Privacy Policy

This Privacy Policy describes how Giordanos ("we," "us," or "our") collects, uses, discloses, and protects information obtained from visitors and customers who access or use our website located at tastygiordanos.click (the "Website") and any related food ordering or delivery services we provide. We are committed to protecting your personal information and your right to privacy. Please read this policy carefully before using our Website or submitting any personal information to us.

By accessing or using our Website, placing a food order, signing up for our newsletter, or otherwise engaging with our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with the terms of this policy, please discontinue use of our Website immediately.

This Privacy Policy is governed by applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable federal and state consumer protection statutes.

1. About Us

Giordanos is a food business operating through the website tastygiordanos.click. We provide food ordering, delivery, and related services to customers throughout the United States. For all privacy-related inquiries, data subject requests, or questions about this policy, please contact us using the details below:

2. Information We Collect

We collect various types of information in connection with the services we provide. The categories of personal information we may collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, subscribe to marketing communications, or contact us directly, we may collect personal identification information such as:

• Full name
• Email address
• Phone number
• Mailing and delivery address (including street, city, state, and ZIP code)
• Billing information (credit card number, expiration date, billing address — processed securely through third-party payment processors)
• Username and password (for registered accounts)
• Date of birth (where required for age verification)
• Profile preferences and food order history

2.2 Transaction and Order Data

When you place a food order through our Website, we collect information related to that transaction, including:

• Items ordered, quantities, and special instructions
• Order history and frequency
• Payment method type (e.g., credit card, debit card, digital wallet)
• Delivery address and delivery preferences
• Order timestamps and confirmation numbers
• Loyalty program participation and reward redemptions

2.3 Usage Data and Technical Information

We automatically collect certain technical and usage information when you visit our Website, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type
• Pages visited, time spent on each page, and navigation paths
• Referral URLs (the webpage that linked you to our site)
• Search queries entered on our Website
• Clickstream data and interaction logs
• Session duration and frequency of visits

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect information about your browsing behavior and preferences. Please refer to Section 9 of this Privacy Policy for detailed information about our cookie practices. You may also review our separate Cookie Policy available on our Website for more comprehensive details.

2.5 Device Information

When you access our Website through a mobile device, tablet, or computer, we may collect device-specific information such as:

• Device identifiers (such as IDFA, Android Advertising ID)
• Mobile network information
• Hardware model and screen resolution
• Operating system version
• App version (if applicable)

2.6 Communications and Customer Support Data

If you contact us via email, phone, live chat, or any other channel, we may retain records of those communications, including:

• The content of your messages or inquiries
• Feedback, complaints, or suggestions you submit
• Survey responses and ratings
• Customer service records and case notes

2.7 Information from Third Parties

We may receive personal information about you from third-party sources, such as:

• Social media platforms (if you choose to connect your account or share content)
• Third-party food delivery platforms or aggregator services
• Analytics providers and advertising partners
• Public databases and data enrichment services
• Referral partners

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes, including:

3.1 Providing and Managing Our Services

• Processing and fulfilling food orders, including coordinating delivery
• Creating and managing your customer account
• Sending order confirmations, receipts, and delivery status updates
• Facilitating payment processing through secure third-party processors
• Responding to your customer service inquiries and resolving disputes
• Managing loyalty programs, promotions, and discount redemptions

3.2 Analytics and Service Improvement

• Analyzing usage patterns, traffic sources, and customer behavior on our Website
• Conducting internal research and development to improve our menu, Website functionality, and delivery services
• Monitoring and troubleshooting technical issues
• Personalizing your experience, including displaying relevant menu items and promotions based on your order history
• Measuring the effectiveness of our marketing campaigns

3.3 Marketing and Promotional Communications

• Sending promotional emails, newsletters, special offers, and updates about new menu items (where you have opted in or where permitted by applicable law)
• Delivering targeted advertising through our Website, social media platforms, and third-party advertising networks
• Conducting contests, sweepstakes, or promotional campaigns
• Retargeting advertising based on your browsing and purchase history

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email, or by contacting us directly at [email protected]. Please note that opting out of marketing communications does not affect transactional messages related to your orders.

3.4 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Enforcing our Terms of Service and other agreements
• Detecting, preventing, and investigating fraud, unauthorized access, and other security incidents
• Protecting the rights, property, and safety of Giordanos, our customers, and the public
• Responding to lawful requests from courts, law enforcement agencies, or regulatory authorities

4. How We Share Your Information

We do not sell your personal information to third parties for their own direct marketing purposes. However, we may share your information with trusted third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage third-party companies and service providers to assist in operating our Website and delivering our services. These include:

• Payment processors: To securely process credit card and digital wallet transactions
• Delivery and logistics partners: To coordinate food delivery to your address
• Email and SMS marketing platforms: To distribute promotional communications
• Cloud hosting and infrastructure providers: To store and manage website data securely
• Analytics providers: To analyze Website traffic and user behavior (e.g., Google Analytics)
• Customer support tools: To manage helpdesk tickets and live chat
• Fraud detection and security services: To identify suspicious activity

All service providers are contractually obligated to use your personal information only for the purposes we specify and to maintain appropriate security standards. They are not permitted to use your data for their own independent purposes.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a court order, subpoena, legal process, or government request
• Enforce our Terms of Service or protect our legal rights
• Investigate potential violations of law or prevent imminent harm
• Protect the safety of our customers, employees, or the public

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, reorganization, or other corporate transaction, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our Website before your personal information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with other third parties when you have given us your explicit consent to do so, such as when you choose to integrate your account with a third-party platform or participate in a co-branded promotion.

4.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or other business purposes.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your browser and our Website is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology. Payment card data is processed using Payment Card Industry Data Security Standard (PCI-DSS) compliant systems.
• Access controls: We restrict access to personal information to authorized employees and service providers who need it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations.
• Secure infrastructure: Our Website and data systems are hosted on secure, industry-standard cloud infrastructure with firewall protections, intrusion detection systems, and regular security audits.
• Password protection: Account passwords are stored using hashed and salted encryption methods. We strongly encourage users to create strong, unique passwords and to enable multi-factor authentication where available.
• Data minimization: We only collect the personal information that is necessary for the purposes described in this Privacy Policy.
• Incident response: We maintain a data breach response plan and will notify affected users and relevant authorities as required by applicable law in the event of a security incident.

6. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information under applicable United States law. We are committed to honoring these rights and responding to verified requests in accordance with applicable legal requirements.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions permitted by law.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. To exercise this right, please contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of your sensitive personal information to what is necessary for providing our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. We will not deny you services, charge you different prices, or provide a different quality of service as a result of your exercising privacy rights.

6.2 General Privacy Rights (All U.S. Residents)

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we update or correct inaccurate personal information.
• Right to Deletion: You may request deletion of your personal information, subject to our legal obligations to retain certain data.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal information in a portable, machine-readable format.
• Right to Withdraw Consent: Where we rely on your consent to process personal information (such as for marketing communications), you may withdraw that consent at any time.

6.3 How to Submit a Privacy Rights Request

To exercise any of the rights described above, please contact us using the following methods:

• Email: [email protected]
• Website: tastygiordanos.click

We will verify your identity before processing your request to prevent unauthorized access to your personal information. Verification may require you to provide certain information to confirm your identity. We will respond to verified requests within 45 days, as required by applicable law. In some cases, we may extend this period by an additional 45 days and will notify you accordingly.

You may also designate an authorized agent to submit privacy requests on your behalf. Authorized agents must provide written authorization from you and may be required to verify their identity separately.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods we apply include:

When personal information is no longer required for the purposes for which it was collected, we will securely delete, anonymize, or archive it in accordance with applicable legal and regulatory requirements.

8. Children's Privacy

We do not knowingly solicit, collect, or maintain personal information from children under the age of 13, in compliance with the Children's Online Privacy Protection Act (COPPA). Our services are directed at adults aged 18 and over. If you are under the age of 18, you should not use our Website or submit any personal information to us without parental consent and supervision.

If we become aware that we have inadvertently collected personal information from a child under the age of 13, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided personal information to us without your consent, please contact us immediately at [email protected] so we can investigate and take appropriate action.

9. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze Website traffic, and deliver targeted advertising. Below is a summary of the types of cookies we use:

9.1 Types of Cookies We Use

9.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings at any time. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications before a cookie is placed. Please note that disabling certain cookies may impair your ability to use some features of our Website, including placing orders or accessing your account.

For California residents, you may also opt out of the use of advertising cookies by visiting the Digital Advertising Alliance's opt-out page at optout.aboutads.info or the Network Advertising Initiative's opt-out page at optout.networkadvertising.org.

For full details about the cookies we use and how to manage them, please review our separate Cookie Policy available on our Website.

10. International Data Transfers

Giordanos is based in the United States and our services are primarily directed at customers within the United States. However, some of our third-party service providers, including cloud hosting and analytics platforms, may process and store personal information on servers located outside of the United States.

If your personal information is transferred to countries outside the United States, we will ensure that such transfers are conducted in compliance with applicable U.S. law and that appropriate safeguards are in place to protect your personal information. These safeguards may include:

• Entering into data processing agreements with third-party providers that include appropriate contractual clauses and data protection requirements
• Ensuring that service providers maintain privacy and security standards equivalent to or greater than those required under U.S. law
• Verifying that recipients of personal information are located in jurisdictions that provide adequate levels of data protection

By using our Website or providing us with your personal information, you acknowledge and consent to the transfer of your data to and processing of your data in the United States and potentially other countries, subject to the safeguards described above.

11. Third-Party Websites and Links

Our Website may contain links to third-party websites, social media platforms, delivery partner portals, or other external resources. Please be aware that we do not control these third-party sites and are not responsible for their privacy practices or content. This Privacy Policy applies only to information collected through our Website at tastygiordanos.click. We strongly encourage you to review the privacy policies of any third-party website you visit through a link on our Website.

We are not responsible for the content, privacy practices, or data handling of third-party delivery platforms, social media networks, or payment processors. Your use of such third-party services is governed by their respective terms of service and privacy policies.

12. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your activity not be tracked. At this time, our Website does not respond to Do Not Track signals because there is no industry-standard interpretation of how to respond to such signals. However, you may manage your tracking preferences through our cookie management settings and by opting out of marketing communications as described in this policy.

13. Your Choices and Opt-Out Options

We respect your right to make choices about how your personal information is used. You have the following opt-out options available to you:

• Marketing Emails: Click the "unsubscribe" link in any promotional email or contact us at [email protected]
• SMS Marketing: Reply "STOP" to any marketing text message you receive from us
• Personalized Advertising: Adjust your cookie preferences through our cookie management tool or browser settings
• Account Deletion: Contact us to request deletion of your account and associated personal information
• Targeted Ads on Social Media: Adjust your ad preferences within your social media account settings (e.g., Facebook, Instagram)

14. How to File a Complaint

If you believe that your privacy rights have been violated, or if you are dissatisfied with how we have handled your personal information, we encourage you to contact us first so we can attempt to resolve your concern directly.

14.1 Contact Us Directly

Please send your complaint or concern to:

• Email: [email protected]
• Website: tastygiordanos.click

We will acknowledge your complaint within 10 business days and work with you to resolve it as promptly as possible.

14.2 Regulatory Complaints

If you are not satisfied with our response, or if you believe we are processing your personal information in violation of applicable law, you have the right to file a complaint with the appropriate regulatory authority:

• Federal Trade Commission (FTC): The FTC enforces consumer protection and privacy laws at the federal level. You may file a complaint at reportfraud.ftc.gov or contact the FTC at 1-877-FTC-HELP (1-877-382-4357).
• California Attorney General (for California residents): If you are a California resident and believe your CCPA rights have been violated, you may file a complaint with the California Privacy Protection Agency (CPPA) at cppa.ca.gov or the California Attorney General's office at oag.ca.gov/privacy.
• State Attorneys General: Residents of other states may also contact their respective state Attorney General's office if they believe their state consumer protection or privacy rights have been violated.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or data processing activities. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our Website informing users of the changes
• Where required by law or where changes are significant, send you an email notification to the address associated with your account

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our Website after any changes to this Privacy Policy constitutes your acceptance of those changes.

16. Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests related to this Privacy Policy or our data handling practices, please do not hesitate to contact us. We are committed to addressing all privacy-related inquiries in a timely and transparent manner.

We aim to respond to all privacy-related inquiries within 10 business days of receipt. For data subject access requests under the CCPA or other applicable laws, we will respond within the legally required timeframes (45 days, with the possibility of a 45-day extension where necessary).