Privacy Policy

Cholo’s Tacos, operated by Cholos Tacos Company (“Cholo’s Tacos,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit cholostacos.com, place an order, communicate with us, or use our automated ordering and customer-service features.

By using our website or services, you acknowledge the practices described in this Privacy Policy.

1. Business Information

• Business: Cholo’s Tacos
• Legal Business Name: Cholos Tacos Company
• Business Address: 7 Cedarwood Ln, Idleyld Park, OR 97447
• Telephone: (541) 530-4271
• Email: fabela102988@gmail.com

2. Information We Collect

Depending on how you interact with Cholo’s Tacos, we may collect the following categories of information.

Contact Information

This may include:

• Your name;
• Telephone number;
• Email address;
• Pickup or delivery address; and
• Other contact information you voluntarily provide.

Order and Transaction Information

This may include:

• Items ordered;
• Meat choices and food modifications;
• Pickup or delivery instructions;
• Order date and time;
• Purchase amount;
• Discounts, loyalty rewards, or promotions used;
• Refunds, order corrections, and customer-service history; and
• Payment status and limited payment-related information.

Complete payment-card information is generally collected and processed by Square or another authorized payment provider rather than stored directly by Cholo’s Tacos.

Communications

We may collect information you provide through:

• Website forms;
• Email;
• Telephone calls;
• Text messages;
• Social-media messages;
• Customer-service requests;
• Reviews or feedback; and
• Conversations with our automated or artificial-intelligence assistant.

Automated Assistant and Voice Information

If you choose to interact with an automated or artificial-intelligence assistant, we may collect:

• The words or information you submit;
• Audio transmitted through your microphone;
• Written transcripts of the conversation;
• Menu selections and order preferences;
• Session details; and
• Technical information needed to operate the assistant.

Your browser or device should request permission before allowing microphone access. You may deny or withdraw microphone permission through your browser or device settings.

We do not use voice information to identify you through biometric recognition. Do not provide sensitive personal information, complete payment-card numbers, passwords, Social Security numbers, or medical information to the automated assistant.

Automated conversations may be processed by service providers that supply website, voice, avatar, customer-management, or artificial-intelligence technology.

Device and Website-Usage Information

When you use the website, we or our service providers may automatically collect:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Pages viewed;
• Links or buttons selected;
• Referring website;
• Approximate location derived from an IP address;
• Date and time of visits;
• Website performance information; and
• Cookie and similar technology identifiers.

Information from Other Sources

We may receive information from service providers and platforms involved in your interaction with us, including:

• Square and other payment processors;
• Delivery services;
• Website-hosting providers;
• Customer-relationship-management providers;
• Analytics and advertising providers;
• Social-media platforms; and
• Loyalty or promotional programs.

3. How We Use Information

We may use personal information to:

• Process, prepare, and fulfill orders;
• Accept and confirm payments;
• Provide pickup or delivery information;
• Communicate about an order;
• Respond to questions, complaints, and refund requests;
• Remember customer selections and preferences;
• Operate our automated ordering assistant;
• Provide receipts and transaction records;
• Manage promotions and loyalty programs;
• Send marketing communications when legally permitted;
• Improve our menu, website, ordering process, and customer service;
• Analyze website traffic and performance;
• Detect fraud, payment abuse, and security threats;
• Maintain business, tax, and accounting records;
• Enforce our Terms of Service;
• Comply with legal obligations; and
• Protect the rights, safety, and property of customers, Cholo’s Tacos, and others.

4. Payments Through Square

Online and in-person payments may be processed by Square. When you make a payment, Square may independently collect and process information such as your name, contact information, payment-card details, device information, and transaction history.

Square’s collection and use of information are governed by Square’s own privacy notices and terms. Cholo’s Tacos does not control Square’s independent privacy practices.

We may receive limited transaction information from Square, such as:

• Customer name and contact information;
• Items purchased;
• Transaction amount;
• Payment status;
• Receipt information;
• Refund information; and
• Limited card details, such as the card brand and final digits.

We do not receive or store your complete payment-card number through ordinary Square transactions.

5. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage, and similar technologies to:

• Keep the website functioning;
• Remember selections;
• Maintain an ordering session;
• Measure website traffic;
• Understand how visitors use the website;
• Prevent fraud;
• Improve performance; and
• Measure the effectiveness of promotions.

Some cookies are necessary for the website and ordering system to operate. Other cookies may be used for analytics or advertising.

You can limit cookies through your browser settings. Blocking necessary cookies may prevent certain website or ordering features from working correctly.

Where required by law, we will provide additional cookie controls or obtain consent before using nonessential cookies.

6. How We Disclose Information

We may disclose personal information to the following categories of recipients when reasonably necessary.

Service Providers

We may disclose information to companies that help us operate, including providers of:

• Payment processing;
• Website hosting;
• Online ordering;
• Customer-relationship management;
• Email and text-message delivery;
• Automated voice or artificial-intelligence services;
• Digital avatars and website media;
• Data storage;
• Analytics;
• Advertising;
• Fraud prevention;
• Delivery services;
• Accounting; and
• Technical support.

These providers may process information only for authorized business purposes or as permitted under their own agreements and applicable law.

Business and Legal Disclosures

We may disclose information:

• To comply with a law, court order, subpoena, or lawful government request;
• To investigate fraud, abuse, security incidents, or illegal activity;
• To protect customers, employees, the public, or Cholo’s Tacos;
• To enforce agreements and policies;
• In connection with insurance, accounting, or legal matters; or
• As part of a merger, sale, financing, restructuring, or transfer of the business.

At Your Direction

We may disclose information when you direct us to do so, request that we interact with another service, or otherwise provide consent.

7. Sale and Targeted Advertising

Cholo’s Tacos does not sell personal information to third parties in exchange for money.

We may use analytics or advertising services to measure website activity or promote our business. Depending on the technology involved and the law that applies, certain disclosures to advertising providers may be considered targeted advertising, sharing, or a sale of personal data.

Where applicable law gives you the right to opt out, you may submit a request using the contact information in this Privacy Policy.

8. Text Messages and Mobile Information

If you provide your telephone number, we may send transactional messages concerning:

• Order confirmation;
• Order status;
• Pickup or delivery;
• Payment or refund issues;
• Customer-service requests; and
• Other information necessary to complete your transaction.

Promotional text messages will be sent only when legally permitted or when you provide the required consent. Consent to receive marketing messages is not a condition of purchasing food.

Message frequency may vary. Message and data rates may apply. Reply STOP to opt out of promotional text messages and HELP for assistance.

We do not sell mobile telephone information. Mobile opt-in information and text-message consent will not be shared with third parties or affiliates for their own marketing or promotional purposes.

We may disclose mobile information to vendors that help us deliver text messages, provide customer support, prevent fraud, or operate our systems. This excludes text-message originator opt-in data and consent, which will not be shared with third parties except providers necessary to operate the messaging program or when required by law.

9. Marketing Emails

If you subscribe to promotional emails, we may send information about menu items, specials, events, or other Cholo’s Tacos offers.

You may unsubscribe by using the link included in a promotional email or by contacting us. We may continue sending non-promotional communications concerning active orders, transactions, security, or customer-service matters.

10. Data Retention

We retain personal information only for as long as reasonably necessary to:

• Fulfill the purpose for which it was collected;
• Complete orders and provide customer service;
• Maintain tax, accounting, and transaction records;
• Resolve disputes;
• Prevent fraud;
• Enforce agreements; and
• Meet legal and regulatory requirements.

Different types of information may be retained for different periods. Information may remain in backups for a limited period after deletion from active systems.

11. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information.

No website, electronic transmission, payment system, or storage system can be guaranteed to be completely secure. You use the website and electronic communications at your own risk.

If you believe your information or an order has been accessed without authorization, contact us promptly.

12. Your Privacy Choices and Rights

Depending on where you live and which privacy laws apply, you may have the right to:

• Confirm whether we process your personal data;
• Access personal data we maintain about you;
• Correct inaccurate personal data;
• Request deletion of personal data;
• Obtain a portable copy of certain personal data;
• Obtain a list of certain third parties to which personal data was disclosed;
• Opt out of the sale of personal data;
• Opt out of targeted advertising;
• Opt out of certain profiling activities;
• Withdraw consent where processing is based on consent; and
• Appeal a decision concerning a privacy request.

These rights may be subject to legal exceptions. For example, we may retain transaction information needed for tax, accounting, fraud-prevention, or legal purposes.

To submit a privacy request, contact us at:

Please state that you are making a privacy request and describe the right you wish to exercise. We may need to verify your identity before fulfilling a request.

An authorized agent may submit a request on your behalf where permitted by law. We may require proof that the agent is authorized to act for you.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

13. Privacy Appeals

If we deny a privacy request and applicable law provides an appeal right, you may appeal by contacting us using the information above and writing “Privacy Appeal” in the subject line or at the beginning of your request.

We will review the appeal and respond within the period required by applicable law.

14. Children’s Privacy

Our website and online ordering services are not directed to children under 13. We do not knowingly collect personal information online from children under 13.

If you believe a child under 13 provided personal information to us, contact us so we can review and delete the information when required.

A person under 18 should place an order only with permission from a parent or legal guardian.

15. Third-Party Websites and Services

The website may contain links to Square, social-media services, map providers, delivery providers, or other third-party websites and applications.

This Privacy Policy does not govern those third parties. Review their privacy policies before providing information to them.

16. Do Not Track Signals

Some browsers offer a “Do Not Track” setting. Because there is not a universally accepted standard for responding to these signals, our website may not respond to all Do Not Track signals.

Where required by applicable law, we will process recognized browser-based opt-out preference signals.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our technology, services, business practices, or legal requirements. Updated policies will be posted on the Website with a revised effective date.

Changes apply prospectively and do not alter how information collected before the update was handled, except where required by law.

18. Contact Us

Questions, concerns, or privacy requests about this Privacy Policy may be directed to:

For questions about this Privacy Policy, contact us at the business information listed above.