Privacy Policy

This Privacy Policy describes how Via 313 ("we," "us," "our," or "the Company") collects, uses, discloses, and protects your personal information when you visit our website at new-via313.top, place orders through our platform, or otherwise interact with our food services. We are committed to protecting your privacy and handling your personal data in a transparent, responsible, and lawful manner consistent with applicable United States federal and state privacy laws.

By accessing or using our website, placing an order, or otherwise engaging with our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website and services immediately.

We encourage you to read this document carefully and contact us if you have any questions. This Privacy Policy applies to all users located in the United States, including residents of California who are entitled to additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

1. Who We Are

Via 313 is a food service business operating in the United States. We provide customers with access to food ordering, delivery, pickup services, and related dining experiences through our online platform and physical locations.

For all privacy-related inquiries, requests, or complaints, you may contact us using the information provided above or through the dedicated privacy contact section at the end of this policy.

2. Information We Collect

We collect several types of information in connection with your use of our website and food services. The categories of personal information we collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, participate in promotions, or contact our customer support team, we may collect:

• Full name
• Email address
• Phone number
• Delivery address and billing address
• Date of birth (where required for age verification purposes)
• Username and password for account access
• Profile photo or avatar (if provided voluntarily)

2.2 Order and Transaction Information

When you place an order or complete a transaction through our platform, we collect information related to:

• Items ordered, quantities, special instructions, and customizations
• Order history and preferences
• Payment method type (e.g., credit card, debit card, digital wallet — note: full payment card numbers are processed by third-party payment processors and not stored by us)
• Transaction date, time, and amount
• Delivery or pickup preferences and timing
• Promo codes or loyalty rewards applied

2.3 Usage Data and Online Activity

When you visit our website or use our digital services, we automatically collect certain technical and behavioral information, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type
• Pages visited, links clicked, and time spent on pages
• Referral source (how you arrived at our website)
• Search queries entered on our platform
• Clickstream data and session recordings
• Error logs and diagnostic information

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage objects, and similar tracking technologies to collect information about your browsing behavior and preferences. These tools help us remember your login status, maintain your shopping cart, personalize content, and analyze site performance. For detailed information about our use of cookies and how to manage your preferences, please refer to our Cookie Policy available on our website.

2.5 Communications and Customer Support Data

If you contact us via email, phone, live chat, or through our contact forms, we may collect and retain:

• The content of your messages, emails, or chat transcripts
• Records of complaints or service requests
• Feedback, reviews, and survey responses you submit
• Call recordings (where permitted by law and with notice to you)

2.6 User-Generated Content

When you submit reviews, ratings, photos, comments, or other content through our platform or social media channels, we collect that content and associated metadata.

2.7 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms if you choose to connect your social account to our services or interact with our social media pages
• Third-party delivery partners or aggregator platforms
• Analytics providers and advertising networks
• Loyalty program partners
• Fraud prevention and identity verification services

2.8 Sensitive Information

We do not intentionally collect sensitive categories of personal information such as health records, financial account credentials, Social Security numbers, or biometric data unless explicitly required and consented to for a specific purpose (such as dietary restriction information you voluntarily provide when placing an order).

3. How We Use Your Information

We use the personal information we collect for a variety of lawful business purposes, including the following:

3.1 Providing and Managing Our Food Services

• Processing and fulfilling your food orders and managing deliveries or pickups
• Creating and managing your customer account
• Sending order confirmations, receipts, and status updates
• Coordinating with delivery drivers, kitchen staff, and third-party fulfillment partners
• Applying loyalty rewards, discounts, and promotional offers

3.2 Customer Support and Service Improvement

• Responding to your inquiries, complaints, and support requests
• Investigating and resolving disputes or billing issues
• Improving the quality, accuracy, and reliability of our menu and services
• Training our staff based on aggregated service data

3.3 Analytics and Business Intelligence

• Analyzing usage patterns, sales trends, and customer behavior to improve our platform
• Conducting internal research and development
• Measuring the effectiveness of our website features and user interface
• Generating aggregated, anonymized reports for internal business planning

3.4 Marketing and Promotional Communications

• Sending you promotional emails, special offers, new menu announcements, and event invitations, subject to your communication preferences
• Delivering targeted advertising based on your order history and browsing behavior
• Administering contests, sweepstakes, and loyalty programs
• Personalizing your experience on our website and app

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly at [email protected].

3.5 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Detecting, preventing, and responding to fraud, unauthorized access, and security threats
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Via 313, our customers, and the public
• Responding to lawful requests from government authorities and law enforcement agencies

4. Legal Basis for Processing Your Information

Under applicable U.S. privacy law, including the FTC Act and state consumer protection statutes, we process your personal information based on the following grounds:

• Contractual Necessity: Processing necessary to fulfill your orders, manage your account, and provide the services you requested.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and communicating relevant information to you, provided these interests do not override your privacy rights.
• Legal Compliance: Processing necessary to comply with our legal obligations under federal and state law.
• Consent: Where required by law, we will obtain your consent before processing your information for specific purposes such as marketing communications or the use of certain cookies.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary consideration. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf. These service providers have access to your personal information only as necessary to perform their designated functions and are contractually obligated not to use it for any other purpose. Examples of service providers include:

• Payment processors and billing service providers (e.g., Stripe, Square, or similar)
• Delivery and logistics partners
• Cloud hosting and data storage providers
• Email and SMS marketing platforms
• Customer support software providers
• Website analytics services (e.g., Google Analytics)
• Fraud detection and identity verification services
• Advertising and retargeting networks

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Enforce our Terms of Service or other applicable agreements
• Protect against fraud, illegal activity, or threats to security
• Protect the rights, property, or personal safety of Via 313, our users, or the public

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy, your personal information may be transferred as part of the business transaction. We will notify you of any such change in ownership or control of your personal data and ensure that any successor entity is bound by privacy obligations substantially equivalent to those described in this policy.

5.4 With Your Consent

We may share your personal information with other third parties when you have given us your explicit consent to do so, such as when you participate in a co-branded promotion or integration with a third-party loyalty program.

5.5 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other business purposes. This data is not considered personal information under applicable law.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and provide personalized services. The types of cookies we use include:

• Essential Cookies: Required for the basic functionality of our website, such as keeping you logged in and maintaining your shopping cart.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously.
• Functionality Cookies: Allow our website to remember your preferences and settings for a more personalized experience.
• Marketing and Advertising Cookies: Track your activity across websites to deliver targeted advertisements relevant to your interests.

You have the right to accept or reject non-essential cookies. You can manage your cookie preferences through your browser settings or our cookie consent tool available on our website. Please note that disabling certain cookies may affect the functionality of our platform. For more detailed information, please review our dedicated Cookie Policy at new-via313.top.

7. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption of data in transit using Transport Layer Security (TLS) protocols
• Encryption of sensitive data at rest using industry-standard encryption methods
• Secure server infrastructure hosted with reputable cloud service providers
• Access controls and role-based permissions limiting data access to authorized personnel only
• Regular security assessments, vulnerability scans, and penetration testing
• Employee training on data privacy and information security best practices
• Incident response procedures to address and notify users of data breaches where required by law

While we strive to protect your personal information using commercially reasonable means, no method of data transmission or storage is 100% secure. We cannot guarantee absolute security of your information. In the event of a data breach that poses a risk to your rights or interests, we will notify affected users and relevant authorities in accordance with applicable state breach notification laws, including those applicable in the state where our business operates.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods we apply include:

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention schedule and applicable law.

9. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We respect these rights and provide mechanisms for you to exercise them.

9.1 General Rights for U.S. Residents

All users in the United States have the following general rights:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time.

9.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have enhanced privacy rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023. These rights include:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to applicable exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: You have the right to direct us not to sell or share your personal information for cross-context behavioral advertising purposes. We do not sell personal information for monetary consideration. However, if our use of advertising cookies constitutes a "share" under CPRA, you may opt out through our cookie preference center.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to what is necessary for providing our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge you different prices, or provide you with a lower quality of service as a result of exercising your privacy rights.
• Right to Data Portability: You have the right to receive your personal information in a portable, readily usable format where technically feasible.

To exercise any of your California privacy rights, please submit a verifiable consumer request to us at [email protected]. We will respond to verified requests within 45 calendar days. If we require more time, we will inform you of the reason and extension period in writing.

9.3 Authorized Agents

California residents may designate an authorized agent to submit a privacy rights request on their behalf. To use an authorized agent, you must provide written authorization to the agent, and we may require you to verify your identity directly with us before processing the request.

9.4 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us by:

• Email: [email protected] with the subject line "Privacy Rights Request"
• Website: new-via313.top (through our contact form)

We may need to verify your identity before processing your request. We will ask you to provide information that matches the information we have on file for you. This verification process is necessary to protect your data and prevent unauthorized requests.

10. Children's Privacy

Our website and online food ordering services are not directed to children under the age of 18. We do not knowingly collect personal information from individuals under 13 years of age in violation of the Children's Online Privacy Protection Act (COPPA). If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected].

If we discover that we have inadvertently collected personal information from a child under 13, we will promptly delete such information from our records. We encourage parents and guardians to monitor their children's online activities and to help enforce this policy by instructing their children never to provide personal information through our website or services without parental permission.

Users between the ages of 13 and 17 should only use our services with the express consent and supervision of a parent or legal guardian. By using our services, you represent and warrant that you are at least 18 years of age, or that you have obtained the consent of your parent or guardian.

11. International Data Transfers

Via 313 is a United States-based food service business and our primary data processing activities take place within the United States. However, some of our third-party service providers, including cloud hosting providers, analytics services, and communication platforms, may process your data in servers located outside the United States.

If your personal information is transferred to, stored in, or processed in a country other than the United States, we will take appropriate steps to ensure that such transfers comply with applicable law and that your data receives an adequate level of protection. These steps may include:

• Entering into data processing agreements with our service providers that include appropriate data protection clauses
• Ensuring that service providers implement appropriate technical and organizational security measures
• Using service providers certified under recognized privacy frameworks

By using our services, you acknowledge and agree that your personal information may be transferred to and processed in countries outside the United States, which may have different data protection laws than those in your jurisdiction. We will always ensure that any such transfers are conducted in a manner consistent with this Privacy Policy and applicable law.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, payment portals, and delivery partner applications. These third-party services operate independently of Via 313 and are governed by their own privacy policies. We are not responsible for the privacy practices or content of these third-party services.

We encourage you to review the privacy policies of any third-party websites you visit through links on our platform. The inclusion of a link to a third-party website does not imply our endorsement of that website or its privacy practices.

When you use third-party payment processors to complete a transaction on our platform, your payment information is collected and processed directly by the payment processor and is subject to their privacy policy and security standards. We do not store complete credit card numbers or payment credentials on our servers.

13. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that sends a signal to websites indicating that you do not want your online activities tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, our website does not currently respond to browser DNT signals. However, you can control tracking technologies through our cookie preference center and your browser settings as described in the Cookies section of this policy.

California residents should also be aware of the "Shine the Light" law (California Civil Code Section 1798.83), which allows California consumers to request information about personal information disclosed to third parties for their direct marketing purposes. If you are a California resident and wish to make such a request, please contact us at [email protected].

14. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy on our website at new-via313.top
• Where required by law or where the changes are significant, notify you directly via email or through a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our website or services following the posting of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated terms, please discontinue use of our services and contact us to close your account.

15. How to File a Complaint with a Data Protection Authority

If you are a California resident and believe that we have not handled your personal information in accordance with the California Consumer Privacy Act (CCPA) or the California Privacy Rights Act (CPRA), you have the right to file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office.

15.1 California Privacy Protection Agency (CPPA)

The CPPA is the primary regulatory body responsible for enforcing California's privacy laws. You can submit a complaint through:

• Website: cppa.ca.gov
• Mailing Address: California Privacy Protection Agency, 2101 Arena Blvd., Sacramento, CA 95834

15.2 Federal Trade Commission (FTC)

For general consumer protection complaints related to privacy violations, you may contact the Federal Trade Commission (FTC), which enforces the FTC Act against unfair or deceptive privacy practices:

• Website: reportfraud.ftc.gov
• Phone: 1-877-382-4357

15.3 State Attorney General Offices

Depending on your state of residence, you may also have the right to file a privacy complaint with your state Attorney General's office. Many states have enacted their own consumer privacy laws, and state Attorneys General are empowered to investigate and take action against companies that violate consumer privacy rights.

We strongly encourage you to contact us first at [email protected] before filing a formal complaint, as we are committed to resolving privacy concerns promptly and efficiently.

16. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please do not hesitate to contact our privacy team. We are committed to addressing your concerns promptly and transparently.

When contacting us about a privacy matter, please include your full name, email address associated with your account (if applicable), a description of your request or concern, and your preferred method of contact. This will help us process your request efficiently and respond to you within the required timeframe.

We aim to respond to all privacy-related inquiries within 30 business days. For requests from California residents exercising rights under CCPA/CPRA, we will respond within 45 calendar days, with the possibility of a one-time extension of an additional 45 days where reasonably necessary, provided we notify you of the extension within the initial response period.