Privacy Policy

This Privacy Policy explains how El Pueblo Mexican Food ("El Pueblo," "we," "us," or "our") collects, uses, shares, and protects information about you when you visit elpueblomex.com (the "Site"), interact with us at any of our locations, or communicate with us through email, phone, or our web forms.

By using the Site or submitting information to us, you acknowledge the practices described in this Policy. If you do not agree, please do not use the Site.

This Policy applies to all visitors, customers, job applicants, event inquirers, catering clients, fundraiser applicants, and anyone else who interacts with El Pueblo. If you are a California resident, please also see our California Consumer Privacy Act notice for rights specific to you.

Information we collect

We collect the following categories of information, depending on how you interact with us:

Information you provide directly: name, email address, phone number, organization or school (for catering and fundraisers), preferred location, event date and size, job history, resume content, message content, and any other information you choose to submit via our contact, catering, fundraiser, event, or careers forms.

Order information: when you place an online order we direct you to order.online (or a similar ordering partner); payment data, cart contents, and delivery details are handled under their privacy policies, not ours. We may receive confirmation information (order number, location, timestamp) to service your order.

In-restaurant interactions: when you dine in, order at a counter, or pay at one of our locations, point-of-sale systems may capture limited transaction information (order total, payment method type, timestamp). We do not store full payment card numbers.

Automatically collected information: when you visit the Site, we and our service providers automatically collect technical information including IP address, approximate location derived from IP, browser type and version, operating system, device identifiers, referring URL, pages viewed, time spent, and actions taken (such as button clicks and form submissions).

Cookies and similar technologies: we use first-party and third-party cookies, pixels, local storage, and related technologies as described in our Cookie Policy.

Information from third parties: we may receive information about you from analytics providers (Google Analytics), form-handling providers, and social media platforms if you engage with our profiles or tagged posts.

Sensitive information: we do not intentionally collect Social Security numbers, driver's license numbers, financial account credentials, genetic or biometric data, precise geolocation, or information about race, religion, or sexual orientation. If you choose to include such information in a resume or message, please redact it before submission.

Sources of information

Directly from you through web forms, email, phone calls, and in-person interactions.

Automatically from your browser or device when you visit the Site.

From service providers and analytics tools that help us operate the Site and understand audience behavior.

From social media platforms if you publicly interact with our accounts.

How we use information

To respond to inquiries, catering requests, event bookings, fundraiser applications, and general messages.

To review, process, and communicate about job applications; to schedule interviews; to verify information you supply.

To coordinate with ordering and catering partners so your order is prepared and delivered.

To operate, maintain, secure, and improve the Site — including debugging, preventing abuse, and analyzing which pages and features are useful.

To understand aggregate audience behavior through analytics tools so we can improve our menu presentation, location pages, and customer service.

To send transactional messages (responding to your inquiry, confirming receipt of an application) and, with your consent, occasional updates about openings, events, or promotions.

To comply with legal obligations (tax, employment, health-code reporting) and to enforce our Terms of Service.

To protect the rights, property, or safety of El Pueblo, our staff, customers, or the public — for example, by investigating suspected fraud or responding to a subpoena.

Legal bases for processing

Where required by law (for example, if you are in a jurisdiction with data-protection rules such as the EU GDPR), our lawful bases for processing are: your consent (which you can withdraw); performance of a contract with you (processing your order or application); our legitimate interests (running a safe, useful Site and communicating with customers) balanced against your rights; and compliance with legal obligations.

Most of our users are based in the United States; we process information primarily in the United States.

How and with whom we share information

We do not sell your personal information for money, and we do not share your personal information for cross-context behavioral advertising.

We share information only with the following categories of recipients, and only to the extent needed:

Service providers and processors that help us operate the Site or business — for example: web hosting (Vercel), content delivery and security (Cloudflare), domain services, email delivery, analytics (Google), form-handling services, and ordering partners (order.online). These parties are bound by contract to use the information only for the purpose we engaged them and to protect it.

Legal and regulatory recipients when we are required to disclose information by law, court order, subpoena, or other legal process, or to protect rights, safety, or property.

Business transfer recipients in the event of a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets — in which case we will continue to ensure the confidentiality of your personal information and will give affected users notice before personal information becomes subject to a different privacy policy.

With your consent or at your direction, for any purpose you authorize.

Third-party services

Key third-party services that may process your data include: Google Analytics (site usage measurement; see Google's Privacy Policy), Vercel (hosting), Cloudflare (content delivery and DDoS protection), order.online (online ordering), and Gmail/Google Workspace (email for info@elpueblomex.com).

We do not control the privacy practices of these services. Please review their policies for details about how they handle your information.

Cookies and tracking technologies

See our Cookie Policy for details on the specific cookies, local-storage items, and tracking technologies used on this Site, the categories they belong to, and how to manage them.

We honor recognized opt-out signals, including the Global Privacy Control (GPC), as described in the Cookie Policy.

Data retention

We retain personal information only as long as necessary for the purpose it was collected, to comply with legal, accounting, or reporting obligations, or to resolve disputes and enforce agreements.

General guidelines we follow: contact-form submissions and inquiries — up to 24 months after the last interaction; catering and event records — up to 4 years for tax and business-record purposes; job applications — up to 24 months (or longer if applicable law requires); analytics data — aggregated indefinitely, but individual-level data typically rotates out within 26 months (the default Google Analytics retention window).

When retention is no longer required, we delete, anonymize, or securely dispose of the information.

Data security

We apply reasonable administrative, technical, and physical safeguards designed to protect personal information — including HTTPS on the Site, access controls on internal tools, encryption at rest where supported by our vendors, and staff training on handling customer information.

No system is perfectly secure. If you believe the security of your interaction with us has been compromised, contact us immediately at info@elpueblomex.com.

Children's privacy

The Site is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

If you believe a child has provided us with personal information in violation of this Policy, please contact us and we will delete the information.

Your choices and rights

Regardless of where you live, you may: ask us what information we have about you; ask us to delete it; ask us to correct it; unsubscribe from any marketing messages; decline to provide information (though this may limit our ability to respond).

Depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, and many other states and countries), you may have additional rights such as the right to receive a portable copy of your information, to opt out of targeted advertising (we do not engage in this), or to appeal a decision we make. California residents should see the California Consumer Privacy notice for state-specific rights.

To exercise these rights, email info@elpueblomex.com with the subject "Privacy Request" and describe what you are asking for. We will verify your identity (typically by confirming information we already have on file) and respond within 45 days (extendable by another 45 days if reasonably necessary).

Do Not Track and Global Privacy Control

Most browsers offer a Do Not Track ("DNT") setting. There is no uniform industry standard for interpreting DNT, so we do not currently respond to DNT signals.

We do, however, recognize the Global Privacy Control (GPC). Visitors whose browser sends a GPC signal will be treated as having opted out of any "sale" or "sharing" of personal information (as those terms are defined under California law), to the extent applicable.

California Shine the Light

California Civil Code § 1798.83 entitles California residents to request information about disclosures of personal information to third parties for the third parties' direct marketing purposes. We do not disclose personal information to third parties for their direct marketing. To request confirmation, email info@elpueblomex.com with "Shine the Light" in the subject line.

International data transfers

El Pueblo is based in the United States, and our service providers are primarily located in the United States. If you access the Site from outside the United States, your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your home jurisdiction. By using the Site you consent to this transfer.

Links to other sites

The Site may contain links to websites operated by third parties (such as our ordering partners, social networks, or news outlets). We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of every site you visit.

Changes to this policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If the changes are material, we will provide additional notice (such as a banner on the Site or an email to subscribers).

Continued use of the Site after changes take effect constitutes acceptance of the revised Policy.

How to contact us

El Pueblo Mexican Food — Privacy

Email: info@elpueblomex.com

Postal: 820 Birmingham Drive, Cardiff, CA 92007 (Attn: Privacy)

We aim to respond to privacy inquiries within 10 business days.