Privacy Policy

Welcome to Papa Ginos. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website papaginos.click, place an order, or otherwise interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site immediately.

This Privacy Policy applies to all information collected through our website (papaginos.click), as well as any related services, sales, marketing, or events (collectively referred to as the "Services").

1. Who We Are

Papa Ginos is a food service business operating in the United States. We are dedicated to delivering quality food and an exceptional dining experience to our customers. For all privacy-related matters, you may contact us using the details below:

When we refer to "we," "us," or "our" in this Privacy Policy, we mean Papa Ginos, which is the entity responsible for your information under this Privacy Policy.

2. Applicable Law

As a business operating in the United States, we comply with all applicable federal and state privacy laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act) — governing unfair or deceptive practices, including privacy and data security.
• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) — for California residents.
• The Children's Online Privacy Protection Act (COPPA) — governing the collection of data from children under 13.
• The CAN-SPAM Act — governing commercial email communications.
• Other applicable state privacy laws, including but not limited to the Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and Connecticut Data Privacy Act (CTDPA).

Where state laws grant additional rights, we honor those rights to the fullest extent required by law.

3. Information We Collect

We collect information about you in a variety of ways depending on how you interact with us. The categories of information we may collect include:

3.1 Personal Information You Provide Directly

When you register an account, place an order, make a reservation, subscribe to our newsletter, fill out a form, participate in a promotion, or contact our customer service team, we may collect the following categories of personal information:

• Identifiers: Your full name, username, or similar identifier.
• Contact Information: Email address, telephone number, mailing address, and billing address.
• Payment Information: Credit or debit card number, billing details, and transaction history. Note: We do not store full payment card numbers; payment processing is handled by PCI-DSS compliant third-party processors.
• Account Credentials: Username and encrypted password when you create an account.
• Order Information: Details about the food items you order, special instructions, delivery preferences, and order history.
• Communications: Any messages, feedback, reviews, or correspondence you send us.
• Demographic Information: Such as date of birth (where required for age verification) or gender if voluntarily provided.

3.2 Information Collected Automatically

When you visit our website or use our Services, certain information is collected automatically through cookies, web beacons, pixels, and similar tracking technologies, including:

• Usage Data: Pages you view, links you click, time spent on pages, traffic source, and navigation patterns.
• Device Information: IP address, browser type and version, operating system, device type (mobile, desktop, tablet), device identifiers, and screen resolution.
• Location Data: General geographic location inferred from your IP address. We do not collect precise GPS location unless you explicitly grant permission through your browser.
• Log Data: Server logs including date and time of your visit, referring URL, and pages accessed.
• Cookie and Tracking Data: Information gathered through cookies, web beacons, and similar technologies (see Section 8 for details).

3.3 Information Collected from Third Parties

We may receive information about you from third-party sources, such as:

• Social Media Platforms: If you connect your social media account or interact with us on social platforms, we may receive certain profile information as permitted by those platforms.
• Delivery Partners: Third-party delivery services that facilitate the delivery of your food orders may share certain order and contact information with us.
• Analytics Providers: Third-party analytics services such as Google Analytics may provide us with aggregated and anonymized data about website usage and user behavior.
• Marketing Partners: Advertising and marketing partners may share information about your interests or past interactions with advertisements.
• Publicly Available Sources: We may supplement the information we collect with publicly available information.

4. How We Use Your Information

We use the information we collect for the following purposes, always relying on a lawful basis for processing under applicable law:

4.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, including managing delivery or pickup logistics.
• To create and manage your customer account.
• To process payments and send receipts and order confirmations.
• To communicate with you about your orders, including updates, delays, or issues.
• To provide customer support and respond to your inquiries or complaints.

4.2 Marketing and Promotions

• To send you promotional emails, special offers, discount codes, loyalty program updates, and news about new menu items — but only where you have consented or we otherwise have a lawful basis to do so.
• To personalize the content and offers you see on our website based on your preferences and order history.
• To conduct sweepstakes, contests, or promotions in which you have chosen to participate.
• To deliver targeted advertising through third-party advertising platforms.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

4.3 Analytics and Service Improvement

• To monitor and analyze usage trends, website performance, and user behavior to improve our website and Services.
• To conduct internal research and product development to enhance our menu, offerings, and overall customer experience.
• To troubleshoot technical issues and ensure the security and stability of our platform.
• To track the effectiveness of our marketing campaigns and promotions.

4.4 Legal and Compliance Purposes

• To comply with applicable federal, state, and local laws and regulations.
• To enforce our Terms of Service and other legal agreements.
• To protect the rights, property, and safety of Papa Ginos, our customers, and the public.
• To detect, prevent, and respond to fraud, abuse, security incidents, and other potentially harmful, prohibited, or illegal activities.
• To respond to lawful requests from government authorities or courts of competent jurisdiction.

5. Sharing Your Information with Third Parties

We do not sell your personal information for monetary consideration. However, we may share your information with third parties in the following circumstances:

5.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist us in operating our website and delivering our Services. These providers are contractually obligated to protect your information and may only use it for the specific purposes for which it was disclosed. Categories of service providers include:

• Payment Processors: To securely process credit card and debit card transactions.
• Delivery and Logistics Partners: Third-party delivery services that fulfill your food orders.
• Email and Communications Providers: Platforms used to send transactional and marketing emails.
• Hosting and Infrastructure Providers: Cloud hosting, content delivery networks, and server management services.
• Analytics and Marketing Platforms: Services such as Google Analytics, Meta Pixel, and similar tools.
• Customer Support Tools: Help desk or chat software used to manage customer inquiries.

5.2 Legal Requirements and Law Enforcement

We may disclose your information if required to do so by law or in good faith belief that such action is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request.
• Protect and defend the rights or property of Papa Ginos.
• Prevent or investigate possible wrongdoing in connection with our Services.
• Protect the personal safety of users of the Services or the public.
• Protect against legal liability.

5.3 Business Transfers

In the event that Papa Ginos undergoes a merger, acquisition, restructuring, sale of assets, or similar corporate transaction, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on our website prior to your information being transferred and becoming subject to a different privacy policy.

5.4 Aggregate and Anonymized Data

We may share aggregated or de-identified information — which cannot reasonably be used to identify you — with third parties for research, marketing, analytics, or other lawful purposes.

6. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption: All data transmitted between your browser and our servers is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology.
• Access Controls: Access to personal data is restricted to authorized employees and contractors who need it to perform their job functions.
• Payment Security: We use PCI-DSS compliant third-party payment processors and do not store full payment card data on our servers.
• Regular Security Audits: We conduct periodic reviews and assessments of our security practices and systems.
• Incident Response Plan: We maintain a documented incident response procedure to address data breaches promptly and notify affected individuals as required by applicable law.

7. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We respect and honor these rights as described below.

7.1 Rights for All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (e.g., legal obligations).
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications at any time.

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you are entitled to the following additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: The right to know what personal information we collect, use, disclose, and sell or share.
• Right to Delete: The right to request deletion of personal information we have collected from you, subject to applicable exceptions.
• Right to Correct: The right to request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale/Sharing: The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. To exercise this right, please contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: The right to limit our use of sensitive personal information to what is necessary to provide the requested services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not receive a different price or quality of service as a result of exercising your rights.
• Right to Data Portability: The right to receive your personal information in a portable, usable format.

To submit a request to exercise your California privacy rights, please contact us at [email protected] with the subject line "California Privacy Rights Request." We will respond to verifiable consumer requests within 45 days, with the possibility of extending the response period by an additional 45 days where necessary.

7.3 Rights for Residents of Other States

Residents of Virginia, Colorado, Connecticut, Texas, and other states with enacted privacy legislation may also have rights including access, correction, deletion, portability, and the right to opt out of targeted advertising and profiling. To exercise any state-specific rights, please contact us at [email protected].

7.4 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a request by:

• Email: [email protected] (Subject line: "Privacy Rights Request")
• Website: papaginos.click

We may need to verify your identity before processing your request. We may ask you to provide additional information to confirm your identity. We will not use information you provide in your request for any purpose other than verifying your identity and fulfilling your request.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising. A cookie is a small text file stored on your device when you visit a website.

8.1 Types of Cookies We Use

8.2 Managing Your Cookie Preferences

You may control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a notification when a new cookie is placed. Please note that disabling certain cookies may affect the functionality of our website.

For more detailed information about the cookies we use and how to manage them, please refer to our full Cookie Policy, available on our website at papaginos.click.

To opt out of Google Analytics tracking, you may use the Google Analytics Opt-out Browser Add-on. To opt out of interest-based advertising, you may visit optout.aboutads.info or optout.networkadvertising.org.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods we follow are:

When your personal information is no longer necessary for the purposes described above and we are not legally required to retain it, we will securely delete or anonymize it.

10. Children's Privacy

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, solicit, or use personal information from children under the age of 13. If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take immediate steps to delete that information from our systems.

Our website is not directed at minors under the age of 18. We do not knowingly market our Services to individuals under 18 years of age. If you are a parent or legal guardian and believe that your child under 18 has provided us with personal information, please contact us immediately at [email protected], and we will take steps to delete that information.

11. International Data Transfers

Papa Ginos is based in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. Data protection laws in these countries may differ from the laws of your country of residence.

By using our Services, you consent to the transfer of your information to the United States and other countries as described in this Privacy Policy. We take appropriate steps to ensure that any international transfers of personal information are conducted in accordance with applicable law and that your data receives an adequate level of protection.

If you have questions about international data transfers, please contact us at [email protected].

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, delivery applications, and other services that are not operated by Papa Ginos. This Privacy Policy does not apply to those third-party services. We have no control over the content, privacy policies, or practices of any third-party sites or services.

We strongly encourage you to review the privacy policies of any third-party websites or services you visit through links on our website. We are not responsible for the privacy practices of third parties, and any information you provide to them is governed by their own privacy policies.

13. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not wish to have your online activity tracked. At this time, our website does not respond to browser DNT signals because there is no industry-wide standard for how websites should respond to such signals. However, you can use the cookie management options described in Section 8 to control tracking technologies on our site.

We will continue to monitor the development of DNT standards and update our practices accordingly.

14. Email Communications and CAN-SPAM Compliance

We send transactional emails (such as order confirmations, receipts, and customer service responses) as well as promotional emails to users who have opted in. All our commercial email communications comply with the CAN-SPAM Act. Specifically:

• We clearly identify ourselves as the sender of all commercial emails.
• We include a valid physical mailing address in all commercial email messages.
• We include a clear and conspicuous unsubscribe mechanism in every promotional email.
• We honor all unsubscribe requests within 10 business days.
• We never use misleading subject lines or headers.

To unsubscribe from our marketing communications at any time, click the "Unsubscribe" link in any marketing email or contact us at [email protected].

15. How to File a Complaint

We are committed to resolving any privacy concerns you may have. If you believe we have not handled your personal information in accordance with this Privacy Policy or applicable law, you have the right to file a complaint.

15.1 Contact Us Directly

We encourage you to first contact us directly so we can address your concern promptly:

• Email: [email protected]
• Website: papaginos.click

We will acknowledge your complaint within 5 business days and aim to fully resolve it within 30 business days. In complex cases, we will keep you informed of the progress.

15.2 Regulatory Authorities

If you are not satisfied with our response, you have the right to file a complaint with the relevant regulatory authorities:

• Federal Trade Commission (FTC): The FTC handles complaints regarding unfair or deceptive business practices, including privacy violations. You may file a complaint at ftc.gov/complaint or by calling 1-877-FTC-HELP (1-877-382-4357).
• California Residents — California Privacy Protection Agency (CPPA): California residents may file complaints with the California Privacy Protection Agency at cppa.ca.gov or the California Attorney General's Office at oag.ca.gov.
• Other State Residents: Residents of other states may contact their state Attorney General's office to file a privacy complaint.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on our website informing you of the changes.
• Where required by law or where we deem it appropriate, notify you via email.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acknowledgment and acceptance of the updated policy.

17. Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please do not hesitate to contact us:

Papa Ginos Privacy Policy — Effective Date: May 20, 2026. This document constitutes the complete and current Privacy Policy for papaginos.click. All previous versions of this Privacy Policy are superseded by this document.