Privacy Policy

Welcome to Giordanos. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website giordanosdelivery.top, place orders, or otherwise interact with our food delivery and restaurant services. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our site and services.

This Privacy Policy is written in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations. If you are a California resident, please pay special attention to the sections marked as relevant to California residents.

1. Who We Are

Giordanos is a food service company operating through the website giordanosdelivery.top. We offer food delivery, online ordering, and related services to customers across the United States.

For all privacy-related inquiries, please contact us using the contact details provided above or as specified in the Contact Us section at the end of this document.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and shipping address (including delivery address)
• Date of birth (where required for age verification)
• Username and password (in hashed and encrypted format)

2.2 Payment and Financial Information

When you make a purchase, we collect the information necessary to process your payment. This may include:

• Credit or debit card numbers (processed through secure, third-party payment processors)
• Billing address
• Payment method type
• Transaction history and order details

2.3 Order and Usage Information

We automatically collect information about your interactions with our platform, including:

• Items ordered, preferences, and dietary notes
• Order history and frequency
• Favorite items and saved addresses
• Customer support communications
• Feedback, reviews, and ratings you submit

2.4 Device and Technical Information

When you access our website, we may automatically collect certain technical data, such as:

• IP address
• Browser type and version
• Operating system
• Device identifiers
• Referring URLs and exit pages
• Time zone and language settings
• Screen resolution and display settings

2.5 Location Information

To provide accurate delivery services, we may collect your precise or approximate geographic location. Location data may be gathered from:

• GPS data from your mobile device (with your permission)
• IP address geolocation
• Delivery addresses you enter manually

2.6 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior, preferences, and interaction with our website. For a detailed explanation of how we use cookies, please refer to Section 9 – Cookie Usage of this policy.

2.7 Communications Data

If you contact us via email, phone, or any other channel, we may collect and retain:

• The content of your message
• Your contact details
• Records of correspondence
• Customer service notes related to your inquiry

2.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you connect your account or use social login)
• Marketing and analytics partners
• Payment processors and fraud detection services
• Delivery partner networks

3. How We Use Your Information

We use the information we collect for a variety of purposes related to the operation, improvement, and promotion of our services. Specifically, we use your data for the following purposes:

3.1 Service Provision and Order Fulfillment

• Processing and managing your food orders
• Coordinating delivery and confirming order status
• Communicating with you about your orders, including confirmations, updates, and receipts
• Managing your account and preferences
• Providing customer support and resolving disputes

3.2 Analytics and Service Improvement

• Analyzing usage patterns and trends on our website
• Testing and improving our website features and functionality
• Conducting research and developing new services or menu offerings
• Measuring the effectiveness of our marketing campaigns
• Monitoring the technical performance of our website

3.3 Marketing and Communications

• Sending you promotional emails, offers, and newsletters (with your consent or where otherwise permitted by law)
• Personalizing your experience and displaying relevant content or promotions
• Notifying you about loyalty programs, rewards, and special deals
• Serving targeted advertisements on our website or third-party platforms

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any of our emails or by contacting us at [email protected].

3.4 Legal and Security Purposes

• Complying with applicable laws, regulations, and legal processes
• Preventing, detecting, and investigating fraudulent or illegal activity
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Giordanos, our customers, and the public

4. Legal Basis for Processing

We process your personal data on the following lawful bases:

• Contractual Necessity: Processing is necessary to fulfill your orders and deliver our services to you.
• Legitimate Interests: We process certain data to operate, maintain, and improve our business and services, provided such interests are not overridden by your rights.
• Consent: Where required by law, we process your data based on your express consent, such as for marketing communications or certain cookies.
• Legal Obligation: We process data where we are required to do so under applicable federal or state law.

5. Data Sharing with Third Parties

We do not sell your personal information to third parties for their own independent marketing purposes. However, we do share your information with certain third parties under the circumstances described below:

5.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf. These service providers have access to your personal information only to the extent necessary to perform their functions and are contractually prohibited from using it for other purposes. Categories of service providers include:

• Payment processors and financial institutions
• Food delivery logistics and courier partners
• Cloud hosting and data storage providers
• Email and SMS communication platforms
• Analytics and marketing technology providers
• Customer relationship management (CRM) software providers
• Fraud detection and cybersecurity services

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information to government authorities, regulators, or law enforcement agencies if we believe in good faith that disclosure is:

• Required by applicable law, regulation, or legal process (such as a court order or subpoena)
• Necessary to protect the safety of any person
• Necessary to protect the rights or property of Giordanos
• Necessary to detect, prevent, or address fraud, security, or technical issues

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity as part of the transaction. We will notify you via email and/or a prominent notice on our website if such a transfer results in a material change to this Privacy Policy.

5.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so, such as when participating in co-promotional programs or referral initiatives.

5.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other commercial purposes.

6. Data Security

We take the security of your personal information seriously and implement a range of administrative, technical, and physical safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your device and our servers.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions.
• Password Hashing: User passwords are stored using secure, one-way hashing algorithms.
• Payment Security: We comply with PCI-DSS standards for handling payment card information through certified third-party processors.
• Regular Security Audits: We conduct periodic reviews and assessments of our security practices and systems.
• Data Minimization: We collect only the data necessary for stated purposes and retain it only as long as required.
• Incident Response: We maintain a data breach response plan and will notify affected individuals and relevant authorities as required by law.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information. We respect and honor these rights as described below:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used format within the timeframe required by applicable law.

7.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. You may update much of this information directly through your account settings.

7.3 Right to Deletion

You have the right to request that we delete your personal information, subject to certain exceptions (such as where we are required to retain data for legal or regulatory compliance, fraud prevention, or other legitimate business purposes).

7.4 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to request that we transfer that data to another controller where technically feasible.

7.5 Right to Opt Out of Marketing

You may opt out of receiving marketing communications from us at any time by:

• Clicking the "unsubscribe" or "opt-out" link in any marketing email
• Contacting us at [email protected]
• Adjusting your notification preferences in your account settings

7.6 Right to Opt Out of Sale or Sharing (California Residents – CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have the right to opt out of the "sale" or "sharing" of their personal information for cross-context behavioral advertising. While we do not sell personal data in the traditional sense, we may share data with advertising partners in a manner that qualifies as "sharing" under CPRA. You may exercise this right by contacting us at [email protected] with the subject line "California Privacy Rights."

7.7 Right to Limit Use of Sensitive Personal Information (California Residents – CPRA)

California residents have the right to direct us to limit the use of any sensitive personal information we collect to uses that are necessary to provide the services you request.

7.8 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. You will not receive a lower quality of service, be charged higher prices, or be denied any goods or services because you exercised your rights under applicable privacy law.

7.9 How to Submit a Rights Request

To exercise any of the rights described above, please contact us using the following methods:

• Email: [email protected]
• Website: giordanosdelivery.top

We will respond to verified requests within the timeframe required by applicable law (generally 45 days for CCPA requests, with a possible 45-day extension where necessary). We may need to verify your identity before processing your request.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods we apply include:

When your personal information is no longer required, we will delete it securely or anonymize it so it can no longer be associated with you. In some cases, we may retain anonymized, aggregated data indefinitely for analytical and business intelligence purposes.

9. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing activities. Cookies are small text files stored on your device when you visit a website.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly. These cannot be disabled without affecting core functionality (e.g., shopping cart, session management).
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting information about page visits, traffic sources, and user behavior.
• Functional Cookies: Allow us to remember your preferences, such as language settings, saved addresses, and login state.
• Targeting and Advertising Cookies: Used to deliver relevant advertisements to you and measure the effectiveness of ad campaigns.
• Third-Party Cookies: Set by our partners and service providers (e.g., Google Analytics, Meta Pixel) to support analytics and marketing functions.

9.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings or our on-site cookie consent tool. Most browsers allow you to refuse or delete cookies. However, disabling certain cookies may affect your ability to use some features of our website.

For more detailed information about how we use cookies, including a full list of cookies we deploy and instructions for managing your preferences, please refer to our full Cookie Policy available on our website at giordanosdelivery.top.

10. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 18.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly delete such information from our records.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under the age of 13 without verifiable parental consent. As a matter of policy, we extend this protection to all users under the age of 18.

11. International Data Transfers

Giordanos is based in the United States and primarily processes data within the United States. However, some of our third-party service providers and business partners operate globally. As a result, your personal information may be transferred to, stored in, or accessed from countries outside the United States.

When we transfer personal information internationally, we take steps to ensure that appropriate safeguards are in place to protect your data in accordance with applicable privacy laws. These safeguards may include:

• Contractual data protection agreements with international service providers
• Transfers to countries that have been recognized as providing adequate levels of data protection
• Standard contractual clauses or other approved transfer mechanisms where required

By using our services, you acknowledge and consent to the transfer of your personal information to the United States and other countries as described in this section.

12. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Giordanos. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of third-party sites and encourage you to review the privacy policies of any third-party websites you visit.

Third-party services we may integrate with include, but are not limited to, payment gateways, social media platforms, map and location services, and marketing analytics tools. Each of these third parties has their own privacy policies governing their data practices.

13. California Residents – Additional Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023. In addition to the rights described above, California residents are entitled to:

• Know what personal information is being collected about them at or before the time of collection.
• Know whether their personal information is being sold or disclosed and to whom.
• Opt out of the sale or sharing of their personal information.
• Access their personal information (up to two requests in a 12-month period).
• Request deletion of their personal information, subject to certain exceptions.
• Correct inaccurate personal information that we hold.
• Limit the use and disclosure of sensitive personal information.
• Non-discrimination for exercising any of these rights.

To exercise your California privacy rights, please contact us at [email protected] with the subject line "California Privacy Rights Request." We will verify your identity before processing your request and respond within the legally required timeframes.

California residents may also designate an authorized agent to submit requests on their behalf. We may require written proof of authorization and may verify the identity of both the agent and the consumer.

14. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your browsing not be tracked. At this time, our website does not respond to DNT signals, as there is no industry-wide consensus on how to interpret or honor such signals. We will continue to monitor developments in this area and update our practices accordingly.

You may also use the Global Privacy Control (GPC) signal. Where required by applicable law (including the CPRA), we will honor GPC signals as opt-out requests from the sale or sharing of personal information.

15. Filing a Complaint with a Regulatory Authority

If you believe that we have violated your privacy rights or failed to handle your personal information in accordance with applicable law, you have the right to file a complaint with the appropriate regulatory authority.

15.1 Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) is the primary federal agency responsible for consumer protection and privacy enforcement in the United States. You may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-382-4357
• Mailing Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

15.2 California Privacy Protection Agency (CPPA)

If you are a California resident, you may file a complaint with the California Privacy Protection Agency (CPPA), the state agency responsible for enforcing the CCPA/CPRA:

• Website: cppa.ca.gov
• Mailing Address: California Privacy Protection Agency, 2101 Arena Boulevard, Sacramento, CA 95834

15.3 State Attorneys General

Depending on your state of residence, you may also have the right to file a complaint with your state's Attorney General office. Most states have consumer protection divisions that handle privacy-related complaints. Please visit your state government's official website for more information.

We encourage you to contact us first at [email protected] before filing a complaint with a regulatory authority so that we may have the opportunity to address your concerns directly and promptly.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this policy and, where required by law or where changes are material, notify you via email or a prominent notice on our website.

Your continued use of our website or services after we post any modifications to the Privacy Policy will constitute your acknowledgment and acceptance of the changes. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us using the contact information below. We are committed to addressing your privacy concerns promptly and transparently.

We will make every effort to respond to your inquiry within 30 days of receipt. For requests submitted under CCPA/CPRA, we will respond within 45 days, with the possibility of a 45-day extension where necessary, subject to notification.