Privacy Policy

This Privacy Policy explains how Taco Tek Mexican Grill ("Taco Tek," "we," "us," or "our") collects, uses, shares, and protects your personal information when you visit our website, place an order for pickup or delivery, sign up for an account, join our rewards program, or otherwise interact with us. By using our services, you agree to the practices described here.

Information We Collect

We collect the following categories of information:

Information you provide directly:

• Account details such as your name, email address, phone number, and password.
• Order information, including the items you buy, customizations, pickup or delivery selection, and your delivery address.
• Payment information you enter at checkout (processed by our payment provider — see "Payment Processing" below).
• Rewards and loyalty activity, including points earned and redeemed.
• Information you submit through our catering, franchise, careers, or contact forms.
• Communications you send us, including support requests and feedback.

Information collected automatically:

• Device and usage data such as IP address, browser type, pages viewed, and referring pages.
• Cookies and similar technologies (see "Cookies & Tracking" below).
• Approximate or precise location, only when you choose to use features like "use my current location" or enter a delivery address, so we can find the nearest store and confirm delivery range.

How We Use Your Information

• To take, prepare, and fulfill your pickup and delivery orders.
• To create and manage your account and rewards membership.
• To process payments and prevent fraud.
• To send order confirmations, status updates, and receipts by email or text message.
• To respond to catering, franchise, careers, and support inquiries.
• To operate, secure, troubleshoot, and improve our website and services.
• To send marketing or promotional messages where permitted (you can opt out at any time).
• To comply with legal obligations and enforce our terms.

How We Share Your Information

We do not sell your personal information. We share it only as needed to run our business, with service providers who process it on our behalf under contract, including:

• Payment processing — Stripe, to securely process card payments.
• Delivery — DoorDash and similar couriers, to deliver your order (we share your name, delivery address, and phone number).
• Messaging — Twilio (text messages) and Resend (email), to send you order and account notifications.
• Hosting & infrastructure — Vercel and Supabase, to host our website and store account and order data.
• Maps & addresses — Google Maps Platform, to suggest and verify addresses and locate nearby stores.
• Diagnostics — Sentry, to monitor errors and keep the service reliable.

We may also disclose information to comply with the law or valid legal requests, to protect our rights, safety, and property, or in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Policy.

Cookies & Tracking Technologies

We use cookies and similar technologies to keep you signed in, remember your selected store and cart, understand how our site is used, and improve performance. You can control cookies through your browser settings; disabling some cookies may affect how the site works.

Payment Processing

Card payments are processed by Stripe. We do not store your full card number on our systems; Stripe handles your card data under PCI-DSS standards. We retain limited transaction details (such as the amount, date, and a card brand/last four) to manage your orders, refunds, and records.

Text Messaging (SMS)

If you provide your mobile number and opt in, we may send transactional texts (like order-ready alerts) and, where permitted, promotional texts. Message and data rates may apply. You can opt out of texts at any time by replying STOP, or reply HELP for help. Opting out of promotional texts will not stop essential transactional messages about orders you place.

Data Retention

We keep your information for as long as your account is active or as needed to provide our services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it.

Your Privacy Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of certain uses. Residents of California and certain other states may have additional rights, including the right not to be discriminated against for exercising them. To make a request, contact us using the details below. We will verify your request and respond as required by law.

Data Security

We use technical and organizational measures — including encryption in transit, access controls, and reputable infrastructure providers — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children's Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

Third-Party Links

Our site may link to third-party websites and services we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them.

Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of our services after changes take effect means you accept the updated Policy.

Contact Us

Questions about this Policy or your information? Reach us at:

• Email: info@tacotekus.com
• Phone: (347) 431-4485
• Mail: [TODO: add business mailing address]