Privacy Policy

Welcome to Papa Ginos. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website papaginos-meal.click, place food orders, or otherwise interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site immediately.

This Privacy Policy has been prepared in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant federal consumer protection regulations. By using our website or services, you acknowledge that you have read, understood, and agree to be bound by all the terms described in this Privacy Policy.

1. About Us

Papa Ginos is a food service business operating in the United States. We provide customers with access to our food ordering services, menu information, promotions, and related content through our website and digital platforms.

For all privacy-related questions, requests, or concerns, you may contact us directly using the information provided above or through the dedicated contact details listed in the Contact Us section of this policy.

2. Information We Collect

We collect various categories of information depending on how you interact with our website and services. The types of information we may collect include the following:

2.1 Personal Identification Information

When you create an account, place a food order, sign up for our newsletter, participate in promotions, or contact us for support, we may collect personally identifiable information such as:

• Full name
• Email address
• Telephone number
• Billing address and delivery address
• Username and password (stored in encrypted form)
• Payment information (processed securely through third-party payment processors; we do not store full card numbers)
• Order history and preferences
• Any other information you voluntarily provide to us

2.2 Usage and Behavioral Data

When you access our website, we automatically collect certain technical and behavioral information about your visit, including:

• Pages visited and time spent on each page
• Referring website or URL
• Links clicked and features used
• Search queries entered on our site
• Date and time of your visit
• Shopping cart contents and order flow interactions
• Errors encountered during navigation

2.3 Device and Technical Information

We collect information about the devices and technology used to access our website, including:

• IP address
• Browser type and version
• Operating system and platform
• Device type (desktop, mobile, tablet)
• Screen resolution
• Internet service provider (ISP)
• Geographic location (derived from IP address at the city or region level)
• Mobile device identifiers (where applicable)

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to enhance your user experience and gather analytics data. Please refer to Section 9 of this policy for detailed information about our use of cookies and your choices regarding them.

2.5 Communications Data

If you contact us by email, phone, or through a contact form, we may retain records of that correspondence, including the content of messages, timestamps, and contact details you provide. This includes feedback, complaints, and customer support inquiries.

2.6 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms (if you connect your social media account or interact with our social media content)
• Analytics providers
• Advertising partners
• Payment processors and fraud prevention services
• Delivery platform partners

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes. Specifically, we use your information to:

3.1 Provide and Manage Our Services

• Process and fulfill food orders placed through our website
• Manage your account and maintain your order history
• Coordinate delivery or pickup arrangements
• Send order confirmations, receipts, and status updates
• Handle returns, refunds, or order modifications
• Respond to your customer service inquiries and requests

3.2 Analytics and Service Improvement

• Analyze website traffic patterns and user behavior to improve our platform
• Evaluate which menu items, promotions, or features are most popular
• Identify and fix technical errors, bugs, or usability issues
• Conduct internal research and business intelligence reporting
• Optimize our website's performance and responsiveness

3.3 Marketing and Promotions

• Send you promotional emails, newsletters, or special offers (with your consent where required by law)
• Personalize marketing communications based on your order history and preferences
• Display targeted advertisements on our website or third-party platforms
• Notify you about new menu items, seasonal deals, or limited-time promotions
• Conduct surveys and gather customer feedback

You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any marketing email or by contacting us directly at [email protected].

3.4 Legal Compliance and Security

• Comply with applicable federal, state, and local laws and regulations
• Detect and prevent fraud, unauthorized access, and other harmful activities
• Enforce our Terms of Service and other agreements
• Respond to legal requests, court orders, or government inquiries
• Protect the rights, safety, and property of Papa Ginos, our customers, and the public

3.5 Business Operations

• Manage our internal business operations and administrative functions
• Facilitate corporate transactions such as mergers, acquisitions, or asset sales
• Train staff and improve customer service standards
• Maintain accurate records for accounting and tax purposes

4. Legal Basis for Processing

Under United States law, including the FTC Act and applicable state consumer protection statutes, we process your personal information based on the following lawful grounds:

• Contractual Necessity: Processing is necessary to fulfill your food orders and provide the services you request.
• Legitimate Interests: We process data to operate and improve our business, prevent fraud, and ensure website security, provided these interests do not override your privacy rights.
• Consent: Where required by law, we obtain your explicit consent before sending marketing communications or placing non-essential cookies.
• Legal Obligation: We process certain data to comply with our legal and regulatory obligations.

5. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own independent marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party companies and service providers who assist us in operating our business and delivering our services. These parties are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security measures. Such service providers may include:

• Payment processors (e.g., credit card processing companies)
• Delivery and logistics partners
• Email marketing and communication platforms
• Web hosting and cloud infrastructure providers
• Analytics and data intelligence services
• Customer support software providers
• Advertising and remarketing platforms
• Fraud detection and cybersecurity services

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law, regulation, or legal process, including:

• Compliance with a subpoena, court order, or other legal demand
• Responding to requests from government or law enforcement agencies
• Protecting the legal rights and property of Papa Ginos
• Preventing or investigating potential fraud or illegal activity
• Ensuring the personal safety of our users or the general public

5.3 Business Transfers

In the event that Papa Ginos undergoes a merger, acquisition, bankruptcy, reorganization, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a change occurs and will inform you of your choices regarding your personal data.

5.4 Aggregated or De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes. This type of sharing does not constitute the sharing of personal information.

6. Data Security

We take the security of your personal information seriously and implement a variety of technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols.
• Access Controls: Access to personal information is restricted to authorized employees and contractors who need it to perform their job functions.
• Password Security: User account passwords are stored in hashed and salted form using strong cryptographic algorithms.
• Payment Security: We use PCI DSS-compliant payment processors and do not store full payment card details on our servers.
• Regular Security Audits: We conduct regular reviews of our information security practices and systems.
• Incident Response: We have procedures in place to detect, report, and respond to data breaches in accordance with applicable law.
• Firewalls and Intrusion Detection: We use network security tools to monitor and protect our infrastructure from unauthorized access.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention practices are as follows:

When your personal information is no longer required, we will securely delete or anonymize it in accordance with our data disposal procedures. In some cases, we may retain anonymized or aggregated data indefinitely for statistical or analytical purposes.

8. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

8.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of collection, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete: You have the right to request deletion of your personal information that we have collected, subject to certain exceptions provided by law.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: Although we do not sell personal information in the traditional sense, if we engage in activities that constitute a "sale" or "sharing" under California law (including for cross-context behavioral advertising), you have the right to opt out.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to purposes necessary to provide the services you request.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA privacy rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality because you exercised your rights.

To exercise your California privacy rights, please submit a verifiable consumer request to us by emailing [email protected]. We will acknowledge your request within 10 business days and respond within 45 calendar days, with the possibility of a 45-day extension where reasonably necessary.

8.2 Rights Available to All U.S. Users

Regardless of your state of residence, we strive to honor the following privacy rights for all users:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information from our systems, subject to legal retention obligations.
• Right to Data Portability: Where technically feasible, you may request your personal information in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where we process data based on your consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.
• Right to Object to Marketing: You may opt out of receiving marketing communications from us at any time.

8.3 How to Submit a Privacy Request

To exercise any of your privacy rights, please contact us using one of the following methods:

• Email: [email protected]
• Website: papaginos-meal.click

To protect your privacy and security, we will verify your identity before processing your request. Verification may involve confirming information associated with your account or providing additional proof of identity. We will not charge a fee for reasonable requests, but we reserve the right to charge a reasonable administrative fee or decline requests that are manifestly unfounded or excessive.

9. Cookie Policy Summary

Our website uses cookies and similar tracking technologies to improve your browsing experience, analyze site traffic, and deliver personalized content and advertising. Below is a brief overview of the types of cookies we use:

You can manage your cookie preferences through your browser settings or via our cookie consent banner displayed when you first visit our website. Please note that disabling certain cookies may impact the functionality and user experience of our website. For a complete description of the cookies we use, please refer to our full Cookie Policy, available on our website.

10. Children's Privacy

Papa Ginos does not direct its services to children under the age of 18, and we do not knowingly collect personal information from minors. Our website, food ordering services, marketing materials, and promotional content are designed for adult consumers.

If you are a parent or legal guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly delete any such information from our records.

We comply with the Children's Online Privacy Protection Act (COPPA), which restricts the collection of personal information from children under 13 years of age. We do not knowingly collect data from any individual under 13 under any circumstances, and we will take immediate steps to delete any such data if discovered.

11. International Data Transfers

Papa Ginos is based in the United States, and all of our data processing activities are primarily conducted within the United States. However, some of our third-party service providers may be located in or operate servers in other countries.

If your information is transferred to, stored, or processed in a country outside the United States, we take steps to ensure that appropriate safeguards are in place to protect your personal information. These safeguards may include:

• Contractual clauses that require third parties to protect your data to the same standard as required in the United States
• Transferring data only to countries or organizations that provide an adequate level of data protection
• Obtaining your explicit consent for certain international transfers where required

By using our website and services, you acknowledge and consent to the transfer of your information to the United States and to our third-party service providers as described in this Privacy Policy.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, delivery partner portals, or other external services. This Privacy Policy applies solely to information collected by Papa Ginos through our website at papaginos-meal.click.

We are not responsible for the privacy practices or content of third-party websites, even if you access them through links on our site. We encourage you to review the privacy policies of any third-party websites you visit before providing any personal information. Your interactions with those sites are governed by their own privacy policies and terms of use.

13. Marketing Communications and Opt-Out

With your consent (where required by law), we may send you promotional emails, text messages, or other communications about our food offerings, seasonal deals, loyalty programs, and special events. You always have the right to opt out of marketing communications from us.

To opt out of marketing communications, you may:

• Click the "Unsubscribe" or "Opt Out" link included in any marketing email we send you
• Email us at [email protected] with the subject line "Unsubscribe"
• Update your communication preferences within your account settings on our website

Please note that even after opting out of marketing communications, we may still send you transactional or service-related messages, such as order confirmations, receipts, delivery notifications, and important account updates. These communications are necessary for the provision of our services and are not subject to opt-out requests.

14. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals websites not to track your online activity. Currently, there is no universally accepted standard for how websites should respond to DNT signals, and our website does not alter its data collection practices in response to DNT browser signals.

However, we do respect your ability to manage cookies through your browser settings and our cookie consent tools, which provide you with meaningful control over how your data is collected and used on our website.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the services we offer. When we make changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised Privacy Policy on our website at papaginos-meal.click
• Where required by law or where changes are material, notify you by email or through a prominent notice on our website

We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting your personal information. Your continued use of our website and services after any changes are posted constitutes your acceptance of the updated Privacy Policy.

16. Filing a Complaint

If you believe that your privacy rights have been violated or that we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to contact us first so that we may attempt to resolve your concern.

You may also have the right to file a complaint with the relevant data protection or consumer protection authority. In the United States, relevant authorities include:

• Federal Trade Commission (FTC): The FTC enforces federal consumer protection laws, including those related to data privacy and security. You can file a complaint at www.ftc.gov or by calling 1-877-FTC-HELP (1-877-382-4357).
• California Attorney General (for California residents): California residents who believe their CCPA/CPRA rights have been violated may file a complaint with the California Office of the Attorney General at oag.ca.gov.
• California Privacy Protection Agency (CPPA): The CPPA enforces the CPRA and related privacy regulations. Visit cppa.ca.gov for more information.
• State Attorney General Offices: Residents of other states may contact their respective state attorney general's office to report privacy-related concerns.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact our privacy team using the details below:

We are committed to responding to all privacy-related inquiries promptly and thoroughly. For California residents submitting verifiable consumer requests under the CCPA/CPRA, we will acknowledge receipt within 10 business days and provide a substantive response within 45 calendar days, subject to any permissible extensions.

This Privacy Policy was last updated on May 30, 2026, and is effective as of that date.