Privacy Policy

This Privacy Policy describes how Giordanos ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at cafegiordanos.top, place orders, subscribe to our newsletter, or otherwise interact with our food services. We are committed to safeguarding your privacy and handling your data with transparency, integrity, and respect for your rights under applicable United States federal and state privacy laws.

Please read this Privacy Policy carefully. By accessing or using our website, placing an order, or otherwise engaging with our services, you acknowledge that you have read, understood, and agree to the practices described herein. If you do not agree with any part of this policy, please discontinue use of our website and services immediately.

1. About Us and Contact Information

Giordanos is a food service business operating in the United States. We are dedicated to providing our customers with exceptional dining experiences and high-quality food products. Your privacy is a top priority in everything we do.

For any privacy-related inquiries, requests, or concerns, please contact us using the information provided above. We will respond to all legitimate privacy requests within 30 days of receipt.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected by Giordanos through the following channels:

• Our official website located at cafegiordanos.top
• Online food ordering and reservation systems
• Email communications and marketing newsletters
• Customer loyalty and rewards programs
• Social media interactions related to our brand
• In-store data collection activities, where applicable
• Third-party platforms and applications that integrate with our services

This policy does not apply to the privacy practices of third-party websites, applications, or services that may be linked from our website. We encourage you to review the privacy policies of any third-party platforms you visit.

3. Information We Collect

We collect various categories of personal information depending on how you interact with us. The information we collect falls into the following categories:

3.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and delivery address (street, city, state, zip code)
• Date of birth (for age verification or promotional purposes)
• Username and password (for account holders)
• Profile photo (if provided voluntarily)

3.2 Payment and Transaction Information

When you make a purchase or complete a transaction on our website, we or our payment processors may collect:

• Credit card or debit card details (processed securely by PCI-DSS compliant payment processors)
• Payment method type (e.g., credit card, PayPal, Apple Pay)
• Billing address associated with the payment method
• Order history, including items purchased, quantities, and total amounts
• Refund and return request records

3.3 Usage Data and Website Activity

We automatically collect certain technical information when you visit our website, including:

• IP address
• Browser type and version
• Operating system and device type
• Pages visited and time spent on each page
• Referring URL (the website that led you to ours)
• Clickstream data and navigation patterns
• Search terms used on our website
• Date and time of your visit
• Error logs and crash reports

3.4 Device Information

We may collect information about the device you use to access our website, including:

• Device identifiers (e.g., IDFA, Android Advertising ID)
• Mobile device model and manufacturer
• Screen resolution and display settings
• Language and regional preferences
• Network type (Wi-Fi, cellular) and internet service provider

3.5 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on our website. This data includes session identifiers, preference settings, and behavioral tracking data. Please see Section 8 of this policy for detailed information about our cookie practices.

3.6 Communications and Customer Service Data

When you contact us for support or feedback, we collect:

• Contents of emails, chat messages, or phone call records
• Customer service tickets and complaint records
• Survey responses and feedback submissions
• Reviews and ratings submitted on our platform

3.7 Location Data

With your consent, we may collect precise or approximate geolocation data to facilitate delivery services, show you nearby promotions, or display location-relevant content. You may disable location services through your browser or device settings at any time.

3.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you connect your account or log in via social media)
• Food delivery aggregator platforms and partners
• Marketing and advertising partners
• Analytics providers
• Publicly available databases

4. How We Use Your Information

We use the personal information we collect for specific, legitimate business purposes. We do not sell your personal data to unaffiliated third parties for their own marketing purposes. Our uses of your data include:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders and reservations
• Sending order confirmations, receipts, and delivery updates
• Managing your account and providing access to your order history
• Processing payments and issuing refunds where applicable
• Facilitating customer loyalty programs and reward redemptions

4.2 Customer Communications

• Responding to your inquiries, complaints, and support requests
• Sending transactional communications related to your orders
• Providing important notices about changes to our services or policies
• Following up on feedback and resolving service issues

4.3 Marketing and Promotional Activities

• Sending newsletters, promotional offers, and special deals (with your consent)
• Personalizing marketing content based on your order history and preferences
• Running sweepstakes, contests, and loyalty reward campaigns
• Retargeting campaigns via advertising networks (subject to your preferences)

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails, contacting us at [email protected], or updating your account preferences.

4.4 Analytics and Service Improvement

• Analyzing website traffic, usage patterns, and customer behavior to improve our services
• Conducting internal research and business intelligence activities
• Testing and developing new website features and menu offerings
• Measuring the effectiveness of our marketing campaigns
• Generating aggregated, anonymized statistical reports

4.5 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Preventing, detecting, and investigating fraud, unauthorized access, and other unlawful activities
• Enforcing our Terms of Service and other agreements
• Protecting the safety, rights, and property of our customers, employees, and the general public
• Responding to lawful requests from government authorities and law enforcement agencies

5. Legal Basis for Processing

Under applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act), we process your personal information based on one or more of the following lawful grounds:

• Contractual Necessity: Processing required to fulfill your orders and deliver our food services
• Legitimate Business Interests: Improving our services, preventing fraud, and conducting analytics
• Legal Obligation: Complying with applicable laws, regulations, and lawful government requests
• Consent: Marketing communications, cookies, and location data (where consent is required)

6. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own independent marketing purposes. However, we do share your information with trusted partners and service providers as described below:

6.1 Service Providers and Business Partners

We engage third-party service providers who assist us in operating our business, including:

• Payment processors — to securely process credit card and online payments
• Delivery and logistics partners — to fulfill food delivery orders
• Cloud hosting and IT infrastructure providers — to store and manage our data
• Email and SMS marketing platforms — to send promotional and transactional messages
• Analytics providers — to analyze website traffic and user behavior (e.g., Google Analytics)
• Customer support software providers — to manage customer inquiries and tickets
• Advertising networks — to serve relevant ads on other websites and platforms

All service providers are contractually required to process your data only on our behalf and in accordance with our instructions. They are prohibited from using your information for their own independent purposes.

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request
• Enforce our Terms of Service or protect our legal rights
• Investigate or prevent fraud, security breaches, or unlawful activity
• Protect the vital interests, safety, or rights of our users, employees, or the public

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, asset sale, or other corporate transaction, your personal information may be transferred as part of the transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and your data becomes subject to a different privacy policy.

6.4 Aggregated and De-identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes.

7. Data Security

Giordanos takes the security of your personal information seriously. We implement a range of technical, organizational, and administrative safeguards designed to protect your data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

7.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is protected using industry-standard Secure Sockets Layer (SSL) and Transport Layer Security (TLS) encryption protocols.
• Secure Payment Processing: Payment card data is handled exclusively by PCI-DSS Level 1 certified payment processors.
• Firewalls and Intrusion Detection Systems: Our servers are protected by firewalls and monitored for suspicious activity.
• Data Encryption at Rest: Sensitive data stored in our systems is encrypted using strong encryption algorithms.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis.

7.2 Organizational Safeguards

• Regular employee training on data privacy and security best practices
• Comprehensive data protection policies and internal procedures
• Vendor due diligence and contractual data security requirements
• Periodic security audits and vulnerability assessments
• Incident response plan for data breach management

7.3 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you as required by applicable state data breach notification laws, including those applicable in the states where we operate. Notifications will be sent via email or through a prominent notice on our website within the timeframes required by law.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, understand how visitors interact with our website, and deliver personalized content and advertisements.

8.1 Types of Cookies We Use

8.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most web browsers allow you to refuse cookies, delete existing cookies, or receive alerts when cookies are set. Please note that disabling certain cookies may impact the functionality of our website.

You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance's opt-out page at www.aboutads.info or the Network Advertising Initiative at www.networkadvertising.org/choices.

For detailed information about the specific cookies we use and how to manage them, please refer to our full Cookie Policy available on our website.

9. Your Privacy Rights

Depending on your state of residence within the United States, you may have specific rights regarding your personal information. We honor and facilitate the exercise of these rights in accordance with applicable law.

9.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request information about what personal information we collect, use, disclose, and sell about you.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain legal exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing: You have the right to direct us not to sell or share your personal information with third parties for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to only what is necessary to perform our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
• Right to Data Portability: You may request a copy of your personal information in a portable and readily usable format.

9.2 Rights Available to All U.S. Residents

Regardless of your state of residence, we provide all users with the following rights:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal data, where legally permissible
• Opt-Out of Marketing: Unsubscribe from marketing communications at any time
• Data Portability: Receive a copy of your data in a machine-readable format

9.3 How to Exercise Your Rights

To submit a privacy rights request, you may:

• Email us at: [email protected]
• Submit a request through the contact form on our website at cafegiordanos.top

We will verify your identity before processing any request. Verification may require you to provide certain information that matches the details we have on file. We aim to respond to all verifiable requests within 45 days. If additional time is needed, we will notify you in writing. We do not charge a fee for processing your privacy request unless it is excessive or manifestly unfounded.

9.4 Authorized Agents

California residents may designate an authorized agent to make a privacy request on their behalf. We may require written proof of the agent's authorization and may verify your identity directly before processing the request.

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The following general retention guidelines apply:

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention schedules and applicable legal requirements.

11. Children's Privacy

Our website and food ordering services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, or from minors under the age of 18 without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA) and applicable state laws.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without appropriate parental consent, we will take prompt steps to delete such information from our systems. If you believe we may have collected information from a minor, please contact us immediately at [email protected].

Parents and guardians who wish to review, correct, or request deletion of personal information belonging to their minor child should contact us at the email address provided above.

12. International Data Transfers

Giordanos is a United States-based business and primarily processes data within the United States. However, some of our third-party service providers, technology partners, or cloud hosting infrastructure may be located in or operate from other countries. As a result, your personal information may be transferred to, stored, or processed in jurisdictions outside of the United States.

When we transfer personal information internationally, we take steps to ensure that such transfers comply with applicable laws and that your information remains protected at a standard consistent with this Privacy Policy. These measures may include:

• Entering into standard contractual clauses or data processing agreements with international service providers
• Verifying that third-party recipients maintain adequate data protection measures
• Applying additional technical and organizational safeguards where necessary

By using our website and services, you acknowledge and consent to the potential transfer of your personal information to countries outside of your country of residence, which may have different data protection rules than your own country.

13. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. At this time, our website does not respond to DNT signals in a uniform manner, as there is no accepted industry standard for how websites should respond to such signals. We will continue to monitor developments in this area and update our practices accordingly.

You may manage your tracking preferences through our cookie management tools or by adjusting your browser settings as described in Section 8 of this policy.

14. Links to Third-Party Websites

Our website may contain links to third-party websites, social media platforms, food delivery aggregators, and other online services. These third-party sites are governed by their own privacy policies, and we are not responsible for their privacy practices or the content they provide. We encourage you to review the privacy policies of any third-party websites you visit before submitting any personal information.

The inclusion of a link on our website does not constitute an endorsement of the linked website or its privacy practices.

15. Social Media and Third-Party Logins

Our website may offer social login features (such as "Sign in with Google" or "Sign in with Facebook") that allow you to authenticate using your existing social media account credentials. When you use such features, the social media platform may share certain profile information with us, such as your name, email address, and profile picture, in accordance with the platform's own privacy settings and policies.

We may also maintain pages and profiles on social media platforms such as Facebook, Instagram, and Twitter/X. When you interact with us on social media, your interactions are governed by the privacy policies of those platforms. We encourage you to review those policies before engaging with our social media content.

16. California-Specific Privacy Disclosures

In addition to the rights described in Section 9.1, California residents have the following additional rights and disclosures under California law:

16.1 California Shine the Light Law

Under California Civil Code Section 1798.83, California residents may request information about any personal information we disclosed to third parties for their direct marketing purposes during the preceding calendar year. To submit such a request, contact us at [email protected].

16.2 Financial Incentives

We may offer loyalty programs, discounts, or other financial incentives that involve the collection or use of personal information. Participation in these programs is always voluntary. Where we offer such programs, we will provide you with a clear description of the program terms and the value of your personal information in relation to the offer.

16.3 Categories of Personal Information Disclosed

In the preceding 12 months, we may have disclosed the following categories of personal information to service providers for business purposes:

• Identifiers (name, email, IP address)
• Commercial information (order history, transaction records)
• Internet or electronic activity (browsing history, cookie data)
• Geolocation data
• Inferences drawn from personal information for profiling

17. Your Choices and Opt-Out Options

We provide you with multiple ways to control how we use your personal information:

• Email Marketing: Click the "unsubscribe" link in any marketing email or contact us at [email protected].
• SMS Marketing: Reply "STOP" to any marketing text message to opt out of SMS communications.
• Cookies: Manage your cookie preferences through your browser settings or our cookie consent tool.
• Account Information: Log into your account on cafegiordanos.top to update your personal information and communication preferences.
• Interest-Based Advertising: Opt out through the Digital Advertising Alliance at www.aboutads.info.
• Location Data: Disable location services through your browser or device settings.

18. How to File a Privacy Complaint

If you have concerns about how we handle your personal information, we encourage you to first contact us directly so we can address your concerns promptly and effectively.

18.1 Contact Us First

Please send your privacy complaint or concern to:
Email: [email protected]
Website: cafegiordanos.top

We will acknowledge receipt of your complaint within 5 business days and endeavor to resolve the matter within 30 days.

18.2 Regulatory Complaints

If you are a California resident and are not satisfied with our response, you have the right to file a complaint with the California Privacy Protection Agency (CPPA) at:

Residents of other states may file complaints with their applicable state Attorney General's office or state consumer protection agency.

For federal-level complaints concerning unfair or deceptive trade practices, you may file a complaint with the Federal Trade Commission (FTC):

19. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or industry standards. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website homepage
• Send an email notification to registered account holders where the changes are significant

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms.

20. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact our privacy team:

We are committed to working with you to resolve any privacy concerns you may have. Our team will respond to all legitimate privacy inquiries in a timely and professional manner, consistent with our obligations under applicable United States privacy laws.