Privacy Policy

Welcome to Costa Vida. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website costavida.top, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services.

By accessing or using costavida.top, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. This policy applies to all visitors, users, customers, and others who access or use our platform.

1. About Us

Costa Vida is a food business operating in the United States. We provide food-related products and services through our website and other channels. Our contact details are as follows:

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us using the information provided above or through the dedicated contact section at the end of this document.

2. Applicable Laws and Regulatory Framework

As a business operating in the United States, Costa Vida complies with applicable federal and state privacy and consumer protection laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act) – which governs unfair or deceptive practices, including those related to data privacy and security.
• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) – which grants specific rights to California residents regarding the collection, use, and sharing of their personal information.
• The Children's Online Privacy Protection Act (COPPA) – which restricts the collection of personal information from children under the age of 13.
• The CAN-SPAM Act – which governs commercial electronic mail communications.
• Other applicable state and federal privacy laws as they may apply to our operations.

We are dedicated to maintaining compliance with all relevant regulations and update our practices regularly to reflect changes in the legal landscape.

3. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of information we collect are described below.

3.1 Personal Information You Provide to Us

When you interact with Costa Vida — whether by creating an account, placing a food order, signing up for newsletters, contacting customer support, or participating in promotions — you may voluntarily provide us with personal information, including:

• Identifiers: Full name, username, and similar identifiers.
• Contact Information: Email address, phone number, and mailing or delivery address.
• Account Credentials: Username and encrypted password.
• Payment Information: Credit card numbers, billing address, and other financial data necessary to process your transactions. Note that full payment card details are handled by our secure third-party payment processors and are not stored directly on our servers.
• Order Details: Food items ordered, dietary preferences or restrictions, special instructions, and order history.
• Communications: Messages, feedback, reviews, and other content you submit through our platform or customer service channels.
• Promotional Data: Information provided when entering contests, completing surveys, or participating in promotional campaigns.

3.2 Information Collected Automatically

When you visit costavida.top, certain information is automatically collected through standard web technologies, including:

• Device Information: Device type, operating system, browser type and version, device identifiers, and hardware model.
• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, search terms used, and navigation paths within our website.
• Log Data: IP address, access times, date and time stamps, and error logs.
• Location Data: General geographic location inferred from your IP address. With your permission, we may also collect more precise location data through mobile applications.
• Cookies and Tracking Technologies: Information gathered through cookies, web beacons, pixel tags, local storage objects, and similar technologies. Please see Section 8 (Cookie Policy) for more details.

3.3 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media account to our services or interact with our social media pages, we may receive certain profile information permitted by your privacy settings on those platforms.
• Analytics and Advertising Partners: Third-party analytics and advertising companies may share aggregated or pseudonymous data about your interactions with our website and advertisements.
• Delivery Partners: If we use third-party delivery services, we may receive information about your delivery, including delivery address and status updates.
• Publicly Available Sources: We may collect information available in public databases or from other publicly accessible sources where permitted by law.

4. How We Use Your Information

Costa Vida uses the information we collect for a variety of legitimate business purposes, including:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders and managing delivery or pickup logistics.
• Creating and managing your customer account.
• Processing payments and preventing fraudulent transactions.
• Communicating with you about your orders, including confirmations, updates, and receipts.
• Providing customer support and resolving disputes or issues.

4.2 Analytics and Website Improvement

• Analyzing website usage patterns and user behavior to improve our website functionality and user experience.
• Conducting internal research and analytics to understand our customer base and improve our menu and services.
• Monitoring and diagnosing technical issues and security threats.
• Testing new features, products, and services before full deployment.

4.3 Marketing and Communications

• Sending promotional emails, newsletters, and special offers about Costa Vida products and services, where you have consented or where we have a legitimate business interest.
• Personalizing the content and offers you see on our website and in our communications based on your preferences and order history.
• Retargeting you with relevant advertisements on third-party platforms and social media channels.
• Conducting customer satisfaction surveys and soliciting your feedback and reviews.

4.4 Legal Compliance and Safety

• Complying with applicable laws, regulations, and legal obligations.
• Responding to lawful requests from law enforcement and regulatory authorities.
• Enforcing our Terms of Service and other policies.
• Protecting the rights, safety, and property of Costa Vida, our customers, and the public.
• Detecting, investigating, and preventing fraudulent, harmful, or illegal activity.

4.5 Business Operations

• Managing business operations, including accounting, auditing, and record-keeping.
• Facilitating corporate transactions such as mergers, acquisitions, or asset sales, subject to appropriate confidentiality safeguards.
• Training our staff and improving our internal processes.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own direct marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers

We engage trusted third-party companies and individuals to perform services on our behalf. These service providers are contractually obligated to use your information only to perform services for us and are prohibited from using it for any other purpose. Categories of service providers include:

• Payment processors and fraud prevention services.
• Food delivery logistics and courier partners.
• Cloud hosting and IT infrastructure providers.
• Email marketing and customer communications platforms.
• Analytics and website performance tools (e.g., Google Analytics).
• Customer relationship management (CRM) software providers.
• Legal, accounting, and professional advisory services.

5.2 Business Transfers

In the event that Costa Vida undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change through a notice on our website or by email and will ensure appropriate privacy protections remain in place.

5.3 Legal Requirements and Protection of Rights

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with applicable laws, regulations, court orders, or governmental requests.
• Enforce our Terms of Service or other agreements.
• Protect the rights, property, or safety of Costa Vida, our customers, or the public.
• Respond to an emergency that threatens the safety of any person.

5.4 Aggregated or Anonymized Data

We may share aggregated or anonymized information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes. This information does not constitute personal data under applicable law.

5.5 California-Specific Disclosures (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have the right to know about the categories of personal information we disclose for business purposes. In the past twelve (12) months, we may have disclosed the following categories of personal information to service providers for business purposes: identifiers, commercial information, internet or network activity, geolocation data, and inferences drawn from your information. We do not sell or share personal information as defined under CCPA/CPRA for the purpose of cross-context behavioral advertising without providing a right to opt out.

6. Data Security

Costa Vida takes the security of your personal information seriously. We implement a range of technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers. Sensitive data such as payment information is encrypted both in transit and at rest.
• Access Controls: Access to personal information is restricted to authorized personnel who require it to perform their job functions. All employees with access to personal data are subject to confidentiality obligations.
• Secure Payment Processing: We use PCI-DSS compliant payment processors and do not store full payment card numbers on our own servers.
• Regular Security Assessments: We conduct regular audits and assessments of our data security practices to identify and address potential vulnerabilities.
• Incident Response: We maintain a data breach response plan to swiftly address any security incidents and notify affected individuals and regulatory authorities as required by applicable law.
• Employee Training: Our staff receives regular training on data privacy and security best practices.

Despite our best efforts, no method of data transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

7. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights.

7.1 Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions (for example, where we are required to retain the information for legal compliance purposes).
• Right to Opt-Out of Marketing: You may opt out of receiving promotional communications from us at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly at [email protected].
• Right to Data Portability: You may request that we provide your personal information in a structured, commonly used, and machine-readable format where technically feasible.

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have the following additional rights under the CCPA/CPRA:

• Right to Know: You have the right to know the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. To exercise this right, contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to what is necessary to perform the requested services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality of service because you exercised your privacy rights.

7.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us by:

• Emailing us at: [email protected]
• Visiting our website at: costavida.top

We will respond to your request within the timeframes required by applicable law. For California residents, we will respond to verified requests within 45 days, with the possibility of one 45-day extension where necessary. We may need to verify your identity before processing your request to protect against unauthorized access to your information. We will not require you to create an account solely for the purpose of submitting a rights request.

8. Cookies and Tracking Technologies

Costa Vida uses cookies and similar tracking technologies to enhance your experience on our website, analyze usage patterns, and deliver relevant content and advertising.

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites remember your preferences, keep you logged in, and gather information about how you interact with the site. We also use web beacons, pixel tags, and local storage objects for similar purposes.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website, such as enabling you to log in, place orders, and navigate the site securely.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website (e.g., pages visited, error messages). We use tools such as Google Analytics for this purpose.
• Functionality Cookies: These cookies remember your preferences (such as language or region) to provide a more personalized experience.
• Advertising and Targeting Cookies: These cookies are used to deliver advertisements relevant to your interests and to measure the effectiveness of our marketing campaigns.

8.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when new cookies are set. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders or access certain features.

For more detailed information about the cookies we use and how to manage your preferences, please refer to our full Cookie Policy available on our website at costavida.top.

9. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention periods we apply are as follows:

Upon expiration of the applicable retention period, we will securely delete, destroy, or anonymize your personal information in accordance with our internal data disposal procedures. Where we are unable to immediately delete data due to technical constraints, we will isolate it from further processing until deletion is possible.

10. Children's Privacy

Costa Vida's website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or use personal information from children under the age of 13 in violation of the Children's Online Privacy Protection Act (COPPA), or from individuals under the age of 18 without appropriate parental or guardian consent where required.

If you are under 18 years of age, please do not use our website or submit any personal information to us. If we become aware that we have inadvertently collected personal information from a child under 13 without verified parental consent, we will take prompt steps to delete such information from our records. If you believe that we may have collected information from a child under 13 or a minor, please contact us immediately at [email protected].

11. International Data Transfers

Costa Vida operates primarily within the United States. However, in the course of our business operations, we may transfer your personal information to third-party service providers or partners located in other countries. These transfers may include countries that do not have the same level of data protection laws as the United States.

When we transfer personal information internationally, we take appropriate safeguards to ensure that your information remains protected in accordance with this Privacy Policy and applicable law. These safeguards may include:

• Entering into data processing agreements with service providers that include standard contractual clauses or other approved transfer mechanisms.
• Ensuring that recipient countries provide an adequate level of data protection as determined by applicable regulatory authorities.
• Implementing additional technical and organizational security measures to protect data during transfer and processing.

By using our website and services, you acknowledge and consent to the transfer of your personal information to countries outside of the United States as described in this section.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or embedded content from external sources. This Privacy Policy applies only to costavida.top and our own services. We are not responsible for the privacy practices of third-party websites or services, and we encourage you to review the privacy policies of any third-party sites you visit. Clicking on a third-party link will direct you away from our website, and we have no control over the content or practices of those sites.

13. Social Media and User-Generated Content

Costa Vida maintains a presence on various social media platforms. If you interact with us on social media or submit reviews, photos, comments, or other user-generated content through our website or third-party platforms, please be aware that this information may be publicly visible and may be collected and used by us or others. We are not responsible for any information you choose to make publicly available through social media or other public channels.

If you use social media login features to access our website (such as logging in with Facebook or Google), we may collect information from your social media profile as permitted by your privacy settings on those platforms. We use this information only to authenticate your identity and provide you with access to our services.

14. Do Not Track Signals

Some web browsers may transmit "Do Not Track" signals to websites and other online services. Currently, there is no universally accepted standard for how websites should respond to such signals. As a result, we do not currently alter our data collection practices in response to Do Not Track signals received from browsers. We will continue to monitor developments in this area and update our practices accordingly if a standard approach is established.

California residents may also be entitled to request information about whether we disclose their personal information to third parties for direct marketing purposes under California's "Shine the Light" law (California Civil Code Section 1798.83). If you are a California resident and wish to make such a request, please contact us at [email protected].

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make changes, we will update the "Last Updated" date at the top of this policy. If we make material changes, we will notify you by posting a prominent notice on our website or by sending you an email notification (where we have your email address on file).

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of costavida.top following the posting of any changes constitutes your acceptance of those changes.

16. How to File a Complaint

If you believe that your privacy rights have been violated or that we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to contact us first so that we can attempt to resolve your concern directly.

16.1 Contact Us

Please submit privacy-related complaints or concerns to:

We will acknowledge your complaint within 10 business days and aim to resolve it within 30 days. Complex complaints may require additional time, and we will keep you informed of the progress.

16.2 Regulatory Authorities

If you are not satisfied with our response or believe we are processing your personal information unlawfully, you have the right to file a complaint with the appropriate data protection authority:

• Federal Trade Commission (FTC): The FTC is the primary federal agency responsible for enforcing consumer privacy protections in the United States. You may file a complaint at www.ftc.gov/complaint or by calling 1-877-FTC-HELP (1-877-382-4357).
• California Attorney General (for California Residents): California residents may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office if they believe their CCPA/CPRA rights have been violated. Visit cppa.ca.gov or oag.ca.gov/privacy/ccpa for more information.
• State Attorneys General: Residents of other states may contact their respective state attorney general's office for guidance on filing privacy-related complaints.

17. Contact Information for Privacy Inquiries

For any questions, requests, or concerns regarding this Privacy Policy or our data processing practices, please do not hesitate to reach out to us using the following contact details:

We are dedicated to protecting your privacy and will make every effort to respond to your inquiries promptly and professionally. Our privacy team is available during regular business hours, and we aim to acknowledge all privacy-related correspondence within 5 business days.