Effective date: July 24, 2026 · Last updated: July 24, 2026
This Privacy Policy describes how the Tacos Vitali restaurant group ("Tacos Vitali",
"we", "us") collects, uses, and shares personal information when you visit our
websites, place an order, request catering, or order from one of our restaurants
through a third-party delivery platform.
"Tacos Vitali" refers to the operating entities of the group:
Tacos Vitali LLC (United States) and
Transformación y Expansión Comercial Lumeda, S.A. de C.V.
(Mexico), each acting as the data controller for the operations it runs.
1. Information we collect
Website and catering requests
Contact details you provide in our forms: name, email address, phone number.
Event details for catering quotes: date, time, location, type of event, number of guests, and menu selections.
Payment information for online catering payments, processed by our payment provider Stripe. We do not store your card number on our servers.
Orders placed through delivery platforms
When you order from one of our restaurants through a delivery platform such as
Uber Eats, Rappi, or similar services, the platform sends our point-of-sale
system the information needed to prepare and hand off your order:
Order contents, special instructions, and order identifiers.
Your first name and, where applicable, a masked/anonymized phone number provided by the platform.
A delivery address when the order is delivered by our own staff.
Delivery platforms operate under their own privacy policies as independent data
controllers. We only receive the information they share with restaurants to fulfill
your order.
Automatically collected information
Usage data and cookies through analytics and advertising tools (for example, Google tags) to understand how our site is used and to measure our campaigns.
Standard technical logs (IP address, browser type, pages visited) generated by our hosting infrastructure.
2. How we use your information
To prepare, deliver, and hand off your orders, and to operate our restaurants.
To respond to catering requests, prepare quotes, and process payments.
To communicate with you about your order, event, or request.
To issue receipts and tax invoices (including CFDI electronic invoices in Mexico) and to comply with tax and legal obligations.
To analyze and improve our website, menus, and service.
To send marketing communications where you have opted in; you can unsubscribe at any time.
3. How we share information
We do not sell your personal information. We share it only with:
Service providers that process data on our behalf: payment processing (Stripe), cloud hosting (Google Cloud), email and marketing tools, and internal operations tools.
Delivery platforms (such as Uber Eats or Rappi) to the extent needed to fulfill and update the status of orders you place through them.
Tax and government authorities when required by law, including electronic invoicing obligations in Mexico.
4. Data retention
We keep personal information only as long as needed for the purposes above and to
meet legal, accounting, and tax requirements. Order and invoicing records are kept
for the periods required by applicable tax law.
5. Security
We use administrative, technical, and organizational safeguards appropriate to the
nature of the data, including encrypted connections (HTTPS), authenticated access
to our systems, and secret management for system credentials.
6. Your rights
Depending on where you live, you may have rights to access, correct, delete, or
restrict the use of your personal information, and to withdraw consent. To exercise
any of these rights, contact us at
contabilidad@tacosvitali.com.
We will respond within the timeframes required by applicable law.
7. Children
Our websites and ordering services are intended for a general audience and are not
directed to children. We do not knowingly collect personal information from children.
8. Changes to this policy
We may update this Privacy Policy from time to time. The current version will always
be available at tacosvitali.com/privacy,
with its effective date shown at the top.
Esta sección aplica a las operaciones en México, conforme a la Ley Federal de
Protección de Datos Personales en Posesión de los Particulares (LFPDPPP).
Transformación y Expansión Comercial Lumeda, S.A. de C.V.
("el Responsable"), con RFC TEC210909FD7, operadora de restaurantes del grupo
Tacos Vitali / Taquitos Express en México, es responsable del tratamiento de los
datos personales descritos en este aviso. Contacto:
contabilidad@tacosvitali.com.
Datos personales que tratamos
Datos de contacto que usted proporciona en nuestros formularios o en sucursal: nombre, teléfono y correo electrónico.
Datos de pedidos recibidos a través de plataformas de entrega (por ejemplo Uber Eats o Rappi): contenido del pedido, nombre de pila, teléfono enmascarado por la plataforma y, en su caso, dirección de entrega.
Datos fiscales que usted proporciona para la emisión de facturas (CFDI): RFC, razón social, código postal fiscal, régimen y uso de CFDI.
No recabamos datos personales sensibles.
Finalidades del tratamiento
Primarias: preparar y entregar sus pedidos; atender solicitudes y cotizaciones; procesar pagos; emitir comprobantes y facturas electrónicas (CFDI); atender aclaraciones; y cumplir obligaciones legales y fiscales.
Secundarias: comunicaciones promocionales, cuando usted lo haya autorizado. Puede oponerse a estas finalidades escribiéndonos al correo de contacto sin que ello afecte el servicio.
Transferencias
Sus datos pueden compartirse con proveedores que actúan por cuenta del Responsable
(procesamiento de pagos, infraestructura en la nube, proveedor autorizado de
certificación para el timbrado de CFDI), con las plataformas de entrega en lo
necesario para gestionar su pedido, y con autoridades cuando una ley lo requiera.
No vendemos sus datos personales.
Derechos ARCO
Usted puede ejercer sus derechos de Acceso, Rectificación, Cancelación u
Oposición, así como revocar su consentimiento o limitar el uso o divulgación de
sus datos, enviando una solicitud a
contabilidad@tacosvitali.com
con su nombre, el derecho que desea ejercer y los datos que permitan localizar la
información. Responderemos en los plazos que establece la LFPDPPP.