Privacy Policy

1. Introduction

At Pollo Campero, we are committed to protecting your privacy and maintaining the trust you place in us when using our food ordering services. This comprehensive privacy policy explains how we collect, use, protect, and share your personal information when you visit our website, place orders, dine in our restaurants, or interact with our services.

This policy applies to all information collected through our website at pollo-campero.top, mobile applications, in-store interactions, delivery services, catering bookings, and any other touchpoints where you interact with Pollo Campero. By using our services, creating an account, placing orders, or providing us with your information, you agree to the collection, use, and sharing of your information as described in this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our services:

• Personal Identification: Name, email address, phone number, billing and delivery addresses, date of birth
• Account Information: Username, password, account preferences, profile picture, communication preferences
• Order Information: Food items ordered, order history, dietary preferences, allergen information, special dietary requirements (vegan, halal, kosher, gluten-free)
• Payment Information: Credit card details, billing information (stored securely through encrypted payment processors)
• Delivery Details: Delivery addresses, special delivery instructions, preferred delivery times
• Reservation Information: Table reservation details, party size, special occasion notes, seating preferences
• Catering Details: Event information, guest count, menu selections, dietary restrictions for groups
• Communication Records: Contact form submissions, customer support interactions, feedback, reviews, and ratings
• Marketing Preferences: Newsletter subscriptions, promotional offers consent, communication channel preferences
• Loyalty Program Data: Rewards points, tier status, redemption history, favorite orders

2.2 Automatically Collected Information

When you visit our website or use our services, we automatically collect certain technical information:

• Device Information: IP address, browser type and version, operating system, device identifiers, screen resolution
• Usage Data: Pages visited, time spent on site, click patterns, search queries, menu items viewed, order completion rates
• Location Data: Approximate location from IP address, precise location (with permission) for delivery services
• Cookie Data: Session identifiers, user preferences, shopping cart contents, authentication tokens
• Performance Data: Page load times, error reports, feature usage analytics

2.3 Information from Third Parties

We may receive information about you from third-party sources:

• Social Media: Profile information when you connect social media accounts to our services
• Payment Processors: Transaction verification and fraud prevention data
• Delivery Partners: Delivery status updates, driver information, delivery confirmation
• Marketing Partners: Campaign performance data, audience insights (anonymized)
• Review Platforms: Public reviews and ratings you post about our restaurants

3. How We Use Your Information

3.1 Service Provision

We use your information to provide and improve our food services:

• Order Processing: Confirming orders, preparing food according to your specifications, managing dietary restrictions and allergen requirements
• Delivery Management: Coordinating delivery logistics, tracking orders, communicating with delivery drivers
• Account Management: Creating and maintaining your account, authenticating logins, managing preferences
• Reservation Services: Processing table bookings, managing restaurant capacity, accommodating special requests
• Customer Support: Responding to inquiries, resolving order issues, handling complaints and feedback
• Quality Improvement: Analyzing order patterns, optimizing menu offerings, improving service efficiency

3.2 Communication

We communicate with you for service and marketing purposes:

• Transactional Communications: Order confirmations, preparation updates, delivery notifications, receipt delivery
• Customer Service: Support responses, issue resolution updates, satisfaction surveys
• Important Notices: Policy changes, service updates, security alerts, account notifications
• Marketing Communications: Promotional offers, new menu items, seasonal specials, loyalty program updates (only with your consent)

3.3 Marketing and Analytics

With your consent, we use information for marketing and business intelligence:

• Personalized Marketing: Customized offers based on order history, targeted promotions, personalized menu recommendations
• Website Analytics: Understanding user behavior, optimizing website performance, improving user experience
• Campaign Measurement: Measuring marketing campaign effectiveness, analyzing customer engagement, ROI assessment
• Market Research: Identifying food trends, developing new menu items, understanding customer preferences

3.4 Legal Compliance

We may use your information to comply with legal requirements:

• Legal Requests: Responding to court orders, subpoenas, and law enforcement requests
• Fraud Prevention: Detecting and preventing fraudulent transactions, protecting against unauthorized access
• Safety Protection: Protecting the rights, property, and safety of our customers, employees, and business
• Regulatory Compliance: Meeting food safety requirements, tax obligations, business licensing requirements

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Payment Processors: Secure transaction processing, fraud detection, payment verification (e.g., Stripe, PayPal)
• Delivery Services: Order fulfillment, delivery tracking, driver coordination (e.g., DoorDash, Uber Eats)
• Cloud Storage Providers: Secure data storage, backup services, server hosting (e.g., Amazon Web Services, Google Cloud)
• Email Services: Marketing campaigns, transactional emails, newsletter delivery (e.g., Mailchimp, SendGrid)
• Analytics Tools: Website performance analysis, user behavior insights, conversion tracking (e.g., Google Analytics)
• Customer Support: Help desk services, live chat support, ticket management systems

4.2 Legal Requirements

We may disclose information when required by law:

• Court Orders: Responding to valid legal processes, subpoenas, and court orders
• Law Enforcement: Cooperating with police investigations, regulatory inquiries
• Public Safety: Preventing harm to individuals, protecting public health and safety
• Emergency Situations: Responding to medical emergencies, safety threats

4.3 Business Transfers

In the event of business changes:

• Mergers and Acquisitions: Information may be transferred as part of business transactions
• Asset Sales: Data may be included in the sale of business assets
• Customer Notification: We will notify customers before any transfer of their information
• Privacy Protection: New owners will be required to honor existing privacy commitments

4.4 With Your Consent

We may share information for other purposes with your explicit consent, such as:

• Sharing reviews or testimonials (with your permission)
• Participating in marketing campaigns or promotions
• Collaborating with partner businesses for special offers

5. Data Security

5.1 Technical Measures

We implement robust technical security measures to protect your information:

• Encryption: SSL/TLS encryption for all data transmission, AES-256 encryption for stored data
• Firewall Protection: Advanced firewall systems to prevent unauthorized network access
• Access Controls: Role-based access control, minimum necessary access principles, multi-factor authentication
• Monitoring: 24/7 security monitoring, intrusion detection systems, automated threat response
• Data Backup: Regular automated backups, disaster recovery procedures, data redundancy
• Vulnerability Management: Regular security assessments, penetration testing, patch management

5.2 Organizational Measures

Our organizational security practices include:

• Employee Training: Regular security awareness training, privacy protection education, phishing simulation
• Data Handling Procedures: Documented processes for data collection, processing, and deletion
• Third-Party Agreements: Confidentiality agreements with all service providers, security requirement compliance
• Incident Response: Comprehensive security incident response plan, breach notification procedures
• Compliance Audits: Regular internal and external security audits, compliance assessments

5.3 Your Security Responsibilities

You can help protect your account by:

• Strong Passwords: Using complex, unique passwords for your account
• Password Protection: Never sharing your password with others
• Secure Logout: Logging out from public or shared computers
• Phishing Awareness: Being cautious of suspicious emails or links claiming to be from us
• Prompt Reporting: Immediately reporting any unauthorized account access or suspicious activity

6. Cookies and Tracking Technologies

We use various cookies and tracking technologies to enhance your experience and analyze website usage:

Cookie Type	Purpose	Duration
Essential Cookies	Basic site functions, login state, shopping cart, security	Session
Functional Cookies	User preferences, language settings, customization	Up to 1 year
Analytics Cookies	Usage analysis, performance monitoring, site improvement	Up to 2 years
Marketing Cookies	Personalized advertising, campaign measurement, retargeting	Up to 1 year

Tracking Technologies Used

• Google Analytics: Website traffic analysis, user behavior insights, conversion tracking
• Facebook Pixel: Advertising campaign measurement, custom audience creation
• Web Beacons: Email open rate tracking, engagement measurement
• Local Storage: Browser data storage for improved performance and user experience

Cookie Management

You can manage cookies through your browser settings to accept, reject, or delete cookies. Please note that disabling certain cookies may affect website functionality, such as the ability to maintain your shopping cart or stay logged in.

7. Your Rights (GDPR/CCPA Compliance)

You have several rights regarding your personal information:

7.1 Right of Access

You have the right to request and receive a copy of the personal information we hold about you, including order history, account details, and preference settings.

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information, including updating your contact details, delivery addresses, or dietary preferences.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information, subject to legal requirements for record keeping (such as tax and accounting obligations).

7.4 Right to Restrict Processing

You can request that we limit how we use your personal information while we address any concerns or disputes you may have.

7.5 Right to Data Portability

You have the right to receive your personal information in a machine-readable format and to transfer it to another service provider.

7.6 Right to Object

You can object to the processing of your personal information, particularly for marketing purposes or when processing is based on legitimate interests.

7.7 Right Against Automated Decision-Making

You have the right not to be subject to automated decisions that significantly affect you, including profiling for marketing purposes.

How to Exercise Your Rights

To exercise any of these rights, contact us using the information provided in the Contact section. We will respond to your request within 30 days and may request verification of your identity to protect your privacy.

8. Children's Privacy

Protecting children's privacy is important to us:

• Age Restriction: Our services are not intended for children under 16 years of age
• No Intentional Collection: We do not knowingly collect personal information from children under 16
• Parental Notice: If you are a parent and believe your child has provided us with personal information, please contact us immediately
• Prompt Deletion: We will promptly delete any personal information from children under 16 that we may have inadvertently collected

9. International Data Transfers

9.1 Protection Measures

When we transfer your information internationally, we ensure appropriate protections:

• Adequacy Decisions: Transfers to countries with adequate data protection laws as recognized by relevant authorities
• Standard Contractual Clauses: Using EU-approved standard contractual clauses for transfers to countries without adequacy decisions
• Data Processing Agreements: Comprehensive agreements with international service providers
• Security Measures: Appropriate technical and organizational security measures
• Regular Audits: Ongoing compliance monitoring and assessment

9.2 Transfer Destinations

Your information may be transferred to and processed in:

• United States: Cloud storage, payment processing, analytics services
• European Union: Data analytics, customer support services
• Other Countries: As needed for service provision, always with appropriate protection measures

10. Data Retention Periods

We retain your information for different periods based on the type of data and legal requirements:

Information Type	Retention Period	Reason
Account Information	6 months after account deletion	Legal obligations, dispute resolution
Order History	7 years	Tax and accounting requirements
Payment Information	3 months after transaction	Fraud prevention, dispute resolution
Marketing Consent	3 months after withdrawal	Consent record keeping
Website Usage Logs	Up to 2 years	Security analysis, website improvement
Customer Support Records	3 years	Service quality improvement
Loyalty Program Data	2 years after account closure	Program administration, tax reporting

Safe Data Disposal

When data reaches the end of its retention period, we securely dispose of it through:

• Electronic Deletion: Complete and unrecoverable deletion from all systems and backups
• Physical Destruction: Secure shredding of physical records and storage devices
• Verification: Confirmation that data has been completely removed
• Documentation: Maintaining records of data disposal for compliance purposes

11. Third-Party Links

Our website and services may contain links to external websites and services:

• External Links: Our site may include links to delivery partners, payment processors, social media platforms, and other third-party services
• No Responsibility: We are not responsible for the privacy practices or content of these third-party websites
• Review Policies: We encourage you to review the privacy policies of any third-party sites you visit
• Your Choice: Use of third-party services is at your own discretion and risk

12. Policy Changes

12.1 Change Notification

When we update this privacy policy, we will notify you through:

• Website Notice: Prominent banner notification on our website
• Email Notification: Direct email to all registered users
• Account Dashboard: Pop-up notification when you log into your account
• Consent Requirements: Explicit consent may be required for significant changes

12.2 Checking for Changes

Stay informed about policy updates by:

• Regular Review: The most current version is always available on our website
• Date Check: Check the "Last Updated" date at the top of this policy
• Continued Use: Continued use of our services after changes indicates acceptance
• Opt-Out Option: You may discontinue using our services if you disagree with changes

13. Contact Information

13.1 Complaints Process

If you have concerns about our privacy practices:

1. Contact Us First: Please reach out to us using the contact information above for prompt resolution
2. Escalation: If you are not satisfied with our response, you may contact the relevant supervisory authority
3. Regulatory Contact: For US residents, you may contact your state's Attorney General's office or the Federal Trade Commission

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal

You can withdraw consent for marketing communications at any time:

• Email Unsubscribe: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your account dashboard
• Customer Support: Contact our customer support team for assistance
• Phone Opt-Out: Request removal from phone marketing lists

14.2 Account Deletion

To delete your account and personal information:

1. Account Dashboard: Use the account deletion option in your settings
2. Email Request: Send a deletion request to our customer support email
3. Identity Verification: We may require verification to protect your privacy
4. Retained Data: Some information may be retained for legal compliance as outlined in our retention policy

15. Conclusion

At Pollo Campero, we are committed to protecting your privacy and maintaining your trust. This privacy policy reflects our dedication to transparency about how we collect, use, and protect your personal information as we serve you authentic Guatemalan cuisine.

Your privacy is fundamental to our relationship with you. We continuously review and update our privacy practices to ensure they meet the highest standards and comply with applicable laws and regulations. We believe that by being transparent about our practices, we can build lasting trust with our customers.

We encourage you to contact us with any questions, concerns, or suggestions about this privacy policy or our privacy practices. Your feedback helps us improve our services and better protect your privacy.

Thank you for choosing Pollo Campero for your dining needs. We appreciate your trust and look forward to serving you delicious, authentic food while protecting your privacy.

Remember to check this page periodically for updates, as indicated by the "Last Updated" date at the top of this policy.