Privacy Policy

Introduction

At CIAO 592, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, place orders, or interact with our services.

We are committed to complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable and local data protection regulations in Guyana.

By using our services, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our services.

Information We Collect

We collect information that you provide directly to us, as well as information automatically collected when you use our services:

Information You Provide:

• Account Information: Name, email address, phone number, and password when you create an account
• Order Information: Delivery address, payment details, order history, and special instructions
• Communications: Messages, feedback, and inquiries you send to us
• Preferences: Dietary preferences, favorite items, and saved addresses

Information Automatically Collected:

• Device Information: IP address, browser type, operating system, and device identifiers
• Usage Data: Pages visited, time spent on pages, navigation patterns, and referring websites
• Location Data: General location information based on IP address (with your consent for precise location)
• Cookies: Data stored on your device to enhance your experience (see Cookies section)

How We Use Information

We use the information we collect for the following purposes:

• Order Processing: To process and fulfill your orders, communicate about delivery, and provide customer support
• Account Management: To maintain your account, authenticate your identity, and secure your information
• Service Improvement: To analyze usage patterns, troubleshoot issues, and enhance our services
• Communications: To send order confirmations, delivery updates, customer support responses, SMS ordering messages, promotional offers (with your consent), and respond to inquiries
• Legal Compliance: To comply with legal obligations, prevent fraud, and protect our rights

We process your personal data based on your consent, contractual necessity, legal obligations, or our legitimate interests in providing and improving our services.

SMS Communications

CIAO 592 may use SMS messages to support customer-initiated restaurant ordering and customer care. These messages may include ordering assistance, order confirmations, payment instructions, delivery updates, and responses to support requests.

SMS consent is not a condition of purchase. You can opt out of SMS messages at any time by replying STOP. For help, reply HELP or contact us at hello@ciao592.com. Message and data rates may apply, and message frequency varies based on your interactions with us.

We do not sell, rent, or share SMS opt-in consent, phone numbers, or SMS messaging data with third parties for their marketing or promotional purposes.

Information Sharing

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third parties who assist us in operating our website, processing payments, delivering orders, or sending service-related customer communications
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections
• With Your Consent: When you explicitly authorize us to share your information

All third-party service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit using TLS/SSL protocols
• Secure payment processing through PCI-DSS compliant providers
• Regular security assessments and updates to our systems
• Access controls and authentication requirements for staff
• Staff training on data protection and privacy practices

While we strive to protect your information, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and keep your account credentials confidential.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information in certain circumstances
• Restriction: Request that we limit how we use your information
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to certain processing activities, including direct marketing
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the information provided in the Contact section. We will respond to your request within the timeframes required by applicable law.

Cookies

We use cookies and similar technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors come from.

Types of cookies we use:

• Essential Cookies: Required for the website to function properly (e.g., cart functionality, authentication)
• Analytics Cookies: Help us understand how visitors interact with our website
• Preference Cookies: Remember your settings and preferences for future visits
• Marketing Cookies: Used to deliver relevant advertisements (only with your consent)

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of our website.

Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated policy on our website with a new effective date
• Sending an email notification to registered users
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Typically:

• Account information is retained while your account is active
• Order history is retained for 7 years for accounting and tax purposes
• Marketing preferences are retained until you opt out
• Website usage data is anonymized after 26 months

When we no longer need your personal information, we will securely delete or anonymize it in accordance with our data retention policies.