Privacy Policy

This Privacy Policy describes how Cafe Rio ("we," "us," or "our") collects, uses, discloses, and protects the personal information of visitors and customers who access or use our website located at tastycaferio.click (the "Website") and any related services, features, content, or applications we offer (collectively, the "Services"). We are committed to protecting your privacy and handling your personal data in a transparent, responsible, and lawful manner consistent with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act).

Please read this Privacy Policy carefully before using our Website or Services. By accessing or using our Website, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use our Website or Services.

We reserve the right to update or modify this Privacy Policy at any time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Your continued use of the Website following any changes constitutes your acceptance of the revised Privacy Policy.

1. About Us and Contact Information

This Privacy Policy applies to the operations of Cafe Rio, a food service business operating in the United States.

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal information, please contact us at the email address listed above. We will respond to your inquiry as promptly as reasonably possible and no later than the timeframes required by applicable law.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information we collect through:

• Our Website at tastycaferio.click and any subdomains associated with it;
• Online orders, reservations, or service inquiries submitted through our Website;
• Email communications, newsletters, promotional messages, and customer support interactions;
• Social media platforms and third-party services that link to or integrate with our Website;
• Loyalty programs, surveys, contests, or promotions we may offer from time to time;
• Any other interaction you may have with Cafe Rio in connection with our digital presence.

This Privacy Policy does not apply to third-party websites, services, or applications that may be linked from our Website. We encourage you to review the privacy policies of any third parties you interact with separately, as we have no control over their data practices.

3. Information We Collect

We collect various categories of personal information depending on how you interact with our Website and Services. The types of information we collect include, but are not limited to, the following:

3.1 Personal Identification Information

When you register an account, place an order, make a reservation, sign up for our newsletter, participate in a promotion, or otherwise communicate with us, we may collect personal information such as:

• Full name;
• Email address;
• Phone number;
• Mailing or delivery address (including city, state, and ZIP code);
• Date of birth (where required for age verification or promotional purposes);
• Username and password for account creation;
• Payment and billing information, including credit or debit card details processed through secure third-party payment processors;
• Dietary preferences, food allergies, and similar food-related information you voluntarily provide.

3.2 Usage Data and Online Activity

When you visit our Website, we automatically collect certain technical and behavioral information about your interaction with our Services. This may include:

• IP address and approximate geographic location derived from your IP address;
• Browser type and version;
• Operating system and device type (desktop, mobile, tablet);
• Pages you visit on our Website, including the sequence of page views;
• Time and date of your visit, and the duration of your session;
• Referring URL (the website that directed you to our Website);
• Clickstream data and links you interact with;
• Search terms used on our Website;
• Error logs and performance data.

3.3 Device Information

We may collect information about the device you use to access our Website, including:

• Device identifier or unique device ID;
• Mobile network information;
• Hardware model and software configuration;
• Screen resolution and display settings;
• Mobile operating system version.

3.4 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect information about your browsing behavior and preferences. Cookies are small text files stored on your browser or device that help us recognize you and customize your experience. For more information about the specific cookies we use and how to manage your cookie preferences, please refer to our Cookie Policy available on our Website. We briefly outline our cookie practices in Section 9 of this Privacy Policy.

3.5 Communications and Customer Support Data

If you contact us by email, through our contact form, or through other communication channels, we may retain records of those communications, including your name, contact details, the content of your messages, and any attachments you provide. This helps us respond to your inquiries efficiently and improve our customer support quality.

3.6 Transactional Information

When you place an order for food or beverage items through our Website, we collect transactional data including order history, items purchased, order values, payment method type (but not full card numbers, which are handled by our payment processor), delivery or pickup preferences, and loyalty points or reward redemption information.

3.7 Information from Third Parties

We may receive information about you from third-party sources, such as social media platforms (if you log in using a social account or interact with our social media pages), marketing partners, analytics providers, and other business partners. This information may be combined with data we have already collected about you to better understand your preferences and enhance your experience with Cafe Rio.

4. How We Use Your Information

We use the personal information we collect for the following purposes, always in accordance with applicable law and the legitimate interests of our business and customers:

4.1 Service Provision and Order Fulfillment

• To process and fulfill your online food orders, reservations, and related requests;
• To manage your account and provide account-related features;
• To send you order confirmations, receipts, and status updates;
• To coordinate delivery or pickup services;
• To accommodate dietary preferences and special requests you have communicated to us.

4.2 Customer Service and Support

• To respond to your questions, comments, feedback, and complaints;
• To resolve disputes and troubleshoot issues with our Website or Services;
• To maintain records of communications for quality assurance and training purposes.

4.3 Marketing and Promotional Communications

• To send you newsletters, promotional offers, special deals, and information about new menu items or locations, where you have opted in to receive such communications;
• To personalize marketing content based on your preferences, order history, and browsing behavior;
• To administer contests, sweepstakes, loyalty programs, and other promotional activities;
• To conduct targeted advertising through third-party platforms.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected]. Note that even if you opt out of marketing communications, we may still send you transactional or service-related messages that are necessary for the administration of your account or orders.

4.4 Analytics and Website Improvement

• To analyze usage patterns and trends to better understand how our Website is used;
• To improve the design, functionality, and content of our Website and Services;
• To develop new features, products, and offerings based on user demand and feedback;
• To conduct internal research and statistical analysis.

4.5 Security and Fraud Prevention

• To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other potentially illegal activities;
• To verify your identity and ensure the security of your account;
• To protect the rights, property, and safety of Cafe Rio, our customers, and the public;
• To enforce our Terms of Service and other applicable policies.

4.6 Legal Compliance

• To comply with applicable federal and state laws, regulations, and legal obligations;
• To respond to lawful requests from courts, regulatory bodies, law enforcement agencies, and other governmental authorities;
• To establish, exercise, or defend legal claims.

5. Sharing of Your Personal Information

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in certain circumstances as described below:

5.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform functions and provide services on our behalf, including but not limited to:

• Payment processors and financial institutions (to process transactions securely);
• Food delivery platforms and logistics partners (to fulfill delivery orders);
• Cloud hosting and data storage providers;
• Email marketing and customer communication platforms;
• Analytics and performance monitoring tools (such as Google Analytics);
• Customer relationship management (CRM) software providers;
• IT security and fraud prevention services.

These service providers are authorized to use your personal information only as necessary to provide services to us and are contractually obligated to maintain appropriate confidentiality and security measures. They are prohibited from using your personal information for their own independent marketing or other purposes.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe, in good faith, that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or other legal process;
• Respond to requests from law enforcement, regulatory agencies, or government authorities;
• Protect the rights, property, or personal safety of Cafe Rio, our employees, customers, or the general public;
• Prevent or investigate possible wrongdoing in connection with our Services;
• Enforce our Terms of Service, this Privacy Policy, or other applicable agreements.

5.3 Business Transfers

In the event that Cafe Rio undergoes a merger, acquisition, reorganization, sale of assets, or other business transaction, your personal information may be transferred to the acquiring entity or successor organization as part of that transaction. We will notify you via a prominent notice on our Website and, where required by law, obtain your consent before your personal information is transferred and becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information — which cannot reasonably be used to identify you — with third parties for research, analytics, marketing, and other business purposes. This type of data sharing does not constitute a disclosure of personal information.

5.5 With Your Consent

We may share your personal information with third parties when you have provided your explicit consent to such sharing or when you have directed us to share it on your behalf.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our Website;
• Access Controls: Access to personal information is restricted to authorized personnel who require it to perform their job functions, and is governed by role-based access control policies;
• Password Security: User passwords are stored in hashed format using industry-standard hashing algorithms;
• Secure Payment Processing: Payment card information is processed through PCI DSS-compliant third-party payment processors and is not stored on our servers;
• Regular Security Assessments: We conduct periodic reviews of our security practices and systems to identify and address potential vulnerabilities;
• Data Minimization: We collect only the personal information that is necessary for the purposes described in this Privacy Policy;
• Employee Training: Our team members receive training on data privacy and security best practices.

Despite our best efforts, no method of data transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that affects your rights or freedoms, we will notify you and the relevant authorities as required by applicable law.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We respect and honor these rights in accordance with applicable United States privacy laws, including the CCPA/CPRA for California residents.

7.1 Right to Know and Access

You have the right to request that we disclose what personal information we have collected about you, the categories and sources of that information, the business or commercial purposes for which we collected it, the categories of third parties with whom we shared it, and the specific pieces of personal information we hold about you.

7.2 Right to Correction

You have the right to request that we correct inaccurate or incomplete personal information we hold about you. We will use commercially reasonable efforts to honor such requests in a timely manner.

7.3 Right to Deletion

You have the right to request that we delete your personal information, subject to certain exceptions. We may retain your information if it is necessary to complete a transaction, detect or prevent security incidents, comply with a legal obligation, exercise a legal right or defense, or for other lawful purposes permitted under applicable law.

7.4 Right to Data Portability

You have the right to receive a copy of the personal information you have provided to us in a structured, commonly used, and machine-readable format, to the extent technically feasible and required by applicable law.

7.5 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. We do not sell your personal information for monetary consideration. However, if we engage in data sharing practices that constitute a "sale" or "sharing" under the CCPA/CPRA, you may exercise your right to opt out by contacting us at [email protected].

7.6 Right to Limit Use of Sensitive Personal Information

Under the CPRA, California residents have the right to limit the use and disclosure of their sensitive personal information to purposes strictly necessary to provide the Services. If we collect sensitive personal information as defined under the CPRA (such as precise geolocation data or health-related data), you may exercise this right by contacting us.

7.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you services, charge you different prices, or provide you a lower quality of service because you exercised your rights under applicable privacy law.

7.8 How to Submit a Privacy Request

To exercise any of the rights described above, please submit a verifiable request to us at:

• Email: [email protected]
• Website: tastycaferio.click

We will verify your identity before processing your request and will respond within 45 days of receiving it, or within the timeframe required by applicable law. In some cases, we may need to extend this period and will inform you accordingly. You may designate an authorized agent to make a request on your behalf, provided that the agent presents written authorization from you and we can verify your identity.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy, or as required by applicable law. Our general data retention practices are as follows:

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention and disposal procedures. Anonymized data may be retained indefinitely for research and analytics purposes.

9. Cookie Policy Overview

Our Website uses cookies and similar tracking technologies to enhance your experience, analyze site traffic, and deliver relevant advertising. A brief summary of our cookie practices is provided below. For full details, please refer to our dedicated Cookie Policy available on our Website.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our Website, enabling you to navigate pages and access secure areas. These cannot be disabled.
• Performance and Analytics Cookies: Collect information about how visitors use our Website, including which pages are most visited. This data helps us improve our Website's functionality and user experience (e.g., Google Analytics).
• Functionality Cookies: Remember your preferences and personalize your experience, such as your language settings or saved items in your cart.
• Targeting and Advertising Cookies: Track your browsing habits to deliver more relevant advertisements and measure the effectiveness of our marketing campaigns.

9.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Most browsers allow you to refuse cookies or to alert you when cookies are being sent. However, please note that disabling certain cookies may impact the functionality of our Website. You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance's opt-out page at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

10. Children's Privacy

If you are under 18 years of age, please do not use our Website or provide us with any personal information. If we become aware that we have inadvertently collected personal information from a child under 18 without verified parental consent, we will take prompt steps to delete that information from our records.

If you are a parent or guardian and believe that your child under 18 has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

Our practices are also consistent with the Children's Online Privacy Protection Act (COPPA), which prohibits the online collection of personal information from children under 13 without verifiable parental consent. If we ever introduce features targeted at younger audiences, we will update this policy and implement appropriate safeguards.

11. International Data Transfers

Cafe Rio is based in the United States, and all data processing activities primarily take place within the United States. However, some of our third-party service providers and partners may be located in other countries, which means your personal information may be transferred to, stored, or processed in jurisdictions outside of the United States.

When we transfer personal information internationally, we take steps to ensure that such transfers comply with applicable laws and that your information remains protected to an adequate standard. These steps may include entering into data transfer agreements, standard contractual clauses, or relying on other legally recognized transfer mechanisms.

By providing us with your personal information and using our Services, you acknowledge and consent to the transfer of your data to the United States and, where applicable, to other countries for the purposes described in this Privacy Policy.

If you have questions about the specific safeguards we apply to international data transfers, please contact us at [email protected].

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you are entitled to additional rights and disclosures under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). In addition to the rights described in Section 7 of this Privacy Policy, California residents have the following specific rights:

• Right to Know Categories: The right to know the categories of personal information collected, the categories of sources, the business purposes for collection, and the categories of third parties with whom information is shared;
• Right to Know Specific Pieces: The right to request specific pieces of personal information we have collected about you during the preceding 12 months;
• Shine the Light Law: Under California Civil Code Section 1798.83, California residents may request information about our disclosures of personal information to third parties for their direct marketing purposes during the preceding calendar year;
• Do Not Track Signals: Our Website does not currently respond to "Do Not Track" signals from browsers. However, we provide opt-out mechanisms for marketing communications and certain data sharing practices as described in this Privacy Policy.

To submit a California privacy request or to learn more about your rights, please contact us at [email protected]. We will verify your identity before processing your request and will respond within 45 days as required by the CCPA/CPRA.

13. Federal Privacy Protections and FTC Act

As a United States-based business, Cafe Rio's data practices are subject to oversight by the Federal Trade Commission (FTC) under Section 5 of the FTC Act, which prohibits unfair or deceptive practices in commerce. We are committed to maintaining transparent and fair data practices in compliance with FTC guidelines and all applicable federal laws governing consumer privacy and data security, including:

• The Children's Online Privacy Protection Act (COPPA);
• The CAN-SPAM Act (governing commercial email communications);
• The Telephone Consumer Protection Act (TCPA), if applicable to our communications;
• The Gramm-Leach-Bliley Act (GLBA), where applicable to financial data;
• All other relevant federal consumer protection and data security regulations.

14. Third-Party Links and External Websites

Our Website may contain hyperlinks to third-party websites, social media platforms, applications, or other digital services that are not owned or operated by Cafe Rio. This Privacy Policy does not apply to those third-party websites or services. We are not responsible for the privacy practices, content, or security of third-party websites and encourage you to review their individual privacy policies before providing any personal information.

The inclusion of a link to a third-party website on our Website does not imply our endorsement or approval of that website or its privacy practices.

15. How to File a Complaint

If you have concerns about how we handle your personal information or believe that your privacy rights have been violated, we encourage you to contact us first so that we can attempt to resolve the matter directly:

• Email: [email protected]
• Website: tastycaferio.click

We will acknowledge your complaint promptly and work in good faith to address your concerns within a reasonable timeframe.

If you are a California resident and are not satisfied with our response to your privacy complaint, you may also file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy/ccpa

Consumers in other states may also have access to state-level consumer protection agencies and attorneys general offices. Regardless of your state of residence, you retain the right to file a complaint with the Federal Trade Commission (FTC):

• FTC Consumer Information: ftc.gov/privacy
• FTC Complaint Assistant: reportfraud.ftc.gov

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this Privacy Policy;
• Post the revised Privacy Policy on our Website with the new effective date;
• Where required by applicable law, notify you by email or through a prominent notice on our Website before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our Website or Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal information, or our data practices, please do not hesitate to reach out to us using the contact information provided below. We are committed to responding to your inquiries promptly and thoroughly.

When contacting us about a privacy matter, please include your full name, the email address associated with your account (if applicable), a clear description of your request or concern, and any relevant details that will help us address your inquiry efficiently. We take all privacy-related communications seriously and are dedicated to resolving your concerns in a respectful and timely manner.