Privacy Policy

At Giordanos, we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website giordanos-fresh.click, place food orders, or otherwise interact with our services. Please read this policy carefully. If you disagree with the terms of this Privacy Policy, please discontinue use of our site immediately.

This Privacy Policy applies to all information collected through our website, any related services, sales, marketing, or events (collectively referred to as the "Services"). By using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. About Us

Giordanos is a food service business operating in the United States. We are dedicated to providing fresh, high-quality food products and an exceptional customer experience online and in person.

For all privacy-related inquiries, you may contact us at the email address provided above. We will respond to your inquiry within a reasonable timeframe, and no later than 45 days as required by applicable law.

2. Legal Framework and Applicable Law

As a business operating in the United States, our privacy practices are governed by applicable federal and state laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive practices in commerce, including those related to privacy and data security.
• The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), which grants California residents specific rights regarding their personal information.
• The CAN-SPAM Act, which governs commercial email communications.
• The Children's Online Privacy Protection Act (COPPA), which protects the privacy of children under 13 years of age online.
• Other applicable state privacy laws, including those enacted in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Texas (TDPSA), to the extent they apply to our operations.

We are committed to full compliance with all applicable data protection laws and will update this policy as regulations evolve.

3. Information We Collect

We collect various types of information in connection with the operation of our Services. The categories of information we collect are described in detail below.

3.1 Personal Information You Provide to Us

When you use our Services, you may voluntarily provide us with personal information, including:

• Identification Information: Full name, username, or similar identifiers.
• Contact Information: Email address, telephone number, billing address, and delivery address.
• Account Credentials: Password, security questions, and other authentication information if you create an account.
• Payment Information: Credit card numbers, debit card numbers, billing details, and other financial information necessary to complete transactions. Note that full payment card data is processed by our secure third-party payment processors; we do not store complete card numbers on our servers.
• Order Information: Details of food items ordered, special dietary preferences or restrictions, delivery instructions, and order history.
• Communications Data: Any messages, feedback, reviews, or correspondence you send us via email, contact forms, or other channels.
• Marketing Preferences: Your preferences regarding promotional communications and marketing materials.

3.2 Information Collected Automatically

When you access or use our website, we automatically collect certain technical and usage information, including:

• Log Data: Internet Protocol (IP) address, browser type and version, operating system, referring URLs, pages viewed, time and date of your visit, and time spent on each page.
• Device Information: Device type, device identifiers, hardware model, operating system version, and mobile network information.
• Location Data: General geographic location based on IP address. With your consent, we may also collect more precise location data to facilitate local delivery services.
• Usage Data: Information about how you interact with our website, including clicks, navigation paths, search queries, and features used.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies. See Section 9 for more information about our use of cookies.

3.3 Information from Third Parties

We may also receive personal information about you from third-party sources, including:

• Social Media Platforms: If you choose to connect your social media account (such as Facebook, Google, or Instagram) to our Services, we may receive profile information such as your name, email address, and profile picture.
• Marketing Partners: Demographic and interest-based data from advertising networks and marketing partners.
• Delivery Partners: Information from third-party delivery services that we use to fulfill your food orders.
• Analytics Providers: Behavioral and usage data from analytics services that help us understand how our Services are used.
• Review Platforms: Public reviews and feedback you may post about our business on third-party platforms.

4. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. Specifically, we use your information to:

4.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders, including coordinating with our kitchen, delivery drivers, and third-party delivery partners.
• Manage your account, including authentication and account security.
• Process payments and prevent fraudulent transactions.
• Send you order confirmations, receipts, shipping updates, and delivery notifications.
• Provide customer support and respond to your inquiries, complaints, and requests.
• Communicate with you about changes to our menu, prices, hours of operation, or these policies.

4.2 Analytics and Service Improvement

• Analyze usage patterns and trends to better understand how customers interact with our website.
• Monitor and improve the performance, functionality, and user experience of our Services.
• Conduct research and development to create new features, products, and menu items.
• Perform internal audits and troubleshoot technical issues.
• Develop aggregated, anonymized insights about our customer base.

4.3 Marketing and Promotional Communications

• Send you newsletters, promotional offers, special deals, and information about new menu items or events, where you have provided consent or where permitted by applicable law.
• Personalize your experience on our website by showing you content and promotions that may interest you based on your order history and preferences.
• Deliver targeted advertising on third-party platforms and websites based on your interests and browsing behavior.
• Manage loyalty programs, discount codes, and referral programs if applicable.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send, or by contacting us directly at [email protected]. Please note that even if you opt out of marketing emails, we may still send you transactional communications related to your orders and account.

4.4 Legal and Compliance Purposes

• Comply with applicable laws, regulations, legal processes, and governmental requests.
• Enforce our Terms of Service and other agreements.
• Protect the rights, property, or safety of Giordanos, our customers, or others.
• Detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities.
• Maintain records as required by law, including tax and accounting records.

5. How We Share Your Information

We do not sell your personal information in the traditional sense. However, we may share your information with certain third parties under the following circumstances:

5.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating our business and delivering our Services. These include:

• Payment Processors: Companies such as Stripe or Square that securely process credit and debit card transactions on our behalf.
• Delivery Services: Third-party delivery platforms and courier services that help fulfill your food orders.
• Cloud Hosting Providers: Companies that provide server infrastructure and data storage for our website and applications.
• Email and Communications Providers: Services that help us send transactional and marketing emails.
• Analytics Providers: Companies such as Google Analytics that help us analyze website traffic and usage.
• Customer Support Tools: Platforms that help us manage and respond to customer inquiries.
• Marketing and Advertising Platforms: Services that help us run targeted advertising campaigns.

All service providers are contractually obligated to use your information only for the purposes for which it was shared and to maintain appropriate security measures to protect it.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or valid legal process.
• Respond to requests from government or law enforcement authorities.
• Protect the safety of our employees, customers, or the public.
• Prevent, detect, or investigate illegal activities, fraud, or threats to security.
• Protect and defend the rights and property of Giordanos.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity as part of the business transaction. We will notify you via email or prominent notice on our website if such a transfer occurs and your information becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information — which cannot reasonably be used to identify you — with third parties for research, marketing, analytics, and other purposes.

5.5 With Your Consent

We may share your personal information with other third parties when you have given us your explicit consent to do so.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, use, disclosure, alteration, or destruction.

6.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) or Transport Layer Security (TLS) technology.
• Secure Payment Processing: Payment card data is processed using PCI-DSS compliant systems. We do not store full card numbers on our servers.
• Access Controls: Access to personal information is restricted to authorized personnel who require it for their job functions.
• Firewalls and Intrusion Detection: We use firewalls and network monitoring systems to detect and prevent unauthorized access.
• Data Minimization: We only collect and retain the minimum amount of personal data necessary for the purposes described in this policy.

6.2 Administrative Safeguards

• Regular employee training on data privacy and security best practices.
• Internal policies governing the handling, storage, and disposal of personal information.
• Vendor due diligence and contractual data protection requirements for third-party service providers.

6.3 Limitations

While we strive to use commercially reasonable means to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods we apply include:

When personal information is no longer required, we securely delete or anonymize it in accordance with our data disposal procedures.

8. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. This includes the right to know what categories of personal information we collect, the purposes for which it is used, and the third parties with whom it is shared.

8.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. You may also update much of your information directly through your account settings on our website.

8.3 Right to Deletion

You have the right to request the deletion of your personal information, subject to certain exceptions (for example, where we are required to retain data by law or to complete a transaction you have requested).

8.4 Right to Data Portability

Where technically feasible, you have the right to receive a copy of your personal information in a structured, commonly used, machine-readable format, and to transmit that information to another service provider.

8.5 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the "sale" or "sharing" of their personal information for cross-context behavioral advertising purposes. If applicable, you may exercise this right by contacting us at [email protected].

8.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide you a lower quality of service because you exercised your privacy rights.

8.7 Right to Limit Use of Sensitive Personal Information

Under the CPRA, California residents have the right to limit the use and disclosure of sensitive personal information to what is necessary to perform the services requested.

8.8 How to Exercise Your Rights

To exercise any of the rights described above, please submit a request to us by:

• Email: [email protected]

We will acknowledge your request within 10 business days and respond substantively within 45 days. In some circumstances, we may need to verify your identity before fulfilling your request. If we need additional time to respond, we will notify you within the initial 45-day period.

You may designate an authorized agent to make requests on your behalf. The authorized agent must provide written authorization from you, and we may require you to verify your identity directly with us.

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your user experience, analyze site traffic, and support our marketing activities.

9.1 What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They allow the website to recognize your device and remember information about your visit, such as your preferences and login status.

9.2 Types of Cookies We Use

• Essential Cookies: These are necessary for the website to function properly. They enable core features such as security, session management, and order processing. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting anonymous usage information. We use tools such as Google Analytics for this purpose.
• Functional Cookies: These cookies allow our website to remember choices you make (such as your preferred language, menu customizations, or saved delivery addresses) to provide a more personalized experience.
• Marketing and Advertising Cookies: These cookies are used to deliver advertisements that are relevant to your interests. They may be set by us or by third-party advertising partners.

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse some or all cookies or to alert you when a cookie is being set. Please be aware that disabling certain cookies may affect the functionality of our website and your ability to place orders. For more information about how to manage cookies, please visit your browser's help documentation.

You may also opt out of interest-based advertising by visiting:

• Network Advertising Initiative Opt-Out
• Digital Advertising Alliance Opt-Out

For detailed information about our cookie practices, please refer to our full Cookie Policy, which is available on our website.

10. Children's Privacy

Our Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect personal information from children under the age of 13, and we do not target our Services at minors.

In compliance with the Children's Online Privacy Protection Act (COPPA), if we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take immediate steps to delete that information from our systems.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. We will investigate and delete the information as quickly as possible.

Individuals between the ages of 13 and 17 may only use our Services with the knowledge and supervision of a parent or legal guardian. By using our Services, you represent and warrant that you are at least 18 years of age, or that you are at least 13 years of age and have obtained parental or guardian consent.

11. California Residents — Additional Rights Under CCPA/CPRA

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023.

11.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email address, IP address, account name)
• Personal information under California Civil Code §1798.80 (name, payment information, address, telephone number)
• Commercial information (purchase history, products ordered)
• Internet or electronic network activity (browsing history, interaction with our website)
• Geolocation data (general location based on IP or precise location with consent)
• Inferences drawn from the above categories to create a profile about consumer preferences

11.2 Purposes for Collection

We collect these categories of personal information for the business purposes described in Section 4 of this Privacy Policy.

11.3 Your California Privacy Rights

As a California resident, you have the right to:

• Know the categories and specific pieces of personal information we have collected about you
• Know the categories of sources from which your personal information was collected
• Know the business purpose for collecting your personal information
• Know the categories of third parties with whom we share your personal information
• Request deletion of your personal information
• Request correction of inaccurate personal information
• Opt out of the sale or sharing of your personal information
• Limit the use of sensitive personal information
• Not be discriminated against for exercising your CCPA/CPRA rights

To submit a verifiable consumer request, please contact us at [email protected]. You may make a verifiable consumer request twice within a 12-month period.

12. International Data Transfers

Giordanos is based in the United States. If you are accessing our Services from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home country.

By using our Services, you consent to the transfer of your information to the United States. We take appropriate measures to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable law, including implementing contractual protections with our international service providers where applicable.

If you are located in the European Union, European Economic Area, or United Kingdom, please note that the United States may not provide the same level of data protection as your home jurisdiction. We recommend reviewing your local data protection laws before providing personal information through our Services.

13. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services, including social media platforms, delivery partners, and payment processors. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party websites you visit through links on our site. The inclusion of a link does not imply our endorsement of that website or its privacy practices.

14. How to File a Complaint

If you believe that we have handled your personal information in a manner that violates applicable privacy law, or if you are dissatisfied with our response to a privacy request, you have the right to file a complaint.

14.1 Contact Us First

We encourage you to contact us first so that we can address your concerns directly:

• Email: [email protected]

We will acknowledge your complaint within 10 business days and work to resolve it as quickly as possible.

14.2 Regulatory Authorities

If we are unable to resolve your complaint to your satisfaction, you may file a complaint with the relevant regulatory authority:

• Federal Trade Commission (FTC): The FTC enforces federal privacy and consumer protection laws. You may file a complaint at www.ftc.gov/complaint or by calling 1-877-382-4357.
• California Privacy Protection Agency (CPPA): California residents may file complaints regarding CCPA/CPRA violations with the CPPA at cppa.ca.gov.
• State Attorney General: Residents may also contact their state Attorney General's office for guidance on consumer privacy rights.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on this page with a new "Last Updated" date.
• Sending an email notification to the address associated with your account (for significant changes).
• Displaying a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us:

We are committed to working with you to resolve any privacy concerns in a timely, fair, and transparent manner. Your trust is important to us, and we will continue to uphold the highest standards of data privacy and protection in all our operations.