Privacy Policy

At Cabana Taco, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at cabana.rest, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. By using our website or services, you agree to the practices described herein.

This Privacy Policy applies to all users of the Cabana Taco website, mobile platforms, online ordering systems, loyalty programs, and any other services we provide (collectively, the "Services"). If you do not agree with the terms of this Privacy Policy, please discontinue use of our Services immediately.

We comply with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant regulations. Where applicable, specific rights and disclosures are provided for California residents and residents of other states with active privacy legislation.

1. About Us

Cabana Taco is a food service business operating in the United States. We operate a restaurant and online food ordering platform through our website.

For all privacy-related inquiries, please contact us at the email address listed above. We will respond to all legitimate requests within a reasonable timeframe as required by applicable law.

2. Information We Collect

We collect various types of information in connection with your use of our Services. The categories of information we may collect are described below.

2.1 Personal Information You Provide Directly

When you interact with Cabana Taco — whether by placing an order, creating an account, subscribing to our newsletter, participating in promotions, or contacting us — you may voluntarily provide us with personal information, including but not limited to:

• Identity Information: Full name, username, and similar identifiers.
• Contact Information: Email address, telephone number, and mailing or delivery address.
• Account Credentials: Password and security questions (stored in encrypted form).
• Payment Information: Credit or debit card numbers, billing address, and other financial information necessary to process transactions. Note: Full payment card data is processed by our third-party payment processors and is not stored on our servers.
• Order and Transaction Information: Details of the food items you have ordered, order history, special dietary requests, and delivery preferences.
• Communication Data: Any messages, feedback, reviews, or correspondence you send to us, including customer service inquiries.
• Loyalty Program Data: Membership details, points balances, reward redemptions, and preferences if you participate in any rewards or loyalty program we offer.
• Marketing Preferences: Your preferences regarding receiving communications from us, including email and SMS marketing.

2.2 Information Collected Automatically

When you visit our website or use our digital services, we automatically collect certain technical and usage data, including:

• Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), device identifiers, and screen resolution.
• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, search queries made on our website, and navigation patterns.
• Log Data: Server logs that record your activity on our website, including timestamps, error reports, and access records.
• Location Data: General geographic location derived from your IP address. If you grant explicit permission through your browser or device, we may also collect more precise geolocation data to facilitate delivery services or show you nearby locations.
• Cookie and Tracking Technology Data: Information collected through cookies, web beacons, pixel tags, local storage objects, and similar tracking technologies as described further in Section 7 of this policy.

2.3 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media account to our Services or interact with our social media pages, we may receive profile information such as your name, email address, profile picture, and social media handle.
• Third-Party Ordering Platforms: If you place an order through a third-party food delivery or ordering platform (such as DoorDash, Uber Eats, or similar services), we may receive order details necessary to fulfill your request.
• Payment Processors: Confirmation of payment transactions and limited payment-related data from our payment service providers.
• Analytics Providers: Aggregated or anonymized insights from analytics services that help us understand how users interact with our website.
• Marketing Partners: Contact information and marketing preference data from partners with whom you have consented to share your data for marketing purposes.

2.4 Aggregated and Anonymized Data

We may aggregate and anonymize the data we collect so that it can no longer reasonably identify you. We use aggregated, anonymized data for research, analytics, business planning, and marketing purposes. Aggregated and anonymized data is not considered personal information under applicable law, and we may use and disclose it for any legitimate business purpose.

3. How We Use Your Information

Cabana Taco uses the information we collect for a variety of purposes related to providing, improving, and promoting our Services. Specifically, we use your information for the following purposes:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including preparation, packaging, and delivery or pickup coordination.
• Creating and managing your account on our website or app.
• Processing payments and issuing receipts and invoices.
• Managing loyalty program memberships and reward redemptions.
• Communicating with you about your orders, including confirmations, updates, delays, or issues.
• Providing customer support and responding to your inquiries, complaints, or feedback.
• Facilitating returns, refunds, or replacements where applicable.

3.2 Improving Our Services

• Analyzing usage patterns and trends to understand how customers use our website and services.
• Conducting internal research and development to enhance our menu offerings, digital platform functionality, and customer experience.
• Monitoring and diagnosing technical problems on our website or ordering system.
• Testing new features, promotions, or service improvements before broader rollout.

3.3 Marketing and Communications

• Sending you promotional emails, newsletters, special offers, and updates about new menu items or events — but only where you have opted in or where permitted by applicable law.
• Sending SMS or push notification marketing messages, subject to your consent.
• Delivering targeted or personalized advertisements on our website or on third-party platforms based on your preferences and past interactions.
• Administering contests, surveys, promotions, and other marketing campaigns.

You may opt out of receiving marketing communications from us at any time by following the unsubscribe instructions included in any marketing email or by contacting us at [email protected]. Opting out of marketing communications will not affect transactional communications related to your orders or account.

3.4 Legal Compliance and Security

• Complying with applicable federal, state, and local laws, regulations, and legal processes.
• Responding to lawful requests from law enforcement, government authorities, or regulatory bodies.
• Detecting, investigating, and preventing fraudulent transactions, unauthorized access, security breaches, and other potentially illegal or harmful activities.
• Enforcing our Terms of Service and other policies.
• Protecting the rights, property, or safety of Cabana Taco, our customers, employees, and the public.

3.5 Business Operations

• Conducting internal audits and business reviews.
• Facilitating corporate transactions such as mergers, acquisitions, reorganizations, or asset sales, in which case your data may be transferred as a business asset.
• Managing our vendor and supplier relationships.

4. Sharing Your Information with Third Parties

Cabana Taco does not sell your personal information to third parties for their own independent marketing purposes. However, we do share your information in certain circumstances as described below.

4.1 Service Providers and Business Partners

We share personal information with third-party service providers who perform functions on our behalf and under our instructions. These include:

• Payment Processors: To securely process credit and debit card transactions and other payment methods.
• Delivery and Logistics Partners: To coordinate the delivery of your food orders.
• IT and Hosting Providers: To host our website, manage our databases, and maintain our digital infrastructure.
• Analytics Providers: Such as Google Analytics, to help us understand website traffic and user behavior.
• Email and SMS Marketing Platforms: To send communications on our behalf.
• Customer Support Tools: To manage and respond to customer service inquiries.
• Loyalty Program Administrators: To manage and operate any customer rewards programs.

All third-party service providers are contractually obligated to protect your information, use it only for the purposes we specify, and comply with applicable data protection laws.

4.2 Legal Requirements

We may disclose your information if we believe in good faith that such disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or enforceable government request.
• Respond to a valid subpoena, court order, or other legal obligation.
• Protect the safety of any person or prevent fraud, abuse, or illegal activity.
• Enforce our terms, policies, or agreements.
• Protect the rights and property of Cabana Taco and our users.

4.3 Business Transfers

In the event of a merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so, such as when you choose to share your experience on social media or participate in co-branded promotions with our partners.

4.5 Aggregated or De-Identified Information

We may share aggregated or de-identified information — which cannot reasonably be used to identify you — with third parties for industry analysis, marketing, advertising, research, and other purposes.

5. Data Security

Cabana Taco takes the security of your personal information seriously. We implement a range of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

5.1 Security Measures We Employ

• Encryption: We use industry-standard Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Access Controls: We restrict access to personal information to authorized employees and contractors who need access to perform their job functions. All personnel with access to personal data are subject to confidentiality obligations.
• Password Security: Account passwords are stored using strong cryptographic hashing algorithms. We never store passwords in plain text.
• Payment Security: We do not store full payment card numbers on our systems. Payment processing is handled by PCI-DSS compliant third-party processors.
• Regular Security Assessments: We conduct periodic reviews of our security practices and systems to identify and address potential vulnerabilities.
• Incident Response: We maintain procedures for responding to data security incidents and will notify affected individuals and regulatory authorities as required by applicable law.

5.2 Your Responsibility

While we take significant steps to protect your personal information, no security system is completely impenetrable. You also play an important role in protecting your data. We encourage you to use a strong, unique password for your Cabana Taco account, to keep your login credentials confidential, and to log out of your account when using shared devices. If you believe your account has been compromised, please contact us immediately at [email protected].

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. We are committed to honoring these rights and making it easy for you to exercise them.

6.1 Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you, including the categories of information, the purposes for which it is used, and the third parties with whom it is shared.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., where retention is required to complete a transaction, comply with a legal obligation, or for other permitted purposes).
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. As stated above, Cabana Taco does not sell personal information, but you may exercise this right at any time.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to purposes that are necessary to provide our Services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you Services, charge you different prices, or provide a lower quality of service because you exercised your privacy rights.
• Right to Data Portability: You may request a copy of your personal information in a portable, readily usable format.

6.2 General Rights for All Users

Regardless of your location, Cabana Taco provides the following privacy controls to all users where reasonably practicable:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we update or correct inaccurate information in your account or records.
• Deletion: You may request deletion of your personal information, subject to legal and contractual obligations that may require us to retain certain data.
• Marketing Opt-Out: You may opt out of marketing communications at any time.
• Account Management: If you have a registered account, you may update many of your personal details directly through your account settings.

6.3 How to Exercise Your Rights

To exercise any of the rights described in this section, please submit a request to us using one of the following methods:

• Email: [email protected]
• Website: cabana.rest

We will verify your identity before fulfilling your request to protect your security and prevent unauthorized access to your data. We will respond to verifiable requests within 45 days as required by the CCPA/CPRA, or within the timeframe required by other applicable law. If we require additional time, we will notify you of the extension and the reason for it.

You may designate an authorized agent to submit a request on your behalf, provided that the agent has written authorization and we are able to verify the agent's identity and authority.

7. Cookies and Tracking Technologies

Our website and Services use cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content and advertising.

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites recognize returning visitors, remember preferences, and gather analytical data. In addition to cookies, we may also use web beacons, pixel tags, local storage, and session storage technologies.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the operation of our website, including enabling you to log in, add items to your cart, and complete purchases. You cannot opt out of these cookies without affecting core website functionality.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often and how users navigate through the site. We use this data to improve our website's performance.
• Functional Cookies: These cookies enable our website to remember choices you make (such as your preferred language or delivery address) to provide a more personalized experience.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements that are relevant to you and your interests, both on our website and on third-party platforms. They also help us measure the effectiveness of our advertising campaigns.

7.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most web browsers allow you to refuse cookies, delete cookies, or receive a warning before a cookie is stored. Please be aware that restricting certain cookies may impair the functionality of our website. For more detailed information about cookies and your choices, please refer to our Cookie Policy, available on our website at cabana.rest.

For opt-out tools related to interest-based advertising, you may visit the Network Advertising Initiative opt-out page at optout.networkadvertising.org or the Digital Advertising Alliance opt-out page at optout.aboutads.info.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

When personal information is no longer required, we securely delete or anonymize it. In some cases, we may retain anonymized, aggregated data indefinitely for statistical and research purposes.

9. Children's Privacy

Cabana Taco's Services are not directed to, intended for, or designed to attract individuals under the age of 18. We do not knowingly collect, solicit, or maintain personal information from anyone under 18 years of age.

By using our website or Services, you represent and warrant that you are at least 18 years old. If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete the child's information from our records.

We also comply with the Children's Online Privacy Protection Act (COPPA) and will not knowingly collect personal information from children under the age of 13. If we discover that we have inadvertently collected information from a child under 13, we will delete it as quickly as possible.

10. International Data Transfers

Cabana Taco is based in the United States, and your personal information is primarily collected, processed, and stored in the United States. The United States may not provide the same level of data protection as the country in which you reside.

If you are accessing our Services from outside the United States — including from the European Union, European Economic Area, or United Kingdom — please be aware that your personal information may be transferred to, stored, and processed in the United States. By using our Services, you acknowledge and consent to this transfer.

We take steps to ensure that any international transfers of personal information are conducted in compliance with applicable law and that your data is afforded an appropriate level of protection. Where required by law, we implement appropriate safeguards such as standard contractual clauses or other legally approved transfer mechanisms.

If you have questions about international data transfers, please contact us at [email protected].

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Cabana Taco. These may include social media platforms, delivery partners, payment processors, and other third-party services.

This Privacy Policy applies only to our own Services. We have no control over, and assume no responsibility for, the privacy practices, content, or policies of third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit before providing them with your personal information.

12. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, our website does not currently respond to DNT browser signals. We will continue to monitor developments in DNT standards and update our practices accordingly.

For California residents, please note that our website does not currently engage in the sale of personal information as defined by the CCPA/CPRA, and we provide opt-out rights for sharing of personal information used for cross-context behavioral advertising as described in Section 6.

13. How to File a Complaint

If you believe that we have not handled your personal information in accordance with applicable law, or if you are unsatisfied with our response to a privacy request, you have the right to file a complaint with a relevant regulatory authority.

13.1 Contacting Us First

We encourage you to contact us first so we can address your concern directly:

• Email: [email protected]
• Website: cabana.rest

We will acknowledge your complaint promptly and work to resolve it within a reasonable timeframe.

13.2 Regulatory Authorities

If you are a California resident and believe your CCPA/CPRA rights have been violated, you may file a complaint with:

• California Privacy Protection Agency (CPPA)
  Website: cppa.ca.gov
• California Attorney General's Office
  Website: oag.ca.gov/privacy

For general consumer protection matters at the federal level, you may contact:

• Federal Trade Commission (FTC)
  Website: ftc.gov
  Online Complaint Assistant: reportfraud.ftc.gov

Residents of other states with applicable privacy laws (such as Virginia, Colorado, Connecticut, Texas, or Florida) may also have the right to file complaints with their respective state attorney general's office or data protection authority.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page, posting a prominent notice on our website, and/or sending you an email notification if you have a registered account with us.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, please discontinue use of our Services and contact us to request deletion of your personal data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. We are committed to addressing your privacy concerns promptly and transparently.

When contacting us about a privacy matter, please provide your full name, email address associated with your account (if applicable), a clear description of your request or concern, and any relevant reference numbers. This will help us locate your records and respond efficiently.

This Privacy Policy was last updated on May 16, 2026. All rights reserved. Cabana Taco © 2026.