Privacy Policy

Welcome to Giordanos. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website giordanos-food.click or interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

This Privacy Policy applies to all information collected through our website, as well as any related services, sales, marketing, or events. By accessing or using our website, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

1. About Us

Giordanos is a food business operating in the United States. Our primary goal is to provide high-quality food products and services to our customers through our digital and physical platforms.

For any privacy-related inquiries, you may contact us using the details provided above or through the dedicated contact section at the end of this policy.

2. Applicable Laws and Legal Framework

As a business operating in the United States, we comply with all applicable federal and state privacy laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act) — governing unfair or deceptive practices in commerce, including the protection of consumer privacy
• The California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA) — granting California residents specific rights over their personal data
• The Children's Online Privacy Protection Act (COPPA) — protecting the privacy of children under 13 years of age
• The CAN-SPAM Act — governing commercial electronic communications
• The Electronic Communications Privacy Act (ECPA)
• Applicable state consumer protection laws throughout the United States

We continuously monitor changes to applicable legislation and update our practices accordingly to ensure full compliance.

3. Information We Collect

We collect information that you provide to us directly, information collected automatically when you use our services, and information obtained from third-party sources. The categories of personal information we may collect include:

3.1 Personal Information You Provide Directly

When you interact with us — whether by placing an order, creating an account, subscribing to a newsletter, submitting a contact form, or communicating with our customer support — you may voluntarily provide:

• Identification Data: Your full name, username, and account credentials
• Contact Information: Email address, phone number, and mailing or billing address
• Payment Information: Credit or debit card details, billing address, and transaction history (note: full payment card details are processed by secure third-party payment processors and are not stored on our servers)
• Order Information: Food preferences, delivery instructions, order history, and special dietary requirements
• Communications: Messages, feedback, reviews, and correspondence you send to us
• Account Profile Data: Profile pictures, saved addresses, loyalty program data, and preferences

3.2 Information Collected Automatically

When you visit our website or use our digital services, we automatically collect certain technical and behavioral data, including:

• Device Information: IP address, device type, operating system, browser type and version, device identifiers, and mobile network information
• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, search terms used on our site, and navigation patterns
• Location Data: General geographic location derived from your IP address or, with your explicit consent, precise GPS-based location data for delivery services
• Log Data: Server logs, error reports, and activity timestamps
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies (see Section 8 for more details)

3.3 Information from Third-Party Sources

We may receive information about you from third parties such as:

• Social media platforms when you choose to log in through or link your social media account
• Business partners, delivery platforms, and service integrations
• Analytics providers and advertising networks
• Publicly available databases for fraud prevention and identity verification purposes
• Customer review platforms and feedback aggregators

4. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes. Specifically, we may use your personal information for the following:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including managing delivery logistics
• Creating and maintaining your customer account
• Processing payments and preventing fraudulent transactions
• Providing customer support and responding to your inquiries
• Managing loyalty programs, rewards points, and special promotions
• Sending order confirmations, receipts, delivery updates, and service-related notifications

4.2 Analytics and Service Improvement

• Analyzing usage patterns to improve our website functionality and user experience
• Conducting internal research and development to enhance our products and services
• Monitoring website performance, diagnosing technical issues, and ensuring security
• Understanding customer preferences and tailoring our menu and offerings accordingly
• Measuring the effectiveness of our marketing campaigns

4.3 Marketing and Communications

• Sending promotional emails, newsletters, and special offers — but only where you have provided consent or we have a legitimate interest to do so
• Personalizing your experience and presenting relevant content, products, and recommendations
• Conducting surveys, contests, and promotions
• Retargeting advertising on third-party platforms based on your browsing activity

You have the right to opt out of marketing communications at any time. Each marketing email will contain an unsubscribe link, or you may contact us directly at [email protected].

4.4 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal obligations
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Giordanos, our customers, and the public
• Responding to lawful requests from government authorities or law enforcement agencies
• Preventing and investigating fraud, abuse, unauthorized access, and other illegal activities

5. Sharing Your Information with Third Parties

We respect your privacy and do not sell your personal information to third parties. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business. These providers are contractually obligated to protect your data and may only use it for the purposes for which it was shared. Categories of service providers include:

• Payment Processors: Secure third-party payment gateways that handle credit card and electronic payment processing
• Delivery Partners: Third-party logistics and delivery companies that fulfill your food orders
• Cloud Hosting Providers: Companies that host our website and store our data securely
• Email and Communication Platforms: Services used to send transactional and marketing emails
• Analytics Providers: Tools such as Google Analytics that help us understand website traffic and user behavior
• Customer Support Tools: Platforms used to manage customer inquiries and support tickets
• Marketing Platforms: Advertising networks and social media platforms used for targeted marketing

5.2 Legal Requirements

We may disclose your personal information if required to do so by law or in response to valid legal processes, including:

• Court orders, subpoenas, or other judicial processes
• Requests from law enforcement or government agencies
• Situations where we believe disclosure is necessary to protect the safety of any person or to prevent illegal activity
• Situations requiring us to protect the rights or property of Giordanos

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

5.4 Aggregated or De-Identified Data

We may share aggregated, anonymized, or de-identified information — data that cannot reasonably be used to identify you — with third parties for research, marketing, analytics, and other business purposes. This is not considered a sale of personal information.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, loss, misuse, alteration, or destruction. Our security measures include:

6.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols
• Data Encryption at Rest: Sensitive stored data is encrypted using industry-standard encryption methods
• Firewalls and Intrusion Detection: We employ network firewalls and intrusion detection systems to monitor for and prevent unauthorized access
• Secure Payment Processing: Payment information is handled by PCI DSS-compliant payment processors
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing

6.2 Administrative Safeguards

• Access to personal data is restricted to authorized personnel who need it to perform their job functions
• Employees undergo training on data privacy and security best practices
• We maintain data processing agreements with all third-party service providers
• Incident response procedures are in place to address potential data breaches promptly

6.3 Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and, where required, relevant regulatory authorities, in accordance with applicable U.S. state and federal laws. Notification will occur within the timeframes required by law.

7. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights with respect to your personal information. We are committed to honoring these rights and have established processes to facilitate them.

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. Upon a verified request, we will provide you with a disclosure of the categories and specific pieces of personal information we have collected about you.

7.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. You may update many of your account details directly through your user profile on our website, or by contacting us.

7.3 Right to Deletion

You have the right to request the deletion of your personal information, subject to certain exceptions. We may retain certain data where required by law, for legitimate business purposes, or to complete transactions you have initiated. We will inform you of any applicable exceptions at the time of your request.

7.4 Right to Data Portability

You have the right to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another entity where technically feasible.

7.5 Right to Opt Out of Marketing

You have the right to opt out of receiving marketing communications from us at any time. You can do this by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

7.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you goods or services, charge you different prices, or provide a lower quality of service because you exercised your rights under applicable privacy laws.

7.7 How to Submit a Request

To exercise any of the rights described above, please contact us using the following methods:

• Email: [email protected]
• Website: giordanos-food.click (use the contact form)

We will respond to your request within 45 days of receipt. If we require additional time, we will inform you of the extension and the reason for it. We may need to verify your identity before processing your request to protect the security of your personal information.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and support our marketing activities.

8.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently and to provide information to website owners. We also use web beacons, pixel tags, and similar technologies that function in comparable ways.

8.2 Types of Cookies We Use

8.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, and set preferences for future cookies. Please note that disabling certain cookies may affect the functionality of our website. For detailed information about our cookie practices, please refer to our dedicated Cookie Policy available on our website.

9. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

When personal information is no longer needed, we securely delete or anonymize it so that it can no longer be associated with you.

10. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). In addition to the rights described in Section 7, California residents have the following additional rights:

10.1 Right to Know

You have the right to request that we disclose what personal information we have collected about you over the past 12 months, including the categories of personal information, the sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom we have shared it.

10.2 Right to Opt Out of Sale or Sharing

Giordanos does not sell personal information in the traditional sense. However, certain uses of advertising and analytics tools may constitute "sharing" of personal information under the CPRA. You have the right to opt out of such sharing. To exercise this right, contact us at [email protected] or visit our website's privacy preference center.

10.3 Right to Limit Use of Sensitive Personal Information

Under the CPRA, you have the right to limit our use and disclosure of sensitive personal information to purposes necessary for providing the requested goods or services.

10.4 Authorized Agents

California residents may designate an authorized agent to submit privacy requests on their behalf. The authorized agent must provide written authorization signed by you, and we may require you to verify your identity directly.

10.5 California "Shine the Light" Law

Under California Civil Code Section 1798.83, California residents may request information about the categories of personal information shared with third parties for their direct marketing purposes. We do not share personal information with third parties for direct marketing purposes without your consent.

11. Children's Privacy

Our website and services are intended for individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 13 in violation of the Children's Online Privacy Protection Act (COPPA).

If you are between 13 and 17 years of age, please obtain parental or guardian consent before using our services or providing any personal information. If we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take immediate steps to delete that information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected].

12. International Data Transfers

Giordanos is based in the United States, and all our primary data processing activities occur within the United States. However, some of our service providers and business partners may operate in other countries, and your data may be transferred to, stored, and processed in countries outside the United States.

When we transfer personal information internationally, we take steps to ensure that appropriate safeguards are in place to protect your information in accordance with applicable U.S. laws. These safeguards may include:

• Entering into data processing agreements with our international service providers that include appropriate data protection clauses
• Ensuring that recipient countries provide an adequate level of data protection
• Using other legally recognized transfer mechanisms as required by applicable law

By using our website and services, you acknowledge and consent to the transfer of your information to the United States and, where applicable, to other countries in which our service providers operate.

13. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Giordanos. This Privacy Policy does not apply to those third-party platforms. We encourage you to review the privacy policies of any third-party services you access through our website.

We are not responsible for the privacy practices, content, or security of third-party websites. The inclusion of a link to a third-party website does not imply our endorsement of that website or its privacy practices.

14. How to File a Complaint

If you believe that we have not adequately addressed a privacy concern or have violated your rights under applicable privacy law, you have the right to file a complaint.

14.1 Contact Us First

We encourage you to contact us first so that we can attempt to resolve your concern directly:

• Email: [email protected]
• Website: giordanos-food.click

We aim to respond to all privacy complaints within 30 days. For complex issues, we will inform you if additional time is needed.

14.2 Federal Trade Commission (FTC)

If you believe your privacy rights have been violated and we have failed to adequately address your complaint, you may file a complaint with the Federal Trade Commission (FTC), which is the primary federal agency responsible for enforcing consumer privacy protections in the United States:

• Website: www.ftc.gov
• Complaint Center: reportfraud.ftc.gov
• Phone: 1-877-382-4357

14.3 California Residents

California residents may also file a complaint with the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov

Alternatively, California residents may contact the California Attorney General's Office at oag.ca.gov/privacy.

14.4 State Attorney General Offices

Residents of other U.S. states may file complaints with their respective state Attorney General's office or consumer protection agency, which may have authority to investigate privacy violations under applicable state law.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes to this policy, we will:

• Post the updated policy on this page with a new "Last Updated" date
• Notify you by email (if we have your email address and the change is significant)
• Display a prominent notice on our website alerting you to the change

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website after any changes to this policy constitutes your acceptance of the updated terms.

16. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data processing practices, please do not hesitate to contact us. We are dedicated to addressing your privacy concerns promptly and thoroughly.

We commit to acknowledging your inquiry within 5 business days and providing a substantive response within 30 to 45 days, depending on the nature and complexity of your request.