Privacy Policy

Welcome to Marcos. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cafemarcos.rest, make a reservation, place an order, or otherwise interact with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy applies to all information collected through our website, mobile experiences, email communications, and any related services, sales, marketing, or events (collectively, the "Services").

1. Who We Are

Marcos is a food service establishment operating in the United States. For the purposes of this Privacy Policy, the data controller responsible for your personal information is:

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at the information provided above or in Section 14 of this document.

2. Information We Collect

We collect information about you in a variety of ways when you interact with our Services. Below is a detailed breakdown of the categories of information we collect.

2.1 Personal Information You Provide to Us

We collect personal information that you voluntarily provide to us when you:

• Register on our website or create an account
• Make a reservation or place an online order
• Sign up for our newsletter or loyalty program
• Participate in promotions, contests, or surveys
• Contact us via email, phone, or contact form
• Leave reviews or feedback

The personal information we collect in these contexts may include:

2.2 Information Collected Automatically

When you visit cafemarcos.rest, we automatically collect certain information about your device and browsing activity through cookies and similar tracking technologies. This includes:

• Device Information: IP address, browser type and version, operating system, device type, and unique device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, and exit pages
• Location Data: General geographic location inferred from your IP address
• Cookie Data: Information stored by cookies and similar tracking technologies (see Section 8 for full details)
• Log Data: Server logs that record your interactions with our website

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Analytics Providers: Such as Google Analytics, which provide us with aggregated data about how users interact with our website
• Social Media Platforms: If you interact with our social media pages or share our content, we may receive limited data from those platforms
• Review Platforms: Information from platforms such as Yelp, Google Reviews, or TripAdvisor that publicly post your reviews of our establishment
• Online Ordering Platforms: Third-party food delivery and ordering services that process orders on our behalf

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes. Specifically, we may use your information to:

3.1 Service Provision

• Process and fulfill your reservations, orders, and purchases
• Manage your account and provide customer support
• Send you transactional emails, including order confirmations and reservation reminders
• Process payments and prevent fraudulent transactions
• Accommodate dietary restrictions and food allergy requests

3.2 Business Operations and Improvement

• Monitor and analyze usage trends to improve our website and Services
• Conduct internal research and development to enhance our menu and dining experience
• Manage our day-to-day business operations efficiently
• Train staff and improve service quality based on feedback

3.3 Marketing and Communications

• Send you newsletters, promotional offers, and information about new menu items (with your consent where required)
• Manage our loyalty or rewards program
• Personalize your experience and deliver content relevant to your interests
• Conduct surveys and gather feedback to improve our offerings

3.4 Legal and Compliance

• Comply with applicable federal and state laws and regulations
• Respond to legal requests, court orders, or regulatory inquiries
• Enforce our Terms of Service and other legal agreements
• Protect the rights, property, and safety of Marcos, our customers, and the public

4. Sharing Your Information with Third Parties

We do not sell your personal information. However, we may share your information with third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform functions on our behalf. These may include:

• Payment Processors: To securely handle credit and debit card transactions (e.g., Stripe, Square)
• Online Ordering Platforms: Third-party delivery and takeout services
• Email Marketing Services: To send newsletters and promotional emails on our behalf
• Analytics Providers: To help us understand website usage patterns (e.g., Google Analytics)
• IT and Hosting Providers: To maintain our website and data infrastructure
• Reservation Management Systems: To manage table bookings and guest communications

These service providers are contractually obligated to use your information only to perform services on our behalf and are prohibited from using it for their own purposes or disclosing it to others.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in good faith belief that such action is necessary to:

• Comply with a legal obligation under federal or state law
• Respond to valid legal process, such as a court order, subpoena, or search warrant
• Cooperate with government or law enforcement investigations
• Protect and defend the rights or property of Marcos
• Prevent or investigate possible wrongdoing in connection with our Services
• Protect the personal safety of users of our Services or the public

4.3 Business Transfers

If Marcos is involved in a merger, acquisition, sale of assets, bankruptcy, or other business transition, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information, and the acquiring party will be subject to the same privacy commitments described in this policy.

4.4 With Your Consent

We may share your information with other parties when we have obtained your explicit consent to do so. You may withdraw your consent at any time by contacting us at [email protected].

5. Data Security

Protecting your personal information is a top priority for us. We have implemented a variety of technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) technology
• Secure Payment Processing: We do not store your full payment card details on our servers. All financial transactions are processed through PCI-DSS-compliant payment processors
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis
• Regular Security Audits: We conduct periodic reviews of our security practices and update them as necessary
• Data Minimization: We collect only the information necessary for the stated purposes
• Employee Training: Our staff are trained on data privacy and security best practices

6. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights regarding your personal information. We respect and honor these rights as described below.

6.1 Rights for All Users

• Right to Know: You have the right to know what personal information we collect about you and how it is used and shared
• Right to Access: You may request a copy of the personal information we hold about you
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information about you
• Right to Deletion: You may request that we delete personal information we have collected from you, subject to certain legal exceptions
• Right to Opt-Out of Marketing: You may opt out of receiving promotional communications from us at any time by clicking the "unsubscribe" link in any email or by contacting us directly

6.2 California Residents — CCPA/CPRA Rights

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know (Detailed): You may request specific information about the categories and specific pieces of personal information collected, the sources from which it was collected, the business purpose for collection, and the categories of third parties with whom it is shared
• Right to Delete: You may request deletion of your personal information, subject to certain exemptions permitted by law
• Right to Correct: You may request correction of inaccurate personal information we maintain about you
• Right to Opt-Out of Sale or Sharing: We do not sell personal information. However, if this practice changes, California residents will have the right to opt out
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to that which is necessary to perform the services you request
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality as a result of you exercising these rights

To exercise your California privacy rights, please submit a verifiable consumer request by emailing us at [email protected]. We will respond to verified requests within 45 days as required by California law.

6.3 Other State Privacy Laws

Residents of other states including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Texas (TDPSA) may also have privacy rights similar to those described above. We honor applicable rights under these laws. To exercise your rights, please contact us using the information in Section 14.

6.4 How to Submit a Rights Request

To exercise any of the rights described above, please:

• Email us at [email protected] with the subject line "Privacy Rights Request"
• Provide sufficient information to verify your identity
• Clearly describe the right you wish to exercise and the information to which the request relates

We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request and may ask you to provide additional information to do so.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data disposal procedures. Anonymized data may be retained indefinitely for statistical and analytical purposes.

8. Cookies and Tracking Technologies

Our website cafemarcos.rest uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content and advertisements.

8.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They allow the website to recognize your browser and remember certain information about your visit. Cookies can be "session cookies" (which expire when you close your browser) or "persistent cookies" (which remain on your device for a set period or until you delete them).

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously (e.g., Google Analytics).
• Functionality Cookies: Remember your preferences and settings to enhance your experience (e.g., language preferences, menu favorites).
• Marketing and Targeting Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when new cookies are set. Please note that disabling certain cookies may affect the functionality of our website.

For more information about how we use cookies, and to manage your cookie preferences, please review our full Cookie Policy, which is available on our website.

9. Children's Privacy

Our Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect personal information from children under the age of 13, or between the ages of 13 and 17 without verifiable parental consent, in accordance with the Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving such a notification, we will take prompt steps to delete the information from our systems.

We do not knowingly sell personal information of consumers under 16 years of age, consistent with California's CCPA/CPRA requirements.

10. International Data Transfers

Marcos is based in the United States, and our Services are designed primarily for users located within the United States. If you are accessing our Services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States.

The data protection laws in the United States may differ from those in your country of residence. By using our Services, you consent to the transfer of your information to the United States and acknowledge that such transfers are subject to the privacy protections described in this policy.

We take appropriate measures to ensure that any international transfers of personal data are conducted in compliance with applicable law and that adequate safeguards are in place to protect your information.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services, including social media platforms, review sites, and delivery partner platforms. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link on our website does not imply our endorsement of that site or its privacy practices.

12. Federal Consumer Protection and Applicable Law

Our privacy practices are designed to comply with applicable United States federal and state privacy laws, including but not limited to:

• Federal Trade Commission Act (FTC Act): We adhere to the FTC's guidelines on unfair or deceptive practices in connection with the collection and use of personal information
• CAN-SPAM Act: Our email marketing practices comply with the requirements of the CAN-SPAM Act, including providing a clear opt-out mechanism in all commercial emails
• Children's Online Privacy Protection Act (COPPA): We do not knowingly collect personal information from children under 13
• California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA): We honor the rights of California residents as described in Section 6.2
• State-Specific Privacy Laws: We strive to comply with applicable state privacy laws across all states in which we operate or our users reside

13. Filing a Privacy Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority.

13.1 Federal Level

You may file a complaint with the Federal Trade Commission (FTC), which enforces federal privacy and consumer protection laws in the United States:

• Website: www.ftc.gov
• Complaint Portal: reportfraud.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)

13.2 California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

13.3 Other State Residents

Residents of other states may file complaints with their respective state Attorney General's office. We encourage you to contact us first so we have the opportunity to address your concerns directly before escalating to regulatory authorities.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

When contacting us regarding a privacy matter, please include the following information to help us assist you efficiently:

• Your full name and contact information
• A clear description of your inquiry or request
• The specific data or privacy right to which your request relates
• Any reference numbers or correspondence related to prior communications with us

We will acknowledge receipt of your request promptly and respond within the timeframe required by applicable law, typically within 30 to 45 days of receipt of a verifiable request.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time in response to changes in applicable law, our business practices, or our Services. When we make changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Post the revised Privacy Policy on our website at cafemarcos.rest
• Notify you by email (if we have your email address) if the changes are material

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes to this Privacy Policy will constitute your acknowledgment of those changes and your consent to abide by the updated policy.