Privacy Policy

At Marcos ("we," "us," or "our"), we are deeply committed to protecting the privacy and personal information of every individual who interacts with our website, services, and food-related offerings. This Privacy Policy explains in detail how we collect, use, disclose, retain, and safeguard your personal information when you visit marcos-cafe.click (the "Website") or otherwise engage with our business. We encourage you to read this document carefully before using our services.

By accessing or using our Website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with the terms outlined here, please discontinue use of our Website immediately.

1. About Us

Marcos is a food business operating in the United States. We are dedicated to delivering high-quality food products and exceptional customer experiences. For any privacy-related questions, concerns, or requests, you may contact us using the information below:

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected through:

• Our website at marcos-cafe.click
• Online ordering platforms and integrated delivery services
• Email, telephone, or other direct communications with our team
• Loyalty programs, promotions, contests, and surveys
• Any other interaction you may have with Marcos as a business entity

This Policy does not apply to third-party websites, applications, or services that may be linked from our Website. We are not responsible for the privacy practices of third parties, and we encourage you to review their policies independently.

3. Information We Collect

We collect a variety of personal and non-personal information in the course of providing our services. The categories of data we collect include, but are not limited to, the following:

3.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, or contact us for support, we may collect:

• Full name
• Email address
• Phone number
• Billing and shipping address
• Date of birth (where required for age verification)
• Username and password (encrypted)
• Profile photo (if voluntarily provided)

3.2 Transaction and Order Information

When you place an order or make a purchase through our platform, we collect information related to that transaction, including:

• Items ordered and quantity
• Order history and preferences
• Payment method type (we do not store full card numbers)
• Billing and delivery address
• Promotional codes or discounts applied
• Special dietary instructions or requests

3.3 Usage and Behavioral Data

When you visit our Website, we automatically collect certain technical and behavioral information, including:

• Pages visited and time spent on each page
• Click patterns and navigation paths
• Search queries entered on our platform
• Referral URLs (how you arrived at our site)
• Date and time of your visits
• Frequency of visits and returning user status

3.4 Device and Technical Information

We automatically receive technical data about the device and connection you use to access our Website:

• IP address (which may indicate your general location)
• Browser type and version
• Operating system and device type
• Screen resolution and display settings
• Mobile carrier (if applicable)
• Device identifiers
• Language preferences

3.5 Location Data

With your permission, we may collect precise or approximate geographic location data to facilitate delivery services, show relevant menu options, or suggest nearby pickup locations. You may disable location access at any time through your device settings.

3.6 Communications Data

If you contact us by email, chat, or other means, we may retain records of those communications, including the content of messages and any attachments. This helps us maintain service quality and resolve disputes.

3.7 Marketing Preferences

We may collect information about your preferences for receiving marketing materials, including email newsletters, text message promotions, and push notifications.

3.8 User-Generated Content

If you submit reviews, ratings, photographs, or other content in connection with our products or services, we collect and store that content as part of your interaction with Marcos.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Providing and Managing Services

• Processing and fulfilling your food orders and deliveries
• Creating and managing your customer account
• Sending order confirmations, receipts, and delivery updates
• Facilitating customer support and responding to inquiries
• Processing payments and preventing fraudulent transactions

4.2 Personalization and User Experience

• Tailoring menu recommendations based on past orders and preferences
• Customizing promotional offers relevant to your interests
• Remembering your preferences for a faster ordering experience
• Providing location-based services for delivery or pickup

4.3 Analytics and Service Improvement

• Analyzing how customers interact with our Website and services
• Identifying trends in customer ordering behavior
• Testing new features, products, and menu items
• Measuring the effectiveness of marketing campaigns
• Improving the overall user experience and Website performance

4.4 Marketing and Promotional Communications

• Sending newsletters, special offers, and promotional materials (with your consent)
• Notifying you about loyalty rewards, discounts, and new menu items
• Running contests, sweepstakes, and promotional campaigns
• Retargeting advertisements on third-party platforms (with appropriate consent)

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email, replying "STOP" to any text message, or contacting us at [email protected].

4.5 Legal and Compliance Purposes

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities or courts
• Enforcing our Terms of Service and other contractual agreements
• Protecting the rights, safety, and property of Marcos and our users
• Detecting, preventing, and addressing fraud, security incidents, and abuse

5. Legal Basis for Processing (Where Applicable)

As a United States-based business, we process your personal information under applicable federal and state law frameworks. Our processing activities are based on the following grounds:

• Contract Performance: Processing is necessary to fulfill your order or service request.
• Legitimate Interests: We process data to operate and improve our business, provided your rights are not overridden.
• Legal Obligation: We process data to comply with applicable laws, including tax, food safety, and consumer protection requirements.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.

6. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to enhance your browsing experience, analyze site traffic, and support our marketing efforts.

6.1 Types of Cookies We Use

• Essential Cookies: Required for the Website to function properly. These cannot be disabled.
• Performance Cookies: Help us understand how visitors interact with our Website by collecting anonymous usage statistics.
• Functional Cookies: Allow the Website to remember your preferences, such as language or login status.
• Marketing and Advertising Cookies: Used to deliver personalized advertisements and measure campaign performance.

6.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Website. For more detailed information on how we use cookies, please refer to our Cookie Policy, which is available on our Website.

7. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own independent marketing purposes. However, we may share your information in the following circumstances:

7.1 Service Providers and Business Partners

We work with trusted third-party vendors who assist us in operating our business. These include:

• Payment processors and financial institutions for secure transaction handling
• Food delivery platforms and logistics partners for order fulfillment
• Email and SMS marketing service providers
• Website hosting, cloud storage, and IT infrastructure providers
• Analytics platforms (such as Google Analytics) to understand Website usage
• Customer support software providers
• Advertising networks for targeted marketing campaigns

All service providers are contractually required to protect your personal information and use it only for the purposes for which it was shared with them.

7.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law, regulation, or a valid legal process such as a court order, subpoena, or government investigation. We may also disclose information when we believe in good faith that disclosure is necessary to:

• Comply with applicable federal or state law, including requirements under the Federal Trade Commission Act (FTC Act)
• Protect the safety of our customers, employees, or the general public
• Prevent or investigate suspected fraud, illegal activity, or security incidents
• Enforce our Terms of Service and other legal rights

7.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our business assets, your personal information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our Website if such a transaction results in a material change to this Privacy Policy.

7.4 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data with third parties for business, research, or marketing purposes. This information cannot reasonably be used to identify you personally.

8. Data Security

Marcos takes the security of your personal information seriously. We implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

8.1 Security Measures We Employ

• SSL/TLS Encryption: All data transmitted between your browser and our Website is encrypted using industry-standard Secure Sockets Layer (SSL) technology.
• Password Hashing: User passwords are stored using strong cryptographic hashing algorithms and are never stored in plain text.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis.
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing of our systems.
• Payment Card Security: We comply with Payment Card Industry Data Security Standards (PCI-DSS) and do not store full credit card numbers on our servers.
• Data Backup and Recovery: We maintain regular data backups to ensure business continuity and data integrity.

8.2 Limitations

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights or freedoms, we will notify affected users and relevant authorities as required by applicable law.

9. Your Privacy Rights

Depending on your state of residence within the United States, you may have specific rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

9.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a resident of California, you have the following rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (CPRA):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the purposes for which it is used, and the third parties with whom it is shared.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain legal exceptions.
• Right to Correct: You have the right to request the correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information with third parties for cross-context behavioral advertising. We do not sell your personal information in the traditional sense, but certain data sharing with advertising partners may qualify as "sharing" under the CPRA.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to purposes directly related to providing services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not be denied goods, charged higher prices, or provided a lower quality of service as a result of exercising your privacy rights.

To exercise your California privacy rights, you or an authorized agent acting on your behalf may submit a verifiable consumer request by contacting us at [email protected]. We will respond to verifiable requests within 45 days, with an extension of an additional 45 days where reasonably necessary.

9.2 Rights Available to All Users

Regardless of your state of residence, we extend the following general privacy rights to all of our users:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right of Correction: You may request that we correct any inaccurate or incomplete personal information.
• Right of Deletion: You may request that we delete your personal data, subject to our legal obligations to retain certain records.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time.

9.3 How to Submit a Privacy Request

To exercise any of the rights described above, please contact us at:

• Email: [email protected]
• Website: marcos-cafe.click

When submitting a request, please provide sufficient information to allow us to verify your identity and locate your records. We may request additional information to verify your identity before processing your request. We will not charge a fee for processing reasonable requests, but we reserve the right to charge a reasonable fee for excessive or repetitive requests.

10. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods we apply are as follows:

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data disposal procedures. Where anonymization is used, the resulting data is no longer considered personal information and may be retained and used indefinitely for research and analytical purposes.

11. Children's Privacy

Our Website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or use personal information from children under the age of 13, and we do not knowingly allow children under 13 to create accounts or place orders on our platform.

Our practices comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under the age of 13 without verifiable parental consent.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without appropriate consent, we will take immediate steps to delete such information from our systems. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

We also encourage parents and guardians to monitor their children's online activity and to use parental controls where available.

12. International Data Transfers

Marcos is based in the United States, and our primary data processing activities take place within the United States. If you are accessing our Website from outside the United States, please be aware that your personal information may be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence.

In the event that we transfer personal information internationally — for example, when using cloud service providers or marketing platforms with servers located outside the United States — we take appropriate measures to ensure that such transfers comply with applicable law and that your data receives an adequate level of protection. These measures may include:

• Standard contractual clauses or data processing agreements with international service providers
• Reliance on service providers that are certified under applicable cross-border data transfer frameworks
• Implementation of appropriate technical and organizational safeguards

By using our Website and services, you consent to the transfer of your personal information to the United States and to processing by Marcos and its service providers.

13. Third-Party Links and Services

Our Website may contain links to third-party websites, social media platforms, or integrated services (such as Google Maps, delivery apps, or payment gateways). These third-party services have their own privacy policies, and we are not responsible for their data practices. We encourage you to review the privacy policies of any third-party services you access through our Website.

The inclusion of a link to a third-party website does not constitute an endorsement by Marcos of that website or its privacy practices.

14. Social Media and Advertising

We may maintain social media profiles on platforms such as Facebook, Instagram, Twitter/X, and TikTok. When you interact with us on social media, the respective platform's privacy policy governs the collection and use of your data. We may receive aggregated data about how users interact with our social media content.

We may also use social media advertising tools and pixel technologies (such as the Meta Pixel or Google Ads tag) to deliver targeted advertisements to users who have visited our Website. You can opt out of interest-based advertising through the following mechanisms:

• The Digital Advertising Alliance (DAA) opt-out tool at aboutads.info/choices
• The Network Advertising Initiative (NAI) opt-out tool at networkadvertising.org/choices
• Your browser's cookie settings or a cookie management tool

15. Do Not Track Signals

Some web browsers and devices offer a "Do Not Track" (DNT) signal that users can activate to indicate their preference for not being tracked across websites. At this time, our Website does not respond to DNT signals, as there is currently no universally accepted standard for how websites should respond to such signals. However, you may manage your tracking preferences through our cookie consent tool and the opt-out mechanisms described in Section 14.

16. California Shine the Light Law

Under California Civil Code Section 1798.83 (the "Shine the Light" law), California residents who have provided personal information to a business may request information about whether the business has disclosed personal information to any third parties for their own direct marketing purposes. As noted above, we do not sell or share personal information with third parties for their own direct marketing purposes without your explicit consent. California residents wishing to make such a request may contact us at [email protected].

17. Filing a Complaint with a Regulatory Authority

If you believe your privacy rights have been violated and we have been unable to resolve your concern satisfactorily, you have the right to file a complaint with the appropriate regulatory authority.

17.1 For California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

17.2 For All United States Residents

Consumers who believe their rights under federal consumer protection law have been violated may file a complaint with the Federal Trade Commission (FTC):

• FTC Online Complaint Portal: reportfraud.ftc.gov
• FTC Consumer Information: consumer.ftc.gov

We strongly encourage you to contact us directly before filing a complaint so that we may have the opportunity to address your concerns promptly. Please reach out to us at [email protected].

18. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, applicable law, or technological developments. When we make material changes to this Policy, we will:

• Post the updated Policy on our Website with a revised "Last Updated" date
• Send an email notification to registered users (where the change is significant)
• Display a prominent notice on our Website homepage for a reasonable period

Your continued use of our Website and services after any changes to this Privacy Policy take effect constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact us. We are committed to responding to all privacy inquiries in a timely and transparent manner.

We aim to acknowledge all privacy-related requests within 5 business days and to resolve them within 30 calendar days. For complex or high-volume requests, we may require up to 45 days, in which case we will notify you of the extended timeframe.

This Privacy Policy was last updated on July 2, 2026. All previous versions of this Policy are superseded by this document. Marcos reserves all rights not expressly granted herein.