Privacy Policy

Welcome to Costa Vida. This Privacy Policy explains how Costa Vida ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects your personal information when you visit our website at vida-costas.top, place food orders, use our services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data in a transparent, fair, and lawful manner in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act).

By accessing or using our website, placing an order, or otherwise engaging with our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please refrain from using our website and services.

We encourage you to read this document carefully. If you have any questions or concerns, please contact us using the information provided at the end of this policy.

1. About Us

Costa Vida is a food service business operating through the website vida-costas.top. We provide food-related products and services to customers in the United States. For privacy-related inquiries, you may contact us at:

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected by Costa Vida through the following channels:

• Our website located at vida-costas.top
• Online food ordering systems and checkout processes
• Email communications and customer support interactions
• Marketing campaigns, newsletters, and promotional programs
• Social media platforms where we maintain a presence
• Any other services or features we offer

This policy does not apply to third-party websites, services, or applications that may be linked from our website. We encourage you to review the privacy policies of any third-party sites you visit.

3. Information We Collect

We collect various categories of personal information to provide, improve, and personalize our food services. The types of information we collect include:

3.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and shipping address (including city, state, and ZIP code)
• Account username and password (stored in encrypted form)
• Date of birth (where applicable, to verify age eligibility)
• Profile photo (if voluntarily provided)

3.2 Order and Transaction Information

When you make a purchase or place a food order, we collect:

• Order details, including items selected, quantities, and special instructions
• Payment information (credit/debit card number, expiration date, billing address — note: full card details are processed by our secure payment processors and are not stored on our servers)
• Order history and transaction records
• Delivery preferences and instructions
• Gift card or promotional code usage

3.3 Usage and Activity Data

When you browse or interact with our website, we automatically collect:

• IP address
• Browser type and version
• Operating system and device type
• Pages visited and time spent on each page
• Referring URL (the site you came from before visiting us)
• Links clicked and features used
• Search queries entered on our site
• Time and date of visits
• Session duration

3.4 Device Information

We may collect the following information about the device you use to access our services:

• Device identifiers (such as mobile advertising IDs)
• Hardware model
• Mobile network information
• Screen resolution and display settings
• Language preferences
• Location data (if you grant permission — used for delivery purposes or finding nearby locations)

3.5 Cookie and Tracking Data

We use cookies and similar tracking technologies (such as web beacons and pixel tags) to collect information about your browsing behavior on our website. For full details, please refer to Section 9 (Cookie Usage) of this policy.

3.6 Communications Data

When you contact our customer support team, submit feedback, or participate in surveys, we collect:

• The content of your messages and correspondence
• Your contact details as provided in your message
• Records of interactions with our support team
• Survey responses and feedback submissions

3.7 Marketing and Preference Data

We may also collect information about your preferences, including:

• Food preferences and dietary restrictions (if voluntarily shared)
• Marketing communication preferences (opt-in or opt-out status)
• Loyalty program participation and rewards data
• Social media interactions and engagement with our content

3.8 Information from Third Parties

We may also receive personal information about you from third parties, including:

• Social media platforms (when you choose to log in using a social account)
• Payment processors and financial institutions
• Delivery partners and logistics providers
• Analytics and advertising partners
• Publicly available sources

4. How We Use Your Information

Costa Vida uses the personal information we collect for a variety of legitimate business purposes. Below is a detailed breakdown of how we use your data:

4.1 Service Provision and Order Fulfillment

• Processing and completing your food orders
• Arranging delivery or pickup as requested
• Sending order confirmations, receipts, and status updates
• Managing your account and preferences
• Communicating with you about your orders and addressing any issues

4.2 Customer Support

• Responding to your inquiries, questions, and complaints
• Resolving disputes and troubleshooting problems
• Providing technical assistance related to our website or services

4.3 Analytics and Service Improvement

• Analyzing how customers use our website and services
• Identifying trends and preferences to improve our food offerings
• Testing new features and functionality
• Monitoring website performance and diagnosing technical issues
• Generating aggregated and anonymized statistical reports

4.4 Marketing and Promotional Communications

• Sending newsletters, promotional offers, and special deals (with your consent where required)
• Informing you about new menu items, seasonal specials, or limited-time offers
• Personalizing marketing content based on your preferences and order history
• Running loyalty programs, contests, and sweepstakes
• Serving targeted advertisements through third-party platforms

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send, by contacting us at [email protected], or by updating your account preferences.

4.5 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities or law enforcement
• Preventing fraud, unauthorized access, and other illegal activities
• Enforcing our Terms of Service and other policies
• Protecting the rights, property, and safety of Costa Vida, our customers, and the public

4.6 Payment Processing and Fraud Prevention

• Verifying payment details and processing transactions securely
• Detecting and preventing fraudulent orders and chargebacks
• Complying with payment card industry (PCI-DSS) standards

5. Sharing Your Information with Third Parties

Costa Vida does not sell your personal information to third parties for monetary compensation. However, we may share your personal data with certain third parties under the following circumstances:

5.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our business. These providers are contractually obligated to protect your data and may only use it for the specific services they provide to us. Categories of service providers include:

• Payment processors: To securely handle payment card transactions
• Delivery and logistics partners: To fulfill your food orders
• Cloud hosting and IT providers: To store and manage our data infrastructure
• Email and communication platforms: To send order confirmations and marketing messages
• Analytics providers: Such as Google Analytics, to help us understand website usage
• Customer support platforms: To manage support tickets and communications
• Marketing and advertising networks: To serve targeted advertisements

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required to do so by law or in good-faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, or subpoena
• Respond to requests from government or regulatory authorities
• Protect the rights, property, or safety of Costa Vida, our users, or the public
• Investigate and prevent fraud, security breaches, or illegal activities

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with other third parties when you have given us your explicit consent to do so.

5.5 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with partners, advertisers, researchers, or other third parties for business, marketing, or analytical purposes.

6. Data Security

Costa Vida takes the security of your personal information seriously. We implement a variety of industry-standard technical, administrative, and physical security measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

6.1 Technical Safeguards

• SSL/TLS encryption for all data transmitted between your browser and our website
• Encryption of sensitive data at rest (such as passwords and payment details)
• Secure firewalls and intrusion detection systems
• Regular security audits and vulnerability assessments
• Multi-factor authentication for access to sensitive systems

6.2 Administrative Safeguards

• Restricting access to personal data to authorized employees on a need-to-know basis
• Regular employee training on data privacy and security practices
• Confidentiality agreements with employees and contractors
• Vendor due diligence and data processing agreements with third-party service providers

6.3 Physical Safeguards

• Secure access controls to physical facilities where data is stored or processed
• Monitoring and logging of access to data systems

In the event of a data breach that affects your personal information, we will notify you in accordance with applicable United States federal and state data breach notification laws, including the requirements of the FTC Act and relevant state breach notification statutes.

7. Your Rights and Choices

Depending on your state of residence, you may have certain rights with respect to your personal information. Costa Vida respects and supports these rights and will respond to verifiable requests in accordance with applicable law.

7.1 Right to Know and Access

You have the right to request information about the categories and specific pieces of personal information we have collected about you, the purposes for which we use it, and the categories of third parties with whom we share it. Upon a verified request, we will provide this information free of charge, up to twice per year.

7.2 Right to Correction

You have the right to request that we correct inaccurate personal information that we hold about you. We will use commercially reasonable efforts to honor such requests, subject to verification of your identity and any applicable legal requirements.

7.3 Right to Deletion

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions, including where the information is necessary to:

• Complete a transaction or fulfill an ongoing service
• Detect and prevent security incidents or fraud
• Comply with a legal obligation
• Exercise rights of free speech or other legal rights
• Enable internal uses reasonably aligned with your expectations

7.4 Right to Data Portability

You have the right to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format, and to have this information transferred to another controller where technically feasible.

7.5 Right to Opt Out of Sale or Sharing (California Residents — CCPA/CPRA)

California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising purposes. Costa Vida does not sell personal information in the traditional sense; however, if we engage in any data practices that could be considered "sharing" under the CPRA, California residents may opt out by contacting us at [email protected] or by using the "Do Not Sell or Share My Personal Information" link on our website.

7.6 Right to Limit Use of Sensitive Personal Information (California Residents)

California residents have the right to limit our use and disclosure of sensitive personal information to only those purposes necessary to provide the requested services.

7.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you goods or services, charge you a different price, or provide you with a different level or quality of service because you exercised your rights under applicable privacy laws.

7.8 How to Submit a Privacy Rights Request

To exercise any of your rights, you may contact us by:

• Email: [email protected] (include "Privacy Rights Request" in the subject line)

We will acknowledge receipt of your request within 10 business days and respond within 45 calendar days. If we require additional time, we will notify you and may extend the response period by an additional 45 days, as permitted by law. We will need to verify your identity before processing your request. Verification may involve confirming your email address, account credentials, or providing additional identifying information.

You may designate an authorized agent to submit a request on your behalf, provided that the agent provides proof of authorization and we can verify your identity.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The following general retention periods apply:

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data disposal procedures.

9. Cookie Usage

Our website at vida-costas.top uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content and advertisements. Cookies are small text files that are stored on your device when you visit our website.

9.1 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly. These enable core features such as shopping cart functionality, user authentication, and security. These cookies cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting information about pages visited, time spent, and errors encountered. We use tools such as Google Analytics for this purpose.
• Functionality Cookies: Remember your preferences and settings (such as language, location, and saved addresses) to provide a more personalized experience.
• Targeting and Advertising Cookies: Used to deliver advertisements relevant to your interests and track the effectiveness of our marketing campaigns.

9.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications when cookies are placed. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders.

You may also opt out of interest-based advertising by visiting the Network Advertising Initiative (NAI) Opt-Out Tool or the Digital Advertising Alliance (DAA) Opt-Out Page.

For more detailed information about the specific cookies we use, their purposes, and duration, please refer to our full Cookie Policy, available on our website.

10. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. Costa Vida does not knowingly collect, solicit, or process personal information from children under the age of 13 (or 16 in states where applicable law requires a higher age threshold for consent).

If you are a parent or legal guardian and believe that your child has provided personal information to us without your consent, please contact us immediately at [email protected]. Upon receiving such a request and verifying your identity, we will promptly delete the child's personal information from our systems to the extent technically possible.

We comply with the Children's Online Privacy Protection Act (COPPA) and all applicable federal and state laws relating to the privacy of minors.

11. International Data Transfers

Costa Vida is based in the United States, and your personal information is primarily stored and processed on servers located within the United States. However, in the course of operating our business, your personal information may be transferred to, stored, or processed in countries outside of the United States, including countries where our third-party service providers operate.

Please be aware that data protection laws in other countries may differ from those in the United States and may not provide the same level of protection. When we transfer personal data internationally, we take appropriate safeguards to ensure that your information remains protected in accordance with this Privacy Policy and applicable law, including:

• Entering into data processing agreements with third-party service providers that incorporate standard contractual clauses or equivalent safeguards
• Using service providers that are certified under recognized data protection frameworks
• Applying encryption and other security measures to data during transit and at rest

By using our services, you acknowledge and consent to the transfer of your personal information to the United States and other countries as described in this section.

12. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your browsing activity tracked. Currently, our website does not respond to DNT signals from browsers because no universal standard for how such signals should be interpreted has been adopted by the industry. We will continue to monitor developments in this area and update our practices accordingly.

In the meantime, you can manage your tracking preferences through our cookie settings and by using the opt-out tools referenced in Section 9.

13. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or services that are not owned or controlled by Costa Vida. This Privacy Policy applies only to information collected by our website and services. We are not responsible for the privacy practices of third-party websites or services, and we strongly encourage you to review the privacy policies of any third-party sites you visit.

The inclusion of any link on our website does not imply our endorsement of the linked site or its content, products, or services.

14. California-Specific Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023. These rights are in addition to the general rights described in Section 7 and include:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom the information is shared.
• Right to Delete: You may request deletion of personal information we have collected from you, subject to applicable exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: You may direct us not to sell or share your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You may limit how we use and disclose your sensitive personal information.
• Right to Non-Discrimination: We will not treat you differently for exercising your CCPA/CPRA rights.

California residents may submit requests by contacting us at [email protected]. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

15. State-Specific Privacy Rights

In addition to California residents, residents of other states may have privacy rights under their respective state laws. If you reside in Colorado, Connecticut, Virginia, Texas, Florida, or another state with a comprehensive consumer privacy law, you may have similar rights to access, correct, delete, and opt out of certain data practices. Please contact us at [email protected] to exercise any rights you may have under your state's privacy law, and we will respond in accordance with applicable requirements.

16. How to File a Complaint

If you believe that your privacy rights have been violated or that we have not handled your personal information in accordance with applicable law, we encourage you to contact us first so that we can attempt to resolve your concern:

• Email: [email protected]

We take all privacy complaints seriously and will respond to your concern within a reasonable timeframe.

If you are not satisfied with our response, or if you believe we are processing your personal information in violation of applicable law, you may file a complaint with the appropriate authority:

16.1 Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) enforces federal consumer protection laws, including privacy-related regulations under the FTC Act. You may file a complaint with the FTC at:

• Website: ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Mail: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

16.2 California Privacy Protection Agency (CPPA) — California Residents

California residents may file complaints with the California Privacy Protection Agency (CPPA), which is responsible for enforcing the CCPA/CPRA:

• Website: cppa.ca.gov
• Email: [email protected]

16.3 Your State Attorney General

Residents of other states may file privacy-related complaints with their state Attorney General's office. Contact information for each state's Attorney General can typically be found on your state government's official website.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or the services we offer. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy prominently on our website at vida-costas.top
• Notify you via email (at the address associated with your account) if the changes are significant

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us:

When contacting us regarding a privacy matter, please include the following information to help us respond efficiently:

• Your full name
• Your email address or account username
• A clear description of your inquiry or request
• The specific right you wish to exercise (if applicable)
• Your state of residence (to determine applicable rights)

This Privacy Policy was last reviewed and updated on March 18, 2026, and is effective as of that date.