Privacy Policy

This Privacy Policy explains how Giordanos ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website giordanos-new.click, place an order, or otherwise interact with our services. We are committed to protecting your privacy and handling your data in a transparent, lawful, and responsible manner.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please discontinue use of our website and services immediately.

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will revise the "Last Updated" date at the top of this page. We encourage you to review this page periodically to stay informed about how we are protecting your information.

1. About Us

Giordanos is a food business operating in the United States. We are committed to serving our customers with high-quality food products and maintaining the highest standards of customer privacy and data security.

For all privacy-related inquiries, questions, or requests, please contact us at the email address listed above. We are dedicated to responding to all privacy-related communications in a timely and thorough manner.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information we collect through the following channels:

• Our website at giordanos-new.click
• Online ordering and reservation systems
• Email communications and newsletter subscriptions
• Customer loyalty and rewards programs
• Social media interactions and platforms
• Customer support communications
• In-store interactions where digital records are created
• Any other services we provide that link to this Privacy Policy

This policy does not apply to third-party websites, applications, or services that may be linked from our website. We are not responsible for the privacy practices of those third parties, and we encourage you to review their respective privacy policies before providing any personal information.

3. Information We Collect

We collect various categories of information to provide and improve our services. The types of information we collect are described below:

3.1 Personal Identification Information

When you interact with our website or place an order, we may collect the following personally identifiable information:

• Full name — used to identify you and personalize your experience
• Email address — used for order confirmations, receipts, marketing communications, and account management
• Phone number — used for order updates, delivery notifications, and customer support
• Billing and shipping address — used to process and deliver your orders
• Date of birth — used for age verification and personalized offers (where applicable)
• Username and password — used to manage your account securely
• Profile photo — if you choose to upload one to your account

3.2 Financial and Payment Information

When you make a purchase, we collect payment-related information necessary to process your transaction. This includes:

• Credit card or debit card type and last four digits
• Billing address associated with your payment method
• Transaction history and order amounts

3.3 Order and Transaction Information

We collect information related to your food orders and transactions, including:

• Items ordered, customizations, and special instructions
• Order history and frequency
• Delivery or pickup preferences
• Promotional codes and discounts applied
• Loyalty points earned and redeemed

3.4 Usage Data and Website Activity

We automatically collect certain technical and usage information when you visit our website, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type
• Pages visited, time spent on pages, and navigation paths
• Referring URLs and exit pages
• Search terms used on our website
• Time and date of your visits
• Clickstream data and interaction patterns

3.5 Device Information

We may collect information about the devices you use to access our services, including:

• Device identifiers (such as mobile advertising IDs)
• Hardware model and screen resolution
• Mobile network information
• Operating system version
• App version (if applicable)

3.6 Communications and Feedback

When you contact us or leave reviews, we collect:

• Customer service inquiries and correspondence
• Survey responses and feedback
• Reviews, ratings, and testimonials you submit
• Social media messages and comments directed at us

3.7 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you connect your account or log in via social media)
• Third-party delivery partners and logistics providers
• Marketing and analytics partners
• Publicly available databases

3.8 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. For detailed information about our use of cookies, please refer to Section 9 of this Privacy Policy.

4. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes, as outlined below:

4.1 Providing and Managing Our Services

• Processing and fulfilling your food orders and transactions
• Creating and managing your customer account
• Facilitating delivery or pickup of your orders
• Processing payments and managing billing
• Providing customer support and responding to your inquiries
• Managing loyalty and rewards programs

4.2 Communications

• Sending order confirmations, receipts, and status updates
• Notifying you of changes to our menu, services, or policies
• Responding to your questions and support requests
• Sending promotional emails, newsletters, and special offers (where you have consented or as permitted by law)
• Alerting you to relevant promotions based on your order history

4.3 Analytics and Service Improvement

• Analyzing website traffic and usage patterns to improve our platform
• Understanding customer preferences and behavior
• Conducting market research and surveys
• Developing new products, menu items, and features
• Monitoring and improving website performance and functionality
• Testing new features and optimizing user experience

4.4 Marketing and Personalization

• Personalizing your website experience based on your preferences
• Displaying targeted advertisements on our website and third-party platforms
• Recommending menu items based on your order history
• Conducting promotional campaigns and contests
• Measuring the effectiveness of our marketing efforts

4.5 Legal and Security Purposes

• Complying with applicable laws, regulations, and legal obligations
• Preventing fraud, unauthorized access, and other illegal activities
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of our customers, employees, and others
• Responding to legal process, court orders, and government requests
• Maintaining accurate business records

4.6 Legal Basis for Processing (Where Applicable)

Where required by law, we process your personal information on the following legal bases:

• Contractual necessity — to fulfill our obligations to you when you place an order
• Legitimate interests — to operate, improve, and protect our business
• Legal obligation — to comply with applicable laws and regulations
• Consent — where you have given us explicit permission (e.g., marketing emails)

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own marketing purposes. However, we may share your information with trusted third parties under the following circumstances:

5.1 Service Providers and Business Partners

We share information with third-party service providers who assist us in operating our business and delivering services to you. These providers are contractually obligated to protect your information and may only use it for specified purposes. Categories of service providers include:

• Payment processors — to securely process your transactions (e.g., Stripe, Square, PayPal)
• Delivery and logistics partners — to fulfill food delivery orders
• Cloud hosting providers — to store and manage our data securely
• Email service providers — to send transactional and marketing emails
• Analytics providers — to analyze website traffic and user behavior (e.g., Google Analytics)
• Customer support platforms — to manage customer inquiries and tickets
• Marketing platforms — to manage advertising campaigns and loyalty programs

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with applicable federal, state, or local laws and regulations
• Respond to valid legal process, including subpoenas, court orders, or government requests
• Protect the rights, property, or safety of Giordanos, our customers, or the public
• Investigate, prevent, or take action against suspected fraud, illegal activities, or violations of our Terms of Service
• Cooperate with law enforcement agencies as required

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, reorganization, or other business transaction, your personal information may be transferred to the successor entity. We will notify you via email or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with third parties in other circumstances when you have given us explicit consent to do so.

5.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analysis, and marketing purposes.

6. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, and destruction.

6.1 Security Measures We Implement

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Access controls: We restrict access to personal information to authorized employees and contractors who need it to perform their job functions.
• Password protection: User accounts are protected with hashed and salted passwords. We recommend using strong, unique passwords.
• PCI-DSS compliance: Our payment processing systems comply with Payment Card Industry Data Security Standards.
• Regular security assessments: We conduct periodic security reviews and vulnerability assessments of our systems.
• Data minimization: We only collect and retain the personal information necessary for specified purposes.
• Employee training: Our staff receives regular training on data privacy and security best practices.
• Incident response procedures: We have established procedures for detecting, reporting, and responding to data breaches.

6.2 Limitation of Security Guarantees

6.3 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law, including applicable state breach notification laws. We will provide timely notification containing information about the nature of the breach, the data affected, and steps you can take to protect yourself.

7. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information. We are committed to honoring these rights and will respond to verified requests within legally required timeframes.

7.1 Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions.
• Right to Opt-Out of Marketing: You can opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.

7.2 California Residents — CCPA/CPRA Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023:

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell about you.
• Right to Delete: You have the right to request deletion of your personal information, with certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit how we use and disclose sensitive personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To exercise your California privacy rights, please contact us at [email protected]. We will verify your identity before processing your request and respond within 45 days, with the possibility of a 45-day extension when reasonably necessary.

7.3 Other State Privacy Laws

Residents of other states, including Virginia (CDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Texas (TDPSA), among others, may also have specific privacy rights. We are committed to complying with applicable state privacy laws and will honor legitimate privacy requests from residents of these states. Please contact us to exercise any applicable rights.

7.4 How to Submit a Privacy Rights Request

To exercise any of your privacy rights, please submit a verifiable request to us by:

• Email: [email protected]
• Website: giordanos-new.click

Your request must include sufficient information for us to verify your identity and understand the nature of your request. We may ask you to provide additional verification information. We will respond to verifiable requests within 45 days, or within the timeframe required by applicable law.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

When personal information is no longer required, we will securely delete, anonymize, or destroy it in accordance with our data retention and disposal procedures. You may request early deletion of your data, subject to our legal and contractual obligations.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website, analyze usage patterns, and deliver relevant advertising. This section provides a brief overview of our cookie practices.

9.1 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the website to function properly and cannot be disabled. They enable core functionality such as security, account management, and order processing.
• Performance and Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting anonymous usage data. We use tools such as Google Analytics for this purpose.
• Functionality Cookies: These cookies remember your preferences (such as your saved cart items, language preference, and location) to provide a more personalized experience.
• Marketing and Advertising Cookies: These cookies track your browsing activity to deliver targeted advertisements on our website and third-party platforms. They may be set by our advertising partners.

9.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when a new cookie is placed. Please note that disabling certain cookies may impact the functionality of our website and your ability to place orders.

You may also opt out of interest-based advertising through the Digital Advertising Alliance (DAA) at optout.aboutads.info or the Network Advertising Initiative (NAI) at optout.networkadvertising.org.

For more detailed information about the specific cookies we use, their purposes, and how to manage them, please refer to our full Cookie Policy available on our website.

10. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13 in violation of the Children's Online Privacy Protection Act (COPPA), or from minors under 18 without parental consent where required by law.

If we become aware that we have inadvertently collected personal information from a child under the age of 13, we will take immediate steps to delete that information from our systems. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. We will investigate and take prompt action to address the situation.

11. International Data Transfers

Giordanos is based in the United States, and your personal information is primarily collected, stored, and processed in the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your home country.

11.1 Transfer Mechanisms

When we transfer personal information internationally, we implement appropriate safeguards to ensure your data receives an adequate level of protection, including:

• Contractual clauses that comply with applicable data protection requirements
• Ensuring our service providers maintain appropriate security standards
• Relying on recognized legal transfer mechanisms where applicable

11.2 Cross-Border Transfers and Your Consent

By using our website and services and providing us with your personal information, you acknowledge and consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy. If you have questions about our international data transfer practices, please contact us at [email protected].

12. Do Not Track Signals

Some web browsers may transmit "Do Not Track" (DNT) signals to websites. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, our website does not currently alter its data collection or usage practices in response to DNT signals received from browsers. We will continue to monitor developments in this area and update our practices accordingly.

California residents may also refer to California Business and Professions Code Section 22575(b), which requires us to disclose whether we honor DNT signals. At this time, we do not respond to browser-initiated DNT signals.

13. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, and online services that are not operated or controlled by Giordanos. This Privacy Policy does not apply to those third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit, as we have no control over their content, privacy practices, or data handling procedures.

Examples of third-party services that may be accessible from our website include:

• Social media platforms (Facebook, Instagram, Twitter/X, TikTok)
• Third-party food delivery platforms
• Online payment processors
• Review and rating platforms
• Mapping and navigation services

We are not responsible for any information you provide to third parties while using our website or services, and we disclaim all liability arising from such interactions.

14. Marketing Communications and Opt-Out

We may send you promotional emails, newsletters, and special offers from time to time. These communications are sent either because you have opted in during account creation or order placement, or because we have a legitimate interest in communicating with existing customers about relevant products and services.

14.1 How to Opt Out

You may opt out of receiving marketing communications from us at any time by:

• Clicking the "Unsubscribe" link included in any marketing email
• Logging into your account and updating your communication preferences
• Contacting us directly at [email protected]

Please note that even if you opt out of marketing communications, you will continue to receive transactional messages related to your orders, account activity, and important service updates. These messages are necessary for the operation of our services and cannot be opted out of while you maintain an active account.

15. How to File a Complaint with a Data Protection Authority

If you are a California resident and believe that we have violated your privacy rights under the CCPA/CPRA, you have the right to file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office.

15.1 California Privacy Protection Agency (CPPA)

• Website: cppa.ca.gov
• Address: 2101 Arena Boulevard, Sacramento, CA 95834

15.2 California Attorney General's Office

• Website: oag.ca.gov
• Phone: (800) 952-5225

15.3 Federal Trade Commission (FTC)

If you believe we have engaged in unfair or deceptive practices, you may file a complaint with the Federal Trade Commission (FTC) under the FTC Act:

• Website: reportfraud.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)

15.4 Other State Authorities

Residents of other states may contact their respective state attorney general's office or consumer protection authority to file privacy-related complaints. We encourage you to seek guidance from your local consumer protection resources.

Before filing a complaint with any regulatory authority, we encourage you to contact us first so we have the opportunity to resolve your concerns directly and promptly.

16. Changes to This Privacy Policy

We reserve the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our practices, applicable laws, or business operations. When we make material changes to this policy, we will:

• Update the "Effective Date" and "Last Updated" date at the top of this page
• Post a prominent notice on our website homepage
• Send an email notification to registered account holders for significant changes

Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, please stop using our services and, if applicable, close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Previous versions of this Privacy Policy may be obtained by contacting us at the information below.

17. Contact Us

We value your privacy and are committed to addressing your concerns promptly and transparently. If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact us:

We aim to respond to all privacy-related inquiries within 30 business days. For California residents submitting CCPA/CPRA requests, we will respond within 45 calendar days of receiving a verifiable consumer request, with possible extensions as permitted by law.

When contacting us about a privacy request, please include:

• Your full name and contact information
• A clear description of your request or inquiry
• Any relevant information to help us verify your identity and locate your records
• Your state of residence (for state-specific rights requests)