Privacy Policy

This Privacy Policy describes how Zupas ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at zupas-meal.click, place orders, use our services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data in a transparent and responsible manner in accordance with applicable United States federal and state privacy laws.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with this policy, please discontinue use of our website and services immediately.

1. Who We Are

Zupas is a food service business operating in the United States. We provide food ordering, delivery, and related services through our website and digital platforms.

For all privacy-related inquiries, you may contact us directly at the email address listed above. We will respond to all legitimate privacy requests in a timely and thorough manner.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• Visitors to our website at zupas-meal.click
• Customers who place food orders or register for accounts on our platform
• Individuals who subscribe to our newsletters, promotions, or marketing communications
• Users who interact with us through social media, customer support, or other communication channels
• Any individual whose personal data we process in the course of our business operations

This policy does not apply to third-party websites, applications, or services that may be linked from our website. We encourage you to review the privacy policies of any third-party services you access through our platform.

3. Information We Collect

We collect various categories of personal information depending on how you interact with our services. Below is a detailed breakdown of the types of data we may collect:

3.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name – to identify you and personalize your experience
• Email address – for account registration, order confirmations, and communications
• Phone number – for delivery coordination and customer service
• Delivery address – to fulfill your food orders
• Billing address – for payment processing and fraud prevention
• Date of birth – where applicable for age verification purposes
• Username and password – for account security and access

3.2 Payment and Financial Information

When you make purchases through our platform, we collect payment-related information, including:

• Credit or debit card information (processed securely through third-party payment processors)
• Billing details including cardholder name and billing address
• Transaction history and purchase records

Please note that we do not store full payment card numbers on our servers. All payment data is handled by our PCI-DSS compliant third-party payment processors.

3.3 Order and Transaction Data

We collect information related to your food orders, including:

• Items ordered and order history
• Dietary preferences and special instructions
• Order timestamps and delivery times
• Customer feedback and ratings
• Promotional codes and discount usage

3.4 Usage and Behavioral Data

When you visit our website, we automatically collect certain technical and behavioral information, including:

• Pages visited and time spent on each page
• Links clicked and navigation patterns
• Search queries made on our platform
• Items viewed but not purchased
• Referring website or source through which you found us
• Frequency and duration of your visits

3.5 Device and Technical Information

We collect technical information from your device when you access our services, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type
• Screen resolution and display settings
• Device identifiers and unique device IDs
• Time zone settings and language preferences
• Network connection type

3.6 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. For more detailed information about our use of cookies, please refer to our Cookie Policy section below and our dedicated Cookie Policy page.

3.7 Communications Data

When you contact us or communicate with our team, we may collect:

• Content of emails, chat messages, or other correspondence
• Customer support tickets and inquiry history
• Survey responses and feedback submissions
• Reviews and ratings you submit publicly

3.8 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Social media platforms if you log in using a social media account
• Marketing and advertising partners
• Analytics providers
• Fraud prevention and identity verification services
• Delivery and logistics partners

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Coordinating delivery logistics and communicating delivery status
• Managing your account and providing customer support
• Processing payments and managing billing
• Verifying your identity and preventing fraudulent transactions

4.2 Communication and Customer Service

• Sending order confirmations, receipts, and status updates
• Responding to your inquiries, complaints, and feedback
• Providing technical support and resolving service issues
• Sending important service announcements and policy updates

4.3 Marketing and Promotions

• Sending promotional emails, newsletters, and special offers (where you have given consent)
• Personalizing your experience by recommending menu items based on your order history
• Delivering targeted advertising on our platform and third-party websites
• Running loyalty programs, contests, and sweepstakes
• Analyzing the effectiveness of our marketing campaigns

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

4.4 Analytics and Service Improvement

• Analyzing usage patterns to improve our website functionality and user experience
• Conducting research and analysis to develop new products and services
• Monitoring system performance and identifying technical issues
• Generating aggregated statistical reports about our user base

4.5 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Enforcing our Terms of Service and other agreements
• Protecting our rights, property, and the safety of our users and employees
• Detecting, investigating, and preventing fraudulent or illegal activity
• Responding to legal processes, court orders, or government requests

5. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing required to fulfill your orders and deliver our services to you
• Legitimate Interests: Processing that serves our legitimate business interests, such as fraud prevention, security, and service improvement, balanced against your privacy rights
• Consent: Processing for marketing and optional features where you have provided explicit consent
• Legal Obligation: Processing required to comply with federal, state, and local laws and regulations applicable to our food service business

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your data in the following circumstances:

6.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating our business, including:

• Payment processors – to handle secure payment transactions
• Delivery and logistics partners – to fulfill and track food orders
• Cloud hosting providers – to store and manage our data infrastructure
• Email and SMS service providers – to send order confirmations and communications
• Analytics providers – to help us understand website usage and improve our services
• Marketing and advertising platforms – to deliver targeted advertisements
• Customer support tools – to manage and respond to customer inquiries
• Fraud prevention services – to detect and prevent unauthorized transactions

All service providers are contractually required to protect your personal information and may only use it for the specific purposes for which it was shared.

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required to do so by law or in response to valid legal requests, including:

• Court orders, subpoenas, or other legal processes
• Requests from federal, state, or local government authorities
• Investigations by law enforcement agencies
• Situations involving imminent threats to public safety or national security

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other corporate transaction involving Zupas, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you of any such change through our website or by email.

6.4 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect information about how you use our services.

7.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly, including maintaining your login session and shopping cart
• Performance Cookies: Collect information about how visitors use our website to help us improve performance
• Functional Cookies: Remember your preferences such as language settings and saved addresses
• Marketing Cookies: Used to deliver relevant advertisements and track the effectiveness of marketing campaigns
• Analytics Cookies: Help us understand user behavior and website traffic patterns

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling certain cookies may affect the functionality of our website. For more detailed information about our use of cookies, please review our full Cookie Policy available on our website.

8. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical security measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

8.1 Security Measures We Implement

• Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS technology
• Secure Payment Processing: Payment information is processed through PCI-DSS compliant third-party payment processors
• Access Controls: Access to personal data is restricted to authorized employees and contractors who need it to perform their job functions
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing
• Data Minimization: We only collect the data necessary for the purposes described in this policy
• Employee Training: Our staff receive regular training on data protection and security best practices
• Incident Response: We have procedures in place to detect, respond to, and notify affected parties in the event of a data breach

9. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. We respect and honor these rights as described below.

9.1 Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for which it is used, and the third parties with whom it is shared.
• Right to Delete: You have the right to request the deletion of your personal information, subject to certain exceptions provided by law.
• Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell personal information, but we may share data for advertising purposes.
• Right to Limit Use of Sensitive Personal Information: You may have the right to limit certain uses of sensitive personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. You will continue to receive the same quality of service regardless of whether you exercise these rights.

9.2 General Privacy Rights (All Users)

Regardless of your location, we provide the following rights to all users:

• Right of Access: Request a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete personal information
• Right to Deletion: Request deletion of your personal information under certain circumstances
• Right to Portability: Request your personal data in a structured, machine-readable format
• Right to Withdraw Consent: Withdraw consent for data processing activities where consent is the legal basis
• Right to Object: Object to processing of your personal data for direct marketing purposes

9.3 How to Exercise Your Rights

To exercise any of the rights described above, please contact us using one of the following methods:

• Email: [email protected] with the subject line "Privacy Rights Request"

We will acknowledge your request within 10 business days and respond substantively within 45 days. If we need more time, we will notify you of the extension and the reason for it. We may need to verify your identity before processing your request to protect your data from unauthorized access.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

When personal data is no longer needed, we securely delete, destroy, or anonymize it in accordance with our data disposal procedures.

11. Children's Privacy

We do not knowingly market to, collect data from, or provide services to children under 18 years of age. Our food ordering platform and website are designed for adults only. If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected].

Upon receiving such notification, we will promptly investigate and, if confirmed, delete the child's personal information from our records. We comply with the Children's Online Privacy Protection Act (COPPA) and take our obligations regarding children's privacy seriously.

If we discover that we have inadvertently collected personal information from a child under 18, we will take immediate steps to delete such information from our systems without undue delay.

12. International Data Transfers

Zupas is a United States-based business, and we primarily process and store personal information within the United States. Our servers, service providers, and business operations are located in the United States.

If you are accessing our services from outside the United States, please be aware that your personal information will be transferred to and processed in the United States, where privacy laws may differ from those in your country of residence. By using our services, you acknowledge and consent to this transfer.

We take appropriate safeguards to ensure that any international data transfers comply with applicable legal requirements and that your personal information remains protected to the standards described in this policy. Our service providers who may operate internationally are bound by data processing agreements that require them to maintain appropriate security standards.

13. Applicable Laws and Regulatory Framework

Our privacy practices are governed by and comply with the following applicable laws and regulations:

• Federal Trade Commission Act (FTC Act): We comply with FTC requirements for fair and transparent data practices and consumer protection in the United States
• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): We honor the privacy rights of California residents as required by this legislation
• Children's Online Privacy Protection Act (COPPA): We do not collect data from children under 13 and comply with all COPPA requirements
• CAN-SPAM Act: Our commercial email communications comply with the requirements of the CAN-SPAM Act
• Telephone Consumer Protection Act (TCPA): We obtain appropriate consent before sending automated text messages or calls
• State Privacy Laws: We monitor and comply with emerging state privacy laws across the United States as they become effective
• Food Safety and Labeling Laws: We comply with applicable FDA regulations and food industry data requirements

14. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, and other external services. We are not responsible for the privacy practices of these third parties. When you click on a link to a third-party website or service, their own privacy policy will govern the collection and use of your data.

We encourage you to review the privacy policies of any third-party services you visit through links on our website. Our inclusion of a link to a third-party website does not constitute an endorsement of that website's privacy practices.

15. Social Media and Social Login

Our website may offer the ability to log in or connect using social media accounts such as Facebook, Google, or Apple. When you use social login features, the social media provider may share certain information with us, such as your name, email address, and profile picture, based on your privacy settings with that provider.

We do not control what information social media platforms share with us, and we encourage you to review the privacy settings and policies of any social media platforms you use in connection with our services.

16. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) signal that communicates your preference not to be tracked across websites. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our website currently does not respond to DNT browser signals in a standardized way. We will update this policy if industry standards change and we implement a response to DNT signals.

California residents may also opt out of the sharing of their personal information for cross-context behavioral advertising under the CPRA as described in Section 9 above.

17. Your Marketing Choices

We respect your right to control how we use your personal information for marketing purposes. You have the following options:

• Email Marketing: Click the "unsubscribe" link at the bottom of any marketing email from us, or email us at [email protected] to opt out of promotional emails
• SMS Marketing: Reply STOP to any marketing text message to unsubscribe from SMS communications
• Personalized Recommendations: Update your account preferences to disable personalized recommendations
• Interest-Based Advertising: You can opt out of interest-based advertising through industry tools such as the Digital Advertising Alliance's opt-out tool at optout.aboutads.info

Please note that even if you opt out of marketing communications, we may still send you transactional emails related to your orders, account activity, and important service updates.

18. How to File a Privacy Complaint

If you believe that we have not adequately addressed your privacy concerns or that we have violated your privacy rights, you have the right to file a complaint. We encourage you to first contact us directly so we can attempt to resolve your concern.

18.1 Contact Us First

Before filing a complaint with a regulatory authority, we encourage you to reach out to us directly:

• Email: [email protected]
• Subject Line: "Privacy Complaint"

We will acknowledge your complaint within 10 business days and work to resolve it as quickly as possible.

18.2 Regulatory Complaints

If you are not satisfied with our response, you may file a complaint with the appropriate regulatory authority:

• Federal Trade Commission (FTC): You may file a complaint with the FTC regarding unfair or deceptive business practices at ftc.gov/complaint or by calling 1-877-382-4357
• California Residents – California Privacy Protection Agency (CPPA): California residents may file a complaint with the California Privacy Protection Agency at cppa.ca.gov
• California Attorney General: Complaints may also be filed with the California Attorney General's Office at oag.ca.gov/privacy
• Your State Attorney General: Residents of other states may file complaints with their respective state attorney general's office regarding privacy violations

19. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or for other operational reasons. When we make material changes to this policy, we will notify you in one or more of the following ways:

• Posting the updated policy on our website at zupas-meal.click with a new effective date
• Sending an email notification to the address associated with your account
• Displaying a prominent notice on our website homepage

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services following the posting of changes constitutes your acceptance of the updated Privacy Policy.

If we make changes that significantly affect how we use your personal information, we will seek your renewed consent where required by applicable law.

20. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. We are committed to addressing your privacy concerns promptly and thoroughly.

When contacting us regarding a privacy matter, please include the following information to help us process your request efficiently:

• Your full name and email address associated with your account
• A clear description of your privacy concern or request
• The specific right you wish to exercise (if applicable)
• Any relevant dates or reference numbers