Privacy Policy

This Privacy Policy describes how Costa Vida ("we," "us," or "our") collects, uses, discloses, and protects the personal information of users ("you" or "your") who visit our website at vidacosta.click (the "Website"), use our online ordering services, participate in our loyalty programs, or otherwise interact with us in connection with our food and restaurant services. We are committed to protecting your privacy and handling your personal data in a transparent, responsible, and lawful manner.

Please read this Privacy Policy carefully before using our Website or submitting any personal information to us. By accessing or using our Website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this policy, please discontinue use of our Website and services immediately.

This Privacy Policy is governed by applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable state and federal regulations.

1. About Us

Costa Vida is a food and restaurant business operating in the United States. We operate the website located at vidacosta.click and provide food-related products and services to our customers both online and in person.

For all privacy-related inquiries, you may contact us using the following information:

2. Information We Collect

We collect various categories of personal information depending on how you interact with our Website and services. The types of information we collect are described in detail below.

2.1 Personal Identification Information

When you create an account, place an order, sign up for our loyalty program, fill out a contact form, or otherwise interact with our services, we may collect the following personal identification information:

• Full name (first and last name)
• Email address
• Phone number
• Mailing or delivery address (including street address, city, state, ZIP code)
• Date of birth (for age verification and personalized offers)
• Username and password for account access
• Profile photo (if voluntarily submitted)
• Gender (if voluntarily provided)

2.2 Payment and Financial Information

When you place an order or complete a purchase through our Website, we collect payment-related information necessary to process your transaction. This may include:

• Credit or debit card number (last four digits only stored on our systems)
• Billing address
• Payment method type (e.g., Visa, Mastercard, American Express)
• Transaction history and purchase records

Full payment card details are processed through PCI-DSS-compliant third-party payment processors. We do not store your complete card numbers on our servers.

2.3 Order and Transaction Information

When you place a food order through our Website, we collect information about your order, including:

• Items ordered, including food preferences and customizations
• Order date and time
• Delivery or pickup location
• Order total and applied discounts or promotional codes
• Order history and frequency of purchases
• Special dietary requests or allergy information you voluntarily provide

2.4 Usage Data and Website Activity

We automatically collect certain information about how you interact with our Website. This usage data may include:

• Internet Protocol (IP) address
• Browser type and version
• Operating system and device type
• Pages visited, time spent on each page, and click patterns
• Referring URLs (the website from which you arrived)
• Search queries entered on our Website
• Date and time of your visit
• Links clicked within the Website
• Features and menus accessed

2.5 Device Information

We may collect information about the device you use to access our Website, including:

• Device identifier (Device ID)
• Mobile device model and manufacturer
• Mobile network provider
• Screen resolution and display settings
• Installed application version (if applicable)
• Language settings

2.6 Location Information

With your permission, we may collect precise or approximate geolocation data from your device to help you find the nearest Costa Vida location, facilitate delivery services, or personalize your experience. You can disable location access through your device settings at any time.

2.7 Communications Data

If you contact us via email, phone, live chat, social media, or any other communication channel, we may retain records of those communications, including:

• Customer service inquiries and responses
• Feedback, reviews, and survey responses
• Complaint records
• Any attachments or files you submit

2.8 Loyalty Program and Promotional Data

If you participate in our loyalty program or promotional campaigns, we may collect:

• Loyalty points earned and redeemed
• Promotional codes used
• Preferences indicated through surveys or preference centers
• Referral information

2.9 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your activity on our Website. For detailed information, please refer to Section 8 (Cookie Usage) of this Privacy Policy.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. The specific purposes for which we use your information are described below:

3.1 Providing and Managing Our Services

• Processing your food orders and facilitating delivery or pickup
• Creating and managing your user account
• Processing payments and issuing receipts or confirmations
• Managing your participation in our loyalty and rewards program
• Providing customer support and responding to inquiries
• Sending order confirmations, status updates, and delivery notifications

3.2 Analytics and Performance Improvement

• Analyzing website traffic, usage patterns, and user behavior to improve our Website and services
• Evaluating the performance and popularity of menu items
• Conducting internal research and data analysis
• Identifying and fixing technical errors or performance issues
• Developing new features, products, and services based on user feedback

3.3 Marketing and Personalization

• Sending promotional emails, newsletters, and special offers (with your consent where required)
• Personalizing your experience by displaying relevant menu items, promotions, and content
• Delivering targeted advertising through our Website and third-party platforms
• Conducting surveys and collecting feedback to improve our offerings
• Notifying you about new menu items, seasonal specials, and upcoming events

3.4 Legal Compliance and Safety

• Complying with applicable federal and state laws, regulations, and legal obligations
• Responding to lawful requests from governmental or regulatory authorities
• Preventing fraud, detecting suspicious activity, and protecting against security threats
• Enforcing our Terms of Service and other applicable policies
• Protecting the rights, property, and safety of Costa Vida, our customers, and the public

3.5 Business Operations

• Maintaining accurate business and transaction records
• Managing our supply chain, staffing, and restaurant operations
• Evaluating potential business mergers, acquisitions, or other corporate transactions

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own marketing purposes. However, we may share your information with trusted third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage third-party companies and individuals to assist in providing our services. These service providers may have access to your personal information solely to perform specific tasks on our behalf and are contractually obligated to keep it confidential. Such service providers include:

• Payment processors – to handle financial transactions securely
• Delivery and logistics partners – to fulfill food delivery orders
• Email marketing platforms – to send promotional communications
• Analytics providers – such as Google Analytics, to analyze Website traffic
• Cloud hosting and storage providers – to maintain our Website and data infrastructure
• Customer support software – to manage customer service interactions
• Loyalty program administrators – to manage our rewards platform

4.2 Legal Requirements

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request
• Enforce our policies or protect our legal rights
• Investigate or prevent fraud, security breaches, or other harmful activities
• Protect the personal safety of our users or the general public

4.3 Business Transfers

In the event that Costa Vida undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a substantial portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our Website if such a transfer occurs and your information becomes subject to a different privacy policy.

4.4 Advertising and Analytics Partners

We may share anonymized or aggregated data with advertising networks and analytics companies that help us deliver relevant advertisements and measure campaign effectiveness. We do not share directly identifiable personal information with these partners without your explicit consent, except as required to provide interest-based advertising.

4.5 With Your Consent

In all other circumstances not described in this Privacy Policy, we will share your personal information with third parties only with your explicit prior consent.

5. Data Security

Costa Vida takes the security of your personal information seriously and implements a range of technical, administrative, and physical security measures to protect it from unauthorized access, disclosure, alteration, or destruction.

5.1 Technical Safeguards

• Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption for all data transmitted through our Website
• Encryption of stored sensitive data, including payment information
• Firewalls and intrusion detection systems
• Secure, access-controlled server environments
• Regular security vulnerability assessments and penetration testing
• PCI-DSS compliance for all payment card data handling

5.2 Administrative Safeguards

• Role-based access controls ensuring employees only access data necessary for their job functions
• Employee training on data privacy and security best practices
• Confidentiality agreements with all staff and third-party service providers
• Data breach response procedures in accordance with applicable state and federal notification laws

5.3 Your Responsibility

While we make every effort to protect your personal information, no method of electronic transmission or storage is 100% secure. You are also responsible for maintaining the confidentiality of your account credentials. Please use a strong, unique password and do not share your login information with others. If you believe your account has been compromised, contact us immediately at [email protected].

6. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. We are committed to honoring these rights in accordance with applicable law.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

6.2 General Privacy Rights (All Users)

Regardless of your state of residence, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct any inaccurate or incomplete information about you.
• Deletion: Request that we delete your personal information, subject to applicable legal exceptions.
• Opt-Out of Marketing: Unsubscribe from our marketing emails at any time by clicking the "unsubscribe" link in any email we send you, or by contacting us directly.
• Withdraw Consent: Where our processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6.3 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us using one of the following methods:

• Email: [email protected]
• Website: vidacosta.click

We will verify your identity before processing your request to protect your security. We will respond to your request within 45 days as required under the CCPA/CPRA, with the possibility of extending this period by an additional 45 days where reasonably necessary and with prior notice. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The following general retention guidelines apply:

When your personal information is no longer needed, we will securely delete, anonymize, or aggregate it in a manner that prevents re-identification.

8. Cookie Usage

Our Website uses cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage) to enhance your user experience, analyze Website traffic, and support our marketing activities.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Website to function properly. These include cookies that enable you to log in to your account, add items to your cart, and complete your order.
• Performance and Analytics Cookies: Help us understand how visitors interact with our Website by collecting and reporting information anonymously (e.g., Google Analytics).
• Functionality Cookies: Allow the Website to remember your preferences, such as your preferred language, location, or saved menu items.
• Targeting and Advertising Cookies: Used to deliver relevant advertisements both on and off our Website and to measure the effectiveness of our advertising campaigns.

8.2 Managing Your Cookie Preferences

You may manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Website and your ability to use certain features, including online ordering. For more detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy, available on our Website at vidacosta.click.

You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance's opt-out tool at www.aboutads.info/choices or the Network Advertising Initiative at www.networkadvertising.org/choices.

9. Children's Privacy

Our Website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or maintain personal information from children under the age of 13 in accordance with the Children's Online Privacy Protection Act (COPPA), or from individuals under 16 as defined under certain state laws.

If you are under the age of 18, please do not use our Website, create an account, or submit any personal information through our services. If you are a parent or legal guardian and believe that your child under 13 has provided us with personal information, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete such information from our records.

We do not knowingly serve targeted advertising to children, and we do not use children's information for any commercial purpose.

10. International Data Transfers

Costa Vida is based in the United States and operates primarily within the United States. If you are accessing our Website from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where our servers and central database are located.

The data protection laws of the United States may differ from those in your country of residence. By using our Website and providing us with your personal information, you consent to the transfer of your information to the United States and to the processing of your information in accordance with this Privacy Policy and applicable U.S. law.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy, including the use of standard contractual protections and data processing agreements with our service providers when applicable.

11. Third-Party Websites and Links

Our Website may contain links to third-party websites, social media platforms, or other online services that are not operated by Costa Vida. These links are provided for your convenience and informational purposes only. We have no control over the content, privacy practices, or policies of these third-party websites, and we are not responsible for how they collect, use, or share your personal information.

We encourage you to review the privacy policies of any third-party websites you visit before submitting any personal information. The inclusion of a link on our Website does not constitute an endorsement of the linked website or its privacy practices.

12. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that sends a signal to websites indicating that you do not wish to be tracked. Our Website does not currently respond to DNT signals because there is no universally accepted standard for how websites should interpret such signals. However, you may opt out of certain tracking activities through the cookie management tools described in Section 8 of this Privacy Policy.

We will continue to monitor developments in DNT standards and may update our practices accordingly in the future.

13. California-Specific Disclosures

In accordance with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the following additional disclosures apply to California residents:

13.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email address, IP address, account username)
• Commercial information (purchase history, loyalty program activity)
• Internet or other electronic network activity information (browsing history on our Website, interactions with our content)
• Geolocation data (approximate location based on IP address or device GPS with consent)
• Inferences drawn from personal information (user preferences, likely food interests)
• Sensitive personal information (payment card data processed through third-party processors)

13.2 Business or Commercial Purposes for Collection

We collect personal information for the business and commercial purposes described in Section 3 of this Privacy Policy, including service provision, analytics, marketing communications, and legal compliance.

13.3 Shine the Light Law

California Civil Code Section 1798.83 (the "Shine the Light" law) permits California residents to request information about the disclosure of their personal information to third parties for the third parties' direct marketing purposes. If you are a California resident and wish to make such a request, please contact us at [email protected].

13.4 Authorized Agents

California residents may designate an authorized agent to submit privacy rights requests on their behalf. To do so, the authorized agent must provide written proof of authorization, and we may require you to verify your identity directly before fulfilling the request.

14. Filing a Complaint with a Data Protection Authority

If you have a concern about how we handle your personal information and you are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority.

14.1 California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA) at:

14.2 Federal Consumer Protection Complaints

For general consumer protection concerns, you may contact the Federal Trade Commission (FTC):

14.3 State Attorneys General

You may also contact your state's Attorney General office to report concerns about our privacy practices. Many states have consumer protection divisions that handle privacy-related complaints.

Before filing a complaint with a regulatory authority, we encourage you to contact us first at [email protected] so that we have an opportunity to address your concern directly and promptly.

15. Changes to This Privacy Policy

We reserve the right to update or revise this Privacy Policy at any time to reflect changes in our practices, applicable laws, or operational requirements. When we make material changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on this page with a revised "Last Updated" date
• Send an email notification to registered users where required by law
• Display a prominent notice on our Website homepage for a reasonable period following the update

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our Website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your privacy concerns promptly and transparently.