Privacy Policy

---

LAS PALAPAS PRIVACY POLICY 

LAST MODIFIED: July 2, 2025

At Las Palapas, we are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and disclose personal information about our customers or individuals when they engage with our restaurant, catering and dining services (our “Services”), visit our website at laspalapas.com (our “Website”) or utilize our Las Palapas Online mobile application (our “App”). This Policy applies only to our Services, Website and App and not to other companies’ or organizations’ websites, services or applications, even if we link or interact with them.

Personal Information We Collect. 

When you engage with our Services, either in person, through the Website or our App, we may collect personal and behavioral information about you when you place an order, sign up for our loyalty rewards program, or otherwise interact with us. The information we collect may include your name, email address, phone number, birthday, address, and other contact details voluntarily submitted during account registration, online ordering, or loyalty participation. We may also collect your login credentials, delivery address, order frequency, order and payment history, and location preferences. 

When you visit our Website or use our App, we may automatically collect online browsing and device information, such as device type, browser, IP address, and technical information related to your interaction with our digital Services. 

When you use our App, we may collect your precise geolocation if you opt-in to such functionality, which is considered “sensitive” personal data.

We may also gather demographic data (such as age or gender), your preferences (such as favorite menu items or dietary restrictions), and customer-submitted reviews, survey responses, or service-related comments.

How We Use Your Personal Information. 

We may use your information to fulfill your orders, communicate with you about your orders and promotions, improve our services, market and advertise our Services and maintain the security of our Website and App. 

We may also use your information to personalize your experience, such as offering personalized promotions and recommendations. In addition, we use this information for loyalty and rewards management (such as tracking guest visits, reward behavior, issuing promotional offers, and enhancing loyalty program participation), personalized marketing and promotions tailored to your preferences and order history, operational insights and menu optimization (including analyzing behavior patterns and identifying top-performing items), customer support and retention (such as resolving service issues or responding to inquiries), and location-based targeting to promote local offers or highlight the nearest Las Palapas location.

We will use your precise geolocation for geofence push messaging and for targeted messaging within our App.

We also may use your online browsing and device information for online marketing and analytics purposes.

How We Disclose Your Personal Information.      

We may disclose your personal information with our third-party service providers, such as delivery services, payment processors, email messaging vendors, online survey tool providers and marketing partners. We also share data with our data hosting and technology vendors who store and manage our data as well as host the Website’s content and infrastructure and provide functionality for our App. Our service providers are contractually required to use your information only for the services they provide to us and not for their own purposes. 

We may also disclose your personal information:

· In the event of an audit to external auditors in order to comply with internal policies or legal obligations; 

· To our affiliates for Service-related purposes;

· In connection with corporate transactions, such as mergers or asset transfers; or

· When required by law or legal process, including to courts, law enforcement, arbitrators, or other governmental bodies.

We may also disclose your online browsing information to our online marketing and advertising partners, as described in the next section.

Our Online Advertising And Cookie Practices.      

We may use cookies, web beacons, and other similar technologies to collect information about your browsing behavior and preferences on our Website. We use this information to market our Services as well as analyze and improve our Website and Services. You can set your browser to refuse cookies, but this may limit your ability to use certain features of our Website. Information on how to delete or limit cookies can be found in the Section titled “How To Opt-Out Of Tracking And Restrict Cookies.”

We utilize online advertising and analytics with regards to our Website and App. This means that your online browsing and device information may be disclosed to third-parties for marketing and analytics purposes.

When you interact with third-party plug-ins (such as Facebook, Instagram, TikTok or YouTube) on our Website, those platforms may receive your information directly about your online browsing habits or device information.

We use remarketing with our service providers to advertise online. These services may come from sites such as Google, Facebook, and any other display advertising partner to advertise on third-party websites to previous visitors to our Website. 

We use Google Analytics to analyze how individuals use our Website. We will package up information about how individuals interact with our Website and send it to Google Analytics to be processed into reports. This information includes basic pageviews and visit data such as device type, operating system, and browser type. When Google Analytics processes data, it aggregates and organizes the data based on particular criteria like whether a user’s device is mobile or desktop, or which browser they’re using. If, at any time, you choose not to participate in the use of analytics software, please use your web browser’s available opt-outs as described in the section ‘How To Opt-Out Of Tracking And Restrict Cookies.”

We also may utilize marketing tools like Meta Pixel. Meta Pixel is a snippet of code that sends data back to Meta about people who uses these sites and allows us to provide custom advertising on Meta properties (like Facebook and Instagram). The data provided to Meta may include information about how you interact with our Website, including your search queries, what you add to your online cart and your purchases.

How To Opt-Out Of Tracking And Restrict Cookies. 

You can opt-out of the tracking of your online behavior by:

· visiting the Network Advertising Initiative (NAI) website opt-out page:  http://www.networkadvertising.org/choices; 

· visiting the Digital Advertising Alliance (DAA) opt-out page at https://youradchoices.com/; and 

· downloading and installing the Google browser plug-in from the following link: http://tools.google.com/dlpage/gaoptout. 

You can control and delete cookies through your browser settings through the following: 

· Google Chrome, 

· Mozilla Firefox, 

· Safari, 

· Opera, 

· Microsoft Internet Explorer, 

· Microsoft Edge

· Safari for iOS (iPhone and iPad), and

· Chrome for Android. 

Please be aware that restricting cookies may impact the functionality of the Website. For example, refusing cookies will not allow us to present the Website in your preferred language or remember your log-in information. Additional general information about cookies, including how to be notified about the placement of new cookies and how to disable cookies, can be found at www.allaboutcookies.org.

SMS Texting Privacy. Las Palapas may use text messaging to communicate with you regarding your orders, promotions, and other important information. We may share your phone number with our third-party text messaging provider to send these messages. We do not sell or rent your phone number to any third parties. Message and data rates may apply. By providing your phone number, you consent to receive recurring automated promotional and personalized marketing text messages. Consent is not a condition of purchase.

Your Texas Consumer Privacy Rights.

The Texas Data Privacy and Security Act provides the residents of Texas with the right to request the data rights as described in this section. Details on how to submit your request to exercise your data rights are in the section titled “How to Submit a Request.” 

· You may have the right to correct inaccurate personal information that we maintain about you, considering the nature of the information and the purposes for which it is processed. 

· You may have the right to request that we delete the personal information we maintain about you. 

· You may have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another entity, where technically feasible. 

· You may have the right to request to opt out of automated profiling using your personal information that produces legal or similarly significant effects concerning you (if any). Applicable state laws allow you to opt out of the application of automated profiling when it relates to substantive decision making, such as denial of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health-care services, or access to essential goods or services. However, we do not profile individuals in a manner that produces legal or similarly significant effects. 

· You may have the right to opt out of the sale or use of your personal information for targeted advertising. You can also opt out of the sale or use of your personal information for targeted advertising by adjusting your cookie settings. Information on how to delete cookies can be found in the Section titled How To Opt-Out Of Tracking And Restrict Cookies. To opt out, you may adjust your cookie preferences, or modify settings through the browser or device you use to access the Website. 

How to Submit a Request. 

You may submit your request to exercise your data rights by emailing support@mylaspalapas.com with your contact information and the data right(s) that you are seeking to assert. 

How We Process Data Rights Requests. 

Once we receive your request to exercise a right, we will confirm receipt and begin to evaluate, and if appropriate, process the request. Please note that:

· We may require that you provide additional information to confirm your identity, including providing us with at least two or more pieces of personal information to match against personal information that we currently maintain about you. We reserve the right to reject your request if we are unable to verify your identity to a sufficiently high level of certainty. The information you provide to verify your identity will only be used for verification purposes, and a record of your request, including certain information contained within it, will be maintained by us for our files.

· To authenticate any request to correct personal information, you may be required to provide authentication information. 

· Certain laws or other legal requirements might prevent some personal information from being disclosed or deleted. 

If you fail or refuse to provide the necessary information, we may not be able to process your request.

If we reject a request for any reason, we will inform you of the basis of the rejection. Not all individuals about whom we possess information will have access to these rights and we may not be able to provide these rights to everyone due to legal and jurisdictional limitations. We may not be able to comply with your request for a number of reasons, including:

· you do not live in a state that grants you the specific right that you have requested;

· the information that you’ve requested is not subject to the regulation that grants you the right to make a request in relation to your personal information;

· we are prevented or exempted by law, regulation or rule from complying with your request;

· we are not the owner or controller of the data about which you are requesting;

· we do not maintain your personal information in a manner that is connected to your identity;

· we are not able to comply with your request without incurring disproportionate burden or expense; or

· if complying with your request conflicts with our proper and reasonable ability to administer our sites, to administer our business and related relationships or to establish, defend or administer legal claims.

If any of the above reasons apply, we will let you know in our response to your request. 

Some states allow you to designate an authorized agent to make a request on your behalf. An authorized agent should make a request through the same mechanisms that are available to individuals as described in this Policy. The request should clearly identify that the request is being made by an authorized agent and must include evidence of authorization. If we receive a request from an individual or an entity purporting to make the request on behalf of another individual, we can only comply with the request if we are allowed by applicable state law and able to sufficiently authenticate both the identity of the individual as well as the authorized agent’s authority to act on that individual’s behalf.

Appeals and Complaints. If you disagree with our decision to reject your request or with any portion of our response, you have the right to appeal within a reasonable period of time. If you wish to appeal, please clearly and plainly describe your basis of disagreement with our decision by responding through the same means by which we communicated our refusal. We will review your appeal and either change our decision or reject your appeal, and in either case, we will provide a written explanation of the reason for the decision. This decision will be final. However, if you still disagree with our decision, you have the right to submit a complaint to your attorney general HERE.

Your Choices. You can opt out of receiving marketing emails or texts from us at any time by following the unsubscribe instructions in the message. You can also update your information or delete your account by contacting us at support@mylaspalapas.com.

Security.

 We take reasonable measures to protect your information from unauthorized access, use, or disclosure. However, no security measure is completely foolproof, and we cannot guarantee the security of your information.  

Children's Privacy.  

Our Website and App are not intended for children under the age of 13. We do not knowingly collect, solicit, or store personal information from children under the age of 13 through our Website and App. If we become aware that such information has been collected, we will promptly delete it.

Changes to this Policy. 

We may update this Privacy Policy from time to time. We will notify you of any material      changes to our privacy practices by posting the updated policy on our Website.