Privacy Policy

Welcome to Via 313. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how Via 313 ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you visit our website meals-via313.rest, place orders, or otherwise interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy is governed by applicable United States federal and state privacy laws, including but not limited to the Federal Trade Commission Act (FTC Act), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable state and federal regulations pertaining to consumer data protection in the food service and e-commerce industries.

1. Who We Are

Via 313 is a food service business operating in the United States. Our contact details for all privacy-related matters are as follows:

For all privacy inquiries, data subject requests, or concerns, please contact us at the email address listed above. We are dedicated to responding to your inquiries promptly and in accordance with applicable law.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected through:

• Our website, meals-via313.rest, and any subdomains or related digital properties;
• Online ordering systems, reservation platforms, or loyalty programs we operate;
• Email, phone, and other electronic communications between you and Via 313;
• In-person interactions where digital data collection tools are in use (such as point-of-sale systems);
• Third-party platforms and services that reference or link to this Privacy Policy.

This policy does not apply to third-party websites, applications, or services that you may access through links on our site. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

3. Information We Collect

We collect several types of information from and about users of our services. The categories below describe the information we may collect, how we obtain it, and examples of the specific data points involved.

3.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and delivery address (including street, city, state, and ZIP code)
• Username and password (stored in encrypted format)
• Payment information (processed securely through third-party payment processors; we do not store full card numbers)
• Date of birth (if required for age verification purposes)
• Dietary preferences, allergen disclosures, or special instructions provided with orders

3.2 Usage and Transaction Data

When you interact with our website or place orders, we automatically collect information about your activities, including:

• Order history, items purchased, and transaction amounts
• Browsing behavior on our website (pages visited, time spent, clicks, and navigation paths)
• Search queries entered on our platform
• Referral URLs (the website you came from before visiting ours)
• Features and functionalities you use within our service
• Timestamps of interactions

3.3 Device and Technical Information

We automatically collect certain technical information from your device when you visit our website, including:

• IP address
• Browser type and version
• Operating system and platform
• Device type (desktop, mobile, tablet)
• Screen resolution and display settings
• Language preferences
• Time zone settings
• Unique device identifiers

3.4 Location Data

With your permission, we may collect precise or approximate location data from your mobile device or browser to enable delivery services, suggest nearby offerings, or tailor content to your geographic area. You may disable location sharing through your device settings at any time, although this may limit certain features of our services.

3.5 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. This data helps us improve your experience, analyze site performance, and deliver relevant advertising. For detailed information, please refer to Section 9 of this policy (Cookie Usage).

3.6 Communications Data

If you contact us via email, phone, or our website's contact form, we collect and retain the contents of those communications, including your name, contact details, and the subject matter of your inquiry. We may also record customer service calls with your prior notice and where permitted by law.

3.7 Information from Third Parties

We may receive information about you from third parties such as social media platforms (if you interact with our social profiles or log in via social authentication), delivery partners, payment processors, analytics providers, and advertising networks. This information is combined with data we collect directly to provide and improve our services.

4. How We Use Your Information

We use the information we collect for a variety of purposes, all aimed at delivering, improving, and personalizing our food services. The legal bases for our processing activities under applicable U.S. law include your consent, our legitimate business interests, compliance with legal obligations, and the performance of contracts with you.

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including delivery or pickup arrangements
• Managing your account and providing access to account features
• Processing payments and preventing fraudulent transactions
• Communicating with you about your orders, including confirmations, updates, and delivery notifications
• Providing customer support and resolving disputes or complaints
• Accommodating dietary restrictions, allergen information, and special requests

4.2 Analytics and Service Improvement

• Analyzing usage patterns and trends to understand how our services are used
• Identifying areas for improvement in our menu, website, and ordering experience
• Conducting internal research and development
• Monitoring and improving the performance, security, and reliability of our website
• Testing new features and functionalities

4.3 Marketing and Communications

• Sending promotional emails, newsletters, special offers, and announcements about new menu items or events (with your consent or as permitted by law)
• Personalizing content and recommendations based on your order history and preferences
• Delivering targeted advertisements through third-party platforms and advertising networks
• Administering loyalty programs, contests, sweepstakes, or surveys
• Re-targeting website visitors through digital advertising channels

You may opt out of marketing communications at any time by clicking "unsubscribe" in any promotional email or by contacting us at [email protected].

4.4 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal processes
• Enforcing our Terms of Service and other agreements
• Protecting the rights, safety, and property of Via 313, our customers, and third parties
• Responding to lawful requests from government authorities and law enforcement agencies
• Preventing and detecting fraud, abuse, security incidents, and other harmful activities

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own independent marketing purposes. However, we do share your information in the following circumstances:

5.1 Service Providers and Business Partners

We share information with trusted service providers who assist us in operating our business, including:

• Payment processors: To securely process credit card and other payment transactions
• Delivery and logistics partners: To fulfill and deliver your food orders
• Cloud hosting and IT services: To store and manage our data securely
• Email and communications platforms: To send order confirmations, marketing emails, and notifications
• Analytics providers: Such as Google Analytics, to help us understand website usage
• Advertising networks: To deliver targeted advertising campaigns
• Customer support tools: To manage and respond to customer inquiries

All service providers are contractually obligated to use your information only as directed by us and in accordance with applicable privacy laws.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information to government authorities, regulators, or law enforcement agencies when we are legally required to do so, or when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, or governmental request;
• Protect and defend the legal rights or property of Via 313;
• Prevent or investigate potential wrongdoing in connection with our services;
• Protect the personal safety of our customers, employees, or the public.

5.3 Business Transfers

In the event that Via 313 undergoes a merger, acquisition, sale of assets, bankruptcy, or other business transfer, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on our website before your information becomes subject to a different privacy policy.

5.4 Aggregated or Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other business purposes.

6. Data Security

Via 313 takes the security of your personal information seriously. We implement a variety of technical, administrative, and physical security measures designed to protect your data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website.
• Access controls: Access to personal data is restricted to authorized personnel who have a legitimate business need to access it, and who are bound by confidentiality obligations.
• Secure payment processing: Payment transactions are processed through PCI-DSS compliant third-party processors. We do not store full payment card numbers on our servers.
• Password hashing: User passwords are stored using industry-standard cryptographic hashing algorithms.
• Regular security audits: We periodically review and test our systems and security practices to identify and address vulnerabilities.
• Incident response plans: We maintain documented procedures for responding to data breaches and security incidents, including notification procedures as required by applicable law.

7. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. Via 313 is committed to honoring these rights and will respond to verified requests within the timeframes required by law.

7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA, as amended by the CPRA:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions provided by law.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. To exercise this right, contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You have the right to direct us to limit our use and disclosure of sensitive personal information to purposes necessary to provide you with our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide you a different level of quality of services because you exercised your privacy rights.

7.2 General Privacy Rights for All U.S. Users

Regardless of your location, Via 313 provides all users with the following options:

• Access and Correction: You may log in to your account to review and update your personal information at any time. You may also contact us to request access to or correction of your data.
• Account Deletion: You may request the deletion of your account and associated personal data by contacting us at [email protected]. Note that we may retain certain information as required by law or for legitimate business purposes.
• Marketing Opt-Out: You may unsubscribe from our marketing communications at any time using the unsubscribe link in any email or by contacting us directly.
• Data Portability: Upon request, we will provide you with a copy of your personal data in a commonly used, machine-readable format where technically feasible.

7.3 How to Submit a Privacy Rights Request

To exercise any of your privacy rights, please contact us using the following methods:

• Email: [email protected]
• Subject line: "Privacy Rights Request – [Your Name]"

We may need to verify your identity before processing your request. Verification may involve confirming details associated with your account. We will respond to verifiable consumer requests within 45 days. If we require more time, we will inform you of the reason and extension period in writing. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.

You may designate an authorized agent to make a request on your behalf. If you use an authorized agent, we may require proof of the agent's written authorization and may verify your identity directly.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• Account data: Retained for the duration of your account with Via 313 and for a reasonable period thereafter (typically 3–5 years) to allow for dispute resolution, enforcement of our agreements, and compliance with legal obligations.
• Transaction and order data: Retained for a minimum of 7 years in compliance with applicable tax, accounting, and financial recordkeeping laws.
• Marketing preferences and consent records: Retained until you withdraw consent or for up to 3 years following your last interaction with our marketing communications.
• Customer support communications: Retained for up to 3 years from the date of last contact.
• Technical and usage data (logs): Typically retained for 12–24 months for security and analytical purposes.
• Cookie and tracking data: Retained in accordance with the specific cookie type and your consent preferences (see Section 9).

When your personal information is no longer needed for any of these purposes, we will securely delete or anonymize it in accordance with our data retention schedules and applicable legal requirements.

9. Cookie Usage

Via 313 uses cookies and similar tracking technologies on its website to enhance your browsing experience, analyze site traffic, and support our marketing efforts. Cookies are small text files placed on your device that allow websites to recognize returning visitors and remember preferences.

9.1 Types of Cookies We Use

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, blocking certain types of cookies may affect the functionality of our website. For full details on the cookies we use and how to manage them, please refer to our Cookie Policy, available on our website.

10. Children's Privacy

If you are a parent or guardian and believe that your child under 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt steps to delete such information from our records and terminate any associated account.

We do not knowingly engage in targeted advertising toward children or sell personal information collected from minors. Our website and services are designed and marketed exclusively for adult consumers.

11. International Data Transfers

Via 313 is a United States-based business and primarily processes and stores personal data within the United States. If you access our services from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home country.

By using our website and services, you acknowledge and consent to the transfer of your information to the United States. We take appropriate steps to ensure that any international data transfers comply with applicable legal requirements and that your data continues to be protected in a manner consistent with this Privacy Policy.

For users located in jurisdictions with specific data transfer restrictions or requirements, please contact us at [email protected] to discuss applicable safeguards and your options.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, delivery apps, and other external services that are not operated by Via 313. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of any third-party sites or services and strongly encourage you to review their respective privacy policies before providing any personal information.

Common third-party integrations that may process your data include, but are not limited to:

• Google Analytics (website analytics)
• Facebook/Meta Pixel (advertising and retargeting)
• Stripe, Square, or other payment processors
• DoorDash, Uber Eats, or other third-party delivery platforms
• Mailchimp or similar email marketing platforms

Each of these services operates under its own privacy policy and data processing terms. Via 313 is not liable for the data handling practices of these third parties.

13. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, Via 313 does not currently respond to DNT browser signals. We continue to monitor developments in this area and will update our practices if a standard is established.

California residents may request information about disclosures of personal information to third parties for direct marketing purposes under California Civil Code Section 1798.83. You may contact us at [email protected] to submit such a request.

14. FTC Act Compliance and Consumer Protection

Via 313 is committed to fair and transparent business practices in compliance with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce. We do not engage in deceptive data collection practices, misrepresent our data use, or make false or misleading statements regarding privacy to our customers.

We adhere to the FTC's guidelines on data security, privacy disclosures, and consumer rights. If you believe our data practices are unfair or deceptive, you have the right to file a complaint with the FTC (see Section 16 below for complaint procedures).

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, legal requirements, or for other operational reasons. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page;
• Post the revised policy on our website at meals-via313.rest;
• Notify you via email (if we have your email address on file) for significant changes that materially affect your rights;
• Display a prominent banner or notification on our website when substantive updates are made.

Your continued use of our website and services after the effective date of the revised policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

16. How to File a Complaint

If you have concerns about how Via 313 handles your personal information and our response to your inquiry has not been satisfactory, you may file a complaint with the appropriate regulatory authority.

16.1 Federal Trade Commission (FTC)

For complaints related to unfair or deceptive data practices, consumer privacy, or fraud, you may contact the Federal Trade Commission (FTC):

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

16.2 California Privacy Protection Agency (CPPA)

California residents who believe their rights under the CCPA/CPRA have been violated may file a complaint with the California Privacy Protection Agency:

• Website: cppa.ca.gov
• Email: [email protected]
• Address: California Privacy Protection Agency, 2101 Arena Boulevard, Sacramento, CA 95834

16.3 State Attorneys General

Consumers in all U.S. states may also contact their state's Attorney General office with privacy-related complaints. Most state Attorney General offices maintain consumer protection divisions that handle data privacy concerns.

17. Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests related to this Privacy Policy or our data handling practices, please reach out to us. We are committed to addressing your inquiries promptly and transparently.

We will make every effort to respond to your privacy-related inquiries within 45 calendar days of receipt. If additional time is needed to process your request, we will notify you of the delay and provide an updated estimated response date.