Privacy Policy

CHRONIC TACOS

Privacy Policy

Last Updated: June 25, 2026

https://www.chronictacos.com/privacy-policy

This Privacy Policy describes how Chronic Tacos ("we," "us," or "our") collects, uses, discloses, and protects information about you when you visit our website at https://www.chronictacos.com (the "Service"). By using the Service, you agree to the practices described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible at https://www.chronictacos.com, unless otherwise defined here.

1. Information We Collect

We collect several categories of information when you use our Service:

1.1 Information You Provide

When you interact with our website or contact us directly, you may voluntarily provide personally identifiable information, including but not limited to your name, phone number, email address, and postal address. This information is used to fulfill your requests, contact you, and provide our Service.

1.2 Log Data

When you visit our Service, our servers automatically collect information sent by your browser ("Log Data"). Log Data may include:

• Your device's Internet Protocol (IP) address
• Browser type and version
• Pages of our Service that you visit
• The time and date of your visit and time spent on each page
• Referring and exit URLs (the sites that directed you to or away from our site)
• Device identifiers and session identifiers
• Other diagnostic and usage statistics

1.3 Information Collected Through Tracking Technologies

We and our third-party service providers use cookies, pixels, tags, scripts, and similar tracking technologies — including tools that may function as pen register or trap-and-trace devices under applicable California law — to automatically collect routing and session metadata when you visit our website. This includes IP addresses, device identifiers, page navigation paths, and timestamps. These technologies are described fully in Section 5 below.

We use the information we collect for the following purposes:

• To operate, maintain, and improve our website and Service
• To respond to your inquiries and fulfill your requests
• To send booking confirmations, appointment reminders, and follow-up communications
• To send promotional and marketing communications where you have consented
• To analyze website usage and improve the user experience
• To deliver targeted advertising through third-party platforms including Google and Microsoft
• To comply with applicable legal obligations
• To detect, prevent, and address fraud, security issues, or technical problems

3.1 Service Providers

We share your information with third-party companies and service providers who assist us in operating our website, delivering our Service, or conducting our business. These parties are contractually obligated to use your information only as directed by us and are prohibited from disclosing or using it for any other purpose.

3.2 Advertising and Analytics Partners

We share data with the following third-party advertising and analytics providers:

• Google LLC — via Google Analytics and Google Tag Manager: receives IP addresses, device identifiers, browsing behavior, and session data to analyze site performance and serve targeted advertising. Governed by Google's Privacy Policy: https://policies.google.com/privacy
• Microsoft Corporation — via Bing Ads (Universal Event Tracking): receives IP addresses, device identifiers, and behavioral data to measure ad conversions and deliver targeted advertising. Governed by Microsoft's Privacy Policy:https://privacy.microsoft.com/en-us/privacystatement

This sharing may constitute a "sale" or "sharing" of personal information under California law. California residents have the right to opt out — see Section 7 for details and the opt-out link.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to a valid subpoena, court order, or government request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

3.4 Business Transfers

If Chronic Tacos is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

• The duration of our ongoing relationship with you — for example, while you remain an active customer or user of our Service
• Legal obligations requiring us to retain certain data, such as tax, accounting, or regulatory requirements
• Whether retention is advisable for legal risk management purposes, such as applicable statutes of limitations or pending litigation

When we no longer need your personal information, we securely delete or anonymize it so it can no longer be associated with you.

5.1 What Are Cookies?

Cookies are small data files placed on your device when you visit a website. They help us remember your preferences and understand how visitors use our site. We also use other tracking technologies such as web beacons, pixel tags, and JavaScript tags that collect similar types of information.

5.2 Pen Register and Trap-and-Trace Device Disclosure

Some of the tracking tools deployed on our website — specifically Google Analytics, Google Tag Manager, and Microsoft Bing Ads — may function as pen register or trap-and-trace devices as those terms are defined under California's Invasion of Privacy Act (CIPA), Penal Code Section 638.51, and analogous state and federal laws.

A pen register, in the web context, refers to a technology that records outgoing routing and session metadata from a visitor's device — such as the pages they navigate to, the timestamps of those navigations, and device-level identifiers. A trap-and-trace device refers to a technology that captures incoming connection data, such as the originating IP address and referral source of a visitor arriving at the site.

These technologies automatically capture the following categories of routing and session metadata when you visit our website:

• IP address and approximate geolocation derived from IP
• Device identifiers and browser fingerprinting data
• The sequence of pages visited and navigation paths through our site
• Session start times, end times, and time spent on each page
• Referring URLs — the website or link that directed you to our site
• Exit URLs and outbound click data
• Interaction events such as button clicks, form submissions, and scroll depth

This metadata is captured automatically each time you visit our website and is transmitted in real time to servers operated by Google LLC and Microsoft Corporation in the United States. By using our website, you acknowledge that this collection occurs. You may limit or opt out of this collection using the controls described in Section 5.4 below.

This section has been added in response to California Invasion of Privacy Act (CIPA) disclosure requirements. The specific tools named above — Google Analytics, Google Tag Manager, and Microsoft Bing Ads — were identified as active on the Chronic Tacos website. Legal counsel should confirm this list is complete and accurate before publishing.

5.3 Types of Cookies and Tracking Tools We Use

• Essential Cookies: Required for the website to function correctly, including maintaining your session and enabling secure browsing. These cannot be disabled without impairing core site functionality.
• Analytics Cookies — Google Analytics and Google Tag Manager: Google Analytics collects anonymized data about how visitors interact with our site, including pages visited, time on site, traffic sources, and user flow. Google Tag Manager is used to deploy and manage tracking scripts across our site. Data collected by these tools is transmitted to Google's servers and governed by Google's Privacy Policy https://policies.google.com/privacy. You can opt out of Google Analytics tracking by installing the browser add-on at https://tools.google.com/dlpage/gaoptout
• Advertising Cookies — Microsoft Bing Ads (Universal Event Tracking): Microsoft's UET tag places cookies on your device to track conversions from Bing Ads campaigns and to build audiences for targeted advertising. Data is transmitted to Microsoft's servers and governed by Microsoft's Privacy Statement https://privacy.microsoft.com/en-us/privacystatement You can manage Microsoft ad preferences at https://account.microsoft.com/privacy
• Functional Cookies: Used to remember preferences such as your location or language settings to provide a more personalized experience.

5.4 Your Cookie and Tracking Choices

When you first visit our website, a cookie consent banner will allow you to accept or decline non-essential cookies by category. You can update your preferences at any time by clicking "Cookie Settings" in the footer of our website.

Additional opt-out options are available directly through each provider:

• Google Analytics: Install the opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.
• Microsoft Bing Ads: Manage preferences at https://account.microsoft.com/privacy.
• Browser-level controls: Most browsers allow you to block or delete all cookies through their settings menus
• California residents: You may also exercise your right to opt out of the sale or sharing of your data collected via these tools — visit https://www.chronictacos.com/do-not-sell.

Please note that disabling certain cookies may affect the functionality or appearance of our website.

We implement reasonable and appropriate technical and organizational safeguards designed to protect your personal information against unauthorized access, loss, destruction, or alteration. These measures include:

• Encryption of data in transit using industry-standard TLS/SSL protocols
• Access controls that limit access to personal data to authorized personnel only
• Regular review of our data collection, storage, and processing practices
• Contractual obligations requiring third-party service providers to maintain appropriate security standards

While we take these steps to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with specific legal rights regarding your personal information. This section describes those rights and how to exercise them.

7.1 Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information:

• Identifiers — such as name, email address, phone number, IP address, and device identifiers
• Commercial information — such as records of products or services purchased or inquired about
• Internet or other electronic network activity — including browsing history, interactions with our website, and session metadata collected via the pen register and trap-and-trace technologies described in Section 5.2
• Geolocation data — general location inferred from your IP address
• Inferences — profiles drawn from the above data to understand your preferences and predict your behavior

7.2 Sale and Sharing of Personal Information

We share personal information — including IP addresses, device identifiers, and behavioral data — with Google and Microsoft for advertising and analytics purposes as described in Sections 3.2 and 5. This sharing may constitute a "sale" or "sharing" of personal information under California law.

You have the right to opt out of this sale or sharing at any time. To exercise this right, please visit our Do Not Sell or Share My Personal Information page:

https://www.chronictacos.com/do-not-sell

7.3 Your Rights as a California Resident

You have the following rights under California law:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, used, disclosed, or sold about you in the past 12 months
• Right to Delete: Request deletion of your personal information, subject to certain legal exceptions
• Right to Opt Out: Opt out of the sale or sharing of your personal information with third parties
• Right to Correct: Request correction of inaccurate personal information we hold about you
• Right to Limit: Limit our use and disclosure of sensitive personal information to what is necessary for providing the Service
• Right to Non-Discrimination: We will not discriminate against you for exercising any of the rights described above

7.4 How to Submit a Privacy Request

To exercise any of your California privacy rights, you may contact us by:

• Email: Send a request to info@chronictacos.com with the subject line "California Privacy Request"
• Web form: Visit https://www.chronictacos.com/contact

We will verify your identity before processing your request. We will respond within 45 days of receipt. If we require additional time, we will notify you in writing within the initial 45-day period and may extend our response by an additional 45 days.

8.1 SMS Consent and Data Use

Your phone number and SMS consent are not sold, transferred, or shared with third parties or affiliates for their own independent marketing purposes. We may share your phone number with service providers who send text messages on our behalf, solely for that purpose and subject to binding confidentiality obligations. This agreement for SMS will not be shared with third parties for marketing purposes.

8.2 Types of SMS Communications

If you have consented to receive text messages from Chronic Tacos and/or the Chronic Tacos Truck, you may receive messages related to:

• Booking confirmations and appointment reminders
• Follow-up inquiries related to your request or reservation
• Promotional offers, specials, and updates about Chronic Tacos and the Chronic Tacos Truck

Example message: "Hi! Thanks for contacting the Chronic Tacos Truck. Your booking is confirmed for [date/time]. Reply STOP to opt out. Msg & data rates may apply."

8.3 Message Frequency

You may receive up to 4 SMS messages per month per user. Message and data rates may apply depending on your mobile carrier and plan. Chronic Tacos does not charge for SMS messages, but your carrier may charge fees for messages sent or received.

8.4 Opt-In Methods

You may opt in to receive SMS messages from us through the following written consent methods:

• Checking the SMS consent box on our online intake forms at https://www.chronictacos.com
• Completing a written paper opt-in form at a Chronic Tacos location

Your consent to receive SMS messages will not be shared with third parties for marketing purposes.

8.5 Opt-Out

You may opt out of SMS messages at any time by replying STOP to any message you receive from us. Once you opt out, you will receive a single confirmation message and no further SMS communications from us. You may opt back in at any time by replying START or by submitting a new consent form.

8.6 Help

If you experience any issues with our SMS communications, reply HELP to any message. You may also contact us directly at info@chronictacos.com or visit https://www.chronictacos.com/contact.

8.7 Standard Carrier Disclosures

Message and data rates may apply. Up to 4 messages per month. Text STOP to opt out at any time. Text HELP for assistance. For our Privacy Policy, visit https://www.chronictacos.com/privacy-policy. For help, visit https://www.chronictacos.com/contact

8.8 Additional Options

If you do not wish to receive SMS messages from us, simply do not check the SMS consent box on any of our forms. Opting out of SMS messages will not affect your ability to use our website or other services.

Our Services are not directed to children under the age of 13, and we do not knowingly collect personally identifiable information from children under 13. If we discover that a child under 13 has provided us with personal information, we will promptly delete it from our systems. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at info@chronictacos.com so we may take appropriate action.

Our Service may contain links to third-party websites. If you click on a third-party link, you will be directed to that site. These external websites are not operated by us, and we assume no responsibility for their content, privacy policies, or practices. We strongly advise you to review the privacy policy of any website you visit before providing any personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will post the updated policy on this page and update the "Last Updated" date at the top of the document. We encourage you to review this page periodically to stay informed. Changes are effective immediately upon posting unless otherwise stated.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Chronic Tacos — Privacy Inquiries

Email: info@chronictacos.com

Website: https://www.chronictacos.com/contact

We will respond to your inquiry within 30 days of receipt.