Privacy Policy

Welcome to Zupas ("we," "us," "our," or the "Company"). We operate the website located at mealzupas.click (the "Site") and provide food-related products and services to our customers across the United States. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, place an order, or otherwise interact with us.

Please read this Privacy Policy carefully. If you disagree with its terms, please discontinue use of our Site immediately. This Privacy Policy applies to all information collected through our website, and/or any related services, sales, marketing, or events (collectively, the "Services").

1. Company Information

For the purposes of this Privacy Policy, the data controller responsible for your personal information is:

2. Scope and Applicable Law

As a business operating in the United States, we comply with applicable federal and state privacy laws, including but not limited to:

• The California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA), for California residents;
• The Federal Trade Commission Act (FTC Act), which governs unfair or deceptive acts and practices related to consumer privacy and data security;
• The Children's Online Privacy Protection Act (COPPA), which governs online collection of personal information from children under the age of 13;
• The CAN-SPAM Act, which governs commercial electronic communications;
• The Electronic Communications Privacy Act (ECPA); and
• Any other applicable state privacy statutes and regulations in the states where we operate.

If you are a resident of California, please refer to Section 13 for additional rights and disclosures specifically applicable to you under the CCPA/CPRA.

3. Information We Collect

We collect information about you in a variety of ways depending on how you interact with our Site and Services. The types of information we collect include:

3.1 Personal Information You Provide to Us

When you voluntarily provide it to us, we collect personally identifiable information, such as:

• Identity Data: First name, last name, username or similar identifier, and date of birth (where applicable).
• Contact Data: Billing address, delivery address, email address, and telephone numbers.
• Financial Data: Payment card details, billing information, and transaction history. Note: we do not store full payment card numbers — this data is processed by PCI-DSS-compliant third-party payment processors.
• Order Data: Details about the food products and meals you have ordered, your dietary preferences, special instructions, and order history.
• Account Data: Login credentials (username and password) if you create an account on our Site.
• Communications Data: Any messages, inquiries, feedback, or reviews you submit to us via email, contact forms, or other communication channels.
• Marketing and Communication Preferences: Your preferences in receiving marketing materials from us and your communication preferences.

3.2 Automatically Collected Information

When you visit or use our Site, certain information is collected automatically from your device and browser. This includes:

• Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), device identifiers, and screen resolution.
• Usage Data: Pages you visit on our Site, time spent on each page, links clicked, referring URLs, search queries, and navigation paths through our Site.
• Log Data: Server logs that record access requests, timestamps, error logs, and other technical data generated by your use of our Site.
• Location Data: General geographic location derived from your IP address (city/region level). We do not collect precise GPS location without your explicit consent.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixels, and similar tracking technologies. See Section 8 for more details.

3.3 Information from Third Parties

We may receive information about you from third parties, including:

• Social media platforms (if you connect your social accounts or interact with our social media pages);
• Analytics providers (such as Google Analytics);
• Payment processors and fraud prevention services;
• Advertising partners and marketing platforms; and
• Delivery and logistics partners involved in fulfilling your food orders.

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, including coordinating delivery or pickup;
• To create and manage your account on our Site;
• To process payments and prevent fraudulent transactions;
• To communicate with you about your orders, including confirmations, updates, and delivery status;
• To handle returns, refunds, or complaints related to your orders; and
• To provide customer support and respond to your inquiries.

4.2 Marketing and Communications

• To send you promotional emails, newsletters, and special offers about our food products and services, where you have provided consent or where permitted by applicable law;
• To personalize your experience on our Site by showing you relevant content, recommendations, and promotions based on your order history and preferences;
• To conduct surveys, contests, or promotions; and
• To display targeted advertising on our Site and third-party platforms.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

4.3 Analytics and Site Improvement

• To analyze how users interact with our Site in order to improve functionality, design, and user experience;
• To monitor and analyze trends, usage patterns, and activities in connection with our Services;
• To conduct research and generate statistical reports about our user base and service performance; and
• To troubleshoot technical issues and maintain the security and integrity of our Site.

4.4 Legal Compliance and Protection

• To comply with applicable laws, regulations, legal processes, or governmental requests;
• To enforce our Terms of Service and other agreements;
• To protect the rights, property, or safety of Zupas, our customers, or others;
• To detect, investigate, and prevent fraudulent, harmful, unauthorized, or illegal activity; and
• To respond to legal claims or disputes.

4.5 Legal Bases for Processing

We rely on the following legal bases when processing your personal information:

• Performance of a Contract: Processing necessary to fulfill your orders and provide our Services;
• Legitimate Interests: Processing for our legitimate business interests, such as improving our Services, fraud prevention, and direct marketing (where not overridden by your interests);
• Legal Obligation: Processing required to comply with applicable law; and
• Consent: Where you have given explicit consent, such as for marketing communications or certain cookies.

5. Sharing Your Information with Third Parties

We do not sell, trade, or rent your personal information to third parties for their own marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers

We engage trusted third-party vendors and service providers who perform functions on our behalf, including:

• Payment Processors: To securely process your payments (e.g., Stripe, PayPal, or similar providers);
• Delivery and Logistics Partners: To fulfill and deliver your food orders;
• Cloud Hosting and IT Providers: To host our website and store data securely;
• Email and Communication Providers: To send transactional and marketing emails;
• Analytics Providers: Such as Google Analytics, to help us understand site usage;
• Customer Support Tools: To manage and respond to customer inquiries; and
• Advertising and Marketing Platforms: To deliver targeted advertisements.

All service providers are contractually obligated to use your personal information only as directed by us and in accordance with this Privacy Policy. They are prohibited from using your data for their own purposes.

5.2 Legal Requirements

We may disclose your personal information if required to do so by law or in response to:

• Valid subpoenas, court orders, or other legal processes;
• Requests from government authorities or law enforcement agencies;
• Requirements necessary to comply with applicable laws and regulations; or
• Situations where we believe disclosure is necessary to protect the rights, safety, or property of Zupas, our users, or the public.

5.3 Business Transfers

In the event that Zupas undergoes a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar business transaction, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your personal information with other parties when you have given us your explicit consent to do so.

6. Data Security

We take the security of your personal information seriously and implement a variety of technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers. Payment data is encrypted and handled by PCI-DSS-compliant payment processors;
• Access Controls: Access to personal information is restricted to authorized personnel who have a legitimate need to access it for business purposes. Employees are bound by confidentiality obligations;
• Secure Servers: Our data is stored on secure servers with firewalls, intrusion detection systems, and regular security audits;
• Password Protection: If you create an account, your password is stored in hashed form and is never stored in plain text;
• Regular Security Reviews: We conduct periodic security assessments and vulnerability testing to identify and address potential risks;
• Incident Response: We maintain a data breach response plan and will notify affected individuals and relevant authorities in the event of a data breach as required by applicable law.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention periods are as follows:

When your personal information is no longer required, we will securely delete or anonymize it in accordance with our data retention schedules and applicable legal requirements.

8. Cookies and Tracking Technologies

Our Site uses cookies, web beacons, pixels, and similar tracking technologies to enhance your browsing experience, analyze Site usage, and deliver relevant advertising.

8.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently, remember your preferences, and provide information to website owners about how the site is used.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our Site, such as enabling you to add items to your cart and complete orders. These cannot be disabled.
• Performance and Analytics Cookies: Allow us to recognize and count visitors and understand how visitors navigate our Site (e.g., Google Analytics).
• Functionality Cookies: Enable us to remember your preferences (such as your location, language, or dietary settings) for a better experience.
• Targeting and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, if you choose to disable cookies, some features of our Site may not function properly.

You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

For more detailed information about how we use cookies and how to manage your preferences, please refer to our Cookie Policy available on our website at mealzupas.click.

9. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights with respect to your personal information. We are committed to honoring these rights.

9.1 Right to Access

You have the right to request a copy of the personal information we hold about you. Upon a verified request, we will provide you with details of the personal information we hold, the purposes for which it is processed, and the recipients with whom it has been shared.

9.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. You may also update certain account information directly by logging into your account on our Site.

9.3 Right to Deletion ("Right to Be Forgotten")

You may request that we delete your personal information. We will honor such requests to the extent permitted by applicable law. Please note that we may be required to retain certain information for legal, tax, or accounting purposes even after you request deletion.

9.4 Right to Data Portability

Where applicable, you have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that information to another data controller.

9.5 Right to Opt Out of Marketing

You have the right to opt out of receiving marketing communications from us at any time. You can exercise this right by clicking the "unsubscribe" link in marketing emails or by contacting us at [email protected].

9.6 Right to Object to Processing

You may have the right to object to certain types of processing of your personal information, including processing for direct marketing purposes or based on our legitimate interests.

9.7 How to Exercise Your Rights

To exercise any of the rights described above, please submit a request to us by emailing [email protected] with the subject line "Privacy Rights Request." Please include:

• Your full name and email address associated with your account;
• A description of the right you wish to exercise; and
• Any information necessary to verify your identity.

We will respond to your request within 30 days of receipt. In some cases, we may need to extend this period and will inform you accordingly. We may need to verify your identity before processing your request to prevent unauthorized access to your information.

10. Children's Privacy

Our Site and Services are intended for individuals who are 18 years of age or older. We do not knowingly collect personal information from children under the age of 13 in accordance with the Children's Online Privacy Protection Act (COPPA), or from individuals under the age of 18 without verified parental consent.

If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take steps to remove such information from our records as quickly as possible.

If we become aware that we have inadvertently collected personal information from a child under the age of 13, we will delete that information from our systems without delay. By using our Site, you represent and warrant that you are at least 18 years of age.

11. International Data Transfers

Zupas is based in the United States. If you are accessing our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers and systems are located.

The data protection laws in the United States may differ from those in your country of residence. However, we take appropriate measures to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable law, regardless of where it is processed.

By using our Services, you consent to the transfer of your information to the United States and other countries where we operate or engage service providers. We will take all reasonably necessary steps to ensure that your data is treated securely and in accordance with this Privacy Policy when transferred internationally.

12. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). This section provides additional disclosures required by California law.

12.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

12.2 California Consumer Rights

As a California resident, you have the following rights:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for which it was used, and the third parties with whom it was shared.
• Right to Delete: You may request that we delete personal information we have collected about you, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate personal information we hold about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information as defined under the CCPA/CPRA. We do not sell personal information for monetary consideration. To opt out of sharing for cross-context behavioral advertising, please contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You may direct us to limit the use of your sensitive personal information to what is necessary to perform the services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your California privacy rights.

To submit a California privacy rights request, contact us at [email protected] with the subject line "California Privacy Rights Request." We will respond within 45 days as required by the CCPA/CPRA.

13. Third-Party Websites and Links

Our Site may contain links to third-party websites, applications, and services that are not owned or controlled by Zupas. This Privacy Policy applies only to information collected by our Site and Services. We have no control over and assume no responsibility for the privacy practices of any third-party websites or services.

We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link to a third-party website on our Site does not imply our endorsement of that website or its privacy practices.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or for other operational, legal, or regulatory reasons. When we make material changes, we will:

• Post the updated Privacy Policy on our Site with a new "Last Updated" date;
• Send an email notification to registered users where required by law; and/or
• Display a prominent notice on our Site.

Your continued use of our Site after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15. How to File a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority.

15.1 Federal Trade Commission (FTC)

The Federal Trade Commission enforces consumer privacy and data security laws in the United States. You may file a complaint at:

• Website: www.ftc.gov/complaint
• Telephone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

15.2 California Privacy Protection Agency (CPPA)

California residents may also file complaints with the California Privacy Protection Agency, which enforces the CCPA/CPRA:

• Website: cppa.ca.gov
• Email: [email protected]

15.3 State Attorney General Offices

Residents of individual U.S. states may also file privacy complaints with their respective State Attorney General's office. Contact information for state attorneys general can be found through the National Association of Attorneys General (NAAG) at www.naag.org.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team:

We are committed to working with you to achieve a fair resolution of any complaint or concern about privacy. We will acknowledge receipt of your inquiry within 5 business days and aim to resolve privacy-related inquiries within 30 days of receipt.

This Privacy Policy was last updated on June 13, 2026. This document constitutes the complete and current Privacy Policy for Zupas and supersedes any previous versions. By continuing to use mealzupas.click after this date, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.