Privacy Policy

This Privacy Policy describes how Marcos ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at marcos-pizza.digital, place an order, or otherwise interact with our services. We are committed to protecting your privacy and handling your personal data in a transparent, responsible manner in full compliance with applicable United States federal and state privacy laws.

Please read this Privacy Policy carefully before using our website or submitting any personal information to us. By accessing or using marcos-pizza.digital, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please discontinue use of our website and services immediately.

For any questions regarding this Privacy Policy, you may contact us at any time using the information provided in the Contact Us section below.

1. About Us

Marcos is a food service business operating in the United States. We provide customers with food ordering services, delivery, and related offerings through our digital platform located at marcos-pizza.digital.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we collect are described below.

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, or contact us, we may collect the following personal information:

• Full name – to identify you as a customer and personalize communications.
• Email address – for order confirmations, account management, and marketing communications (where you have opted in).
• Phone number – for order-related communications and delivery coordination.
• Delivery and billing address – to fulfill your food orders and process payments.
• Date of birth (where applicable) – to verify age eligibility for certain promotions or alcohol-related products.
• Account credentials – username and hashed password for account security.

2.2 Payment Information

When you make a purchase on our platform, we collect payment-related information. We do not store your full credit or debit card numbers on our servers. Payment data is processed by PCI-DSS compliant third-party payment processors. We may retain limited payment metadata such as the last four digits of your card, card type, and billing zip code for fraud prevention and order verification purposes.

2.3 Order and Transaction Data

We collect information about the food items you order, order history, special instructions, delivery preferences, and transaction records. This data is necessary for providing our core food delivery and ordering services.

2.4 Usage Data and Online Activity

When you visit marcos-pizza.digital, we automatically collect certain technical and behavioral information about your visit, including:

• Internet Protocol (IP) address
• Browser type and version
• Operating system and device type
• Pages visited and time spent on each page
• Referring website or URL
• Links clicked and actions taken on our website
• Date and time of access
• Search queries entered on our website
• Session duration and navigation path

2.5 Device Information

We may collect device-specific information including your device's unique identifier, hardware model, mobile network information, and screen resolution. This information helps us optimize the presentation and performance of our website across different devices.

2.6 Location Data

With your permission, we may collect precise or approximate geographic location data from your device to facilitate delivery address suggestions, show nearby restaurant locations, and improve delivery accuracy. You may disable location permissions through your device or browser settings at any time.

2.7 Communications and Customer Support Data

If you contact us via email, phone, live chat, or any other channel, we collect the content of your communications, your contact information, and any information you voluntarily provide in the course of seeking support or feedback.

2.8 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage objects, and similar tracking technologies to enhance your experience on our website. Please refer to Section 7 – Cookie Usage for detailed information. A dedicated Cookie Policy is also available on our website.

2.9 Information from Third Parties

We may receive information about you from third-party sources, such as social media platforms (if you connect your account), advertising partners, delivery service providers, and analytics vendors. This information may be combined with the data we collect directly from you to improve our services and marketing activities.

3. How We Use Your Information

We use the personal information we collect for the following purposes, in accordance with applicable law:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including delivery coordination
• Creating and managing your customer account
• Processing payments and preventing fraudulent transactions
• Sending order confirmations, receipts, and delivery status updates
• Responding to your inquiries, complaints, and customer support requests
• Providing refunds or handling order disputes

3.2 Website Improvement and Analytics

• Analyzing website usage patterns and user behavior to improve functionality and user experience
• Conducting internal research, testing, and development
• Diagnosing technical problems and maintaining website security
• Measuring the effectiveness of our online content and features
• Generating aggregated, anonymized statistics about site traffic and usage

3.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, and special offers about Marcos products and services (where you have given consent or as permitted by law)
• Displaying personalized advertisements and promotions on our website and on third-party platforms
• Conducting surveys, contests, or loyalty program activities
• Remarketing to you via third-party advertising networks

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly at [email protected].

3.4 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from law enforcement, courts, or regulatory authorities
• Enforcing our Terms of Service and other agreements
• Detecting, investigating, and preventing fraudulent, illegal, or abusive activities
• Protecting the rights, property, and safety of Marcos, our customers, employees, and the public

3.5 Business Operations

• Managing and improving our supply chain, delivery logistics, and vendor relationships
• Conducting financial reporting, auditing, and accounting activities
• Facilitating business transfers, mergers, or acquisitions

4. How We Share Your Information

We do not sell your personal information to third parties for their own marketing purposes. We may share your information only in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers who perform functions on our behalf and require access to your information to carry out those functions. These include:

• Payment processors – to securely process your transactions
• Delivery and logistics partners – to fulfill and track your food orders
• Cloud hosting providers – to store and manage our website and data infrastructure
• Email and communications platforms – to send transactional and marketing messages
• Analytics providers – to help us understand how our website is used (e.g., Google Analytics)
• Customer support tools – to manage support tickets and communications
• Marketing and advertising platforms – to deliver targeted advertising campaigns

All service providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe disclosure is necessary to: (a) comply with any applicable federal or state law, regulation, or legal process; (b) respond to lawful requests from government authorities, including law enforcement; (c) enforce our Terms of Service; or (d) protect the rights, property, or safety of Marcos, our users, or others.

4.3 Business Transfers

In the event that Marcos undergoes a merger, acquisition, sale of assets, restructuring, or other business transition, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your personal information becomes subject to a materially different privacy policy.

4.4 With Your Consent

We may share your information with additional third parties when you have provided your explicit consent to do so, or when you have directed us to share your information (e.g., through social media integrations or referral programs).

4.5 Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, analytics, marketing, and other business purposes.

5. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: Data transmitted between your browser and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Access controls: Access to personal data is restricted to authorized personnel only, based on a need-to-know principle.
• Secure data storage: Customer data is stored on servers maintained in secure, access-controlled facilities.
• Password protection: Account passwords are stored in hashed form using robust cryptographic algorithms.
• Regular security assessments: We conduct periodic security reviews and vulnerability assessments to identify and address potential risks.
• Employee training: Our team members are trained in data privacy best practices and our internal security policies.
• Incident response plan: We maintain a data breach response procedure in accordance with applicable state breach notification laws.

While we employ robust security measures, no method of data transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining appropriate protections and notifying affected users in the event of a security incident as required by law.

6. Your Privacy Rights

Depending on your state of residence and applicable law, you may have certain rights regarding the personal information we hold about you. We are committed to honoring these rights in accordance with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable U.S. federal and state privacy frameworks, including protections under the Federal Trade Commission (FTC) Act.

6.1 Right to Know and Access

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purposes for collecting or sharing it, and the categories of third parties with whom we share it.

6.2 Right to Correction

You have the right to request that we correct inaccurate personal information we hold about you, subject to certain limitations. You may also update much of your personal information directly through your account settings on our website.

6.3 Right to Deletion

You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions (such as when data is needed to complete a transaction, comply with a legal obligation, or for other permitted purposes under applicable law).

6.4 Right to Data Portability

To the extent required by applicable law, you may request a copy of the personal information you provided to us in a structured, commonly used, and machine-readable format.

6.5 Right to Opt Out of Sale or Sharing

Although we do not sell personal information in the traditional sense, under the CCPA/CPRA, certain data disclosures for cross-context behavioral advertising may be considered "sharing." California residents have the right to opt out of the sharing of their personal information for cross-context behavioral advertising. To exercise this right, please contact us at [email protected] or look for the "Do Not Sell or Share My Personal Information" link on our website.

6.6 Right to Limit Use of Sensitive Personal Information

California residents have the right to request that we limit the use and disclosure of sensitive personal information (as defined under the CPRA) to only what is necessary to perform the services you request.

6.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. You will not receive a lower quality of service, different prices, or other adverse treatment as a result of submitting a privacy request.

6.8 How to Submit a Privacy Request

To exercise any of the rights described above, please contact us using one of the following methods:

• Email: [email protected]
• Website: marcos-pizza.digital

We will acknowledge your request within 10 business days and respond substantively within 45 days. If we require additional time (up to 90 days total), we will notify you of the extension and the reason for it. We may need to verify your identity before processing your request. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

You may also designate an authorized agent to submit privacy requests on your behalf. The authorized agent must provide written authorization or power of attorney, and we may verify your identity directly before fulfilling the request.

7. Cookie Usage

Our website uses cookies and similar tracking technologies to provide, improve, and personalize your experience. Cookies are small text files placed on your device by websites you visit. We use the following categories of cookies:

You can manage your cookie preferences through your browser settings or our on-site cookie consent manager. Please note that disabling certain cookies may affect the functionality of our website. For more detailed information about the cookies we use, including a full list and their specific retention periods, please refer to our dedicated Cookie Policy available on marcos-pizza.digital.

We also honor browser-based "Do Not Track" (DNT) signals where technically feasible. California residents may also exercise their opt-out rights with respect to cookies used for behavioral advertising as described in Section 6.5 above.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general data retention guidelines are as follows:

After the applicable retention period expires, personal information is securely deleted or anonymized in accordance with our data disposal procedures. Certain information may be retained for longer periods if required by legal obligation, dispute resolution, or enforcement of our agreements.

9. Children's Privacy

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under 13 years of age. Our website is not directed at children, and we do not intentionally market to minors.

If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take prompt steps to delete that information from our systems. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

Individuals between the ages of 13 and 17 are also advised that our services are designed for adult consumers. We encourage parents and guardians to monitor their children's online activities and use of food ordering services.

10. International Data Transfers

Marcos is based in the United States, and your personal information is primarily collected, processed, and stored in the United States. Our service providers, analytics vendors, and technology partners may also operate in other countries where data protection laws may differ from those in your state of residence.

If personal data is transferred outside of the United States, we take appropriate steps to ensure that such transfers comply with applicable law and that your personal information remains protected to a standard consistent with this Privacy Policy. These safeguards may include:

• Standard contractual clauses or data processing agreements with foreign vendors
• Ensuring that vendors maintain appropriate technical and organizational security measures
• Limiting the scope of data shared with international partners to what is strictly necessary

By using our website and services, you acknowledge that your personal information may be transferred to and processed in the United States and potentially other countries. We are committed to maintaining appropriate protections wherever your data is processed.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, or services that are not owned or operated by Marcos. These links are provided for your convenience and informational purposes only. We have no control over the content, privacy practices, or security measures of third-party websites.

We strongly encourage you to review the privacy policies of any third-party websites you visit before submitting any personal information. Marcos is not responsible for the privacy practices or content of third-party sites, and this Privacy Policy does not apply to any information you provide to or that is collected by third parties.

12. Additional Rights for U.S. State Residents

In addition to the rights described in Section 6, residents of certain U.S. states may have additional rights under applicable state privacy laws:

12.1 California Residents

California residents have rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know, delete, correct, opt out of sale/sharing, limit sensitive data use, and non-discrimination, as described in Section 6 of this policy. For California-specific inquiries, please contact us at [email protected].

12.2 Virginia, Colorado, Connecticut, Texas, and Other State Residents

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with enacted comprehensive privacy laws may have similar rights to access, correct, delete, and port their personal data, as well as the right to opt out of targeted advertising and profiling. We will honor these rights in accordance with applicable law. Please contact us at [email protected] to submit a request.

12.3 Nevada Residents

Nevada residents may have the right to opt out of the sale of certain covered information under Nevada Revised Statutes Chapter 603A. While we do not currently sell covered information as defined under Nevada law, you may submit an opt-out request to [email protected].

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website homepage
• Send an email notification to registered users (where required by law or where we deem it appropriate)

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of marcos-pizza.digital after the effective date of any changes constitutes your acknowledgment of the updated Privacy Policy.

14. Filing Complaints with Regulatory Authorities

If you are not satisfied with our response to a privacy inquiry or believe that we are not handling your personal information in compliance with applicable law, you have the right to file a complaint with the appropriate regulatory authority.

14.1 Federal Trade Commission (FTC)

In the United States, the Federal Trade Commission (FTC) enforces consumer protection laws, including those related to data privacy and security. You may file a complaint with the FTC at:

14.2 California Privacy Protection Agency (CPPA)

California residents may file complaints with the California Privacy Protection Agency (CPPA), which enforces the CCPA/CPRA:

14.3 State Attorneys General

Residents of other U.S. states may contact their respective state Attorney General's office to report privacy violations or seek assistance regarding data protection concerns.

We strongly encourage you to contact us first at [email protected] before filing a regulatory complaint, so that we have the opportunity to address your concern directly and promptly.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please do not hesitate to contact our privacy team using the information below:

We aim to acknowledge all privacy-related inquiries within 10 business days and to provide a full response within 45 days of receiving your request. If we require additional time to process complex requests, we will notify you of the delay and the expected resolution date.

When contacting us about a privacy request, please provide sufficient information to allow us to identify your account (such as your name and email address) and describe your request as clearly as possible so that we can respond efficiently.