to working with you to resolve any privacy concerns promptly and fairly. Our team will respond to all privacy-related inquiries within a reasonable timeframe.