Privacy Policy

Last updated: January 1, 2025

1. Introduction

Costa Vida ("we," "us," or "our") operates the website at https://costavldas.rest and offers a digital Mexican recipes book. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, purchase our digital cookbook, or interact with any part of our services. By accessing our website or purchasing our products, you consent to the practices described in this policy.

2. Information We Collect

We collect several types of information from and about users of our website, including:

• Personal identifiers: name, email address, billing and shipping addresses, and phone number when you place an order.
• Payment information: credit card details, PayPal email, or other payment processing data (handled through secure third-party payment processors; we never store raw card data).
• Technical data: IP address, browser type and version, operating system, time zone setting, browsing actions and patterns, pages viewed, and device identifiers.
• Cookies and tracking technologies: We use cookies, pixels, and similar technologies (including Google Analytics and Meta Pixel) to enhance your experience, analyze site traffic, and measure marketing campaign performance.

3. How We Use Your Information

The data we collect is used for the following purposes:

• To process and deliver your orders of the digital recipes book.
• To manage your account and provide customer support.
• To send you transactional emails (order confirmations, download links, and receipts).
• To send marketing communications, newsletters, or promotional offers if you have opted in (you may opt out at any time).
• To improve our website, products, and user experience through analytics.
• To detect, prevent, and address security issues, fraud, or illegal activity.
• To comply with legal obligations and enforce our Terms and Conditions.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract performance: processing necessary to deliver our digital product to you.
• Legitimate interests: analytics, security, and improving our services.
• Consent: for marketing communications and non-essential cookies.
• Legal obligation: to comply with applicable laws.

5. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience. Cookies are small files stored on your device. We use:

• Essential cookies: required for basic functionality (session, security).
• Analytics cookies: Google Analytics (with anonymized IP option) to understand user behavior and improve our website.
• Marketing cookies: Meta Pixel (Facebook) for conversion tracking and retargeting advertising. You can disable these via your browser settings or our cookie consent tool.

You can control or delete cookies through your browser preferences. However, disabling some cookies may affect website performance and your ability to use certain features.

6. Sharing Your Information

We do not sell, rent, or trade your personal data to third parties. We share information only with trusted service providers who assist us in operating our business, including:

• Payment processors (such as Stripe or PayPal) to handle your transactions securely.
• Email delivery services (e.g., Mailchimp) to send you order updates and newsletters.
• Analytics providers (Google Analytics) to understand site usage.
• Advertising platforms (Meta/Facebook) for targeted ads, under strict data processing agreements.
• Legal authorities when required by law or to protect our legal rights.

7. Data Storage and Security

We implement appropriate technical and organizational safeguards to protect your personal data, including SSL-encrypted transmissions, secure servers, and restricted access controls. Payment data is stored by our payment processors and never on our servers. Despite our efforts, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security. We retain your data only as long as necessary for the purposes stated in this policy or as required by applicable laws.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access – request a copy of your data.
• The right to rectification – correct inaccurate data.
• The right to erasure – request deletion of your data (subject to legal retention obligations).
• The right to restrict processing.
• The right to data portability (EU/UK).
• The right to object to processing for direct marketing.
• The right to withdraw consent at any time.
• California residents (CCPA/CPRA): right to know, delete, and opt-out of sale/sharing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external sites (e.g., social media services). We are not responsible for the privacy practices or content of such third-party sites. We encourage you to review their privacy policies independently.

10. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us immediately, and we will delete such data.

11. International Transfers

Your data may be transferred to and processed in countries outside your residence, including the United States. We ensure appropriate safeguards (e.g., Standard Contractual Clauses) when transferring EEA/UK data internationally.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be posted on this page with a revised "Last updated" date. Where required by law, we will notify you via email. Your continued use of the website after changes constitutes acceptance.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach us at:

• Email: [email protected]
• Postal: Costa Vida LLC, 1234 Mexican Kitchen Ave, San Diego, CA 92101, USA

We are committed to resolving your inquiries promptly. If we fail to resolve a complaint, EEA/UK residents may contact their local data protection authority.