Privacy Policy

This Privacy Policy explains how Giordanos ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website hotgiordanos.click, place an order, or otherwise interact with our services. Please read this policy carefully. By accessing or using our website, you acknowledge that you have read, understood, and agree to be bound by the terms described herein.

We are committed to protecting your privacy and handling your personal information in a transparent, responsible, and lawful manner. This Privacy Policy is designed to comply with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission (FTC) Act, and other relevant regulations governing data privacy and consumer protection.

1. Who We Are

Giordanos is a food business operating in the United States. We provide food-related products and services to customers through our website and other channels. For all privacy-related inquiries, you may contact us using the details below:

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information we collect when you:

• Visit and browse our website at hotgiordanos.click
• Create an account or register with us
• Place an order for food products or services
• Sign up for newsletters, promotions, or loyalty programs
• Contact our customer service team
• Participate in surveys, contests, or other interactive features
• Interact with us on social media platforms
• Submit user-generated content, reviews, or feedback

This policy does not apply to third-party websites, applications, or services that may be linked to or from our website. We encourage you to review the privacy policies of any third parties you interact with.

3. Information We Collect

We collect several categories of personal information depending on how you interact with our services. The information we collect falls into the following categories:

3.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and shipping address
• Date of birth (where required for age verification)
• Username and password (stored in encrypted form)
• Profile picture or avatar (if voluntarily provided)

3.2 Payment and Financial Information

When you make a purchase, we collect payment-related information, including:

• Credit or debit card details (processed securely through our payment processors)
• Billing address
• Transaction history and order records

Note: We do not store complete credit card numbers on our servers. All payment card data is processed by PCI-DSS compliant third-party payment processors.

3.3 Order and Transaction Data

We maintain records of your orders and transactions, including:

• Items ordered and quantities
• Order dates and times
• Delivery preferences and special instructions
• Order status and fulfillment history
• Refund and dispute records

3.4 Usage and Behavioral Data

When you use our website, we automatically collect certain technical and behavioral information, including:

• Pages viewed and time spent on each page
• Links clicked and navigation paths
• Search queries entered on our website
• Products viewed, added to cart, or purchased
• Referral sources (how you arrived at our website)
• Session duration and bounce rates

3.5 Device and Technical Information

We collect technical data about the devices you use to access our website:

• IP address
• Browser type and version
• Operating system and platform
• Device type (desktop, mobile, tablet)
• Screen resolution
• Unique device identifiers
• Time zone and language settings

3.6 Location Data

For delivery and service purposes, we may collect:

• Delivery address entered manually by you
• General geographic location derived from IP address
• Precise GPS location if you grant permission through your browser or mobile device

3.7 Communications and Customer Service Data

When you contact us, we collect:

• Content of your messages, emails, or chat conversations
• Records of phone calls (where permitted by law)
• Feedback, complaints, and suggestions you provide
• Support tickets and resolution records

3.8 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. For full details, please refer to Section 9 (Cookie Usage) of this Privacy Policy.

3.9 Information from Third Parties

We may receive personal information about you from third parties, including:

• Social media platforms (if you log in using a social account)
• Marketing and analytics partners
• Delivery and logistics service providers
• Payment processors
• Publicly available sources

4. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. Specifically, we use your data for the following reasons:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Coordinating delivery or pickup of your orders
• Managing your account and authentication
• Processing payments and issuing receipts
• Handling refunds, returns, and disputes
• Sending order confirmations, updates, and delivery notifications

4.2 Customer Support

• Responding to your inquiries, questions, and concerns
• Resolving complaints and technical issues
• Providing personalized assistance and recommendations

4.3 Marketing and Promotions

• Sending promotional emails, newsletters, and special offers (with your consent)
• Notifying you of new menu items, seasonal specials, and limited-time deals
• Administering loyalty programs, contests, and giveaways
• Personalizing marketing communications based on your preferences and order history
• Retargeting advertising through approved platforms

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us directly at [email protected].

4.4 Analytics and Service Improvement

• Analyzing usage patterns to improve our website and user experience
• Conducting market research and customer satisfaction surveys
• Testing new features, menus, and offerings
• Monitoring website performance and technical functionality
• Identifying and preventing fraudulent activity

4.5 Legal and Compliance Purposes

• Complying with applicable federal, state, and local laws
• Responding to lawful requests from government authorities
• Enforcing our Terms of Service and other policies
• Protecting our legal rights and defending against claims
• Preventing fraud, abuse, and unauthorized access

4.6 Business Operations

• Managing internal records and business administration
• Conducting audits, accounting, and financial reporting
• Facilitating business transactions such as mergers or acquisitions

5. How We Share Your Information

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering our services. These providers may have access to your personal information only to the extent necessary to perform their functions and are contractually obligated to maintain its confidentiality. Service providers include:

• Payment processors: To securely process your transactions
• Delivery and logistics companies: To fulfill and deliver your orders
• Email service providers: To send transactional and marketing emails
• Cloud hosting providers: To store and manage our data infrastructure
• Analytics providers: To help us understand website usage and performance
• Customer support platforms: To manage help desk and support tickets
• Marketing and advertising platforms: To deliver targeted advertisements

5.2 Legal Requirements

We may disclose your personal information if required to do so by law or in response to valid legal process, including:

• Court orders, subpoenas, or legal proceedings
• Requests from law enforcement agencies or government authorities
• Compliance with applicable federal or state laws
• Protection of the rights, property, or safety of Giordanos, our customers, or the public

5.3 Business Transfers

In the event that Giordanos undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a different privacy policy.

5.4 Consent-Based Sharing

We may share your information with other third parties if you have provided your explicit consent for such sharing.

5.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, or marketing purposes.

6. Your Privacy Rights

Depending on your location, you may have specific rights regarding your personal information. We respect and honor these rights as described below:

6.1 Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

6.2 General Privacy Rights for All Users

Regardless of your location, we provide all users with the following rights:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete personal information
• Right to Deletion: Request erasure of your personal information, subject to legal retention requirements
• Right to Withdraw Consent: Withdraw consent for data processing activities based on consent at any time
• Right to Opt-Out of Marketing: Unsubscribe from marketing communications at any time

6.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a verifiable request to us using the following methods:

• Email: [email protected]
• Website: hotgiordanos.click

We will respond to your request within 45 days of receipt. If we require additional time (up to 90 days total), we will notify you of the extension within the initial 45-day period. We may need to verify your identity before processing your request. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The following general retention guidelines apply:

When personal information is no longer needed, we will securely delete, anonymize, or destroy it in accordance with our internal data retention and destruction procedures.

8. Data Security

We take the security of your personal information seriously and implement a comprehensive range of technical, administrative, and physical safeguards to protect it against unauthorized access, disclosure, alteration, or destruction.

8.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols
• Data Encryption at Rest: Sensitive data stored on our servers is encrypted using AES-256 encryption
• Firewalls and Intrusion Detection: We deploy firewalls, intrusion detection systems, and continuous monitoring to protect against external threats
• Secure Payment Processing: Payment card data is handled exclusively through PCI-DSS Level 1 compliant processors
• Access Controls: Access to personal data is restricted on a need-to-know basis with role-based access controls
• Multi-Factor Authentication: Administrative access to sensitive systems requires multi-factor authentication

8.2 Administrative Security Measures

• Regular employee training on data privacy and security best practices
• Contractual data processing agreements with all third-party service providers
• Internal data protection and incident response policies
• Regular security audits and vulnerability assessments

8.3 Data Breach Response

In the event of a data breach that affects your personal information, we will notify affected individuals and relevant authorities in accordance with applicable federal and state breach notification laws, including requirements under the FTC Act and applicable state breach notification statutes. Notifications will be provided within the legally required timeframes.

9. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content and advertising.

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites remember your preferences, keep you logged in, and provide a personalized experience. Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (remain on your device for a set period).

9.2 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly (e.g., shopping cart, login sessions). These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). Collected data is aggregated and anonymized.
• Functionality Cookies: Remember your preferences such as language, location, and saved items.
• Marketing and Advertising Cookies: Used to deliver targeted advertisements based on your browsing behavior across websites.
• Third-Party Cookies: Placed by our advertising and analytics partners.

9.3 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising through industry opt-out tools such as the Network Advertising Initiative (NAI) at networkadvertising.org or the Digital Advertising Alliance (DAA) at aboutads.info.

For detailed information about the specific cookies we use, their purposes, and how long they remain active, please refer to our full Cookie Policy, available on our website at hotgiordanos.click.

10. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13 in violation of the Children's Online Privacy Protection Act (COPPA), or from individuals under the age of 18 without verifiable parental consent where required by applicable law.

If you are a parent or guardian and believe that your minor child has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly delete the child's personal information from our records.

We do not knowingly:

• Collect personal information from children under 13 years of age
• Allow children under 13 to create accounts on our platform
• Market food products or services directly to children under 13
• Share children's personal information with third parties

11. International Data Transfers

Giordanos is a United States-based business, and your personal information is primarily collected, stored, and processed within the United States. However, in some cases, we may transfer your personal information to service providers or partners located in other countries.

When we transfer personal information internationally, we take appropriate measures to ensure that such transfers comply with applicable laws and that your information is protected with adequate safeguards, including:

• Contractual clauses requiring third parties to protect your personal information
• Verification that recipient countries provide adequate levels of data protection
• Use of approved data transfer mechanisms where applicable

By using our website and services, you acknowledge that your personal information may be transferred to and processed in the United States or other countries where data protection laws may differ from those in your home country.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or services that are not operated by us. These links are provided for your convenience, but we have no control over and assume no responsibility for the privacy practices of these third-party sites.

We strongly encourage you to review the privacy policy of every website you visit. This Privacy Policy does not apply to information collected by third-party websites or services accessed through links on our website, including but not limited to:

• Social media platforms (Facebook, Instagram, Twitter/X, TikTok, etc.)
• Third-party payment gateways
• Food delivery aggregator platforms
• Review and rating websites

13. California-Specific Disclosures

In addition to the rights described in Section 6, California residents have the following specific rights and disclosures under the CCPA/CPRA:

13.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information as defined under the CCPA:

• Identifiers (name, email, IP address, account credentials)
• Commercial information (purchase history, order records)
• Internet or other electronic network activity (browsing history, interaction data)
• Geolocation data (approximate location from IP, precise location with consent)
• Inferences drawn to create a profile about consumer preferences
• Audio, electronic, or similar information (customer service call recordings)

13.2 Do Not Sell or Share My Personal Information

California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. While we do not sell personal information in the traditional sense, we may share certain data (such as cookie identifiers and browsing data) with advertising partners, which may constitute "sharing" under the CPRA.

To opt out of such sharing, please contact us at [email protected] or use the cookie management options described in Section 9.

13.3 Shine the Light Law

Under California Civil Code Section 1798.83 (California's "Shine the Light" law), California residents may request information about whether we have disclosed personal information to third parties for direct marketing purposes in the preceding calendar year. To make such a request, please contact us at [email protected].

14. FTC Act Compliance

We conduct our data collection and privacy practices in compliance with the Federal Trade Commission (FTC) Act, which prohibits unfair or deceptive acts or practices in or affecting commerce. Our privacy practices are consistent with our published representations, and we do not engage in deceptive data collection or use practices. We follow FTC guidelines regarding:

• Transparency in data collection and use practices
• Honoring user choices and opt-out requests
• Maintaining reasonable security for consumer data
• Truthful marketing and advertising practices
• Children's privacy under COPPA guidelines

15. How to File a Complaint

If you believe we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to contact us first so we can resolve the matter directly.

15.1 Contact Us Directly

Please submit your complaint or concern to:

We will acknowledge your complaint within 10 business days and work to resolve it within 30 days.

15.2 Regulatory Authorities

If you are not satisfied with our response or believe we are processing your personal information in violation of applicable law, you have the right to file a complaint with the following authorities:

• California Privacy Protection Agency (CPPA): California residents may file complaints regarding CCPA/CPRA violations at cppa.ca.gov
• Federal Trade Commission (FTC): Consumers may report unfair or deceptive business practices at reportfraud.ftc.gov or by calling 1-877-382-4357
• State Attorney General: You may also contact your state's Attorney General office for consumer protection complaints

16. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our practices, services, or applicable laws. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website
• Send an email notification to registered users (for significant changes)

We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms.

17. Contact Information for Privacy Inquiries

For any questions, concerns, requests, or complaints regarding this Privacy Policy or our data practices, please contact our privacy team using the details below:

We are committed to working with you to resolve any privacy concerns you may have. If you submit a privacy rights request, we will respond within the timeframes required by applicable law and will never discriminate against you for exercising your rights.