Privacy Policy

Welcome to Zupas ("we," "us," "our," or the "Company"). We are committed to protecting the privacy and personal information of every individual who visits, uses, or interacts with our website located at zupasfood.click (the "Website") and any related services, platforms, or offerings we provide (collectively, the "Services"). This Privacy Policy explains in detail what information we collect, why we collect it, how we use and share it, and what rights you have regarding your personal data.

By accessing or using our Website or Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of our Website and Services immediately.

We operate in the United States and comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant consumer protection regulations. We take your privacy seriously and have designed our data practices to meet the highest standards of transparency and accountability.

1. About Us

Zupas is a food-focused business operating in the United States. We provide customers with food-related products, services, and digital experiences through our online platform. For any privacy-related matters, you may contact us using the information below:

2. Information We Collect

We collect various categories of information depending on how you interact with our Website and Services. The information we collect falls into the following categories:

2.1 Personal Information You Provide Directly

When you voluntarily engage with our Services — for example, by creating an account, placing a food order, subscribing to a newsletter, filling out a contact form, or communicating with us — you may provide us with personal information, including but not limited to:

• Full name — to identify you and personalize your experience
• Email address — for account management, order confirmations, and communications
• Phone number — for delivery coordination or customer support
• Mailing or delivery address — to fulfill food orders and deliveries
• Payment information — such as credit or debit card details processed through secure third-party payment processors
• Date of birth — for age verification purposes where required
• Dietary preferences and food allergies — to customize your orders and protect your health and safety
• User-generated content — such as reviews, ratings, or messages submitted through our platform
• Account credentials — such as usernames and encrypted passwords

2.2 Information Collected Automatically

When you visit our Website or use our Services, we automatically collect certain technical and usage data through cookies, web beacons, pixels, and similar tracking technologies. This includes:

• IP address — to identify your general geographic location and for security monitoring
• Browser type and version — to optimize your browsing experience
• Device type and operating system — to ensure compatibility
• Pages visited and time spent on each page — to understand user behavior and improve our Services
• Clickstream data — tracking the links you click and the path you take through our Website
• Referring URLs — to understand how you arrived at our Website
• Search queries on our Website — to improve our content and product offerings
• Time and date of visits — for analytics and security logging
• Session identifiers — to maintain continuity during your visit

2.3 Cookie and Tracking Technology Data

We use cookies and similar tracking technologies to enhance your experience on our Website. Cookies are small text files placed on your device that help us recognize you, remember your preferences, and analyze website traffic. For a full breakdown of the types of cookies we use and how to manage them, please refer to our Cookie Policy. You may control cookie preferences through your browser settings or our cookie consent tool.

2.4 Device Information

We collect certain information about the device you use to access our Website, including hardware model, unique device identifiers, mobile network information, and screen resolution. This data helps us deliver an optimized and secure experience across all devices.

2.5 Location Information

With your consent, we may collect precise or approximate geolocation data from your device to provide location-based features such as finding nearby Zupas locations, estimating delivery times, or tailoring our menu offerings to your area. You may disable location sharing through your device settings at any time.

2.6 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms — if you connect your social media account or log in via social sign-on features
• Payment processors — who may share transaction confirmation data with us
• Delivery partners — who may provide fulfillment and status updates
• Analytics providers — who help us understand how users interact with our Website
• Marketing partners — who may provide aggregate or anonymized data about user interests

3. How We Use Your Information

We use the information we collect for a range of lawful purposes directly related to operating our food business and delivering excellent service to you. Specifically, we use your data to:

3.1 Providing and Operating Our Services

• Process and fulfill your food orders, including preparation, delivery, and customer support
• Create and manage your user account
• Send order confirmations, receipts, and transactional notifications
• Respond to your customer support inquiries and resolve disputes
• Handle returns, refunds, and complaints efficiently
• Maintain the security and integrity of your account

3.2 Improving Our Website and Services

• Analyze usage patterns and trends to identify areas of improvement
• Conduct A/B testing and user experience research
• Develop new features, products, and menu items based on customer behavior
• Monitor and troubleshoot technical issues
• Train and improve internal systems and algorithms

3.3 Marketing and Promotional Communications

• Send newsletters, promotional offers, and announcements about new menu items or special deals
• Display targeted advertising based on your preferences and browsing history
• Conduct email, SMS, or push notification marketing campaigns (where you have opted in)
• Retarget website visitors through advertising networks

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email, replying "STOP" to any SMS, or contacting us at [email protected]. Opting out of marketing will not affect your receipt of transactional communications.

3.4 Legal Compliance and Safety

• Comply with applicable laws, regulations, and legal obligations
• Respond to lawful requests from government authorities or law enforcement agencies
• Detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities
• Enforce our Terms of Service and other agreements
• Protect the rights, property, and safety of Zupas, our customers, and the public

3.5 Personalization

• Remember your food preferences and dietary restrictions for a more personalized ordering experience
• Recommend menu items based on your past orders and browsing behavior
• Tailor promotions and offers to your individual preferences and location

4. How We Share Your Information

We do not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing purposes without your explicit consent. However, we may share your data in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering our Services. These include:

• Payment processors — to securely handle payment transactions (e.g., Stripe, PayPal, Square)
• Delivery and logistics partners — to coordinate food delivery to your location
• Cloud hosting providers — to store and process data on secure servers
• Email and communication platforms — to send transactional and marketing messages
• Analytics providers — to analyze website performance and user behavior (e.g., Google Analytics)
• Customer support tools — to manage and respond to support requests
• Advertising networks — to serve relevant advertisements to you online

All service providers are contractually obligated to use your data only as directed by us, maintain appropriate security standards, and not disclose your information to unauthorized parties.

4.2 Legal Requirements

We may disclose your personal information if required to do so by law, court order, subpoena, or governmental authority, or if we reasonably believe such disclosure is necessary to:

• Comply with a legal obligation under federal or state law
• Protect and defend the rights or property of Zupas
• Prevent or investigate possible wrongdoing in connection with our Services
• Protect the personal safety of our users or the public
• Protect against legal liability

4.3 Business Transfers

In the event that Zupas undergoes a merger, acquisition, sale of assets, reorganization, or bankruptcy proceeding, your personal information may be transferred to the successor entity. We will notify you of any such change via email or a prominent notice on our Website, and you will have an opportunity to exercise any applicable rights under this Privacy Policy.

4.4 Aggregated and De-Identified Data

We may share aggregated or de-identified information — data that cannot reasonably be used to identify you — with third parties for research, analytics, marketing, or industry reporting purposes. This type of data sharing does not implicate your privacy rights.

4.5 With Your Consent

We may share your personal information with other third parties when you have given us explicit consent to do so, such as when you participate in a co-branded promotion or authorize a third-party application to access your Zupas account.

5. Data Security

We take the security of your personal information very seriously and implement a wide range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your browser and our servers
• Encryption at rest for sensitive data stored on our systems
• Secure access controls including multi-factor authentication and role-based access for our staff
• Regular security audits and vulnerability assessments of our systems and infrastructure
• Firewall protection and intrusion detection systems
• Data minimization practices ensuring we collect only what is necessary
• Employee training on data privacy and security best practices
• Incident response procedures for detecting, reporting, and recovering from data breaches

6. Your Privacy Rights

Depending on your state of residence and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights and making it easy for you to exercise them.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you are entitled to the following rights under the CCPA as amended by the CPRA:

6.2 General Rights for All US Residents

Regardless of your state of residence, you have the following general rights with respect to your personal information:

• Right of Access: Request access to the personal data we hold about you
• Right to Correction: Request correction of inaccurate or outdated information
• Right to Deletion: Request deletion of your personal data, subject to applicable legal obligations
• Right to Withdraw Consent: Withdraw consent for data processing activities that are based on your consent
• Right to Opt-Out of Marketing: Unsubscribe from marketing communications at any time

6.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a request using one of the following methods:

• Email: [email protected]
• Website: zupasfood.click (via our contact form)

We will acknowledge your request within 10 business days and aim to fulfill it within 45 calendar days of receipt. In complex cases, we may extend this period by an additional 45 days and will notify you accordingly. We may need to verify your identity before processing your request to protect against unauthorized access. We will not charge a fee for reasonable requests but reserve the right to charge a reasonable fee for excessive or repetitive requests.

7. Cookie Policy Overview

We use cookies and similar tracking technologies on our Website to enhance functionality, analyze usage, and deliver personalized content and advertisements. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the operation of our Website; cannot be disabled
• Performance and Analytics Cookies: Help us understand how users interact with our Website (e.g., Google Analytics)
• Functional Cookies: Remember your preferences, such as language, location, and saved items
• Targeting and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of ad campaigns

You can manage your cookie preferences through our cookie consent banner displayed upon your first visit, or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of our Website. For full details, please refer to our complete Cookie Policy available on our Website.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. Our general retention guidelines are as follows:

When your data is no longer required, we will securely delete or anonymize it in accordance with industry best practices and applicable law.

9. Children's Privacy

Zupas does not direct its Website or Services toward minors, and we do not knowingly collect personal information from anyone under the age of 18. If you believe that a child under 18 has provided us with personal information without appropriate parental consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete such information from our systems.

We comply with the Children's Online Privacy Protection Act (COPPA) to the extent applicable and are committed to protecting the online privacy of minors. Parents and guardians who have concerns about their child's data are encouraged to contact us without delay.

10. International Data Transfers

Zupas is a United States-based company, and your personal information is primarily stored and processed on servers located within the United States. If you are accessing our Website from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country of residence.

In cases where we transfer personal data internationally — for example, when working with service providers based outside the US — we take appropriate measures to ensure that such transfers are conducted in compliance with applicable laws and that your data receives an adequate level of protection. These measures may include:

• Contractual clauses and data processing agreements with international service providers
• Use of service providers that have implemented recognized security frameworks and certifications
• Assessment of the legal environment in the recipient country prior to transfer

By using our Services, you consent to the transfer and processing of your information in the United States and any other countries where our service providers operate.

11. Third-Party Websites and Links

Our Website may contain links to third-party websites, applications, or services that are operated by companies unaffiliated with Zupas. These include links to social media platforms, delivery service partners, payment portals, and other external resources. Please be aware that:

• We do not control the privacy practices or content of third-party websites
• This Privacy Policy does not apply to any third-party websites or services
• We encourage you to review the privacy policies of any third-party websites you visit
• We are not responsible for the data practices of third-party operators

12. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Currently, there is no universally accepted standard for responding to DNT signals, and our Website does not alter its data collection and use practices in response to DNT signals. However, you may manage your tracking preferences through our cookie consent tool and by adjusting your browser settings as described in our Cookie Policy.

13. Your California Privacy Rights — "Shine the Light" Law

California residents may request information regarding our disclosure of personal information to third parties for their own direct marketing purposes under California's "Shine the Light" law (California Civil Code Section 1798.83). If you are a California resident and wish to make such a request, please contact us at [email protected] with "California Shine the Light Request" in the subject line. We will respond to your request within the timeframe required by law.

14. How to File a Complaint

If you have concerns about our data practices that we have been unable to resolve to your satisfaction, you have the right to file a complaint with the appropriate data protection or consumer protection authority. In the United States, the following agencies may be relevant:

14.1 Federal Trade Commission (FTC)

The FTC enforces federal consumer protection laws, including those relating to privacy and data security. You may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

14.2 California Privacy Protection Agency (CPPA)

California residents may file complaints with the California Privacy Protection Agency, which enforces the CCPA/CPRA:

• Website: cppa.ca.gov
• Address: California Privacy Protection Agency, 2101 Arena Boulevard, Sacramento, CA 95834

14.3 State Attorney General Offices

Residents of any US state may also file complaints with their state's Attorney General office regarding consumer privacy violations. Contact information for your state's Attorney General can be found through the National Association of Attorneys General at www.naag.org.

We strongly encourage you to contact us directly at [email protected] before filing a formal complaint, as we are committed to resolving privacy concerns promptly and fairly.

15. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our Website
• Send an email notification to registered users where appropriate

We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal information. Your continued use of our Website or Services following the posting of changes constitutes your acceptance of those changes. If you do not agree with the updated policy, you should discontinue your use of our Services and contact us to close your account if applicable.

16. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy, or if you wish to exercise any of your privacy rights, please do not hesitate to contact our privacy team using the following information:

We are dedicated to responding to all privacy-related inquiries in a timely and thorough manner. Our team is available to help you understand your rights and how your data is handled, and to address any concerns you may have about our privacy practices.

Thank you for trusting Zupas with your personal information. We are committed to safeguarding your privacy and providing you with a secure, personalized, and enjoyable food experience.