Privacy Policy

This Privacy Policy describes how Costa Vida ("we," "us," "our," or the "Company") collects, uses, discloses, and protects your personal information when you visit our website at cost-vida.rest (the "Website"), place orders, use our services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with applicable United States federal and state privacy laws.

Please read this Privacy Policy carefully before using our Website or services. By accessing or using cost-vida.rest, you acknowledge that you have read, understood, and agree to the practices described in this document. If you do not agree with any part of this policy, please discontinue your use of our Website and services immediately.

For any questions, concerns, or requests related to this Privacy Policy, you may contact us at any time using the details provided in the Contact Us section below.

1. About Costa Vida

Costa Vida is a food service company operating in the United States. We provide fresh, high-quality food and dining experiences to our customers through our physical locations and our online ordering platform hosted at cost-vida.rest. Our mission is to deliver exceptional taste, quality, and service while respecting and safeguarding the privacy of every individual who interacts with our brand.

Contact Information:
Company Name: Costa Vida
Email: [email protected]
Website: cost-vida.rest

2. Scope of This Policy

This Privacy Policy applies to all personal information collected by Costa Vida through:

• Our Website, cost-vida.rest, and all subdomains associated with it;
• Online food ordering and delivery services facilitated through our Website;
• Customer loyalty and rewards programs;
• Email, SMS, and other electronic communications with us;
• Social media pages, profiles, and interactions;
• In-store digital interactions, including Wi-Fi usage and digital kiosks at our locations;
• Any mobile applications we may operate or publish; and
• Any other means by which you provide us with your personal information.

This policy does not apply to third-party websites, platforms, or services that we may link to. We encourage you to review the privacy policies of any third-party services you access through our Website.

3. Information We Collect

We collect various categories of information depending on how you interact with us. The categories of personal information we may collect include, but are not limited to, the following:

3.1 Personal Identification Information

When you create an account, place an order, sign up for promotions, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Mailing address or delivery address
• Date of birth (for age verification or promotional purposes)
• Username and password (for account holders)
• Payment card information (processed and stored by our secure third-party payment processors)

3.2 Order and Transaction Information

When you place an order or make a purchase, we may collect:

• Order history and details, including items ordered and quantities
• Billing and payment information (excluding full credit or debit card numbers)
• Delivery instructions and preferences
• Loyalty points balances and redemption history
• Special dietary preferences or requests provided voluntarily

3.3 Usage and Interaction Data

We automatically collect certain information when you visit or interact with our Website, including:

• IP address and approximate geographic location derived therefrom
• Browser type, version, and language settings
• Operating system and device type
• Pages visited on our Website, time spent on each page, and navigation paths
• Referring and exit URLs (the pages that directed you to or from our Website)
• Time and date of your visit
• Links and buttons clicked, and search queries entered on our Website
• Frequency and duration of visits

3.4 Device Information

We may collect technical information about the device you use to access our Website, including:

• Device identifiers (such as device ID, advertising ID, or hardware serial numbers)
• Mobile carrier information (if applicable)
• Screen resolution and display settings
• Network connection type and speed

3.5 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our Website. For detailed information about how we use cookies and how you can manage your cookie preferences, please refer to Section 9: Cookies and Tracking Technologies of this policy.

3.6 Communications Data

When you contact us or engage with us through communication channels, we may collect:

• Content of your messages, emails, or chat conversations with our customer support team
• Records of your communications, including dates and times
• Survey responses and feedback you provide voluntarily
• Reviews and ratings you submit

3.7 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms when you connect your social media account to our services or log in using social sign-on features;
• Third-party delivery platforms or food ordering aggregators that transmit your order information to us;
• Analytics partners and advertising networks; and
• Publicly available sources.

3.8 Sensitive Information

We do not intentionally collect sensitive personal information such as Social Security numbers, government identification numbers, financial account credentials, precise geolocation data (unless voluntarily provided for delivery), racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data. If you voluntarily disclose such information in communications with us, we will handle it with the highest level of care and in accordance with applicable law.

4. How We Use Your Information

Costa Vida uses the personal information we collect for legitimate business purposes, including those described below. We only process your personal data when we have a lawful basis to do so.

4.1 Providing and Managing Our Services

• Processing and fulfilling your food orders and transactions
• Managing your online account, including authentication and account maintenance
• Processing payments securely through our payment service providers
• Coordinating delivery services when applicable
• Administering loyalty and rewards programs
• Responding to your customer service inquiries and resolving disputes

4.2 Improving Our Products and Services

• Analyzing usage data and trends to understand how customers interact with our Website
• Conducting internal research and development to improve our menu offerings and service quality
• Gathering feedback to enhance the overall customer experience
• Monitoring Website performance, identifying bugs, and addressing technical issues

4.3 Marketing and Communications

• Sending promotional emails, newsletters, and special offers where you have opted in or where we have a legitimate interest
• Personalizing marketing messages and advertisements based on your preferences, order history, and browsing behavior
• Providing information about new menu items, limited-time offers, and events
• Conducting surveys or promotions with your consent
• Managing your communication preferences and honoring opt-out requests

4.4 Analytics and Performance

• Using third-party analytics tools (such as Google Analytics) to measure website traffic and user behavior
• Tracking conversions, referral sources, and campaign effectiveness
• Generating aggregated, anonymized reports on service usage and customer trends

4.5 Legal Compliance and Security

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from law enforcement or government authorities
• Preventing, detecting, and investigating fraud, unauthorized access, and other security incidents
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Costa Vida, our customers, and the public

4.6 Business Operations

• Managing internal business functions such as accounting, auditing, and record-keeping
• Supporting corporate transactions such as mergers, acquisitions, or asset sales
• Training staff and improving operational procedures

5. Sharing Your Information with Third Parties

Costa Vida does not sell your personal information to third parties for monetary compensation. However, we may share your information with trusted third parties under the following circumstances:

5.1 Service Providers and Vendors

We engage third-party companies and individuals to assist in operating our business and delivering our services. These include:

• Payment processors — to securely process your financial transactions;
• Delivery and logistics partners — to fulfill your food delivery orders;
• Email and SMS marketing platforms — to send communications on our behalf;
• Website hosting and cloud storage providers — to maintain and secure our digital infrastructure;
• Analytics and advertising platforms — to understand Website traffic and optimize marketing efforts;
• Customer relationship management (CRM) software — to manage customer interactions and support; and
• IT and cybersecurity providers — to maintain the security of our systems.

All service providers are contractually required to use your personal data only to the extent necessary to provide services on our behalf and to maintain appropriate security standards.

5.2 Legal Requirements

We may disclose your personal information if required by law or if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request;
• Enforce our legal rights or defend against legal claims;
• Protect the safety, rights, or property of Costa Vida, our employees, customers, or the public; or
• Investigate potential violations of our terms or applicable law.

5.3 Business Transfers

In the event that Costa Vida undergoes a merger, acquisition, sale of assets, financing, or other corporate restructuring, your personal information may be transferred to the successor entity as part of that transaction. We will notify you of any such change in ownership or control through a notice on our Website or by direct communication.

5.4 With Your Consent

We may share your information with third parties that are not described above when we have obtained your explicit consent to do so.

5.5 Aggregated or Anonymized Data

We may share aggregated, de-identified, or anonymized data with third parties for research, analytics, marketing, or other business purposes. Such data cannot reasonably be used to identify you as an individual.

6. Data Security

Costa Vida takes the security of your personal information seriously. We implement a combination of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include, but are not limited to:

• Use of Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption for data transmitted between your browser and our servers;
• Secure storage of data on protected servers with access controls and authentication mechanisms;
• Regular security audits, vulnerability assessments, and penetration testing;
• Role-based access controls to restrict employee access to personal data on a need-to-know basis;
• Staff training on data protection and security best practices;
• Incident response procedures for identifying and addressing data breaches promptly; and
• Use of PCI-DSS compliant payment processing partners to handle financial data.

Despite our best efforts, no method of data transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your information. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law, including notification requirements under the laws of applicable states.

You are also responsible for maintaining the security of your account credentials. Please use a strong, unique password and do not share it with others. Contact us immediately if you suspect unauthorized access to your account.

7. Your Privacy Rights

Depending on your state of residence, you may have various rights concerning your personal information. Costa Vida respects and honors these rights as required by applicable law.

7.1 California Residents — CCPA/CPRA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

To exercise your California privacy rights, please submit a verifiable consumer request by contacting us at [email protected]. We will respond within 45 days of receiving your request, with a possible 45-day extension where reasonably necessary.

7.2 Rights for All U.S. Residents

Regardless of your state of residence, Costa Vida provides all users with the following baseline rights:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request correction of inaccurate or incomplete personal information.
• Right to Deletion: You may request deletion of your personal information, subject to applicable legal requirements.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any email we send or by contacting us directly.

7.3 How to Exercise Your Rights

To submit a privacy rights request, please contact us using the details below. To protect your privacy and the security of your information, we may need to verify your identity before processing your request. We will not charge a fee for your first request within a 12-month period, but may charge a reasonable fee for subsequent or excessive requests.

Email: [email protected]
Website: cost-vida.rest

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, to provide our services, and to comply with our legal obligations. The specific retention periods we apply depend on the nature of the data and the purposes for processing:

When personal information is no longer required, we will securely delete, destroy, or anonymize it in accordance with our data disposal procedures.

9. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising. Cookies are small text files stored on your device when you visit a website. They help us recognize returning visitors, remember your preferences, and understand how you interact with our Website.

The types of cookies we use include:

• Essential/Strictly Necessary Cookies: Required for the basic functioning of our Website (e.g., maintaining your session when placing an order). These cannot be disabled without affecting the Website's functionality.
• Performance and Analytics Cookies: Help us understand how visitors interact with our Website by collecting anonymized usage data (e.g., Google Analytics).
• Functional Cookies: Allow our Website to remember your choices and preferences (e.g., language settings, login information).
• Advertising and Targeting Cookies: Used by us and our advertising partners to deliver relevant advertisements based on your browsing behavior and interests.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse, delete, or be notified when cookies are set. Please note that disabling certain cookies may impact your ability to use certain features of our Website.

California residents may also exercise their right to opt out of the sharing of personal information through cookies for cross-context behavioral advertising purposes by contacting us at [email protected].

For more detailed information about the specific cookies we use and how to manage them, please refer to our Cookie Policy available on our Website.

10. Children's Privacy

Our Website, services, and online ordering platform are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, in compliance with the Children's Online Privacy Protection Act (COPPA), or from individuals under the age of 16, in compliance with the CCPA/CPRA.

If you are under 18 years old, please do not use our Website or submit any personal information to us. If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected], and we will take prompt steps to delete that information from our records.

We encourage parents and guardians to monitor their children's online activities and to help enforce this policy by instructing their children never to provide personal information through our Website without parental permission.

11. International Data Transfers

Costa Vida is based in the United States, and our primary data processing activities occur within the United States. However, some of our third-party service providers, partners, and cloud infrastructure providers may process or store data in countries outside of the United States.

If your personal information is transferred to, processed, or stored outside of the United States, we will take appropriate steps to ensure that such transfers are conducted in accordance with applicable law and that your personal data receives an adequate level of protection. These steps may include entering into data processing agreements with our third-party service providers that include appropriate data transfer safeguards.

By using our Website and services, you acknowledge that your personal information may be transferred to, and processed in, countries outside your state or country of residence, which may have different privacy laws than those in your jurisdiction.

12. Compliance with Federal Consumer Protection Law

Costa Vida is committed to complying with the Federal Trade Commission Act (FTC Act) and related consumer protection regulations enforced by the Federal Trade Commission (FTC). We maintain fair information practices and do not engage in deceptive or unfair practices with respect to the collection, use, or disclosure of personal information.

Our commitment to transparent data practices includes:

• Clearly disclosing our data collection and usage practices in this Privacy Policy;
• Providing meaningful choices about how your data is used for marketing purposes;
• Honoring all opt-out requests in a timely manner;
• Maintaining appropriate security standards to protect consumer data; and
• Responding promptly and honestly to consumer inquiries about privacy.

If you believe that our privacy practices are deceptive or unfair, you have the right to file a complaint with the Federal Trade Commission at www.ftc.gov or by calling 1-877-FTC-HELP (1-877-382-4357).

13. State-Specific Privacy Rights

In addition to California, several other U.S. states have enacted comprehensive consumer privacy laws that may grant additional rights to residents of those states. Costa Vida is committed to honoring your privacy rights regardless of your state of residence. If you reside in one of the following states, you may have additional rights that we are required to honor:

• Virginia (Consumer Data Protection Act – VCDPA)
• Colorado (Colorado Privacy Act – CPA)
• Connecticut (Connecticut Data Privacy Act – CTDPA)
• Utah (Utah Consumer Privacy Act – UCPA)
• Texas (Texas Data Privacy and Security Act – TDPSA)
• Oregon (Oregon Consumer Privacy Act – OCPA)
• Montana (Montana Consumer Data Privacy Act – MCDPA)

These rights may include rights to access, correct, delete, and obtain a portable copy of your personal data, as well as the right to opt out of certain types of data processing. To exercise any applicable state privacy rights, please contact us at [email protected].

14. Third-Party Links and Services

Our Website may contain links to third-party websites, social media platforms, and external services that are not operated or controlled by Costa Vida. These may include:

• Third-party food delivery platforms;
• Social media platforms such as Facebook, Instagram, or Twitter/X;
• Payment processing portals; and
• Review or rating platforms.

This Privacy Policy does not apply to third-party websites or services. We have no control over, and are not responsible for, the privacy practices or content of third-party services. We strongly encourage you to review the privacy policies of any third-party website you visit. Linking to a third-party website from our Website does not constitute our endorsement of their privacy practices.

15. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) feature that sends a signal to websites requesting that they not track your online activities. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our Website does not currently respond to DNT browser signals. However, you may manage your tracking preferences through cookie settings as described in Section 9 of this policy.

16. Changes to This Privacy Policy

Costa Vida reserves the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, applicable laws, or data processing activities. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page;
• Post a prominent notice on our Website; and/or
• Notify you via email (if we have your email address) where required by law or where changes significantly affect your rights.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our Website and services after any changes are posted constitutes your acceptance of the revised policy.

17. Filing a Complaint

If you have concerns about how Costa Vida handles your personal information and are not satisfied with our response, you have the right to file a complaint with the relevant data protection or consumer protection authority in your jurisdiction.

For U.S. residents, applicable authorities include:

• Federal Trade Commission (FTC):
  Website: www.ftc.gov/complaint
  Phone: 1-877-FTC-HELP (1-877-382-4357)
• California Attorney General's Office (for California residents):
  Website: oag.ca.gov/privacy
• California Privacy Protection Agency (CPPA):
  Website: cppa.ca.gov
• Your State Attorney General's Office:
  If you are a resident of a state with applicable consumer privacy laws, you may also file a complaint with your state's Attorney General's office.

Before filing a complaint with a regulatory authority, we encourage you to contact us first so that we have an opportunity to address your concerns directly and in a timely manner.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your privacy inquiries in a timely and transparent manner.

When contacting us about a privacy matter, please provide sufficient information for us to understand and address your request, including your name, contact information, and a clear description of your inquiry or request. We will respond to all legitimate privacy requests within the timeframes required by applicable law, and no later than 45 days from the date of receipt of your request.