← Back to tacosvitali.com
Privacy Policy
This Privacy Policy describes how the Tacos Vitali restaurant group ("Tacos Vitali", "we", "us") collects, uses, and shares personal information when you visit our websites, place an order, request catering, or order from one of our restaurants through a third-party delivery platform.
"Tacos Vitali" refers to the operating entities of the group: Tacos Vitali LLC (United States) and Transformación y Expansión Comercial Lumeda, S.A. de C.V. (Mexico), each acting as the data controller for the operations it runs.
1. Information we collect
Website and catering requests
- Contact details you provide in our forms: name, email address, phone number.
- Event details for catering quotes: date, time, location, type of event, number of guests, and menu selections.
- Payment information for online catering payments, processed by our payment provider Stripe. We do not store your card number on our servers.
Orders placed through delivery platforms
When you order from one of our restaurants through a delivery platform such as Uber Eats, Rappi, or similar services, the platform sends our point-of-sale system the information needed to prepare and hand off your order:
- Order contents, special instructions, and order identifiers.
- Your first name and, where applicable, a masked/anonymized phone number provided by the platform.
- A delivery address when the order is delivered by our own staff.
Delivery platforms operate under their own privacy policies as independent data controllers. We only receive the information they share with restaurants to fulfill your order.
Automatically collected information
- Usage data and cookies through analytics and advertising tools (for example, Google tags) to understand how our site is used and to measure our campaigns.
- Standard technical logs (IP address, browser type, pages visited) generated by our hosting infrastructure.
Franchise inquiries
When you ask about a franchise, we collect your name, email, phone number, preferred market, country, background, timeframe, and any message you choose to provide. We also record campaign attribution and the time and wording of your consent.
Your inquiry is stored in Vitali’s private franchise CRM and shared with our franchise development partner, Franchise Marketing Systems, so our teams can review it and follow up. Notifications are addressed to franquicias@grupovitali.mx, info@FranchiseMarketingSystems.com, leads@franchisemarketingsystems.com, and cindy.back@fmsfranchise.com. We use Klaviyo to manage franchise contact records and, only if you separately opt in, franchise marketing emails. Submitting an inquiry does not subscribe you to SMS marketing.
You can request access, correction, or deletion of your franchise inquiry, or withdraw optional email consent, by emailing franquicias@grupovitali.mx.
2. How we use your information
- To prepare, deliver, and hand off your orders, and to operate our restaurants.
- To respond to catering requests, prepare quotes, and process payments.
- To communicate with you about your order, event, or request.
- To issue receipts and tax invoices (including CFDI electronic invoices in Mexico) and to comply with tax and legal obligations.
- To analyze and improve our website, menus, and service.
- To send marketing communications where you have opted in; you can unsubscribe at any time.
3. How we share information
We do not sell your personal information. We share it only with:
- Service providers that process data on our behalf: payment processing (Stripe), cloud hosting (Google Cloud), email and marketing tools, and internal operations tools.
- Delivery platforms (such as Uber Eats or Rappi) to the extent needed to fulfill and update the status of orders you place through them.
- Tax and government authorities when required by law, including electronic invoicing obligations in Mexico.
4. Data retention
We keep personal information only as long as needed for the purposes above and to meet legal, accounting, and tax requirements. Order and invoicing records are kept for the periods required by applicable tax law.
5. Security
We use administrative, technical, and organizational safeguards appropriate to the nature of the data, including encrypted connections (HTTPS), authenticated access to our systems, and secret management for system credentials.
6. Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, and to withdraw consent. To exercise any of these rights, contact us at contabilidad@tacosvitali.com. We will respond within the timeframes required by applicable law.
7. Children
Our websites and ordering services are intended for a general audience and are not directed to children. We do not knowingly collect personal information from children.
8. Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be available at tacosvitali.com/privacy, with its effective date shown at the top.
9. Contact
Questions about privacy? Write to contabilidad@tacosvitali.com.
Aviso de Privacidad (México)
Transformación y Expansión Comercial Lumeda, S.A. de C.V. ("el Responsable"), con RFC TEC210909FD7, operadora de restaurantes del grupo Tacos Vitali / Taquitos Express en México, es responsable del tratamiento de los datos personales descritos en este aviso. Contacto: contabilidad@tacosvitali.com.
Datos personales que tratamos
- Datos de contacto que usted proporciona en nuestros formularios o en sucursal: nombre, teléfono y correo electrónico.
- Datos de pedidos recibidos a través de plataformas de entrega (por ejemplo Uber Eats o Rappi): contenido del pedido, nombre de pila, teléfono enmascarado por la plataforma y, en su caso, dirección de entrega.
- Datos fiscales que usted proporciona para la emisión de facturas (CFDI): RFC, razón social, código postal fiscal, régimen y uso de CFDI.
No recabamos datos personales sensibles.
Finalidades del tratamiento
- Primarias: preparar y entregar sus pedidos; atender solicitudes y cotizaciones; procesar pagos; emitir comprobantes y facturas electrónicas (CFDI); atender aclaraciones; y cumplir obligaciones legales y fiscales.
- Secundarias: comunicaciones promocionales, cuando usted lo haya autorizado. Puede oponerse a estas finalidades escribiéndonos al correo de contacto sin que ello afecte el servicio.
Transferencias
Sus datos pueden compartirse con proveedores que actúan por cuenta del Responsable (procesamiento de pagos, infraestructura en la nube, proveedor autorizado de certificación para el timbrado de CFDI), con las plataformas de entrega en lo necesario para gestionar su pedido, y con autoridades cuando una ley lo requiera. No vendemos sus datos personales.
Derechos ARCO
Usted puede ejercer sus derechos de Acceso, Rectificación, Cancelación u Oposición, así como revocar su consentimiento o limitar el uso o divulgación de sus datos, enviando una solicitud a contabilidad@tacosvitali.com con su nombre, el derecho que desea ejercer y los datos que permitan localizar la información. Responderemos en los plazos que establece la LFPDPPP.
Cambios al aviso
Cualquier modificación a este aviso se publicará en tacosvitali.com/privacy.