Privacy Policy

This Privacy Policy describes how Giordanos ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website at tastygiordanos.rest, place orders, use our services, or otherwise interact with us. Please read this policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

We are committed to protecting your privacy and handling your personal information with transparency, integrity, and respect. This policy is designed to comply with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations.

1. Who We Are

Giordanos is a food service business operating through its online platform at tastygiordanos.rest. We provide food ordering, delivery, and related services to customers across the United States.

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us using the details provided above or refer to the Contact Us section at the end of this document.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we may collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, participate in a promotion, or otherwise interact with our services, we may collect personal information that identifies you, including but not limited to:

• Full name
• Email address
• Phone number
• Mailing address and delivery address
• Date of birth (for age verification purposes)
• Account username and password (stored in encrypted form)

2.2 Payment and Financial Information

When you make a purchase through our website, we collect payment-related information necessary to process your transaction. This may include:

• Credit or debit card details (card number, expiration date, CVV — processed securely through our payment processors)
• Billing address
• Transaction history and order records

2.3 Order and Food Preference Information

As a food service provider, we collect information related to your orders and preferences, including:

• Food items ordered, customizations, and order history
• Dietary preferences, allergies, or special requests you provide to us
• Favorite items or saved preferences
• Loyalty program participation and reward points

2.4 Usage Data and Technical Information

When you visit our website or use our mobile services, we automatically collect certain technical and usage information, including:

• Internet Protocol (IP) address
• Browser type and version
• Operating system and device type
• Pages visited, links clicked, and time spent on pages
• Referring website or URL
• Date and time of your visit
• Search queries made on our website
• Clickstream data

2.5 Location Data

With your permission, we may collect precise or approximate geolocation data to facilitate delivery services, show nearby locations, or improve your user experience. You can disable location services at any time through your device settings or browser preferences.

2.6 Communications and User-Generated Content

We collect information from communications you send us, including:

• Customer service inquiries and correspondence
• Reviews, ratings, and feedback you submit
• Responses to surveys or questionnaires
• Social media interactions or messages directed to us

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior and preferences. Please refer to Section 8 of this policy for more detailed information about our cookie practices.

2.8 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms when you connect your account or log in using a social media profile
• Third-party delivery partners or marketplaces
• Marketing and advertising partners
• Publicly available sources

3. How We Use Your Information

We use the personal information we collect for a variety of purposes that are necessary for operating our business and serving you effectively. The specific purposes include:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Managing your account and customer profile
• Facilitating payment processing and issuing receipts
• Coordinating delivery or pickup services
• Sending order confirmations, status updates, and delivery notifications
• Providing customer support and resolving disputes

3.2 Personalization and User Experience

• Personalizing your experience on our website and recommending menu items based on your preferences and order history
• Saving your preferences, delivery addresses, and payment methods for faster checkout
• Tailoring promotions and offers to your interests

3.3 Marketing and Communications

• Sending you promotional emails, newsletters, and special offers (with your consent where required)
• Notifying you about new menu items, seasonal specials, and events
• Running loyalty programs and reward campaigns
• Conducting surveys and collecting feedback to improve our services

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

3.4 Analytics and Business Improvement

• Analyzing website traffic, user behavior, and service usage to improve our platform and menu offerings
• Conducting internal research and business intelligence
• Monitoring and improving the performance and security of our website
• Developing new features, products, and services

3.5 Legal Compliance and Safety

• Complying with applicable laws, regulations, and legal obligations
• Responding to lawful requests from government authorities and law enforcement agencies
• Protecting the rights, safety, and property of Giordanos, our customers, and the public
• Detecting, preventing, and addressing fraud, abuse, security incidents, and other harmful activities
• Enforcing our Terms of Service and other applicable policies

3.6 Legal Basis for Processing

We process your personal information on the following legal bases:

• Performance of a Contract: Processing necessary to fulfill your orders and provide our services
• Legitimate Interests: Processing for analytics, fraud prevention, and business improvement purposes
• Consent: Processing for marketing communications and non-essential cookies (where you have given consent)
• Legal Obligation: Processing required to comply with applicable laws and regulations

4. How We Share Your Information

We do not sell your personal information to third parties for monetary compensation. However, we may share your information with the following categories of recipients under the circumstances described below:

4.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating our business, including:

• Payment Processors: To securely process your transactions
• Delivery Partners: To fulfill food delivery orders
• Cloud Hosting Providers: To store and manage our data infrastructure
• Email and Marketing Platforms: To send communications on our behalf
• Analytics Providers: To help us understand website usage (e.g., Google Analytics)
• Customer Support Tools: To manage and respond to your inquiries

All service providers are contractually required to handle your information in accordance with this Privacy Policy and applicable data protection laws, and are prohibited from using it for their own independent purposes.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information to government authorities, law enforcement agencies, courts, or other third parties if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, or governmental request
• Enforce our Terms of Service or other legal agreements
• Protect the rights, property, or safety of Giordanos, our users, or the public
• Detect or prevent fraud, security breaches, or illegal activity

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other business reorganization, your personal information may be transferred to a successor entity as part of the transaction. We will notify you via email or prominent notice on our website before your information becomes subject to a different privacy policy.

4.4 Aggregated and De-identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for business, marketing, or research purposes.

4.5 With Your Consent

We may share your information with additional third parties when you have provided your explicit consent to such sharing.

5. Data Security

We take the security of your personal information seriously and implement a variety of administrative, technical, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, loss, or destruction.

5.1 Security Measures We Employ

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers
• Password Hashing: Account passwords are stored using industry-standard hashing algorithms and are never stored in plain text
• Access Controls: Access to personal information is restricted to authorized employees, contractors, and service providers who need it to perform their duties
• PCI DSS Compliance: Payment processing is handled through PCI DSS-compliant payment processors
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing
• Firewalls and Intrusion Detection: We employ firewalls and monitoring systems to detect and prevent unauthorized access
• Employee Training: Our staff receives regular training on data security and privacy best practices

6. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights with respect to your personal information. We are committed to honoring these rights in accordance with applicable United States privacy laws, including the CCPA/CPRA for California residents.

6.1 Right to Know and Access

You have the right to request information about the categories and specific pieces of personal information we have collected about you, the purposes for which we use it, and the categories of third parties with whom we share it.

6.2 Right to Correction

You have the right to request that we correct inaccurate or incomplete personal information we hold about you. You may also update your account information directly through your account settings on our website.

6.3 Right to Deletion

You have the right to request that we delete personal information we have collected about you, subject to certain exceptions provided by law (such as information needed to complete a transaction, comply with a legal obligation, or protect against fraud).

6.4 Right to Data Portability

You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format that can be transferred to another service provider, where technically feasible.

6.5 Right to Opt-Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. We do not sell personal information for monetary compensation. However, if you wish to limit any data sharing for advertising purposes, you may contact us or use available opt-out mechanisms on our website.

6.6 Right to Limit Use of Sensitive Personal Information

California residents have the right to limit the use and disclosure of sensitive personal information (such as precise geolocation data) to purposes necessary to provide the requested services.

6.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide a different quality of service based on your exercise of privacy rights.

6.8 How to Submit a Privacy Request

To exercise any of your rights described above, please submit a verifiable consumer request by:

• Emailing us at: [email protected]
• Visiting our website: tastygiordanos.rest

We will verify your identity before processing your request. We will respond to verifiable requests within 45 days as required by the CCPA/CPRA. If we require additional time, we will notify you in writing. You may designate an authorized agent to submit requests on your behalf, provided that agent has written authorization from you and can verify their identity.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general data retention practices are as follows:

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention procedures and applicable law.

8. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver relevant content and advertisements. This section provides a brief overview of our cookie practices.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and provide a more personalized experience. Similar technologies include web beacons, pixel tags, and local storage objects.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly (e.g., maintaining your session, processing orders). These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data (e.g., Google Analytics).
• Functional Cookies: Remember your preferences and settings to enhance your experience (e.g., saved delivery addresses, language preferences).
• Marketing and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns. These require your consent.

8.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising through industry opt-out tools such as the Network Advertising Initiative (NAI) opt-out tool or the Digital Advertising Alliance (DAA) opt-out tool.

For more detailed information about the specific cookies we use, their purposes, and how to manage them, please refer to our full Cookie Policy available on our website.

9. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, or from minors under 18 without verifiable parental consent.

If we learn that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take immediate steps to delete that information from our systems in accordance with the Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information, please contact us immediately at [email protected] so we can take appropriate action.

10. International Data Transfers

Giordanos is based in the United States, and your personal information is primarily collected, stored, and processed within the United States. However, in the course of providing our services, your data may be transferred to, stored in, or processed by our service providers and business partners located in other countries.

When we transfer personal information internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities
• Ensuring that recipient countries provide an adequate level of data protection
• Implementing data processing agreements with service providers that require compliance with applicable privacy standards

By using our services, you acknowledge and consent to the transfer of your personal information to the United States and other countries where our service providers operate, which may have different data protection laws than your home country.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023. This section supplements the general privacy rights described above and applies specifically to California residents.

11.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information from California consumers:

• Identifiers (name, email address, IP address, account credentials)
• Commercial information (order history, purchasing records, food preferences)
• Internet or other electronic network activity (browsing history, website interactions)
• Geolocation data (with your consent, for delivery services)
• Inferences drawn from the above to create a profile about your preferences

11.2 Sources of Personal Information

We collect personal information directly from you, automatically through website interactions, and from third-party service providers and business partners.

11.3 Business Purposes for Collection

We collect and use personal information for the business purposes described in Section 3 of this Privacy Policy.

11.4 California Shine the Light Law

California Civil Code Section 1798.83 (the "Shine the Light" law) permits California residents to request certain information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us at [email protected].

11.5 Submitting CCPA/CPRA Requests

California residents may exercise their rights by submitting a verifiable consumer request to:

• Email: [email protected]
• Website: tastygiordanos.rest

We will confirm receipt of your request within 10 business days and will respond within 45 days. If we need additional time, we will notify you in writing and provide a response within 90 days total.

12. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Giordanos. This Privacy Policy does not apply to those third-party platforms, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access through links on our website.

Third-party platforms may include:

• Social media platforms (Facebook, Instagram, Twitter/X, etc.)
• Third-party delivery apps and marketplaces
• Payment processor interfaces
• Review and rating platforms

13. Do Not Track Signals

Some web browsers allow users to send "Do Not Track" (DNT) signals to websites they visit. Currently, there is no universally accepted standard for how websites should respond to DNT signals. At this time, our website does not respond to DNT browser signals. However, you can manage your preferences through your browser cookie settings and our cookie consent tools.

14. How to File a Complaint

If you believe your privacy rights have been violated or you are dissatisfied with how we have handled your personal information, we encourage you to contact us first so we can try to resolve your concern directly.

14.1 Contact Us First

Please submit your complaint or concern to:

• Email: [email protected]
• Website: tastygiordanos.rest

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

14.2 Filing a Complaint with Regulatory Authorities

If you are not satisfied with our response, you have the right to file a complaint with the appropriate data protection or consumer protection authority in your jurisdiction:

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Post the updated Privacy Policy on our website at tastygiordanos.rest
• Update the "Last Updated" date at the top of this policy
• Notify you by email (if we have your email address) or through a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. We are committed to responding to all privacy-related inquiries promptly and thoroughly.

When contacting us about a privacy matter, please provide sufficient information for us to identify your account (if applicable) and understand the nature of your request or concern. We take all privacy inquiries seriously and will make every effort to address your concerns in a timely and transparent manner.

This Privacy Policy was last updated on June 14, 2026. This document is effective as of the date stated above and supersedes all previous versions of our privacy policy.