Privacy Policy

Welcome to Marcos Cafe. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website marcoscafe.click, place an order, or interact with our services in any way. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services immediately.

This Privacy Policy applies to all personal information we collect through our website, mobile-optimized pages, email communications, online ordering systems, loyalty programs, and any other digital or physical touchpoints operated by Marcos Cafe (collectively referred to as the "Services").

As a food business operating in the United States, we comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission (FTC) Act, and other applicable consumer protection regulations. Where state-specific rights apply to you, we acknowledge and honor those rights as described in this policy.

1. Who We Are

Marcos Cafe is a food service business dedicated to providing quality dining experiences to our customers. For purposes of this Privacy Policy, Marcos Cafe acts as the data controller responsible for the personal information collected through our website and services.

For any privacy-related concerns, questions, or requests, you may contact us directly using the information provided above or in Section 13 of this policy.

2. Information We Collect

We collect several categories of information to provide, improve, and personalize our Services. The types of information we collect include personal information you provide to us voluntarily, information collected automatically, and information obtained from third-party sources.

2.1 Personal Information You Provide

When you interact with Marcos Cafe — whether by creating an account, placing an order, signing up for our newsletter, contacting us, or participating in promotions — you may provide us with the following personal information:

• Identity Information: Full name, username or display name
• Contact Information: Email address, phone number, delivery address, billing address
• Account Credentials: Password and security questions (stored in encrypted form)
• Payment Information: Credit card numbers, debit card numbers, billing details (processed through secure third-party payment processors; we do not store full card numbers)
• Order Information: Food preferences, dietary restrictions, special instructions, order history
• Communication Data: Messages, feedback, reviews, and any correspondence you send us
• Loyalty Program Data: Points balance, reward redemption history, preferences
• Marketing Preferences: Your choices regarding promotional emails, SMS notifications, and other communications

2.2 Information Collected Automatically

When you visit our website or use our digital services, we automatically collect certain technical and usage information through cookies, web beacons, pixels, and similar tracking technologies:

• Device Information: IP address, device type (desktop, mobile, tablet), operating system and version, browser type and version, device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, exit pages, scrolling behavior
• Location Data: General geographic location inferred from IP address; precise location data if you grant permission on a mobile device
• Log Data: Server logs including date and time of access, error reports, and performance data
• Cookie and Tracking Data: Information stored by cookies, pixel tags, and similar technologies (see Section 8 for more details)
• Transaction Data: Details about orders placed, payment methods used (excluding full card numbers), and transaction timestamps

2.3 Information From Third Parties

We may receive information about you from third-party sources, which we may combine with information we collect directly:

• Social Media Platforms: If you connect your social media account (e.g., Facebook, Google) to our Services or log in using social login features, we receive certain profile information such as your name, email address, and profile picture
• Payment Processors: Confirmation of payment status and basic transaction identifiers
• Delivery Partners: Delivery address confirmations and delivery status updates
• Analytics Providers: Aggregated insights about website traffic and user behavior
• Marketing Partners: Information about your interests and interactions with our advertisements on third-party platforms

3. How We Use Your Information

We use the information we collect for various legitimate business purposes. We will only use your personal information where we have a lawful basis to do so. Below is a detailed explanation of how and why we use your data:

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, including coordination with kitchen staff and delivery partners
• To create and manage your customer account
• To send order confirmations, receipts, and delivery updates
• To process payments and handle refunds or disputes
• To manage your loyalty points and rewards
• To respond to your inquiries, complaints, and customer service requests

3.2 Service Improvement and Analytics

• To analyze how users interact with our website and identify areas for improvement
• To understand customer preferences and dining trends
• To test new features, menu items, and user experience enhancements
• To conduct internal research and business intelligence reporting
• To monitor the technical performance and security of our website
• To detect and prevent fraudulent transactions and unauthorized access

3.3 Marketing and Communications

• To send you promotional emails, special offers, and news about new menu items (with your consent where required)
• To deliver personalized recommendations based on your order history and preferences
• To run targeted advertising campaigns on social media and digital platforms
• To conduct surveys and gather customer feedback
• To notify you of changes to our menu, hours, policies, or services

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email, replying STOP to any SMS, or contacting us at [email protected]. Note that opting out of marketing does not affect transactional communications related to your orders.

3.4 Legal Compliance and Safety

• To comply with applicable laws, regulations, and legal obligations
• To respond to lawful requests from government authorities and law enforcement
• To enforce our Terms of Service and other agreements
• To protect the rights, property, and safety of Marcos Cafe, our customers, and the public
• To investigate and prevent fraud, abuse, and security incidents

4. How We Share Your Information

We respect your privacy and do not sell your personal information to third parties. However, we do share your information with certain trusted parties under the following circumstances:

4.1 Service Providers and Business Partners

We engage third-party companies and individuals to perform functions on our behalf. These service providers have access to your personal information only to the extent necessary to perform their designated functions and are contractually obligated to maintain confidentiality and use your data solely for authorized purposes. Categories of service providers include:

• Payment Processors: Stripe, Square, PayPal, or similar payment platforms that handle transaction processing
• Delivery Partners: Third-party delivery services that fulfill your orders
• Email and SMS Marketing Platforms: Services used to send you communications and manage your preferences
• Cloud Hosting Providers: Infrastructure services that host our website and databases
• Analytics Providers: Google Analytics and similar tools that help us understand website traffic
• Customer Support Platforms: Help desk and live chat software providers
• IT and Security Services: Cybersecurity and technical support providers

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request
• Enforce our policies and agreements
• Protect against legal liability
• Investigate potential violations of law or our Terms of Service
• Protect the safety and security of our customers, employees, or the public

4.3 Business Transfers

If Marcos Cafe undergoes a merger, acquisition, sale of assets, reorganization, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with other third parties when you have given us explicit consent to do so, such as when you participate in co-branded promotions or choose to connect third-party applications to your account.

4.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you. We may use such data for research, analytics, marketing, and business development purposes without restriction.

5. Data Security

Protecting your personal information is a top priority for Marcos Cafe. We implement a comprehensive set of technical, administrative, and physical security measures designed to safeguard your data against unauthorized access, disclosure, alteration, or destruction.

5.1 Technical Safeguards

• Encryption: All data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology
• Password Hashing: Account passwords are stored using industry-standard cryptographic hashing algorithms
• Firewalls and Intrusion Detection: We deploy firewalls, intrusion detection systems, and network monitoring tools
• Tokenization: Payment card data is tokenized; we never store complete card numbers on our servers
• Access Controls: Role-based access controls limit employee access to personal data on a need-to-know basis
• Regular Security Audits: We conduct periodic security assessments and vulnerability scans

5.2 Administrative Safeguards

• Employee training on data privacy and security best practices
• Confidentiality agreements with staff and contractors who handle personal data
• Documented data handling procedures and incident response plans
• Vendor security assessments before engaging third-party service providers

Important Notice: While we take every reasonable precaution to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. If you believe your account or data has been compromised, please contact us immediately at [email protected].

6. Your Privacy Rights

Depending on your state of residence in the United States, you may have specific rights regarding your personal information. We honor these rights regardless of your location to the extent practically possible. Below is a comprehensive overview of your rights:

6.1 Right to Know and Access

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purposes for collecting the information, and the categories of third parties with whom we share it.

6.2 Right to Correction

You have the right to request that we correct inaccurate personal information we maintain about you. We will use commercially reasonable efforts to honor correction requests, subject to verification of your identity.

6.3 Right to Deletion

You have the right to request that we delete the personal information we have collected from you. We will comply with deletion requests subject to certain exceptions permitted by law, including where retaining the information is necessary to complete a transaction, detect security incidents, comply with a legal obligation, or exercise a legal right.

6.4 Right to Data Portability

You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, to the extent technically feasible.

6.5 Right to Opt-Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information with third parties for cross-context behavioral advertising. We do not sell your personal information. However, our use of certain advertising technologies may constitute "sharing" under California law. You may opt out by contacting us at [email protected] or by using a Global Privacy Control (GPC) signal, which we honor.

6.6 Right to Limit Use of Sensitive Personal Information

If we collect sensitive personal information (such as precise geolocation, health data, or financial data), you have the right to direct us to limit our use of such information to what is necessary to perform the services.

6.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality of service because you exercised your rights under applicable privacy law.

6.8 How to Submit a Privacy Rights Request

To exercise any of the rights described above, please submit a verifiable consumer request by:

• Emailing us at: [email protected]
• Visiting our website: marcoscafe.click

We will respond to verifiable requests within 45 days of receipt. If we require additional time (up to an additional 45 days), we will notify you of the extension and the reason for the delay. We may require identity verification before processing your request to protect your privacy and prevent unauthorized access to your data.

You may designate an authorized agent to make a request on your behalf. We may require written proof of such authorization and may verify your identity directly with you before processing requests submitted by an agent.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention standards are:

When the retention period expires, we securely delete, destroy, or anonymize your personal information in accordance with our data disposal procedures. If you request deletion of your account, we will begin the deletion process promptly, subject to the exceptions noted in Section 6.3.

8. Cookies and Tracking Technologies

Marcos Cafe uses cookies, web beacons, pixel tags, and other tracking technologies to enhance your experience on our website, analyze usage patterns, and deliver personalized content and advertising. This section provides a brief overview of our cookie practices.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the basic functioning of our website, including maintaining your shopping cart and user session
• Performance and Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics)
• Functional Cookies: Remember your preferences, such as language settings and saved order customizations
• Marketing and Advertising Cookies: Track your browsing activity to deliver relevant advertisements on third-party platforms

8.2 Your Cookie Choices

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising through the Digital Advertising Alliance's opt-out tool at www.aboutads.info or the Network Advertising Initiative at www.networkadvertising.org.

For more detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

9. Children's Privacy

Our Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or maintain personal information from children under the age of 13. If we become aware that a child under 13 has provided us with personal information without verifiable parental consent, we will take immediate steps to delete that information from our records.

We comply with the Children's Online Privacy Protection Act (COPPA). If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at [email protected].

For individuals between the ages of 13 and 17, we encourage parental supervision when using our website and services. By using our Services, you represent that you are at least 18 years of age.

10. International Data Transfers

Marcos Cafe operates primarily within the United States. However, some of our third-party service providers may process your personal data in countries outside the United States. If we transfer your personal information internationally, we take steps to ensure that appropriate safeguards are in place to protect your data in a manner consistent with applicable U.S. privacy laws.

Such safeguards may include:

• Data processing agreements with international vendors that include appropriate data protection clauses
• Use of Standard Contractual Clauses (SCCs) or equivalent protections where applicable
• Working only with vendors that maintain equivalent data security and privacy standards

By using our Services and submitting your personal information, you acknowledge that your data may be transferred to and processed in countries that may have different data protection laws than your country or state of residence.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Marcos Cafe. This Privacy Policy does not apply to such third-party services. We are not responsible for the privacy practices of any third party and encourage you to review the privacy policies of any third-party website you visit.

Examples of third-party services you may encounter through our website include social media sharing buttons, embedded maps (e.g., Google Maps), third-party payment gateways, and review platforms. Clicking on these links may result in the collection of data by those third parties.

12. California-Specific Disclosures

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023.

12.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email, IP address)
• Commercial information (purchase history, ordering preferences)
• Internet or electronic network activity information (website usage data)
• Geolocation data (general location from IP address)
• Audio, electronic, or visual information (if you submit photos or voice recordings in support requests)
• Inferences drawn from other personal information (customer preference profiles)

12.2 "Do Not Sell or Share My Personal Information"

California residents have the right to opt out of the sale or sharing of their personal information. As stated in this policy, we do not sell your personal information. If you wish to opt out of any sharing for cross-context behavioral advertising purposes, please contact us at [email protected].

12.3 Shine the Light Law

California Civil Code Section 1798.83 permits our customers who are California residents to request and obtain from us once a year, free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. If applicable, this information would include a list of the categories of personal information shared and all the names and addresses of the third parties with which we shared personal information in the immediately preceding calendar year. To make such a request, contact us at [email protected].

13. How to File a Complaint

We take privacy complaints seriously and will work diligently to resolve any concerns you may have. If you believe we have not handled your personal information in accordance with this Privacy Policy or applicable law, you have the right to file a complaint.

13.1 Contact Us First

We encourage you to contact us first so we can address your concern directly. Please reach out to our privacy team at:

• Email: [email protected]
• Website: marcoscafe.click

We will acknowledge your complaint within 5 business days and work to resolve it within 30 days. If additional time is needed, we will inform you of the reason and expected resolution timeframe.

13.2 Regulatory Authorities

If you are not satisfied with our response, you may file a complaint with the appropriate regulatory authority:

• California Privacy Protection Agency (CPPA): If you are a California resident, you may file a complaint with the CPPA at www.cppa.ca.gov
• Federal Trade Commission (FTC): For general consumer protection complaints, you may contact the FTC at www.ftc.gov/complaint or by calling 1-877-FTC-HELP (1-877-382-4357)
• Your State Attorney General: Many states have consumer protection offices that accept privacy-related complaints. Visit your state government's official website for contact information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered users via email
• Post a prominent notice on our website for a reasonable period following the update

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team using the details below:

We are committed to resolving privacy concerns promptly and transparently. Our team is available during regular business hours to assist you with any privacy-related matter.

Disclaimer: This Privacy Policy was last reviewed and updated on July 5, 2026. Marcos Cafe reserves the right to modify this policy at any time. This document constitutes the official Privacy Policy of Marcos Cafe for the website marcoscafe.click and all associated digital services. This policy is intended to comply with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act).