Privacy Policy

Welcome to Taco Time. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website tacotime-food.rest, place orders, or otherwise interact with our services. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services immediately.

This Privacy Policy applies to all users located in the United States. Where applicable, we comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable federal and state privacy laws. If you are a California resident, please pay special attention to the sections specifically addressing your rights under California law.

1. Who We Are

Taco Time is a food service business operating in the United States. Our website provides information about our menu, services, locations, and allows customers to interact with our brand digitally.

For all privacy-related inquiries, you may contact us directly via the email address listed above. We will respond to all legitimate requests within a reasonable timeframe, and in no case later than 45 days as required by applicable law.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The information we gather falls into the following broad categories:

2.1 Personal Information You Provide Directly

When you interact with Taco Time — whether by placing an order, registering for an account, subscribing to our newsletter, submitting a contact form, participating in a promotion, or otherwise communicating with us — you may voluntarily provide us with personal information, including but not limited to:

• Full Name: Your first and last name as entered during account creation or order placement.
• Email Address: Used for order confirmations, account management, and marketing communications (where you have opted in).
• Phone Number: Used for order updates, delivery coordination, and customer support.
• Mailing and Delivery Address: Required when placing delivery orders or receiving promotional materials.
• Payment Information: We collect payment card details, billing addresses, and related financial information necessary to process transactions. Note: full payment card numbers are processed by secure third-party payment processors and are not stored on our servers.
• Account Credentials: Username and encrypted password if you create an account on our platform.
• Dietary Preferences and Special Instructions: Any food-related preferences, allergies, or special requests you provide when placing orders.
• Feedback and Reviews: Comments, reviews, survey responses, or other feedback you submit about our products or services.
• Communications: Records of your correspondence with us, including emails, chat logs, and customer support interactions.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and browsing behavior. This data helps us improve our services, enhance security, and understand how our website is used. Automatically collected information includes:

• IP Address: Your Internet Protocol address, which may be used to approximate your geographic location.
• Browser Type and Version: The web browser you use to access our site.
• Operating System: The operating system running on your device.
• Device Type and Identifiers: Whether you are using a desktop, laptop, tablet, or mobile device, and associated device identifiers.
• Pages Visited: The specific pages, menus, and content you access on our website.
• Referring URLs: The website or search engine that directed you to our site.
• Time and Date of Visits: Timestamps for when you access and navigate our website.
• Session Duration: How long you spend on particular pages or across our site as a whole.
• Clickstream Data: The sequence of pages you visit and links you click within our website.
• Search Queries: Any search terms entered on our internal website search feature.

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage objects, and other tracking technologies to collect information about your activity on our website. For a full description of the types of cookies we use, the purposes for which we use them, and how you can manage your cookie preferences, please refer to our Cookie Policy.

In brief, the categories of cookies we use include:

• Strictly Necessary Cookies: Essential for the operation of our website, including enabling you to add items to your cart and proceed through checkout.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymized usage statistics.
• Functional Cookies: Allow us to remember your preferences, such as language settings or previously selected menu items.
• Targeting and Advertising Cookies: Used to deliver relevant advertisements and promotions, and to measure the effectiveness of our marketing campaigns.

2.4 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media account to our services or interact with our social media pages, we may receive profile information permitted by your social media settings.
• Analytics Providers: Third-party analytics services such as Google Analytics may provide us with aggregated information about site traffic and user behavior.
• Advertising Partners: Our advertising partners may share information with us about your interactions with their platforms in connection with our ads.
• Payment Processors: Our payment service providers may share transaction confirmation and fraud detection information with us.
• Delivery Partners: Third-party delivery platforms or courier services may share order fulfillment information with us.

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes. Specifically, we use your personal information to:

3.1 Provide and Manage Our Services

• Process and fulfill your food orders, including coordinating delivery or pickup.
• Create, maintain, and manage your customer account.
• Process payments and refunds securely.
• Send order confirmations, receipts, and status updates.
• Respond to your questions, requests, and complaints via customer support channels.
• Provide personalized menu recommendations based on your order history and preferences.

3.2 Marketing and Promotional Communications

• Send you promotional emails, special offers, loyalty rewards, and news about new menu items — but only where you have opted in to receive such communications or where we have a legitimate interest to do so under applicable law.
• Conduct sweepstakes, contests, promotions, or surveys in which you have chosen to participate.
• Display personalized advertisements on our website and on third-party platforms.
• Measure the effectiveness of our marketing campaigns and optimize our promotional strategies.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected].

3.3 Analytics and Website Improvement

• Analyze how visitors use our website in order to improve its functionality, layout, and content.
• Monitor and evaluate the performance of our website, including page load times and error rates.
• Conduct internal research and development to enhance our products, services, and overall customer experience.
• Generate anonymized statistical reports about website traffic and user behavior.

3.4 Legal Compliance and Safety

• Comply with applicable laws, regulations, legal processes, and government requests.
• Detect, prevent, and investigate fraudulent transactions, unauthorized access, and other illegal or harmful activities.
• Enforce our Terms of Service and other applicable agreements.
• Protect the rights, property, and safety of Taco Time, our customers, employees, and the general public.

4. How We Share Your Information

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We share personal information with trusted third-party companies and individuals who assist us in operating our business and providing our services. These service providers are only granted access to the information necessary to perform their specific functions and are contractually obligated to protect your data. Categories of service providers include:

• Payment processing companies that handle credit card and digital payment transactions.
• Delivery and logistics partners who fulfill food delivery orders.
• Cloud hosting and infrastructure providers who store and manage our website and data systems.
• Email marketing platforms used to send promotional and transactional communications.
• Customer relationship management (CRM) software providers.
• Analytics and data insights platforms (e.g., Google Analytics).
• Advertising networks and social media platforms for targeted marketing.
• Fraud detection and cybersecurity service providers.

4.2 Legal Obligations and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or other legal process.
• Respond to lawful requests from government authorities, including law enforcement agencies.
• Protect and defend the rights or property of Taco Time.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of our users, customers, employees, or the public.

4.3 Business Transfers

In the event that Taco Time undergoes a merger, acquisition, reorganization, bankruptcy, sale of assets, or any other form of business transfer, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties in ways not described above when we have obtained your explicit consent to do so. You retain the right to withdraw such consent at any time.

5. Data Security

Taco Time takes the security of your personal information seriously. We implement a comprehensive set of administrative, technical, and physical safeguards designed to protect your data from unauthorized access, use, alteration, disclosure, or destruction. Our security measures include:

• Encryption: All data transmitted between your browser and our website is protected using Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption.
• Secure Payment Processing: Payment card transactions are processed through PCI DSS-compliant payment processors. We do not store full payment card numbers on our servers.
• Access Controls: Access to personal data is restricted to authorized personnel who require the information to perform their job functions. All employees with data access are subject to confidentiality obligations.
• Password Security: User account passwords are stored using industry-standard hashing algorithms and are never stored in plain text.
• Regular Security Audits: We periodically review and test our security systems and procedures to identify and address potential vulnerabilities.
• Incident Response: We maintain documented procedures for detecting, responding to, and notifying relevant parties in the event of a data breach, in accordance with applicable state and federal breach notification laws.

6. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We honor the rights described below for all users in the United States, with enhanced protections for California residents as required by the CCPA/CPRA.

6.1 Right to Know and Access

You have the right to request that we disclose what personal information we have collected about you over the past 12 months, including: the categories of personal information collected, the sources from which it was collected, the purposes for which it was used, the categories of third parties with whom it was shared, and the specific pieces of personal information we hold about you.

6.2 Right to Correction

You have the right to request that we correct inaccurate personal information that we maintain about you. We will use commercially reasonable efforts to honor such requests, taking into account the nature of the information and the purposes for which it is processed.

6.3 Right to Deletion

You have the right to request that we delete personal information we have collected about you, subject to certain exceptions. We may deny a deletion request if retaining the information is necessary to complete a transaction, detect security incidents, comply with a legal obligation, or exercise other rights permitted under applicable law.

6.4 Right to Data Portability

Upon a verified request, we will provide you with a copy of your personal information in a structured, commonly used, and machine-readable format, to the extent technically feasible and required by applicable law.

6.5 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the "sale" or "sharing" of their personal information for cross-context behavioral advertising. While we do not sell personal information for monetary consideration, we may engage in data sharing practices that constitute "sharing" under California law. To exercise this right, please contact us at [email protected] or use the opt-out mechanism provided on our website.

6.6 Right to Limit Use of Sensitive Personal Information

California residents have the right to limit our use and disclosure of sensitive personal information (such as payment card details, account login credentials, and precise geolocation data) to uses that are necessary to provide the services you have requested or as otherwise permitted by the CPRA.

6.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you goods or services, charge you different prices, provide a different level of quality of service, or suggest that you will receive a different level of service as a result of exercising your rights under applicable privacy law.

6.8 How to Exercise Your Rights

To submit a privacy rights request, please contact us using one of the following methods:

• Email: [email protected] (subject line: "Privacy Rights Request")
• Website: tacotime-food.rest

We will verify your identity before processing your request. Verification may require you to provide certain personal information to confirm your identity. We will respond to your verified request within 45 days. If we require additional time (up to an additional 45 days), we will inform you of the extension and the reason for the delay in writing. We will respond to requests free of charge, unless they are manifestly unfounded, excessive, or repetitive.

You may designate an authorized agent to submit a request on your behalf. To do so, you must provide the authorized agent with signed written permission to submit the request, and we may require you to verify your identity directly with us.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website to enhance your experience, analyze website traffic, and deliver targeted advertising. Below is a brief summary of our cookie practices:

• Session Cookies: Temporary cookies that expire when you close your browser. They are used to maintain your session while you browse our website (e.g., keeping items in your cart).
• Persistent Cookies: Stored on your device for a set period of time. They allow us to recognize you on return visits and remember your preferences.
• First-Party Cookies: Set directly by Taco Time on our website domain.
• Third-Party Cookies: Set by our trusted partners (such as Google Analytics or advertising networks) to provide analytics services and targeted advertising.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be alerted when a website attempts to set a cookie. Please note that disabling certain cookies may affect the functionality of our website.

For a comprehensive overview of the specific cookies we use, how long they persist, and detailed instructions for managing your preferences, please visit our full Cookie Policy.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. The specific retention periods we apply are as follows:

After the applicable retention period has expired, we will securely delete or anonymize your personal information in accordance with our data disposal procedures.

9. Children's Privacy

Taco Time does not direct its services to minors, and we do not knowingly solicit or collect personal information from children under the age of 18. If you are a parent or legal guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving a verified request, we will take prompt steps to delete the child's information from our systems.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under the age of 13 without verifiable parental consent. Our services are not designed for children under 13, and we do not knowingly collect data from this age group under any circumstances.

If we become aware that we have inadvertently collected personal information from a minor under the age of 18, we will delete that information as quickly as reasonably practicable. By using our website, you represent and warrant that you are 18 years of age or older.

10. International Data Transfers

Taco Time is based in the United States, and the personal information we collect is primarily stored and processed on servers located within the United States. By using our website and services, you acknowledge and consent to the processing of your personal information in the United States, where privacy laws may differ from those in your home country.

If we transfer your personal information to third-party service providers or partners located outside the United States, we take appropriate steps to ensure that your information receives a level of protection consistent with this Privacy Policy and applicable law. Such measures may include:

• Entering into data processing agreements with third-party recipients that include standard contractual clauses or other legally recognized transfer mechanisms.
• Verifying that recipient countries or organizations maintain adequate data protection standards.
• Implementing additional technical and organizational safeguards where necessary.

Please be aware that when data is transferred to and stored in the United States, it may be accessible to U.S. government authorities under applicable laws and regulations.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Taco Time. This Privacy Policy applies solely to our website and our services. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We strongly encourage you to review the privacy policies of any third-party websites you visit through links on our site. The inclusion of a link on our website does not imply our endorsement of the linked site or its privacy practices.

12. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), which took full effect on January 1, 2023. In addition to the rights described in Section 6, California residents have the following additional protections:

• Right to Know Categories and Specific Pieces: You may request disclosure of (a) the categories of personal information we have collected, (b) the specific pieces of personal information we hold, (c) the categories of sources, (d) the business or commercial purposes for collection, and (e) the categories of third parties with whom we share the information.
• Sensitive Personal Information: California residents have rights specific to "sensitive personal information" as defined under the CPRA, including the right to limit its use to specified purposes.
• No Retaliation: California residents will not face any retaliation or discriminatory treatment for exercising their CCPA/CPRA rights.
• Shine the Light Law: Under California Civil Code Section 1798.83, California residents may request information about personal data disclosed to third parties for direct marketing purposes within the past calendar year. To make such a request, contact us at [email protected].

To exercise your California privacy rights, please submit a verifiable consumer request to [email protected]. We will respond within the timeframes required by California law.

13. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. At this time, our website does not respond differently to DNT signals. However, you may manage your cookie and tracking preferences as described in our Cookie Policy.

14. Marketing Communications and Opt-Out

With your consent, we may send you marketing emails, SMS messages, push notifications, and other promotional communications about our products, services, special offers, and events. You have the following opt-out options:

• Email: Click the "Unsubscribe" link at the bottom of any marketing email we send you, or send an email to [email protected] with the subject line "Unsubscribe."
• SMS: Reply "STOP" to any marketing text message we send you.
• Account Settings: If you have a registered account, you may update your communication preferences through your account settings page.

Please note that even after you opt out of marketing communications, we may still send you transactional or service-related messages (such as order confirmations and account notifications), as these are necessary to provide you with the services you have requested.

15. How to File a Complaint

If you have concerns about how we handle your personal information and you are not satisfied with our response to your privacy inquiry, you have the right to file a complaint with the appropriate regulatory authority.

15.1 Contact Us First

We encourage you to contact us first so we can address your concerns directly:

• Email: [email protected]
• Website: tacotime-food.rest

15.2 Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) enforces federal consumer protection laws, including those related to privacy and data security. You may file a complaint with the FTC at:

• Website: www.ftc.gov
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, D.C. 20580

15.3 California Privacy Protection Agency (CPPA)

If you are a California resident and believe your CCPA/CPRA rights have been violated, you may file a complaint with the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Address: California Privacy Protection Agency, 2101 Arena Blvd, Sacramento, CA 95834

15.4 State Attorneys General

Residents of other U.S. states may also have the right to file privacy complaints with their state's Attorney General office. We encourage you to consult the website of your state's Attorney General for information on available remedies and how to file a complaint.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal obligations, or operational needs. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on our website homepage for a reasonable period of time.
• Send an email notification to registered account holders, where required by law or where we deem it appropriate given the nature of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the effective date of any updated policy constitutes your acknowledgment of the changes and your agreement to the updated terms.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team. We are committed to resolving your inquiry promptly and transparently.

This Privacy Policy was last reviewed and updated on May 20, 2026. © 2026 Taco Time. All rights reserved.