Privacy Policy

Welcome to Via 313. We respect your privacy and are committed to protecting the personal information you share with us when you visit our website, place orders, or otherwise interact with our business. This Privacy Policy explains in detail what information we collect, how we use it, who we share it with, and what rights you have regarding your data.

Please read this Privacy Policy carefully before using our website located at vias313.rest (the "Site") or any of our services. By accessing or using our Site and services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please discontinue use of our Site immediately.

This Privacy Policy applies to all users of the Site located in the United States. Where applicable, it references relevant federal and state laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act), which governs unfair or deceptive practices in commerce.

1. About Us

Via 313 is a food service business operating in the United States. We are dedicated to delivering an excellent dining and ordering experience to our customers. For the purposes of this Privacy Policy, Via 313 acts as the data controller responsible for your personal information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information provided above or in the Contact Us section at the end of this document.

2. Information We Collect

We collect various types of information to provide, improve, and personalize our services. The categories of information we collect are described below.

2.1 Personal Information You Provide Directly

When you interact with Via 313 — whether by creating an account, placing an online order, subscribing to our newsletter, completing a contact form, or participating in a promotion — you may provide us with personal information, including but not limited to:

• Identification Information: Full name, username or display name.
• Contact Information: Email address, mailing address, billing address, delivery address, and phone number.
• Account Credentials: Password (stored in encrypted form) and security questions.
• Payment Information: Credit card numbers, debit card numbers, billing details, and other financial information required to process transactions. Note that payment card data is processed through secure third-party payment processors and is not stored directly on our servers.
• Order Information: Details of the food items you order, special instructions, dietary preferences or restrictions you voluntarily disclose, and order history.
• Communications: Any messages, feedback, reviews, complaints, or inquiries you send to us through email, contact forms, or other communication channels.
• Promotional Participation Data: Information you submit when entering contests, sweepstakes, loyalty programs, or surveys.

2.2 Information Collected Automatically

When you visit our Site, certain information is collected automatically through cookies, web beacons, pixel tags, server logs, and similar tracking technologies. This information may include:

• Device Information: IP address, device type (desktop, mobile, tablet), operating system, browser type and version, unique device identifiers, and mobile network information.
• Usage Data: Pages you visit on our Site, links you click, time spent on each page, referring URL (the website that directed you to our Site), and navigation paths through the Site.
• Location Data: General geographic location derived from your IP address. If you grant permission, we may also collect precise geolocation data to facilitate delivery services or show nearby locations.
• Log Data: Server logs that record activity on our website, including access times, error reports, and other diagnostic data.
• Cookie Data: Information stored in cookies and similar technologies placed on your device. See Section 7 (Cookies and Tracking Technologies) for more details.

2.3 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Social Media Platforms: If you log in to our Site using a social media account (such as Facebook or Google), we receive basic profile information as permitted by your social media account settings.
• Delivery and Ordering Platforms: Third-party platforms we partner with for online ordering and delivery may share customer information with us necessary to fulfill your order.
• Analytics Providers: Third-party analytics companies may provide us with aggregated or de-identified data about how users interact with our Site.
• Marketing Partners: We may receive information from advertising networks and marketing partners to help us serve you relevant advertisements and promotions.

2.4 Sensitive Personal Information

We do not intentionally collect sensitive personal information such as Social Security numbers, government-issued identification numbers, financial account numbers (beyond what is needed for payment processing through secure third parties), precise geolocation without consent, racial or ethnic origin, religious beliefs, biometric data, or health information. If you voluntarily disclose dietary restrictions or allergies when placing an order, that information is used solely to fulfill your order and improve your dining experience.

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes. These purposes include:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders and reservations.
• Creating and managing your account on our Site.
• Processing payments and preventing fraudulent transactions.
• Sending order confirmations, receipts, and delivery updates.
• Responding to your customer service inquiries, complaints, and feedback.
• Providing technical support and troubleshooting assistance.

3.2 Improving and Personalizing Your Experience

• Analyzing how users interact with our Site to improve its design, content, and functionality.
• Personalizing your experience by showing you relevant menu items, promotions, and recommendations based on your order history and preferences.
• Conducting research and analytics to understand customer trends and preferences.
• Testing and developing new features, products, and services.

3.3 Marketing and Promotional Communications

• Sending you newsletters, promotional offers, discounts, and updates about Via 313 if you have opted in to receive such communications.
• Running loyalty programs, contests, sweepstakes, and special promotions.
• Displaying targeted advertisements on our Site and on third-party platforms based on your interests and browsing behavior.
• Measuring the effectiveness of our marketing campaigns and advertisements.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email we send you, or by contacting us directly at [email protected]. Please note that even if you opt out of marketing communications, we will still send you transactional or service-related emails (such as order confirmations and receipts).

3.4 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations, including food safety regulations and consumer protection laws.
• Enforcing our Terms of Service and other legal agreements.
• Protecting the rights, property, and safety of Via 313, our customers, employees, and the public.
• Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other illegal activities.
• Responding to lawful requests from courts, law enforcement agencies, regulatory authorities, and other governmental bodies.

3.5 Business Operations

• Managing and administering our internal business operations, including accounting, auditing, and recordkeeping.
• Carrying out corporate transactions, such as mergers, acquisitions, or asset sales, where your information may be transferred as part of the transaction.
• Obtaining professional advice from lawyers, accountants, and other advisors.

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your information with certain trusted third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage third-party companies and individuals to perform services on our behalf, including:

• Payment Processors: Companies that securely process your payment transactions (e.g., Stripe, Square, PayPal).
• Delivery Services: Third-party delivery platforms and courier services used to deliver your orders.
• Cloud Hosting and IT Services: Providers that host our website, databases, and infrastructure.
• Email Service Providers: Platforms used to send transactional and marketing emails.
• Analytics Providers: Services such as Google Analytics that help us understand how our website is used.
• Customer Support Tools: Software platforms that help us manage customer inquiries and support tickets.
• Marketing and Advertising Partners: Networks that help us deliver relevant advertisements to you online.

These service providers are contractually required to use your information only for the purposes of providing services to us and are prohibited from using it for their own independent purposes. They are also required to maintain appropriate security measures to protect your information.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required to do so by law, court order, subpoena, or other legal process, or when we believe in good faith that such disclosure is necessary to:

• Comply with applicable laws or legal obligations.
• Protect and defend the rights or property of Via 313.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of our customers, employees, or the public.
• Protect against legal liability.

4.3 Business Transfers

If Via 313 is involved in a merger, acquisition, restructuring, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you via a prominent notice on our Site or via email if such a transfer occurs and your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with other third parties when we have obtained your explicit consent to do so. You have the right to withdraw your consent at any time by contacting us at [email protected].

5. Data Security

The security of your personal information is extremely important to us. We implement a variety of technical, administrative, and physical security measures to protect your data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: We use industry-standard Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers. Passwords are stored using strong cryptographic hashing algorithms.
• Access Controls: Access to your personal information is restricted to authorized Via 313 personnel and service providers who need it to perform their job functions. All employees who handle personal data are required to maintain confidentiality.
• Payment Security: We do not store full credit card or debit card numbers on our servers. Payment processing is handled by PCI DSS-compliant third-party payment processors.
• Regular Security Audits: We conduct periodic reviews of our security practices and systems to identify and address potential vulnerabilities.
• Firewall and Intrusion Detection: We deploy firewalls and intrusion detection systems to monitor and protect our network infrastructure.
• Data Minimization: We collect only the personal information that is necessary for the purposes described in this Privacy Policy.

While we take reasonable steps to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately at [email protected].

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, including applicable state breach notification statutes.

6. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

• Account Information: We retain your account information for as long as your account remains active. If you close your account, we will retain your information for a period of up to three (3) years after account closure to resolve disputes, enforce agreements, and comply with legal obligations.
• Order Records: We retain order history and transaction records for a minimum of seven (7) years to comply with tax, accounting, and legal recordkeeping requirements.
• Marketing Data: We retain marketing preferences and communications data until you opt out, at which point we will remove you from active marketing lists while retaining a record of your opt-out to honor your preference.
• Usage and Analytics Data: Anonymized or aggregated analytics data may be retained indefinitely as it does not identify individual users.
• Legal Claims: Where personal data is relevant to a pending or potential legal claim, we will retain it until the matter is fully resolved.

When personal information is no longer needed and retention periods have expired, we will securely delete or anonymize it in accordance with our data deletion procedures.

7. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage) to enhance your browsing experience, analyze Site usage, and deliver personalized content and advertisements.

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device on subsequent visits and store information about your preferences and actions.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the operation of our Site and enable core features such as security, account login, and shopping cart functionality. You cannot opt out of these cookies.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our Site (e.g., which pages are visited most often and any error messages). We use this data to improve our website performance. Examples include Google Analytics cookies.
• Functionality Cookies: These cookies allow our Site to remember your preferences (such as your language choice or location) to provide a more personalized experience.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements that are more relevant to you and your interests. They also limit the number of times you see an advertisement and help measure the effectiveness of advertising campaigns.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our Site. For more detailed information about how we use cookies and how to manage them, please refer to our Cookie Policy (available on our Site).

For California residents, please see Section 10 below regarding your rights under the CCPA/CPRA, including the right to opt out of the sale or sharing of personal information collected through cookies and tracking technologies.

8. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights. Below is a summary of the rights available to users located in the United States.

8.1 General Rights (All U.S. Users)

Under the FTC Act and general principles of consumer protection, all users have the right to:

• Know what personal information we collect about them.
• Expect that their personal information is handled in a fair and transparent manner.
• Opt out of receiving marketing communications.
• Request that we correct inaccurate information we hold about them.

8.2 California Residents — CCPA/CPRA Rights

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., where we need the information to complete a transaction, detect security incidents, or comply with a legal obligation).
• Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. To exercise this right, click the "Do Not Sell or Share My Personal Information" link on our Site or contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You have the right to direct us to limit our use of sensitive personal information to what is necessary to perform the services you have requested.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, provide a different level of service, or suggest that you will receive a different level of service because you exercised your rights.
• Right to Data Portability: You have the right to receive your personal information in a portable, usable format that allows you to transmit it to another entity where technically feasible.

To submit a request to exercise any of these rights, please contact us using the information in Section 12 (Contact Us) below. We will verify your identity before processing your request and will respond within the timeframes required by applicable law (generally 45 days, with the possibility of a 45-day extension where reasonably necessary).

8.3 Authorized Agents

California residents may designate an authorized agent to submit a privacy rights request on their behalf. We will require written proof of the agent's authorization and may still verify your identity directly before processing the request.

9. Children's Privacy

Our Site and services are intended for use by adults who are 18 years of age or older. We do not knowingly collect personal information from children under the age of 18 (or under the age of 13 as defined by the Children's Online Privacy Protection Act (COPPA)).

If you are under 18 years of age, please do not use our Site, create an account, or submit any personal information to us. If we learn that we have inadvertently collected personal information from a child under 18 without verifiable parental consent, we will take prompt steps to delete that information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

10. International Data Transfers

Via 313 is based in the United States, and all of our operations, including data storage and processing, are primarily conducted within the United States. If you are accessing our Site from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our Site and services, you consent to the transfer of your information to the United States. We take steps to ensure that your information is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

If we transfer personal data internationally in connection with service providers or business partners located outside the United States, we will implement appropriate safeguards, such as standard contractual clauses or other legally recognized transfer mechanisms, to ensure that your data receives adequate protection.

11. Third-Party Websites and Links

Our Site may contain links to third-party websites, applications, and services that are not owned or operated by Via 313. These may include food delivery platforms, social media channels, payment processors, and other partners. This Privacy Policy applies only to our Site and services.

We have no control over the privacy practices of third-party websites and are not responsible for their content or privacy policies. We encourage you to review the privacy policies of any third-party websites you visit before providing them with your personal information.

12. How to File a Complaint

If you have a concern or complaint about how Via 313 handles your personal information, we encourage you to first contact us directly so that we can work to resolve the issue. Please use the contact information provided in Section 13 below.

If you are not satisfied with our response, you may have the right to file a complaint with a relevant data protection or consumer protection authority. In the United States, relevant authorities include:

• Federal Trade Commission (FTC): The FTC handles complaints about unfair or deceptive business practices, including privacy violations. You may file a complaint online at www.ftc.gov/complaint or by calling 1-877-382-4357.
• California Attorney General (for California residents): If you are a California resident with concerns about your CCPA/CPRA rights, you may file a complaint with the California Attorney General's Office at oag.ca.gov/privacy/ccpa.
• California Privacy Protection Agency (CPPA): The CPPA is the primary enforcement agency for the CPRA in California. You may contact the CPPA at cppa.ca.gov.
• State Attorney General (other states): Residents of other states may have the right to file complaints with their respective state Attorney General's office regarding violations of state consumer privacy laws.

We are committed to cooperating with these authorities and resolving any complaints about our data practices in a timely and transparent manner.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will notify you by posting the updated Privacy Policy on our Site with a revised "Last Updated" date. For significant changes, we may also send you an email notification or display a prominent notice on our homepage.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Site and services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices — including requests to exercise your privacy rights — please contact us using the following information:

We will make every effort to respond to your inquiry or request within a reasonable timeframe and no later than the period required by applicable law. For California residents submitting CCPA/CPRA requests, we will respond within 45 calendar days of receiving your verifiable consumer request, with the possibility of a 45-day extension where reasonably necessary.