Privacy Policy

At Giordanos, we are deeply committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website giordanosgrill.click, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services immediately.

This Privacy Policy applies to all information collected through our website, mobile experiences, and any related services, sales, marketing, or events (collectively referred to as the "Services"). We encourage you to review this document in its entirety so you can make informed decisions about sharing your personal information with us.

1. Who We Are

Giordanos is a food service business operating in the United States. We are committed to responsible data practices and compliance with all applicable United States privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable state and federal privacy regulations.

Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, you may contact us at any time using the contact details listed above.

2. Information We Collect

We collect various types of information in connection with our Services. This information falls into several broad categories:

2.1 Personal Information You Provide Directly

When you interact with our website or services, you may voluntarily provide us with personal information, including but not limited to:

• Identity Information: Your full name, username, or similar identifiers.
• Contact Information: Email address, telephone number, mailing address, and billing address.
• Account Information: Username and password if you create an account on our platform.
• Order Information: Details about food orders you place, including items selected, special instructions, delivery or pickup preferences, and order history.
• Payment Information: Credit or debit card details, billing information, and other financial data necessary to process your transactions. Please note that payment data is processed through secure third-party payment processors and we do not store full card numbers on our servers.
• Communications: Any messages, feedback, reviews, complaints, or other communications you send to us through our website, email, or other channels.
• Preferences: Dietary preferences, favorite menu items, and other food-related preferences you share with us to personalize your experience.
• Loyalty Program Data: Information related to any rewards or loyalty programs you participate in with us.

2.2 Information Collected Automatically

When you access or use our website, certain information is collected automatically through cookies, web beacons, and similar tracking technologies. This includes:

• Usage Data: Pages you visit, links you click, time spent on pages, referring URLs, and your browsing path through our website.
• Device Information: Your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and language settings.
• Location Data: General geographic location based on your IP address. If you enable location services on your device, we may collect more precise location data to assist with finding nearby locations or delivery services.
• Session Data: Date and time stamps of your visits, session duration, and the pages accessed during your session.
• Log Data: Server log files that record information about your access to our website, including error logs and performance data.

2.3 Information from Cookies and Tracking Technologies

We use cookies, pixel tags, web beacons, local storage, and other similar tracking technologies to collect information about your interactions with our website. For more detailed information about how we use cookies and how you can manage your cookie preferences, please refer to our Cookie Policy available on our website. In brief, we use:

• Essential Cookies: Necessary for the operation of our website, such as enabling you to log in and complete orders.
• Analytics Cookies: To understand how visitors use our website and improve its performance.
• Marketing Cookies: To deliver relevant advertisements and promotional content based on your interests and behavior.
• Preference Cookies: To remember your settings and preferences for a more personalized experience.

2.4 Information from Third Parties

We may receive information about you from third parties in certain circumstances, including:

• Social Media Platforms: If you connect your social media account or interact with our social media pages, we may receive information from those platforms.
• Analytics Providers: Data aggregators and analytics companies that help us understand website traffic and user behavior.
• Delivery Partners: Information necessary to fulfill and track your delivery orders.
• Review Platforms: Publicly available reviews or feedback you leave on third-party platforms about our business.
• Marketing Partners: Information from advertising partners to help us reach new customers and improve our marketing efforts.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. Specifically, we use your data to:

3.1 Provide and Manage Our Services

• Process and fulfill food orders, including delivery and pickup.
• Manage your account and maintain your account security.
• Process payments and send order confirmations and receipts.
• Communicate with you about the status of your orders.
• Resolve disputes, troubleshoot problems, and handle customer service inquiries.
• Administer loyalty programs and promotional offers you participate in.

3.2 Improve and Personalize Your Experience

• Analyze how you use our website to improve its design, functionality, and content.
• Personalize our website and marketing communications based on your preferences and order history.
• Develop new products, services, features, and menu offerings based on customer feedback and usage patterns.
• Conduct surveys and research to better understand our customers' needs.

3.3 Marketing and Promotional Communications

• Send you promotional emails, newsletters, special offers, and information about new menu items, when you have opted in or where permitted by law.
• Display targeted advertisements on third-party platforms based on your interests.
• Run contests, sweepstakes, and other promotional activities.
• Measure the effectiveness of our marketing campaigns and advertisements.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected]. Please note that even if you opt out of marketing communications, you will still receive transactional messages related to your orders.

3.4 Legal Compliance and Safety

• Comply with applicable laws, regulations, legal processes, and governmental requests.
• Enforce our Terms of Service and other agreements.
• Detect, investigate, and prevent fraudulent transactions and other illegal activities.
• Protect the rights, property, and safety of Giordanos, our customers, and others.

3.5 Analytics and Business Intelligence

• Analyze trends in food ordering and customer preferences to optimize our menu and services.
• Generate aggregate, anonymized statistical data for internal reporting and business planning.
• Monitor and analyze website performance, uptime, and technical issues.

4. How We Share Your Information

We do not sell your personal information for monetary compensation. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers who perform services on our behalf. These providers are contractually obligated to protect your data and may only use it for the specific purposes for which it was shared. Such service providers include:

• Payment Processors: To securely handle credit card and payment transactions.
• Delivery Services: To fulfill food delivery orders to your address.
• Cloud Hosting Providers: To host our website and store data securely.
• Email Marketing Platforms: To send promotional and transactional emails on our behalf.
• Analytics Providers: Such as Google Analytics, to understand how users interact with our website.
• Customer Support Tools: Software platforms that enable us to manage and respond to customer inquiries.
• Advertising Networks: To serve targeted advertisements based on your online activities.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or other legal process.
• Respond to requests from government or law enforcement authorities.
• Protect and defend our legal rights or those of our customers.
• Prevent or investigate potential wrongdoing in connection with the Services.
• Protect the personal safety of users or the public.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our website before your personal information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your personal information with third parties when you have given us explicit consent to do so, such as when you participate in joint promotions or partner programs.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

5. Data Security

We take the security of your personal information very seriously and implement a range of technical, administrative, and physical security measures to protect your data from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

5.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) or Transport Layer Security (TLS) technology.
• Encryption at Rest: Sensitive data stored on our servers is encrypted using industry-standard encryption protocols.
• Access Controls: Strict access controls are in place to ensure that only authorized personnel can access sensitive information.
• Firewalls and Intrusion Detection: We use firewalls and intrusion detection systems to monitor and protect our network infrastructure.
• Secure Payment Processing: Payment transactions are processed through PCI-DSS compliant payment processors.

5.2 Administrative Safeguards

• Regular privacy and security training for all employees who handle personal data.
• Data access is limited on a need-to-know basis.
• Confidentiality agreements with employees and contractors.
• Regular review and updating of our security policies and procedures.

5.3 Incident Response

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with applicable law, including within the timeframes required by federal and state regulations.

6. Your Privacy Rights

Depending on your state of residence within the United States, you may have specific rights regarding your personal information. We honor and support the following rights for all our users to the greatest extent possible:

6.1 Right to Know and Access

You have the right to request information about the personal data we have collected about you, including the categories of information collected, the purposes for which it is used, and the third parties with whom it has been shared. You may request a copy of the specific pieces of personal information we hold about you.

6.2 Right to Correction

If you believe that any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update that information.

6.3 Right to Deletion

You have the right to request that we delete the personal information we have collected about you, subject to certain exceptions. We may retain information when required to do so by law, to complete transactions you have requested, to detect and prevent security incidents, or for other legitimate business purposes as permitted by applicable law.

6.4 Right to Data Portability

You have the right to receive a copy of the personal information you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another organization where technically feasible.

6.5 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. Although we do not sell personal information for monetary compensation, we may share data with advertising partners. You may exercise your opt-out rights by contacting us or by using our opt-out mechanism on our website.

6.6 Right to Limit Use of Sensitive Personal Information

California residents have the right to limit the use and disclosure of sensitive personal information (such as precise geolocation, health data, or financial information) to that which is necessary to perform the requested services.

6.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you goods or services, charge you different prices, provide you with a lower quality of service, or suggest that you may receive different treatment because you exercised your rights under applicable privacy law.

6.8 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us by:

• Email: [email protected] with the subject line "Privacy Rights Request"

We will verify your identity before processing your request to ensure the security of your information. We will respond to your request within 45 days of receipt. If we require additional time, we will notify you of the extension and the reason for it. If you use an authorized agent to submit a request on your behalf, we may require written authorization confirming the agent's authority to act on your behalf.

7. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content and advertisements. Cookies are small text files stored on your device that help us recognize you on return visits and improve our services.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the website to function properly and cannot be disabled.
• Performance and Analytics Cookies: These help us understand visitor interactions with our website to improve performance and user experience.
• Functional Cookies: These enable enhanced functionality and personalization, such as remembering your preferences.
• Targeting and Advertising Cookies: These are set by our advertising partners to build a profile of your interests and show relevant ads on other websites.

7.2 Managing Your Cookie Preferences

You can control and manage cookies in your browser settings. Most web browsers allow you to refuse cookies or to indicate when a cookie is being sent. However, please note that disabling certain cookies may affect the functionality of our website. For full details on the cookies we use and your options, please refer to our comprehensive Cookie Policy available on our website.

Additionally, you can opt out of interest-based advertising through the Digital Advertising Alliance (DAA) at optout.aboutads.info or the Network Advertising Initiative (NAI) at optout.networkadvertising.org.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to provide our services, to comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods depend on the nature of the information and the purpose for which it is held:

After the applicable retention period, we will securely delete or anonymize your personal information in accordance with our data destruction protocols. In some cases, we may retain anonymized, aggregated data indefinitely for statistical and business analysis purposes, as this data can no longer identify you personally.

9. Children's Privacy

Our Services are intended for individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 13, or from minors under the age of 18 without parental consent.

Our website and services are not directed to children, and we do not knowingly market to or collect personal data from individuals under the age of 18. If you are under 18 years of age, please do not use our Services or submit any personal information to us without the express consent of a parent or legal guardian.

If we discover that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take immediate steps to delete that information from our records. If you believe we may have collected information from a child under 13, please contact us immediately at [email protected].

We comply fully with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verifiable parental consent.

10. International Data Transfers

Giordanos is based in the United States and primarily processes data within the United States. However, some of our third-party service providers may be located in other countries, and your personal information may be transferred to, stored, and processed in countries outside of the United States.

When we transfer personal information internationally, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable law. These safeguards may include:

• Transferring data only to countries that have been deemed to provide an adequate level of data protection.
• Implementing standard contractual clauses or data processing agreements with our international service providers.
• Ensuring that service providers comply with applicable U.S. privacy standards and any relevant international data protection frameworks.

By using our Services, you acknowledge and consent to the transfer of your personal information to the United States and potentially other jurisdictions where our service providers operate. We take reasonable steps to ensure your data is protected wherever it is processed.

11. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These rights include:

11.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email address, IP address, phone number)
• Commercial information (order history, purchasing preferences)
• Internet or other electronic network activity (browsing behavior, search history on our website)
• Geolocation data (approximate location based on IP address)
• Inferences drawn from personal information to create a profile about consumer preferences

11.2 Business Purposes for Collection

We collect personal information for the business purposes described in Section 3 of this Privacy Policy, including service provision, analytics, marketing, and legal compliance.

11.3 Your CCPA/CPRA Rights

California residents may exercise the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out: Opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Information: Request that we limit the use of your sensitive personal information.
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights.

To exercise your CCPA/CPRA rights, please contact us at [email protected]. We will respond to verifiable consumer requests within 45 days, with the possibility of a 45-day extension when reasonably necessary.

12. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated by us. These may include social media platforms, review sites, delivery partner apps, and advertising networks. This Privacy Policy does not apply to any third-party websites or services. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites.

We strongly encourage you to review the privacy policies of any third-party websites you visit through links on our website. The inclusion of a link on our website does not constitute our endorsement of that third party's privacy practices.

13. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, our website does not currently respond to DNT browser signals. However, you can manage your tracking preferences through cookie settings as described in Section 7 of this Privacy Policy.

14. Federal Trade Commission (FTC) Compliance

Giordanos is committed to complying with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive practices in commerce. Our data collection and use practices are designed to be transparent, fair, and consistent with the representations we make to our customers. We do not engage in deceptive data collection practices and we honor all commitments we make regarding the privacy of your personal information.

If you believe we have engaged in unfair or deceptive practices, you may file a complaint with the Federal Trade Commission at www.ftc.gov or by calling 1-877-FTC-HELP (1-877-382-4357).

15. How to File a Complaint with a Data Protection Authority

If you believe that we have not handled your personal information in accordance with applicable privacy laws, you have the right to lodge a complaint with the relevant data protection or consumer protection authority.

15.1 For General U.S. Privacy Complaints

You may file a complaint with the Federal Trade Commission (FTC):

• Website: reportfraud.ftc.gov
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

15.2 For California Residents

California residents may file complaints with the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Address: California Privacy Protection Agency, 2101 Arena Boulevard, Sacramento, CA 95834

California residents may also file complaints with the California Attorney General's Office at oag.ca.gov.

15.3 For Other State Residents

Residents of other states with applicable state privacy laws may contact their state's attorney general office or consumer protection agency for guidance on filing a complaint.

We encourage you to contact us first at [email protected] before filing a formal complaint, as we are committed to resolving any privacy concerns you may have promptly and to your satisfaction.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on our website with a new "Last Updated" date at the top of the page.
• Send an email notification to registered users with a summary of the key changes (where feasible).
• Display a prominent notice on our website informing visitors of the update.

Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please do not hesitate to contact our privacy team. We are committed to addressing your concerns promptly and transparently.

When contacting us about privacy matters, please include "Privacy Inquiry" or "Privacy Rights Request" in the subject line of your email to help us direct your inquiry to the appropriate team member. Please also include sufficient information to allow us to verify your identity and understand the nature of your request.

We will acknowledge receipt of your inquiry within 5 business days and provide a substantive response within 45 days, or notify you if additional time is required.