Privacy Policy
This Privacy Policy describes how Via 313 ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at cafevia313.rest, place an order, sign up for our loyalty program, or otherwise interact with our services. Please read this policy carefully. By using our website or services, you agree to the practices described herein.
We are committed to protecting your privacy and handling your personal data with transparency, integrity, and respect. This Privacy Policy has been drafted in compliance with applicable United States privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable federal and state privacy regulations.
1. About Us
Via 313 is a food and restaurant business operating in the United States. We operate the website cafevia313.rest and provide food ordering, dining, catering, and related services to our customers. For all privacy-related matters, you may contact us using the information provided in Section 14 of this policy.
2. Information We Collect
We collect various types of information in connection with your use of our website and services. The categories of personal information we collect include the following:
2.1 Personal Identification Information
When you create an account, place an order, make a reservation, sign up for our newsletter, or contact us, we may collect personal identification information, including but not limited to:
- Full name
- Email address
- Phone number
- Mailing or delivery address
- Date of birth (where applicable for age verification or loyalty program purposes)
- Username and password for account access
- Profile photograph (if provided)
2.2 Payment and Financial Information
When you make a purchase or payment through our website or point-of-sale systems, we collect payment-related information. This may include:
- Credit or debit card type and last four digits
- Billing address
- Transaction history and order details
Please note that full payment card numbers are processed by our third-party payment processors and are not stored on our servers. We use industry-standard encryption and tokenization methods to protect your financial data.
2.3 Order and Transaction Data
We collect information related to the food and beverage orders you place with us, including menu items selected, special instructions, order history, delivery preferences, loyalty points accrued or redeemed, and the date and time of your transactions.
2.4 Usage Data and Online Activity
When you visit our website, we automatically collect certain technical and behavioral information about your interaction with our site, including:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent on each page
- Referring URLs (the website that directed you to ours)
- Clickstream data
- Search queries made on our website
- Date and time of visits
2.5 Device Information
We may collect information about the device you use to access our website, including:
- Device type (desktop, mobile, tablet)
- Device identifiers (e.g., mobile advertising IDs)
- Screen resolution
- Network provider and connection type
2.6 Location Data
With your permission, we may collect precise or approximate geographic location data from your device in order to provide you with location-based services such as finding the nearest Via 313 location, estimating delivery times, or offering location-specific promotions.
2.7 Communications Data
If you contact our customer support team by email, phone, chat, or through social media, we collect and retain records of those communications, including the content of your messages and our responses.
2.8 Cookie and Tracking Data
We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about how you use our website. Please see Section 9 of this policy for more details about our use of cookies.
2.9 Information You Provide Voluntarily
You may choose to provide us with additional information, such as feedback, survey responses, reviews, photos of your dining experience, or entries into contests and promotions. This information is collected with your knowledge and consent.
3. How We Use Your Information
We use the personal information we collect for a variety of lawful purposes related to the operation of our food and restaurant business. These include:
3.1 Providing and Managing Our Services
- Processing your food orders, reservations, and catering requests
- Managing your account and login credentials
- Delivering your orders to the address you provide
- Sending order confirmations, receipts, and status updates
- Administering our loyalty and rewards program
- Responding to your customer service inquiries and resolving disputes
3.2 Analytics and Service Improvement
- Analyzing website traffic and user behavior to improve our website design and functionality
- Monitoring and evaluating the performance of our ordering system
- Understanding customer preferences to enhance our menu offerings
- Conducting internal research and quality assurance
- Identifying and fixing technical errors or security vulnerabilities
3.3 Marketing and Promotional Communications
- Sending you promotional emails, newsletters, and special offers (with your consent where required)
- Notifying you about new menu items, limited-time deals, events, and seasonal promotions
- Serving you personalized advertisements based on your preferences and order history
- Running targeted advertising campaigns on social media and third-party platforms
You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any of our promotional emails, or by contacting us at [email protected].
3.4 Legal and Compliance Purposes
- Complying with applicable federal, state, and local laws and regulations
- Enforcing our Terms of Service and other agreements
- Preventing fraud, unauthorized access, and other illegal activities
- Responding to legal process, court orders, or requests from law enforcement authorities
- Protecting the rights, property, or safety of Via 313, our customers, and the public
3.5 Personalization
- Customizing your experience on our website based on your browsing and order history
- Recommending menu items based on your past orders and preferences
- Delivering relevant content, offers, and promotions tailored to your interests
4. Legal Bases for Processing
We process your personal information on the following legal grounds:
- Performance of a Contract: Processing is necessary to fulfill orders, manage your account, and provide the services you have requested.
- Legitimate Interests: We process data to operate, improve, and promote our business, provided these interests are not overridden by your privacy rights.
- Consent: Where we rely on your consent (e.g., for marketing emails or the use of certain cookies), you may withdraw that consent at any time.
- Legal Obligation: We process certain data to comply with applicable laws and regulations.
5. Sharing Your Information with Third Parties
We do not sell your personal information to third parties for monetary compensation. However, we may share your information with trusted partners and service providers in the following circumstances:
5.1 Service Providers and Business Partners
We engage third-party companies and individuals to assist us in delivering our services. These include:
- Payment processors (e.g., to securely handle transactions)
- Delivery and logistics partners (to fulfill your food delivery orders)
- Email marketing platforms (to send newsletters and promotional communications)
- Website analytics providers (e.g., Google Analytics, to understand website traffic)
- Cloud hosting and storage providers (to securely store our data)
- Customer relationship management (CRM) software providers
- Online ordering platform providers
These service providers are contractually obligated to use your personal information only as directed by us and in accordance with this Privacy Policy. They are not permitted to use your data for their own independent marketing or business purposes.
5.2 Advertising and Analytics Partners
We may share certain non-personally identifiable information or pseudonymous data with advertising networks and analytics companies to help us understand how our marketing campaigns perform and to deliver relevant advertisements to you across the internet. This may involve the sharing of cookie identifiers, device IDs, or hashed email addresses.
5.3 Legal Requirements and Law Enforcement
We may disclose your personal information when we believe in good faith that such disclosure is necessary to:
- Comply with a legal obligation, subpoena, court order, or government request
- Protect and defend the rights or property of Via 313
- Prevent or investigate potential wrongdoing in connection with our services
- Protect the personal safety of users of our services or the public
- Protect against legal liability
5.4 Business Transfers
If Via 313 is involved in a merger, acquisition, asset sale, reorganization, or any other form of business transfer, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.
5.5 With Your Consent
We may share your personal information with third parties for purposes not listed above if we have obtained your explicit prior consent to do so.
6. Data Security
We take the security of your personal information seriously and implement a variety of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, and destruction. Our security practices include:
- Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website.
- Access Controls: We restrict access to personal data to authorized employees and contractors who have a legitimate business need to access it. All staff with access to personal data are bound by confidentiality obligations.
- Payment Security: We use PCI-DSS compliant payment processors to handle all financial transactions. Full card numbers are never stored on our systems.
- Firewalls and Intrusion Detection: Our systems are protected by firewalls and we monitor our network for suspicious activity.
- Regular Security Audits: We conduct periodic reviews of our security practices and update them as needed to address new threats.
- Data Minimization: We collect only the personal data that is necessary for the purposes described in this policy.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities in accordance with applicable law.
7. Your Privacy Rights
Depending on your location and applicable law, you may have certain rights with respect to your personal information. We are committed to honoring these rights.
7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)
If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:
| Right | Description |
|---|---|
| Right to Know | You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purposes for collection, and the categories of third parties with whom we have shared it. |
| Right to Delete | You have the right to request that we delete personal information we have collected from you, subject to certain exceptions. |
| Right to Correct | You have the right to request that we correct inaccurate personal information we maintain about you. |
| Right to Opt-Out of Sale/Sharing | You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. |
| Right to Limit Use of Sensitive Personal Information | You have the right to limit our use and disclosure of sensitive personal information to what is necessary to perform the services requested. |
| Right to Non-Discrimination | You have the right not to receive discriminatory treatment for exercising your CCPA/CPRA privacy rights. |
| Right to Data Portability | You have the right to receive a copy of your personal information in a portable and, to the extent technically feasible, readily usable format. |
7.2 Rights Available to All Users
Regardless of your location, we extend the following rights to all users of our services:
- Right to Access: You may request a copy of the personal information we hold about you.
- Right to Correction: You may request that we correct or update inaccurate or incomplete personal information.
- Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
- Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time.
7.3 How to Exercise Your Rights
To exercise any of the rights described above, please contact us using one of the following methods:
- Email: [email protected]
- Website: cafevia313.rest
We will verify your identity before processing your request in order to protect your privacy and security. You may be required to provide certain information such as your name, email address, and account details to confirm your identity. We will respond to verified requests within 45 days as required under the CCPA/CPRA. If we require additional time, we will notify you of the extension and the reason within the initial 45-day period.
You may designate an authorized agent to submit requests on your behalf. If you use an authorized agent, we may require proof of the agent's authorization and verification of your identity directly.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general data retention practices are as follows:
| Type of Data | Retention Period |
|---|---|
| Account and profile information | For the duration of your account plus 3 years after account closure |
| Order and transaction history | 7 years (for tax and accounting compliance) |
| Payment information | As long as required by our payment processors and applicable law (typically up to 7 years) |
| Marketing preferences and communications | Until you opt out or withdraw consent, plus 2 years |
| Customer service communications | 3 years from the date of the communication |
| Website usage and analytics data | Up to 26 months |
| Cookie data | Varies by cookie type (see Section 9) |
When your personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention and disposal policies. Anonymized data that can no longer be used to identify you may be retained indefinitely for statistical and research purposes.
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage objects) on our website to enhance your browsing experience, analyze site traffic, personalize content, and serve targeted advertisements.
9.1 Types of Cookies We Use
- Strictly Necessary Cookies: These cookies are essential for the operation of our website and cannot be switched off. They allow you to navigate our site and use its features, such as logging in and placing orders.
- Performance and Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use tools such as Google Analytics for this purpose.
- Functionality Cookies: These cookies allow our website to remember choices you have made, such as your preferred location, language, or account settings, and provide enhanced features.
- Marketing and Advertising Cookies: These cookies are set by us and our advertising partners to track your online activity and deliver personalized advertisements based on your interests. They may also be used to limit the number of times you see an ad and to measure the effectiveness of advertising campaigns.
9.2 Managing Your Cookie Preferences
You can control and manage cookies through your browser settings. Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling certain cookies may affect the functionality of our website.
For more detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy, which is available on our website at cafevia313.rest.
You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance's opt-out page at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.
10. Children's Privacy
Our website and services are intended for use by individuals who are at least 18 years of age. We do not knowingly collect, use, or disclose personal information from individuals under the age of 18. If you are under 18, please do not use our website or provide us with any personal information.
If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt steps to delete such information from our records.
We comply with the Children's Online Privacy Protection Act (COPPA), which restricts the collection of personal information from children under the age of 13. We do not target or knowingly market our services to children.
11. International Data Transfers
Via 313 is a business based in the United States, and your personal information is primarily collected, processed, and stored within the United States. However, some of our third-party service providers may be located in other countries, which means your personal information may be transferred to, processed in, or accessed from countries outside the United States.
When we transfer personal information internationally, we take steps to ensure that appropriate safeguards are in place to protect your data and that any such transfers comply with applicable law. These safeguards may include:
- Using service providers who are Privacy Shield certified or who maintain equivalent data protection standards
- Incorporating standard data protection contractual clauses into agreements with overseas service providers
- Ensuring that recipient countries provide an adequate level of data protection, as recognized by applicable authority
If you are located outside the United States and choose to use our services, please be aware that your personal information will be transferred to and processed in the United States. By using our services, you consent to such transfer and processing.
12. Third-Party Websites and Links
Our website may contain links to third-party websites, applications, social media platforms, or other online services that are not operated or controlled by Via 313. This Privacy Policy does not apply to those third-party services. When you click on a link to a third-party website, you will be subject to the privacy policy of that website.
We are not responsible for the privacy practices of third-party websites and encourage you to review the privacy policies of any website you visit. The inclusion of a link on our website does not imply our endorsement of that website or its privacy practices.
Social media features, such as "Share" or "Like" buttons, may be integrated into our website. These features may collect your IP address and the page you are visiting and may set a cookie. Your interactions with such features are governed by the privacy policy of the company providing the feature.
13. Do Not Track Signals
Some browsers offer a "Do Not Track" (DNT) feature that sends signals to websites requesting that your browsing activity not be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. At this time, our website does not respond to DNT browser signals. However, you can use the cookie management tools described in Section 9 to control the tracking of your online activity on our website.
14. How to File a Privacy Complaint
If you have concerns about how we handle your personal information, we encourage you to contact us first so that we can address your concerns directly and promptly.
14.1 Contact Us
To submit a privacy complaint or inquiry, please contact our privacy team using the following information:
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If we require additional time to investigate, we will notify you of the expected timeline.
14.2 Regulatory Authorities
If you are a California resident and are not satisfied with our response to your privacy complaint, you have the right to file a complaint with the California Privacy Protection Agency (CPPA):
Website: cppa.ca.gov
Address: 2101 Arena Boulevard, Sacramento, CA 95834
Phone: (916) 590-3482
If you believe we have violated the FTC Act or engaged in unfair or deceptive practices, you may also file a complaint with the Federal Trade Commission (FTC):
Additionally, residents of other states may have the right to file complaints with their respective state attorney general's office or state consumer protection agency.
15. Changes to This Privacy Policy
We reserve the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Post the revised policy on our website at cafevia313.rest
- Send you an email notification if we have your email address and the changes are significant
Your continued use of our website or services after the effective date of the updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
16. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are happy to assist you and are committed to resolving any privacy-related concerns you may have.
This Privacy Policy was last reviewed and updated on July 18, 2026. Via 313 reserves all rights under applicable federal and state law.