Privacy Policy

At Marcos ("we," "us," "our," or "the Company"), we are deeply committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website marcos-meal.rest, place orders, or otherwise interact with our food services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

This Privacy Policy applies to all information collected through our website (marcos-meal.rest), our online ordering systems, and any related services, sales, marketing, or events (collectively, the "Services").

1. Who We Are

Marcos is a food service business operating in the United States. We provide restaurant and food ordering services to customers through our website and related platforms. For any privacy-related questions or concerns, you may contact us using the information below:

2. Information We Collect

We collect information about you in various ways when you use our Services. Understanding what we collect helps you make informed decisions about your interaction with our platform.

2.1 Personal Information You Provide Directly

When you register an account, place an order, contact us, or otherwise engage with our Services, you may voluntarily provide us with personal information, including but not limited to:

• Identity Information: Your full name, username, or similar identifiers.
• Contact Information: Email address, telephone number, billing address, and delivery address.
• Account Credentials: Passwords and other security information used for authentication and account access.
• Payment Information: Credit card numbers, debit card numbers, billing details, and other financial information necessary to process your transactions. Note: We do not store full payment card numbers on our servers — this information is processed by secure, PCI-DSS compliant third-party payment processors.
• Order Information: Details about the food items you order, special dietary requests, order history, and preferences.
• Communications: Any messages, feedback, reviews, or other content you submit to us through contact forms, customer service inquiries, or surveys.
• Promotional Preferences: Your preferences for receiving marketing and promotional communications from us.

2.2 Information Collected Automatically

When you access or use our website, certain information is automatically collected from your device and browser, including:

• Log and Usage Data: IP address, browser type and version, browser language, operating system, referring URLs, pages visited, time spent on pages, links clicked, and other usage activity on our website.
• Device Information: Hardware model, device identifiers, device operating system, mobile network information, and screen resolution.
• Location Data: General geographic location based on your IP address. With your consent, we may also collect precise geolocation data through your mobile device to assist with delivery services.
• Transaction Data: Details about payments to and from you, including the products and services you have ordered from us.
• Cookie and Tracking Data: We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about how you interact with our website. See Section 8 for more details on cookies.

2.3 Information from Third Parties

We may receive information about you from third-party sources and combine it with information we already hold about you, including:

• Social Media Platforms: If you choose to link your social media account (such as Google or Facebook) to log in to our Services, we may receive profile information from those platforms, subject to their privacy settings.
• Payment Processors: Transaction confirmation and fraud-prevention data from our payment processing partners.
• Analytics Providers: Aggregated and anonymized data from third-party analytics services to help us understand how users interact with our platform.
• Delivery Partners: Information needed to coordinate the delivery of your food orders.
• Marketing Partners: Information to help us reach you with relevant advertising or to prevent duplicate messaging.

3. How We Use Your Information

We use the information we collect for a variety of purposes related to the operation of our food services. Specifically, we may use your data for the following purposes:

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders and manage your account.
• To communicate with you about your orders, including order confirmations, delivery updates, and receipts.
• To coordinate delivery logistics and provide estimated arrival times.
• To manage your account settings, preferences, and loyalty or rewards programs.
• To process payments and prevent fraudulent transactions.

3.2 Customer Service and Support

• To respond to your inquiries, questions, complaints, or feedback.
• To troubleshoot issues with your orders or account.
• To send administrative messages such as updates to our terms or policies.

3.3 Analytics and Service Improvement

• To analyze trends, usage patterns, and the effectiveness of our menu offerings.
• To understand how users interact with our website and to improve the user experience.
• To conduct research and development for new features, products, and services.
• To perform internal quality assurance and operational audits.

3.4 Marketing and Promotions

• To send you promotional offers, newsletters, coupons, and other marketing communications — only where you have given us consent or where we have a legitimate interest in doing so.
• To personalize your experience on our platform, including showing you menu recommendations based on past orders.
• To run targeted advertising campaigns on third-party platforms where permitted by law.
• You may opt out of marketing emails at any time by clicking the "unsubscribe" link at the bottom of any marketing email or by contacting us at [email protected].

3.5 Legal and Compliance Purposes

• To comply with applicable laws and regulations, including tax and food safety requirements.
• To enforce our Terms of Service and other agreements.
• To protect the rights, property, or safety of Marcos, our customers, or the public.
• To detect, investigate, and prevent fraudulent activity or other illegal behavior.

4. How We Share Your Information

We do not sell your personal information to third parties. However, we may share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We may share your information with trusted third-party vendors, contractors, and service providers who perform services on our behalf, including:

• Payment Processors: To securely process your payment transactions.
• Delivery Partners: To fulfill and deliver your food orders to your specified address.
• Cloud Hosting Providers: To store and manage our website and operational data.
• Email Service Providers: To send transactional and marketing emails.
• Analytics Providers: Such as Google Analytics, to help us understand website usage.
• Customer Support Tools: To manage and respond to customer inquiries.

All third-party service providers are contractually obligated to use your information only for the purposes we specify and in accordance with this Privacy Policy and applicable law.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal processes, including:

• Compliance with a court order, subpoena, or governmental request.
• Compliance with applicable federal or state laws, including the Federal Trade Commission Act (FTC Act).
• Protection of the rights, property, or personal safety of Marcos, our employees, customers, or the general public.
• Investigation and prevention of fraud, security incidents, or other illegal activity.

4.3 Business Transfers

In the event that Marcos undergoes a merger, acquisition, reorganization, bankruptcy, sale of assets, or similar corporate transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website if such a transfer occurs and will inform you of any choices you may have regarding your information.

4.4 With Your Consent

We may share your personal information with other parties when you have given us explicit consent to do so, such as allowing a third-party app to access your order history.

5. Data Security

We take the security of your personal information seriously and have implemented a range of administrative, technical, and physical safeguards designed to protect it from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our website.
• Access Controls: Access to personal data is restricted to authorized employees and contractors who need it to perform their job functions. All personnel with access to personal data are subject to confidentiality obligations.
• Secure Payment Processing: We use PCI-DSS compliant payment processors to handle all credit card and financial transactions. We do not store full payment card data on our servers.
• Regular Security Assessments: We conduct periodic security reviews and vulnerability assessments of our systems.
• Incident Response: We have procedures in place to detect, respond to, and notify affected parties of data security incidents in a timely manner, as required by applicable law.

6. Your Privacy Rights

Depending on your state of residence in the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

6.1 Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

To exercise your California privacy rights, please contact us at [email protected]. We will verify your identity before processing your request and will respond within 45 days as required by the CCPA/CPRA, with a possible extension of an additional 45 days when necessary.

6.2 Rights for All U.S. Residents

Regardless of your state of residence, we offer all users the following rights:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete information we hold about you.
• Right to Deletion: You may request that we delete your personal data, subject to certain legal obligations to retain it.
• Right to Portability: You may request that we provide you with your data in a commonly used and machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Opt-Out of Marketing: You may unsubscribe from marketing communications at any time.

To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request." We will respond within a reasonable timeframe.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention periods depend on the type of data and the purpose for processing:

When personal information is no longer needed for the purposes for which it was collected, we will securely delete or anonymize it. If deletion is not immediately possible (for example, because information is stored in backup archives), we will securely store it and isolate it from further processing until deletion is possible.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to enhance your browsing experience, analyze site usage, and assist in our marketing efforts.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function correctly. These include cookies that allow you to log in, maintain your shopping cart, and process orders. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting anonymized information. We use tools such as Google Analytics for this purpose.
• Functionality Cookies: Enable enhanced functionality and personalization, such as remembering your preferences, login details, and language settings.
• Targeting and Advertising Cookies: Used to deliver relevant advertisements to you on our website and on third-party platforms. These cookies track your browsing habits across websites.

8.2 Cookie Consent and Control

When you first visit our website, you will be presented with a cookie consent banner that allows you to accept, reject, or customize your cookie preferences (except for strictly necessary cookies). You can update your preferences at any time through the cookie settings link in the footer of our website.

You can also control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website and your ability to place orders. For more detailed information about the specific cookies we use, please refer to our Cookie Policy.

9. Children's Privacy

Our Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or maintain personal information from children under the age of 18.

In accordance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will delete it as quickly as possible.

10. International Data Transfers

Marcos is based in the United States, and the information we collect is governed by U.S. law. Our website and services are primarily directed at users located in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

By using our Services, you acknowledge and consent to the transfer of your information to the United States for processing. We take reasonable steps to ensure that any international data transfers comply with applicable legal requirements and that adequate protections are in place to safeguard your personal information.

If you are a resident of a jurisdiction with specific requirements governing international data transfers (such as the European Economic Area), please contact us at [email protected] for information about the specific safeguards we have in place for your data.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Marcos. These third-party sites have their own privacy policies, and we have no responsibility or liability for their content, privacy practices, or security measures. We encourage you to review the privacy policies of any third-party sites you visit.

Examples of third-party services we may link to or integrate with include:

• Social media platforms (Facebook, Instagram, Twitter/X)
• Payment gateways (Stripe, PayPal, Square)
• Map and navigation services (Google Maps)
• Food delivery platforms and aggregators

12. Consumer Protection and FTC Compliance

Marcos is committed to fair and transparent data practices in compliance with the Federal Trade Commission Act (FTC Act), 15 U.S.C. § 45, which prohibits unfair or deceptive acts or practices in commerce, including in connection with the collection and use of consumer data. We adhere to the FTC's guidelines for online privacy, including:

• Providing clear and conspicuous notice of our data practices.
• Giving consumers meaningful choice and control over their data.
• Maintaining reasonable security measures to protect consumer data.
• Honoring our stated privacy commitments and not engaging in deceptive data practices.
• Providing mechanisms for users to access, correct, and delete their personal information.

13. Do Not Track Signals

Some browsers may transmit "Do Not Track" (DNT) signals to websites. As there is currently no universal standard for how websites should respond to DNT signals, our website does not currently respond to DNT browser signals. However, you can use the cookie consent tools and opt-out mechanisms described in this Privacy Policy to control the collection of certain data about you.

14. How to File a Complaint

If you believe we have handled your personal information improperly or violated applicable privacy laws, we encourage you to contact us first so we can attempt to resolve your concern:

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant regulatory authority:

14.1 U.S. Federal and State Authorities

• Federal Trade Commission (FTC): You may file a complaint with the FTC at www.ftc.gov/complaint or by calling 1-877-FTC-HELP (1-877-382-4357).
• California Residents — California Privacy Protection Agency (CPPA): If you are a California resident and believe your CCPA/CPRA rights have been violated, you may file a complaint with the California Privacy Protection Agency at cppa.ca.gov.
• California Attorney General: California residents may also file a complaint with the California Attorney General's office at oag.ca.gov.
• State Attorney General: Residents of other U.S. states may contact their state Attorney General's office with privacy complaints. Most states have consumer protection divisions that handle such matters.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify you by:

• Updating the "Last Updated" date at the top of this Privacy Policy.
• Sending an email notification to the email address associated with your account (for significant changes).
• Displaying a prominent notice on our website or within the app.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of those changes.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us through any of the following channels:

We are committed to working with you to resolve any privacy concerns promptly and transparently. When contacting us about a privacy matter, please include "Privacy Policy Inquiry" in the subject line of your email to help us route your request appropriately.