Privacy Policy

This Privacy Policy describes how Costa Vida ("we," "us," "our," or "the Company") collects, uses, discloses, and protects your personal information when you visit our website at costavidameal.digital, place orders for food or meal-related services, use our digital platforms, or otherwise interact with us. Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

We are committed to protecting your privacy and handling your personal data with transparency, integrity, and respect. This policy complies with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act, which governs unfair or deceptive practices in commerce.

1. About Us

Costa Vida is a food and meal services company operating through the digital platform located at costavidameal.digital. We provide customers with access to food ordering, meal planning, and related culinary services through our online presence.

For all privacy-related inquiries, questions, or requests, please contact us at [email protected].

2. Information We Collect

We collect various types of information in connection with the services we provide. The categories of personal information we collect are described in detail below.

2.1 Personal Identification Information

When you register an account, place a food order, subscribe to our newsletter, or contact our customer support team, we may collect the following personal identification data:

• Full name
• Email address
• Phone number
• Billing and shipping/delivery address
• Username and password (stored in encrypted form)
• Date of birth (for age verification purposes)
• Payment information (credit/debit card numbers, billing details — processed securely through third-party payment processors)
• Dietary preferences and food restrictions (when voluntarily provided)
• Profile photo (if you choose to upload one)

2.2 Order and Transaction Data

In the course of providing our food and meal services, we collect information related to your transactions, including:

• Order history, including items purchased, quantities, and order frequency
• Delivery preferences and special instructions
• Payment confirmations and transaction identifiers
• Customer feedback, ratings, and reviews submitted about our food or services
• Promotional codes or discount vouchers redeemed

2.3 Usage Data and Behavioral Information

When you visit our website or use our digital services, we automatically collect certain usage and behavioral data, including:

• Pages visited on our website and time spent on each page
• Search queries entered on our platform
• Clickstream data and navigation patterns
• Links clicked and features used
• Referring URL (the website that brought you to ours)
• Exit pages and session duration
• Frequency and timing of visits

2.4 Device and Technical Information

We collect technical information about the devices and software used to access our services, including:

• IP address (Internet Protocol address)
• Device type (desktop, mobile, tablet)
• Operating system and version
• Browser type and version
• Device identifiers and mobile advertising IDs
• Screen resolution and display settings
• Language settings
• Time zone
• Network connection type

2.5 Location Data

With your permission, or as inferred from your IP address or delivery address, we may collect geolocation information to assist with food delivery services, show you nearby restaurant options, calculate delivery zones, and provide location-based promotions. You may opt out of precise location tracking through your device settings.

2.6 Communications Data

When you communicate with us through email, live chat, social media, or customer support channels, we collect and retain records of those communications, including:

• Content of messages sent to our support team
• Complaint or feedback submissions
• Social media interactions involving our brand
• Survey responses

2.7 Cookie and Tracking Technology Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. Please refer to Section 8 of this Privacy Policy for detailed information about our cookie practices.

2.8 Information From Third Parties

We may also receive information about you from third-party sources, such as:

• Social media platforms (if you log in through a social media account or interact with our pages)
• Analytics providers that share aggregated behavioral data
• Advertising partners and marketing networks
• Payment processors confirming transaction status
• Delivery logistics partners

3. How We Use Your Information

Costa Vida uses the personal information collected for a variety of legitimate business purposes. We process your data only where we have a lawful basis to do so under applicable law.

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders and delivery requests
• To create and maintain your customer account
• To process payments and send transaction confirmations
• To coordinate with delivery drivers and logistics partners
• To provide customer support and respond to inquiries or complaints
• To notify you of changes to your orders or our services

3.2 Personalization and User Experience

• To personalize the content and recommendations displayed to you on our website
• To remember your food preferences, dietary restrictions, and past orders
• To improve the overall usability and functionality of our digital platforms
• To suggest menu items based on your order history and preferences

3.3 Analytics and Business Improvement

• To analyze usage patterns and trends to improve our website and services
• To conduct research and statistical analysis on how customers interact with our platform
• To evaluate the performance of our promotional campaigns and marketing efforts
• To identify and address technical issues on our website

3.4 Marketing and Communications

• To send you promotional emails, special offers, newsletters, and updates about our food and services (with your consent or as otherwise permitted by law)
• To display targeted advertisements on third-party websites and social media platforms
• To notify you about loyalty programs, discounts, or seasonal menu items
• To conduct contests, promotions, and sweepstakes

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send, or by contacting us at [email protected].

3.5 Legal Compliance and Safety

• To comply with applicable federal and state laws and regulations
• To detect, investigate, and prevent fraud, unauthorized access, or other illegal activities
• To enforce our Terms of Service and other legal agreements
• To protect the rights, property, and safety of Costa Vida, our customers, and the public
• To respond to lawful requests from courts, law enforcement agencies, or regulatory authorities

4. How We Share Your Information

We do not sell your personal information to third parties for monetary compensation. However, we do share your data with trusted third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage third-party companies and individuals to perform services on our behalf. These service providers have access to your personal information only to the extent necessary to perform their functions and are contractually obligated to keep it confidential. They include:

• Payment processors: To securely handle payment card transactions
• Delivery and logistics partners: To fulfill food delivery orders
• Cloud hosting providers: To store our website data and customer databases
• Email marketing platforms: To send promotional and transactional emails
• Analytics providers: Such as Google Analytics, to analyze website traffic and user behavior
• Customer support tools: To manage customer service communications
• Advertising networks: To serve targeted advertisements on our behalf

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that disclosure is required by law, including to:

• Comply with a subpoena, court order, legal process, or other governmental request
• Enforce our legal rights or defend against legal claims
• Investigate suspected fraud or violations of our Terms of Service
• Protect the safety or security of our users, employees, or the public

4.3 Business Transfers

If Costa Vida undergoes a merger, acquisition, asset sale, restructuring, or other business transaction, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on our website prior to your information becoming subject to a different privacy policy.

4.4 Aggregated and De-Identified Data

We may share aggregated, de-identified, or anonymized data — which cannot reasonably be used to identify you — with third parties for research, marketing, analytics, or other business purposes without restriction.

4.5 With Your Consent

We may share your personal information with additional third parties when you have given us your explicit consent to do so.

5. Data Security

Protecting your personal information is a priority at Costa Vida. We implement industry-standard technical, administrative, and physical security measures designed to protect your personal data from unauthorized access, disclosure, alteration, loss, or destruction.

5.1 Security Measures We Use

• Encryption: All data transmitted between your browser and our servers is encrypted using Transport Layer Security (TLS/SSL) protocols.
• Password security: Account passwords are stored in a hashed and salted format using modern cryptographic algorithms.
• Access controls: We restrict access to personal information to authorized employees, contractors, and service providers who need the data to perform their job functions.
• Secure payment processing: Payment card data is processed through PCI-DSS compliant third-party processors and is never stored on our servers.
• Regular security assessments: We conduct periodic reviews of our security practices, systems, and procedures.
• Data minimization: We collect only the personal information necessary for the purposes described in this policy.

6. Your Privacy Rights

Depending on your state of residence, you may have various rights regarding your personal information. We are committed to honoring these rights under applicable United States privacy laws.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request that we disclose what personal information we have collected about you, the sources of that information, the purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions permitted by law.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: Although we do not sell personal information for monetary value, you have the right to opt out of the sharing of your personal information for cross-context behavioral advertising purposes.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit how we use and disclose sensitive personal information to only what is necessary to perform the services you requested.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights under the CCPA/CPRA. We will not deny you services, charge you different prices, or provide a lower quality of service because you exercised your rights.
• Right to Data Portability: You have the right to receive a copy of your personal information in a portable, readily usable format.

6.2 General Privacy Rights for All U.S. Residents

Regardless of your state of residence, we offer all users the following rights:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we update or correct inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information from our records, subject to applicable legal obligations and legitimate business requirements.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us by:

• Email: [email protected]
• Website: costavidameal.digital (through our contact or privacy request form)

We will respond to your request within 45 days of receipt. If we require additional time, we will inform you of the extension and the reason for it. We may need to verify your identity before processing your request to ensure we are disclosing or deleting information belonging to the correct individual. You may also designate an authorized agent to submit requests on your behalf.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention procedures.

8. Cookie Policy Summary

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertisements. This section provides a brief overview of our cookie practices.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the website to function properly and cannot be disabled. They include session management, authentication, and shopping cart functionality.
• Performance and Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting information about page visits, traffic sources, and user behavior (e.g., Google Analytics).
• Functional Cookies: These cookies allow us to remember your preferences (such as language, location, and dietary settings) to provide a more personalized experience.
• Marketing and Advertising Cookies: These cookies are used to track visitors across websites and display relevant advertisements tailored to your interests.

8.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, please note that disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance's opt-out page at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

For full details about our cookie practices, the specific cookies we use, and how to manage your preferences, please refer to our complete Cookie Policy available on our website at costavidameal.digital.

9. Children's Privacy

Costa Vida's food ordering and meal services are designed for adult consumers. We do not knowingly collect personal information from children under 18 years of age. If you are under 18, please do not use our website or submit any personal information through our digital platforms.

If we become aware that we have inadvertently collected personal information from a child under 18 without appropriate parental or guardian consent, we will take immediate steps to delete such information from our records. If you believe we may have inadvertently collected data from a minor, please contact us immediately at [email protected].

We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and all applicable federal and state laws governing children's online privacy. Parents or legal guardians who believe their child has provided us with personal information without their consent should contact us promptly so we can take appropriate corrective action.

10. International Data Transfers

Costa Vida operates primarily within the United States. However, in the course of providing our services, your personal information may be transferred to, stored, or processed in countries other than the United States where our third-party service providers, data hosting providers, or business partners maintain facilities.

These countries may have data protection laws that differ from, and may not be as comprehensive as, the laws in your state or country of residence. By using our website and services, you acknowledge and consent to the transfer of your personal information to countries outside of your state or jurisdiction as described in this policy.

When we transfer personal data internationally, we take appropriate safeguards to ensure that your information continues to be protected in accordance with this Privacy Policy and applicable legal requirements, including:

• Entering into data processing agreements with service providers that incorporate standard contractual clauses or other recognized transfer mechanisms
• Implementing technical and organizational security measures appropriate to the level of risk
• Conducting due diligence on the privacy and security practices of our third-party service providers

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not owned or operated by Costa Vida. This Privacy Policy does not apply to those third-party platforms. We have no control over the data collection and privacy practices of external websites and are not responsible for their privacy policies or content.

We encourage you to review the privacy policies of any third-party websites you visit through links on our platform before providing any personal information to those sites. The inclusion of a link on our website does not constitute an endorsement or recommendation of the linked website.

12. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, our website does not currently respond to or honor DNT signals from browsers.

However, you may manage your tracking preferences through our cookie settings, your browser's cookie controls, or by opting out of interest-based advertising as described in Section 8 of this Privacy Policy.

13. California-Specific Privacy Rights

This section applies specifically to California residents and supplements the general information provided throughout this Privacy Policy.

13.1 California Shine the Light Law

Under California Civil Code Section 1798.83, California residents who have an established business relationship with us may request information about our disclosure of personal information to third parties for direct marketing purposes. To make such a request, please contact us at [email protected].

13.2 CCPA/CPRA Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information from California residents, as defined under the CCPA/CPRA:

13.3 Authorized Agent Requests

California residents may designate an authorized agent to submit a consumer rights request on their behalf. The authorized agent must provide written proof of their authorization to act on your behalf, and we may require you to verify your identity directly with us before fulfilling the request.

14. How to File a Complaint

If you believe that we have violated your privacy rights or applicable data protection laws, we encourage you to first contact us directly so that we may address your concerns.

14.1 Contact Us First

Please send your complaint or concern to:

• Email: [email protected]
• Website: costavidameal.digital

We will acknowledge receipt of your complaint within 5 business days and aim to provide a substantive response within 30 days of receipt.

14.2 Complaints to Regulatory Authorities

If you are not satisfied with our response, or if you believe your rights have not been adequately addressed, you have the right to file a complaint with applicable regulatory or governmental authorities:

• Federal Trade Commission (FTC): The FTC enforces federal consumer protection and privacy laws, including the FTC Act, which prohibits unfair or deceptive practices involving consumer data. You may file a complaint at ftc.gov/complaint or by calling 1-877-FTC-HELP (1-877-382-4357).
• California Attorney General (for California residents): California residents may submit privacy-related complaints to the California Attorney General's office at oag.ca.gov or by calling (916) 210-6276.
• California Privacy Protection Agency (CPPA): The CPPA enforces the CCPA/CPRA and accepts consumer complaints. You may contact the CPPA at cppa.ca.gov.
• State Attorney General Offices: Residents of other states may also have the right to file complaints with their respective state Attorney General's office or consumer protection agencies.

15. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website indicating that the Privacy Policy has been updated
• Where required by law or where the changes are material, notify you by email using the address associated with your account

Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team:

We are committed to working with you to resolve any privacy concerns or questions you may have in a timely, fair, and transparent manner. Our privacy team strives to respond to all inquiries within 5 to 10 business days.