Privacy Policy

This Privacy Policy describes how Costa Vida ("we," "us," "our," or the "Company") collects, uses, discloses, and protects the personal information of individuals ("you," "your," or "user") who visit our website at costvida.click, place orders, interact with our digital services, or otherwise engage with our food service business. Please read this policy carefully to understand our practices regarding your personal data.

By accessing or using our website, submitting any form, creating an account, placing an order, or otherwise providing us with your information, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein. If you do not agree with the terms of this Privacy Policy, please do not use our website or services.

This Privacy Policy complies with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection statutes.

1. About Us / Contact Information

Costa Vida is a food service company operating through the website costvida.click. We are committed to protecting the privacy and personal information of all individuals who interact with our services.

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact us at the email address listed above. We will endeavor to respond to all privacy-related inquiries within thirty (30) days of receipt.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All visitors and users of our website at costvida.click;
• Individuals who create an account or register on our platform;
• Customers who place food orders, whether online, by phone, or through third-party delivery platforms linked to our services;
• Individuals who sign up for our marketing communications, newsletters, or promotional offers;
• Individuals who contact us through any communication channel, including email, contact forms, or customer support;
• Participants in surveys, contests, promotions, or loyalty programs operated by Costa Vida.

This policy does not apply to third-party websites, applications, or services that may be linked from our website. We are not responsible for the privacy practices of such third parties, and we encourage you to review the privacy policies of any external sites you visit.

3. Information We Collect

We collect various categories of personal information depending on how you interact with our website and services. The categories below describe the types of data we may collect:

3.1 Personal Identification Information

When you register for an account, place an order, or contact us, we may collect information that identifies you personally, including but not limited to:

• Full name;
• Email address;
• Phone number;
• Billing and delivery address (street address, city, state, ZIP code);
• Username and password (encrypted);
• Date of birth (where required for age verification or promotional purposes);
• Payment information (credit/debit card numbers, billing details — processed securely through third-party payment processors).

3.2 Order and Transaction Data

When you place an order through our platform, we collect information related to that transaction, including:

• Items ordered and order history;
• Special dietary preferences or instructions you provide;
• Order value, payment method, and transaction confirmation details;
• Delivery preferences and scheduling information;
• Refund and return requests and related communications.

3.3 Usage and Behavioral Data

We automatically collect information about how you interact with our website and digital services, including:

• Pages visited, links clicked, and features used;
• Time and duration of your visits;
• Search queries entered on our website;
• Navigation paths and browsing patterns;
• Referral sources (how you arrived at our site);
• Shopping cart activity, including items added or removed.

3.4 Device and Technical Information

When you access our website, we may automatically collect certain technical information about the device and connection you use, including:

• IP address;
• Browser type, version, and language settings;
• Operating system and device type (desktop, mobile, tablet);
• Screen resolution and display settings;
• Device identifiers and mobile advertising IDs;
• Referring URL and exit page;
• Time zone settings.

3.5 Location Data

With your consent or as necessary to provide delivery services, we may collect precise or approximate geographic location data, including:

• GPS-derived location data (if you permit location access on your device);
• Location inferred from your IP address;
• Delivery address information you voluntarily provide.

3.6 Communications Data

If you contact us via email, customer support, or any other communication channel, we retain records of those communications, including:

• The content of messages you send us;
• Your contact details as provided in those communications;
• Records of any complaints, feedback, or inquiries.

3.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to enhance your experience and gather usage data. Please see Section 9 (Cookies and Tracking Technologies) for more detailed information.

3.8 Information from Third Parties

We may receive information about you from third parties, such as:

• Social media platforms (if you log in using a social media account or share our content);
• Third-party delivery and ordering platforms that fulfill orders on our behalf;
• Marketing and analytics partners;
• Fraud prevention and identity verification services.

4. How We Use Your Information

Costa Vida uses the personal information we collect for the following purposes:

4.1 Providing and Managing Services

• Processing and fulfilling your food orders;
• Creating and managing your account;
• Communicating order confirmations, updates, and delivery notifications;
• Processing payments and managing billing;
• Responding to your customer service inquiries and support requests;
• Facilitating refunds, cancellations, and complaints.

4.2 Improving Our Services and Operations

• Analyzing usage patterns to improve website functionality and user experience;
• Conducting internal research and development to enhance our food offerings and services;
• Monitoring and analyzing the performance of our website and applications;
• Identifying and resolving technical issues, bugs, and errors;
• Carrying out internal audits and business analytics.

4.3 Marketing and Promotions

• Sending you promotional emails, special offers, and newsletters (subject to your consent or opt-in where required);
• Providing personalized recommendations based on your order history and preferences;
• Running loyalty programs, contests, and promotional campaigns;
• Displaying targeted advertising on our website and third-party platforms (subject to applicable law and your preferences);
• Measuring the effectiveness of marketing campaigns and advertisements.

4.4 Legal Compliance and Safety

• Complying with applicable federal and state laws, regulations, and legal processes;
• Responding to lawful requests from government authorities or law enforcement agencies;
• Detecting, investigating, and preventing fraudulent transactions and other illegal or unauthorized activities;
• Enforcing our Terms of Service and other agreements;
• Protecting the rights, property, and safety of Costa Vida, our employees, customers, and the public.

4.5 Communications

• Sending transactional and administrative messages related to your account or orders;
• Notifying you of changes to our policies, services, or terms;
• Soliciting feedback and reviews regarding your experience.

5. Legal Basis for Processing Your Data

Under applicable United States privacy laws, including the CCPA/CPRA and the FTC Act, we process your personal information on the following legal grounds:

• Contractual Necessity: Processing required to fulfill your order, manage your account, and deliver our services;
• Legitimate Business Interests: Processing for fraud prevention, security, improving services, and business analytics, where such interests are not overridden by your rights;
• Legal Obligation: Processing required to comply with applicable laws and legal processes;
• Consent: Where you have given us specific consent to process your information, such as for marketing communications. You may withdraw consent at any time.

6. Sharing Your Information with Third Parties

Costa Vida does not sell your personal information to third parties. However, we may share your data with the following categories of recipients under the circumstances described below:

6.1 Service Providers and Vendors

We engage trusted third-party service providers to assist us in operating our business and delivering services to you. These providers are contractually obligated to use your data only for specified purposes and to maintain appropriate security measures. Such providers include:

• Payment processors and financial institutions;
• Food delivery and logistics partners;
• Email marketing and communications platforms;
• Website hosting and cloud infrastructure providers;
• Analytics and performance monitoring services (e.g., Google Analytics);
• Customer relationship management (CRM) software providers;
• Fraud detection and identity verification services.

6.2 Business Transfers

In the event that Costa Vida undergoes a merger, acquisition, sale of assets, reorganization, or bankruptcy, your personal information may be transferred to the acquiring or successor entity as part of that transaction. We will notify you of any such change through appropriate means.

6.3 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or regulatory requirement;
• Respond to lawful requests by law enforcement or governmental authorities;
• Protect and defend the rights or property of Costa Vida;
• Prevent or investigate potential wrongdoing in connection with our services;
• Protect the safety of our customers, employees, or the public.

6.4 With Your Consent

We may share your information with third parties not otherwise described in this policy when we have obtained your explicit consent to do so.

6.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information with third parties for research, marketing, analytics, or other business purposes. Such information cannot reasonably be used to identify you.

7. Data Security

Costa Vida takes the security of your personal information seriously. We implement a combination of administrative, technical, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, or destruction.

7.1 Technical Safeguards

• Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption for all data transmitted between your browser and our servers;
• Encryption of sensitive data, including payment card information, at rest and in transit;
• Firewalls, intrusion detection systems, and network monitoring;
• Secure, access-controlled server environments hosted with reputable cloud providers;
• Regular vulnerability assessments and penetration testing.

7.2 Administrative Safeguards

• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular employee training on data privacy and security practices;
• Confidentiality and data protection agreements with all employees and contractors who handle personal data;
• Documented data handling policies and incident response procedures.

7.3 Physical Safeguards

• Controlled access to physical facilities where data is stored or processed;
• Secure disposal of physical records containing personal information.

Despite our best efforts, no method of data transmission over the Internet or electronic storage is entirely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

8. Your Privacy Rights

Depending on your state of residence and applicable law, you may have the following rights with respect to your personal information. Costa Vida is committed to honoring these rights in accordance with applicable United States privacy laws, including the CCPA/CPRA for California residents.

8.1 Right to Know and Access

You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purposes for collection, and the categories of third parties with whom we have shared your data.

8.2 Right to Correction

You have the right to request that we correct inaccurate personal information that we hold about you, taking into account the nature of the information and the purposes for which it is processed.

8.3 Right to Deletion

You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions under applicable law (e.g., where retention is required for legal compliance, completing a transaction, or other legitimate business purposes).

8.4 Right to Opt-Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information. Costa Vida does not sell personal information in the traditional sense; however, certain advertising activities may constitute "sharing" under California law. You may submit an opt-out request by contacting us at [email protected].

8.5 Right to Limit Use of Sensitive Personal Information

Under the CPRA, California residents have the right to limit our use and disclosure of sensitive personal information to purposes necessary to perform the requested services.

8.6 Right to Data Portability

You have the right to receive a copy of your personal information in a structured, commonly used, machine-readable format, and to have that information transmitted to another service provider where technically feasible.

8.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, provide a different level of quality, or suggest that you may receive a different level of service as a result of exercising your rights.

8.8 How to Submit a Privacy Rights Request

To exercise any of your privacy rights, please submit a verifiable consumer request to us by:

• Sending an email to: [email protected]

Your request must provide sufficient information to allow us to reasonably verify your identity. We will respond to your request within 45 days of receipt. Where necessary, we may extend this period by an additional 45 days, provided we notify you of the extension within the initial 45-day period.

You may designate an authorized agent to submit a request on your behalf, provided that the agent presents appropriate written authorization or a valid power of attorney.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, personalize content, and support our marketing efforts.

9.1 Types of Cookies We Use

9.2 Managing Your Cookie Preferences

You can control and manage cookie settings through your browser settings or by using the cookie consent tool on our website. Please note that disabling certain cookies may affect the functionality and performance of our website.

For more detailed information about our use of cookies and how to manage your preferences, please refer to our Cookie Policy available on our website.

9.3 Do Not Track

Some browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not wish to be tracked. Currently, there is no universally accepted standard for responding to DNT signals. We will update our practices as any consensus standard emerges.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

• Account Information: Retained for the duration of your account and for up to 5 years after account closure for record-keeping, fraud prevention, and legal compliance purposes;
• Order and Transaction Data: Retained for a minimum of 7 years to comply with tax, accounting, and financial record-keeping requirements under applicable US law;
• Marketing Communications: Retained until you unsubscribe or withdraw your consent, after which we will retain a record of your opt-out preference;
• Customer Support Communications: Retained for 3 years from the date of last communication;
• Usage and Analytics Data: Typically retained in aggregated or anonymized form for up to 2 years;
• Legal and Compliance Records: Retained for as long as required by applicable law or regulation.

When personal information is no longer required for any of the above purposes, we will securely delete or anonymize it in accordance with our data retention and disposal procedures.

11. Children's Privacy

We do not knowingly solicit, collect, or process personal information from minors under the age of 18. Our website, food ordering services, and related digital platforms are directed to adults only. If you are under 18 years of age, you are not permitted to use our services or submit any personal information to us.

If we become aware that we have inadvertently collected personal information from a child under the age of 18 without verifiable parental or guardian consent, we will take prompt steps to delete such information from our records. If you believe that a minor has provided us with personal information without appropriate consent, please contact us immediately at [email protected].

Our practices are also consistent with the requirements of the Children's Online Privacy Protection Act (COPPA), which restricts the collection of personal information from children under 13. We do not target any portion of our website to children under 13 and do not knowingly collect such data.

12. International Data Transfers

Costa Vida operates primarily within the United States. However, some of our third-party service providers and partners may be located in other countries, which means your personal information may be transferred to, stored in, or processed in countries outside of the United States.

When we transfer personal data internationally, we take steps to ensure that adequate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law. These safeguards may include:

• Ensuring that receiving countries provide an adequate level of data protection as recognized by applicable authorities;
• Entering into standard contractual clauses or data processing agreements with international service providers that impose data protection obligations consistent with US law;
• Implementing technical and organizational security measures to protect data during transfer.

By using our website and services, you acknowledge and consent to the transfer of your personal information to countries that may have different data protection laws than those in your country of residence. We will always handle your information in accordance with this Privacy Policy regardless of where it is processed.

13. Marketing Communications and Opt-Out

With your consent, we may send you promotional emails, newsletters, special offers, and other marketing communications about our food services, menu updates, loyalty programs, and promotions.

13.1 Opting Out of Marketing

You can opt out of receiving marketing communications from us at any time by:

• Clicking the "unsubscribe" link included in any marketing email we send you;
• Contacting us directly at [email protected] with a request to be removed from our marketing list;
• Updating your communication preferences in your account settings.

Please note that even if you opt out of marketing communications, we may still send you transactional and administrative messages related to your account or orders (e.g., order confirmations, delivery updates, security alerts).

13.2 SMS and Text Message Marketing

If you have subscribed to SMS marketing communications, you may opt out at any time by replying "STOP" to any text message you receive from us. Standard message and data rates may apply based on your mobile carrier plan.

14. Third-Party Links and Services

Our website may contain links to third-party websites, applications, social media platforms, or online services. This Privacy Policy does not apply to those external sites. We are not responsible for the content, privacy practices, or security of any third-party website or service. We encourage you to review the privacy policies of any third-party sites you visit, as their practices may differ significantly from ours.

Additionally, certain features on our website may be provided by third parties, such as social media sharing buttons or embedded maps. These features may allow third parties to collect information about you through cookies or other technologies, even if you do not directly interact with them.

15. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you are entitled to specific privacy rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). In addition to the rights described in Section 8, California residents have the following additional rights:

• Right to Know About Automated Decision-Making: The right to know when automated decision-making processes are used that significantly affect you;
• Right to Opt-Out of Automated Decision-Making: In certain circumstances, the right to opt out of automated decision-making processes;
• Shine the Light Law (California Civil Code Section 1798.83): California residents may request information regarding the disclosure of personal information to third parties for their direct marketing purposes during the preceding calendar year.

To exercise your California privacy rights, please contact us at [email protected]. We will not discriminate against you for exercising your rights under the CCPA/CPRA.

16. Filing Complaints with Regulatory Authorities

If you believe that your privacy rights have been violated and you are not satisfied with our response to your privacy inquiry or request, you have the right to file a complaint with the relevant data protection or consumer protection authority.

16.1 California Residents

California residents who have concerns about our privacy practices may file a complaint with the California Privacy Protection Agency (CPPA):

16.2 All United States Residents

Consumers in the United States may file complaints related to deceptive or unfair business practices, including privacy violations, with the Federal Trade Commission (FTC):

We encourage you to contact us first at [email protected] so that we have the opportunity to address your concerns before you escalate to a regulatory authority.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the services we offer. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on our website at costvida.click with a revised "Last Updated" date;
• Notify you by email (if you have provided us with your email address) or through a prominent notice on our website;
• Where required by applicable law, seek your renewed consent for any material changes in how we process your personal information.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, the handling of your personal information, or your privacy rights, please do not hesitate to contact us:

We are committed to working with you to address any privacy concerns in a fair, transparent, and timely manner. All privacy-related requests and inquiries will be handled with the utmost confidentiality and care.

This Privacy Policy was last reviewed and updated on April 22, 2026. Costa Vida is committed to complying with all applicable United States federal and state privacy laws, including the CCPA/CPRA, COPPA, and the FTC Act.