Privacy Policy

Effective Date: June 13, 2026  |  Last Updated: June 13, 2026

1. Introduction and Who We Are

Welcome to Papa Ginos. We are a food service business operating in the United States, committed to protecting the privacy and personal information of every individual who interacts with our brand, website, and services. We recognize that privacy is a fundamental right, and we take our responsibilities in handling your personal data with the utmost seriousness and transparency.

This Privacy Policy applies to all users who access or use our website located at cafe-papaginos.click, place orders, sign up for newsletters, participate in promotions, or otherwise engage with our services. It governs the collection, processing, storage, sharing, and protection of your personal information in accordance with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act).

By accessing our website or using any of our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, we kindly ask that you discontinue using our website and services immediately.

1.1 Contact Information

For all privacy-related inquiries, requests, or concerns, you may contact us using the following details:

2. Information We Collect

We collect various categories of information to provide and improve our services, communicate with customers, process orders, and fulfill our legal and business obligations. The information we collect falls into the following main categories:

2.1 Personal Identification Information

When you interact with our website or services, we may collect personal identification information, which includes but is not limited to:

• Full name
• Email address
• Phone number
• Mailing or delivery address
• Date of birth (where required for age verification or promotional purposes)
• Username and password (for registered accounts)
• Profile photo or avatar (if uploaded voluntarily)

2.2 Order and Transaction Information

When you place a food order or make a purchase through our platform, we collect transaction-related data including:

• Items ordered and preferences
• Order history and frequency
• Payment information (processed securely through third-party payment processors; we do not store full credit card numbers)
• Billing information
• Delivery instructions and special requests
• Loyalty points or reward program data

2.3 Usage and Behavioral Data

We automatically collect certain information about how you interact with our website. This includes:

• Pages visited and navigation paths on our website
• Time and duration of your visits
• Links clicked and features used
• Search queries entered on our website
• Referring URLs (the website that directed you to us)
• Session data and clickstream information

2.4 Device and Technical Information

Our systems automatically collect technical information from your device when you access our website, including:

• IP address
• Browser type and version
• Operating system and device type (desktop, mobile, tablet)
• Screen resolution
• Language settings
• Time zone
• Mobile device identifiers (where applicable)
• Network and internet service provider information

2.5 Location Data

With your consent, we may collect precise or approximate location data to facilitate delivery services, suggest nearby pickup locations, or personalize your experience. You may disable location tracking at any time through your device or browser settings, though this may affect certain features of our service.

2.6 Communications and Feedback

When you contact us via email, phone, our website contact form, or social media platforms, we collect the content of those communications. This includes:

• Customer service inquiries and correspondence
• Reviews, ratings, and feedback submitted about our food or services
• Survey responses and promotional entries
• Comments or messages sent to our social media accounts

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, local storage, and similar tracking technologies to collect data about your interactions with our website. For a comprehensive explanation of the cookies we use and how to manage them, please refer to our Cookie Policy. In brief, we use the following types of cookies:

• Essential Cookies: Necessary for the website to function properly.
• Analytics Cookies: To understand how visitors use our website.
• Marketing and Advertising Cookies: To deliver personalized advertisements.
• Preference Cookies: To remember your settings and preferences.

2.8 Information from Third Parties

We may receive personal information about you from third-party sources, including social media platforms (when you connect your account or log in via social login), marketing partners, analytics providers, delivery service partners, and publicly available databases. We handle all such third-party data in accordance with this Privacy Policy.

3. How We Use Your Information

Papa Ginos uses the personal information we collect for the following specific and legitimate purposes:

3.1 Service Delivery and Order Fulfillment

• Processing and completing your food orders
• Coordinating delivery or pickup arrangements
• Sending order confirmations, receipts, and status updates
• Managing your account and preferences
• Processing payments and managing billing

3.2 Customer Service and Support

• Responding to your inquiries, complaints, or feedback
• Resolving disputes and addressing service issues
• Providing technical support for website-related problems
• Maintaining records of customer interactions for quality assurance

3.3 Marketing and Promotional Communications

• Sending you newsletters, promotional offers, and special deals (with your consent)
• Informing you about new menu items, seasonal promotions, or limited-time offers
• Managing loyalty programs and reward points
• Conducting marketing campaigns and targeted advertising

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any of our emails, contacting us at [email protected], or adjusting your communication preferences in your account settings.

3.4 Analytics and Service Improvement

• Analyzing website usage patterns and customer behavior
• Improving our website functionality, design, and user experience
• Developing new features, menu options, and services
• Conducting internal research and business intelligence analysis
• Monitoring and measuring the effectiveness of our marketing campaigns

3.5 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from courts, government authorities, or law enforcement
• Detecting, preventing, and addressing fraud, security breaches, or illegal activities
• Protecting the rights, property, and safety of Papa Ginos, our customers, and the public
• Enforcing our Terms of Service and other applicable agreements

3.6 Personalization

• Customizing your website experience based on your preferences and order history
• Recommending menu items based on past orders
• Displaying location-relevant content and offers

4. Sharing Your Information with Third Parties

Papa Ginos does not sell your personal information to third parties for monetary compensation. However, we may share your data with certain trusted third parties under the following circumstances:

4.1 Service Providers and Business Partners

We work with third-party companies and individuals who help us deliver our services. These service providers are granted access to your personal information only as necessary to perform their functions and are contractually obligated to maintain the confidentiality and security of your data. Categories of service providers include:

• Payment processors and financial institutions
• Delivery and logistics partners
• Cloud hosting and IT infrastructure providers
• Email marketing and communication platforms
• Analytics and data intelligence services (e.g., Google Analytics)
• Customer relationship management (CRM) software providers
• Advertising technology partners
• Fraud detection and security service providers

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or if we believe in good faith that such action is necessary to:

• Comply with a legal obligation, subpoena, court order, or regulatory requirement
• Protect and defend the rights or property of Papa Ginos
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our services or the general public
• Protect against legal liability

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization as part of that transaction. We will notify you via email and/or a prominent notice on our website if such a transfer results in a material change to how your data is handled.

4.4 With Your Consent

We may share your information with additional third parties when you have given us your explicit consent to do so, such as when participating in co-branded promotions, social media integrations, or partner programs.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other business purposes. This type of data sharing does not constitute a disclosure of personal information.

5. Data Security

We take the security of your personal information seriously and have implemented comprehensive technical, administrative, and physical safeguards to protect your data against unauthorized access, disclosure, alteration, or destruction.

5.1 Security Measures We Employ

• Encryption: We use Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols to encrypt data transmitted between your browser and our servers.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. All staff with access undergo regular privacy and security training.
• Secure Payment Processing: All payment transactions are processed through PCI DSS-compliant third-party payment processors. We do not store full payment card numbers on our servers.
• Firewalls and Intrusion Detection: Our servers are protected by firewalls and monitored using intrusion detection systems.
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing to identify and remediate potential risks.
• Data Minimization: We collect only the data that is necessary for the stated purposes and limit internal data access accordingly.

5.2 Limitations of Security

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach that affects your rights or freedoms, we will notify you and the appropriate regulatory authorities in accordance with applicable law.

6. Your Privacy Rights

Depending on your state of residence and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights and responding to legitimate requests in a timely manner.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA, as amended by the CPRA:

6.2 General Privacy Rights (All Users)

Regardless of your state of residence, all users may exercise the following rights:

• Access: Request access to the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data where we have no legitimate basis to retain it.
• Opt-Out of Marketing: Withdraw consent for marketing communications at any time.
• Account Closure: Request the closure of your account and deletion of associated data.

6.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a verifiable request to us by:

• Sending an email to: [email protected]
• Visiting our website at: cafe-papaginos.click

We will acknowledge your request within 10 business days and respond within 45 calendar days. If we require additional time, we will notify you of the extension and the reason for the delay. We may need to verify your identity before processing certain requests.

You may also designate an authorized agent to submit requests on your behalf. Authorized agents must provide written proof of their authorization, and we may still require you to directly verify your identity with us.

7. Cookie Policy Overview

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze traffic, and deliver targeted advertising. Cookies are small text files stored on your device when you visit a website.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the website to operate correctly. Without these cookies, services like the shopping cart or secure login would not work.
• Performance and Analytics Cookies: These collect anonymous data about how visitors use our website, helping us understand which pages are most popular and improve overall performance.
• Functionality Cookies: These remember your preferences, such as your selected language, location, or saved items, to provide a more personalized experience.
• Targeting and Advertising Cookies: These track your browsing habits to deliver advertisements relevant to your interests, both on our website and on third-party platforms.

7.2 Managing Your Cookie Preferences

You may control and manage cookie settings through your browser settings or via our cookie consent banner upon first visiting our website. Please note that disabling certain cookies may affect the functionality and user experience of our website. For more detailed information about the specific cookies we use and how to manage them, please refer to our full Cookie Policy.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

8.1 Retention Periods by Data Category

When personal data is no longer needed for its original purpose, we will securely delete, anonymize, or de-identify it in accordance with our data disposal procedures.

9. Children's Privacy

Papa Ginos is committed to complying with the Children's Online Privacy Protection Act (COPPA) and other applicable laws protecting the privacy of minors. Our website, online ordering system, and marketing communications are not directed toward children under 18 years of age.

If we learn or have reason to believe that we have inadvertently collected personal information from a child under the age of 18, we will promptly delete that information from our records. If you are a parent or legal guardian and believe that your child has provided us with personal information, please contact us immediately at [email protected] so that we may take appropriate corrective action.

We encourage parents and guardians to monitor their children's internet use and to educate them about online privacy. If you are under 18 years of age, please do not submit any personal information to our website without the consent and supervision of a parent or guardian.

10. International Data Transfers

Papa Ginos is a business based in the United States, and the personal information we collect is primarily processed and stored on servers located within the United States. If you are accessing our website from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

10.1 Safeguards for International Transfers

When we transfer data internationally or work with service providers located in other countries, we take appropriate steps to ensure your personal information remains protected to a standard consistent with this Privacy Policy and applicable United States law. These safeguards may include:

• Entering into data processing agreements with our service providers that include standard contractual clauses or equivalent data protection provisions
• Verifying that recipient countries or organizations provide adequate levels of data protection
• Implementing technical and organizational security measures to protect data during transfer and storage

By using our website or services from outside the United States, you acknowledge and consent to the transfer of your personal information to the United States and its processing in accordance with this Privacy Policy.

11. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or integrated services (such as Google Maps, payment processors, or social sharing buttons). These third-party sites operate independently and have their own privacy policies. We do not control and are not responsible for the privacy practices or content of these external websites.

We encourage you to review the privacy policies of any third-party websites or services before providing them with your personal information. The inclusion of a link on our website does not imply our endorsement of the linked site or its privacy practices.

12. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not wish to have your online activities tracked. Our website does not currently respond to DNT signals at this time, as there is no established industry standard for how such signals should be interpreted or implemented. We will continue to monitor developments in this area and update our practices accordingly.

California residents may exercise their opt-out rights under the CCPA/CPRA by contacting us directly at [email protected].

13. FTC Act Compliance and Consumer Protection

Papa Ginos operates in full compliance with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts and practices in commerce. We are committed to transparent, fair, and honest data practices, and we do not engage in deceptive data collection, processing, or marketing activities.

We adhere to FTC guidelines regarding:

• Honest and clear disclosure of our data practices
• Protection of consumer data and reasonable security measures
• Fair marketing communications and promotional practices
• Proper disclosure of endorsements and material connections

If you believe we have engaged in unfair or deceptive practices, you have the right to file a complaint with the Federal Trade Commission at www.ftc.gov or by calling 1-877-FTC-HELP.

14. Filing Complaints with Data Protection Authorities

If you believe that your privacy rights have been violated or that we have not adequately addressed your privacy concerns, you have the right to file a complaint with the appropriate regulatory authority.

14.1 Federal Level

You may file a complaint with the Federal Trade Commission (FTC), which is the primary federal agency responsible for consumer privacy protection in the United States:

• Website: reportfraud.ftc.gov
• Phone: 1-877-382-4357
• Mail: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

14.2 California Residents

California residents may file privacy-related complaints with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov

14.3 Before Filing a Complaint

We encourage you to first contact us directly at [email protected] to allow us the opportunity to resolve your concern promptly and satisfactorily before escalating to a regulatory authority. We will make every reasonable effort to address your concern within 30 days of receipt.

15. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our business practices, applicable laws, or technological developments. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website homepage or via a pop-up notification
• Send an email notification to registered users (where applicable and where we have your email address)

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes have been posted constitutes your acceptance of the updated Privacy Policy. If you disagree with the revised policy, please discontinue use of our services and contact us to request deletion of your data.

16. Contact Us About Privacy

If you have any questions, concerns, requests, or feedback regarding this Privacy Policy or our privacy practices, please do not hesitate to reach out to us. We are committed to addressing all legitimate privacy inquiries promptly and professionally.

This Privacy Policy was last reviewed and updated on June 13, 2026. It constitutes the entire agreement between you and Papa Ginos with respect to your privacy rights and supersedes all prior versions of this policy.