PRIVACY POLICY

Privacy Policy

Last Updated: September 24, 2026

Costa Del Sol (“Costa Del Sol,” “we,” “us,” or “our”) respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit www.costadelsologden.com, place an order, contact us, interact with our website, participate in promotions, communicate with us, or otherwise use our online or restaurant-related services.

By using our website, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The information we collect depends on how you interact with us.

Information You Provide Directly

We may collect information that you voluntarily provide, including:

Name
Email address
Telephone number
Billing information
Pickup or delivery information, when applicable
Order information and purchase history
Food preferences or special instructions you choose to provide
Reservation or event information, when applicable
Messages submitted through website forms
Feedback and customer service communications
Reviews, survey responses, or promotional entries
Marketing preferences
Any other information you voluntarily provide to us
Please avoid submitting sensitive medical information through general website forms. If you provide information relating to food allergies, dietary restrictions, or similar concerns, we will use that information only as reasonably necessary to respond to your request or provide the requested service.

Payment Information

When you make an online purchase, payment information may be collected and processed by our payment processor, website platform, online ordering provider, or another authorized payment service provider.

Costa Del Sol generally does not directly receive or store complete payment card numbers when payment information is processed through these providers. Those providers process payment information according to their own terms and privacy practices.

Information Collected Automatically

When you visit our website, certain information may be collected automatically, including:
IP address
Browser type
Device type
Operating system
Approximate geographic location derived from your IP address
Pages viewed
Referring website or source
Links or buttons clicked
Date and time of visits
Session duration
Website interactions
Cookie identifiers
Advertising or device identifiers
Information about how you reached or used our website
This information may be collected through cookies, pixels, tags, analytics technologies, server logs, and similar technologies.

2. How We Collect Information

We may collect information:

Directly from you
Through our website
Through online ordering systems
Through payment processors
Through reservation or delivery providers
Through website forms
Through cookies and similar technologies
Through analytics providers
Through advertising platforms
Through social media platforms
Through Google services
From service providers assisting us with our website or restaurant operations
From publicly available sources where permitted by law

3. How We Use Personal Information

We may use personal information to:

Process and fulfill food orders

Process payments and refunds

Provide pickup, delivery, reservation, or restaurant services

Respond to questions and customer service requests

Communicate about orders or transactions

Confirm purchases or reservations

Operate and maintain our website

Improve our menu, website, restaurant, and customer experience

Understand how visitors use our website

Measure website performance

Detect errors and technical problems

Prevent fraud, abuse, security incidents, and unlawful activity

Protect our customers, employees, business, and systems

Maintain business and transaction records

Send promotional communications when permitted by law

Measure advertising effectiveness

Display or improve advertising

Comply with tax, accounting, legal, regulatory, or law-enforcement requirements

Establish, exercise, or defend legal claims

Enforce our policies and agreements

Carry out other purposes disclosed when information is collected

We seek to collect and retain only information reasonably necessary for legitimate business purposes and applicable legal requirements.

4. Website Hosting and Wix

Our website is hosted using the Wix.com platform.

Wix provides website hosting, storage, security, analytics, forms, website functionality, and other services that help us operate the website.

As a result, information submitted through or collected by our website may be processed or stored using Wix systems and infrastructure.

Wix has its own privacy practices governing its processing of information.

5. Cookies and Similar Technologies

Our website uses or may use cookies and similar technologies.

Cookies are small files or identifiers placed on a device or browser that help websites function and provide information about website activity.

We may use the following categories of technologies:

Essential Cookies

These are necessary for security, website operation, navigation, online ordering, payment functionality, fraud prevention, and other essential website features.

These technologies generally cannot be disabled through our website without affecting website functionality.

Functional Cookies

These technologies may remember preferences or improve website functionality and convenience.

Analytics Cookies

These technologies help us understand how visitors interact with our website, including which pages are viewed, how visitors reached the website, and how the website performs.

Advertising and Marketing Technologies

If advertising technologies are enabled, they may help us measure advertising campaigns, understand whether advertising resulted in website visits or orders, create audiences, or deliver more relevant advertising.

Depending on the services installed on the website, these technologies may be provided by companies such as Google, Meta, Wix, or other advertising and analytics providers.

6. Cookie Choices

Where required by applicable law, visitors will be given choices concerning non-essential cookies or similar tracking technologies.

You may also control cookies through your browser settings.

Disabling certain cookies may affect website functionality.

Where required by applicable privacy law, we will process legally recognized browser-based opt-out preference signals or universal opt-out mechanisms in accordance with applicable requirements.

7. Google Services

Our website may use Google services, including services such as:

Google Analytics
Google Maps
Google Business Profile
Google Reviews
Google Ads
Google Tag technologies
Other Google services or integrations

These services may collect information about your device, browser, website activity, interactions, approximate location, advertising activity, or other information according to Google's applicable privacy practices.

Google operates independently from Costa Del Sol with respect to information it processes for its own purposes.

8. Meta and Other Advertising Platforms

We may use advertising tools offered by Meta Platforms or other advertising providers.

If these technologies are enabled, they may collect or receive information concerning website visits, device information, browser activity, pages viewed, interactions, or actions performed on our website.

This information may be used to:

Measure advertising performance
Attribute website activity to advertising campaigns
Create advertising audiences
Improve our advertising
Deliver advertising where permitted by applicable law

Where required, advertising technologies will be subject to applicable consent and privacy-choice requirements.

9. Online Ordering and Third-Party Services

Costa Del Sol may use third-party providers to support online ordering, payment processing, delivery, reservations, marketing, website functionality, analytics, communications, or other restaurant services.

When you use a third-party service, information may be transmitted directly to or processed by that provider.

Third-party providers may have their own privacy policies and terms.

Examples of service providers we may use include:

Website hosting providers
Online ordering systems
Payment processors
Delivery providers
Reservation providers
Analytics providers
Advertising platforms
Email providers
SMS or communications providers
Fraud-prevention and security services
Cloud hosting and technology providers

We encourage you to review the privacy practices of third-party services you choose to use.

10. How We Disclose Personal Information

We may disclose personal information to service providers and other parties when reasonably necessary for the purposes described in this Privacy Policy.

Recipients may include:

Website hosting providers
Payment processors
Ordering platforms
Delivery providers
Reservation providers
Analytics providers
Advertising providers
Technology providers
Professional advisers
Accountants
Attorneys
Insurance providers
Government agencies
Regulators
Law-enforcement authorities

We may also disclose information:

To complete a transaction requested by you
With your direction or consent
To investigate fraud or security incidents
To protect rights, property, safety, or security
To comply with a subpoena, court order, legal process, or applicable law
In connection with the sale, merger, restructuring, financing, acquisition, or transfer of some or all of the restaurant or its assets

11. Sale, Sharing, and Targeted Advertising

Costa Del Sol does not sell personal information to third parties in exchange for money.

However, some state privacy laws use broader definitions of “sale” or “sharing.” Certain advertising, analytics, cookie, or tracking activities may be considered a sale, sharing, or processing for targeted advertising under those laws even when no money is exchanged.

Where applicable law gives you the right to opt out of these activities, you may exercise that right through available website privacy controls, legally recognized browser preference signals, or by contacting us as described below.

We do not knowingly sell or share personal information belonging to children under 13.

12. Email Communications

If you provide your email address, we may use it to send:

Order confirmations
Transactional messages
Customer service communications
Restaurant updates
Promotional messages, where permitted by law

Marketing emails will include an appropriate method for unsubscribing where required.

Unsubscribing from promotional email does not prevent us from sending transactional or service-related communications that are necessary to complete an order or respond to your request.

13. Text Messages and Telephone Communications

If you provide a telephone number, we may use it for legitimate restaurant-related communications such as:

Order confirmations
Pickup notifications
Reservation communications
Customer service
Responses to inquiries

Marketing or automated promotional text messages will only be sent when permitted by applicable law and subject to any legally required consent.

Consent to receive marketing text messages is not a condition of purchasing goods or services where applicable law prohibits such a requirement.

You may withdraw consent to receive marketing text messages through the method described in the applicable message or by contacting us.

Message and data rates may apply depending on your wireless provider.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

Provide services
Complete transactions
Maintain business records
Comply with tax and accounting requirements
Comply with legal obligations
Resolve disputes
Prevent fraud
Protect our rights
Enforce agreements

Retention periods vary depending on the type of information, the reason it was collected, legal requirements, and legitimate business needs.

When personal information is no longer reasonably necessary, we may delete, anonymize, aggregate, or otherwise dispose of it in accordance with applicable requirements.

15. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Our website platform and service providers may also maintain their own security protections.

However, no website, network, database, internet transmission, or electronic storage system can be guaranteed to be completely secure.

For that reason, we cannot guarantee absolute security of information transmitted electronically.

16. Children's Privacy

Our website and restaurant services are intended for a general audience and are not directed toward children under 13.

We do not knowingly collect personal information online from children under 13 without appropriate parental or legal guardian authorization where required.

If we learn that personal information belonging to a child under 13 was collected in circumstances requiring parental consent, we will take reasonable steps to delete the information or otherwise address the situation as required by applicable law.

A parent or guardian who believes a child has provided personal information to us may contact us using the information below.

17. State Privacy Rights

Depending on where you live and whether a particular privacy law applies to Costa Del Sol, you may have certain rights regarding your personal information.

These rights may include the ability to:

Confirm whether we process your personal information
Request access to personal information
Request correction of inaccurate information
Request deletion of personal information
Obtain a portable copy of certain information
Opt out of certain sales of personal information
Opt out of certain sharing of personal information
Opt out of targeted advertising
Limit certain uses of sensitive personal information
Withdraw consent where processing is based on consent
Appeal certain decisions concerning a privacy request
Receive equal service without unlawful discrimination for exercising privacy rights

These rights are subject to applicable law, exceptions, eligibility requirements, verification requirements, and legal limitations.

Some privacy laws apply only to businesses meeting specific statutory thresholds. Nothing in this Privacy Policy is intended to represent that a particular state privacy statute applies to Costa Del Sol when the statutory requirements for that law are not met.

18. California Privacy Notice

If the California Consumer Privacy Act or another California privacy requirement applies to a particular interaction with Costa Del Sol, California residents may have rights concerning personal information collected about them.

Depending on the circumstances, categories of personal information we may collect include:

Identifiers such as name, telephone number, email address, IP address, or account identifiers
Customer and transaction information
Commercial information such as purchase or order history
Internet and electronic network activity
Approximate geolocation information
Inferences generated from website or purchasing activity
Communications you send to us
Sensitive information voluntarily provided to us where applicable

Sources may include:

Consumers directly
Website activity
Ordering and payment providers
Advertising and analytics providers
Service providers
Social media platforms
Publicly available sources

We use this information for the business and commercial purposes described throughout this Privacy Policy.

We may disclose these categories of information to the types of service providers and third parties identified throughout this Privacy Policy.

We do not sell personal information for monetary compensation.

Certain advertising or analytics technologies may constitute “sharing” or “sale” under California law where the applicable statutory requirements are met.

California residents entitled to exercise applicable rights may submit a request using the contact methods listed below.

We will not unlawfully discriminate against an individual for exercising an applicable privacy right.

19. Sensitive Personal Information

Depending on the circumstances, categories of personal information we may collect include:

Identifiers such as name, telephone number, email address, IP address, or account identifiers
Customer and transaction information
Commercial information such as purchase or order history
Internet and electronic network activity
Approximate geolocation information
Inferences generated from website or purchasing activity
Communications you send to us
Sensitive information voluntarily provided to us where applicable

Sources may include:

Consumers directly
Website activity
Ordering and payment providers
Advertising and analytics providers
Service providers
Social media platforms
Publicly available sources

We use this information for the business and commercial purposes described throughout this Privacy Policy.

We may disclose these categories of information to the types of service providers and third parties identified throughout this Privacy Policy.

We do not sell personal information for monetary compensation.

Certain advertising or analytics technologies may constitute “sharing” or “sale” under California law where the applicable statutory requirements are met.

California residents entitled to exercise applicable rights may submit a request using the contact methods listed below.

We will not unlawfully discriminate against an individual for exercising an applicable privacy right.

20. Privacy Requests

Where applicable law gives you privacy rights, you may submit a request by:

Using the contact form available at www.costadelsologden.com
Calling Costa Del Sol at 801-689-2129
Mailing your request to:

Costa Del Sol
2433 Adams Ave #133
Ogden, UT 84401

We may need to verify your identity before completing certain requests.

Verification may require information reasonably necessary to confirm that the request relates to you.

Where permitted by applicable law, an authorized agent may submit certain requests on your behalf. We may require verification of the agent's authority and your identity.

We may deny, limit, or retain information when permitted or required by law, including where information is needed to complete transactions, maintain legal records, prevent fraud, protect security, establish or defend legal claims, or comply with another legal obligation.

21. Global Privacy Control and Other Opt-Out Signals

Some browsers and browser extensions can transmit privacy preference signals such as Global Privacy Control (“GPC”).

Where applicable law requires recognition of a legally valid universal opt-out mechanism or browser-based opt-out preference signal, we will process the signal in accordance with applicable law.

A signal generally applies to the browser or device transmitting the signal and may not apply to other devices, browsers, or accounts.

22. Do Not Track

Some web browsers provide a “Do Not Track” setting.

There is not currently a single universally accepted standard governing all Do Not Track signals.

We respond to legally recognized opt-out preference mechanisms where required by applicable law.

23. External Websites and Social Media

Our website may contain links to:

Social media websites
Google
Ordering platforms
Delivery platforms
Payment providers
Review websites
Maps
Other third-party websites or services

Costa Del Sol does not control the privacy or security practices of independent third-party websites.

Your interaction with those services is governed by their own privacy policies and terms.

24. Social Media

If you communicate with Costa Del Sol through social media platforms such as Facebook, Instagram, or other services, the social media platform may separately collect or process information about your interaction.

Information processed by those platforms is governed by their respective privacy practices.

25. International Visitors

Costa Del Sol is located in Utah, United States.

Our website, restaurant, servers, service providers, or technology providers may process information in the United States or other countries.

If you access our website from outside the United States, information may be transferred to and processed in jurisdictions whose privacy laws differ from those in your country.

Where an applicable law grants additional privacy rights, we will comply with those requirements to the extent they legally apply to us.

26. Legal Requests and Protection of Rights

We may preserve, access, use, or disclose information when we reasonably believe doing so is necessary to:

Comply with applicable law
Respond to lawful governmental requests
Respond to subpoenas, warrants, court orders, or legal proceedings
Investigate suspected fraud
Protect against security threats
Enforce agreements
Protect the rights, property, or safety of Costa Del Sol, our customers, our employees, or others

27. Business Transfers

If Costa Del Sol is involved in a merger, acquisition, financing, sale, reorganization, bankruptcy, transfer of assets, or similar business transaction, information may be transferred as part of that transaction as permitted by law.

Any successor receiving personal information will be subject to applicable legal obligations governing that information.

28. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

Our website
Restaurant services
Technology
Service providers
Privacy practices
Legal or regulatory requirements

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.

Material changes may be communicated through additional notice where required by applicable law.

We encourage visitors to review this Privacy Policy periodically.

29. Contact Us

For privacy questions, concerns, or requests, contact:

Costa Del Sol
2433 Adams Ave #133
Ogden, UT 84401
Phone: 801-689-2129
Website: www.costadelsologden.com