Privacy policy

We collect the following categories of personal information for the listed purposes:

Identifiers and Contact Information

Includes your name, postal address, email address, phone number, account username, IP address, and similar identifiers.

We use this to:

• Process your orders and provide the Services.
• Maintain your account.
• Communicate with you about your orders, account, or our restaurant.
• Send you marketing and promotional messages (where you've opted in).
• Detect and prevent fraud or abuse.

Payment and Transaction Information

Includes the records of your orders and information needed to process payment. We do not store full payment card numbers ourselves — card data is handled by our PCI-compliant payment processor.

We use this to:

• Process your orders and payments.
• Issue refunds when applicable.
• Maintain order history for your account.

Commercial Information

Includes records of items you've ordered, items you've considered, and your order history.

We use this to:

• Recommend items you may enjoy.
• Personalize the Services.
• Improve our menu and offerings.
• Run loyalty, rewards, or promotional programs.

Internet and Device Activity Information

Includes browser type, device identifiers, pages you visit on our Site, links you click, search history within the Site, and how you interact with us online.

We use this to:

• Operate and improve the Site.
• Understand how customers use the Services.
• Personalize content.
• Serve and measure advertising.

Location Information

We may infer your general location from your IP address, or — with your permission — collect more precise location from your mobile device to determine whether you're within our delivery area or to suggest the nearest pickup location.

Demographic Information

If you choose to provide it (for example, your birthday for a birthday promotion), we may collect age or date of birth and gender.

Inferences

We may draw inferences from the information above — for example, your taste preferences based on past orders — to personalize the Services and our marketing.

We collect personal information from these sources:

• Directly from you when you create an account, place an order, contact us, sign up for marketing, or participate in a promotion.
• Automatically through cookies, pixels, and similar technologies when you use the Site (see Section 4).
• From BISBAS LLC, which operates the platform powering the Site.
• From service providers that help us run our business (payment processors, delivery partners, marketing and analytics providers).
• From advertising and social media platforms if you interact with our ads or social content.

We share personal information with:

• BISBAS LLC, which operates the Site and ordering platform on our behalf.
• Service providers that help us with payment processing, delivery, marketing, analytics, customer support, and other business operations. These providers are authorized to use your information only to perform services for us.
• Delivery partners (such as third-party couriers) when delivery is performed by a third party. They receive the order details needed to complete the delivery.
• Advertising and analytics partners to help us understand how the Services are used and to deliver relevant advertising.
• Authorities and others when required by law, in response to a subpoena or legal process, to protect our rights or the rights of others, to investigate fraud or unlawful activity, or in connection with a business transaction such as a merger, acquisition, or sale of assets.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

Mobile phone numbers and SMS opt-in consent are not shared with third parties or affiliates for marketing purposes. No mobile information is sold or rented. Phone numbers collected for text messaging are used only to send the messages you opted in to receive, and are shared solely with the messaging providers that deliver them on our behalf.

Text messages from BISBAS are sent by Garnish, the entity registered as the A2P 10DLC Brand for our messaging program.

We do not sell personal information for money. However, some of our advertising and analytics practices may be considered a "sale" or "sharing" of personal information under certain state privacy laws. See Sections 6 and 7 for your rights to opt out.

We may also use and share information in deidentified or aggregated form (data that doesn't identify any individual) without restriction.

We use cookies and similar tracking technologies (pixels, tags, scripts, device identifiers) to operate the Site, remember your preferences, analyze how the Site is used, and support advertising.

• Strictly necessary cookies — required for the Site to function (for example, keeping items in your cart, logging you in).
• Functional cookies — remember your preferences and personalize your experience.
• Analytics cookies — help us understand how customers use the Site so we can improve it. We may use services like Google Analytics for this.
• Advertising cookies — used by us and our advertising partners to show you relevant ads and measure their effectiveness.

You can control cookies through your browser settings. Blocking cookies may prevent parts of the Site from working properly.

Do Not Track signals. Some browsers can send a "Do Not Track" signal. Because there is no industry standard for how to interpret these signals, our Site does not currently respond to them. However, you may have other opt-out rights under Sections 6 and 7 below.

We keep your personal information for as long as needed to:

• Provide the Services to you.
• Maintain your account and order history.
• Comply with our legal, tax, accounting, or reporting obligations.
• Resolve disputes and enforce our agreements.

When we no longer need your information, we'll delete or deidentify it.

If you live in California, the California Consumer Privacy Act ("CCPA") gives you the following rights:

Right to Know

You have the right to request:

• The categories of personal information we've collected about you.
• The categories of sources we collected it from.
• The business purposes for collecting or sharing it.
• The categories of third parties we shared it with.
• The specific pieces of personal information we collected.

Right to Delete

You have the right to request that we delete personal information we collected from you, subject to certain exceptions (for example, where we need it to complete an order or comply with the law).

Right to Correct

If you believe information we hold about you is inaccurate, you can request that we correct it.

Right to Opt Out of Sale or Sharing

You have the right to opt out of any "sale" or "sharing" of your personal information for targeted advertising. To opt out, please contact us using the information in Section 12.

Right to Limit Use of Sensitive Personal Information

We do not use sensitive personal information for purposes that would trigger the right to limit under the CCPA.

Right to Non-Discrimination

We won't deny you services, charge you a different price, or provide a different level of service because you exercised your privacy rights.

How to Submit a Request

To exercise any of these rights, contact us using the information in Section 12. To verify your identity, we'll ask you to confirm details that match our records. You can also designate an authorized agent to make a request on your behalf, but we'll still need to verify your identity.

California "Shine the Light"

California residents may request a list of the categories of personal information we've disclosed to third parties for their direct marketing purposes during the prior calendar year. To make such a request, contact us using the information in Section 12 and include "California Shine the Light Request" in the subject.

If you live in Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you have the following rights under your state's privacy laws:

• Right to access — confirm whether we process your personal information and get a copy in a portable format.
• Right to correct inaccuracies in your personal information.
• Right to delete your personal information, subject to exceptions.
• Right to opt out of (a) targeted advertising, (b) the sale of personal information, and (c) profiling that produces legal or similarly significant effects. We do not engage in profiling that produces legal or similarly significant effects.
• Right to appeal if we decline your request.

To make a request, contact us using the information in Section 12. We may need to verify your identity. If you're a resident of Montana or Oregon, you may also request a list of third parties with which we've shared your personal data.

We may send you transactional messages (order confirmations, status updates, account notices) and, if you've opted in, marketing messages (promotions, new menu items, special offers).

You can opt out of marketing communications at any time:

• Email: click the "unsubscribe" link in any marketing email, or contact us.
• Text messages (SMS): reply STOP to any marketing text. See our Terms for more on SMS messaging.
• Push notifications: turn them off in your device settings.

Opting out of marketing won't stop transactional messages related to your orders.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Mobile phone numbers and SMS opt-in consent are not shared with third parties or affiliates for marketing purposes. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe or HELP for help.

Our Services are not directed to children under 16, and we don't knowingly collect personal information from children under 16. If you believe we've collected information from a child under 16, please contact us and we'll delete it.

If you're a resident of Colorado, Delaware, or Montana and under 18, or a resident of New Jersey and under 17, and we become aware of your age, we'll either delete your personal information or seek affirmative consent from your parent or guardian to process it.

We take reasonable technical and organizational measures to protect personal information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. No system is perfectly secure, however, and no transmission of information over the internet is guaranteed to be secure. You're responsible for keeping your account password confidential.

Our Services may link to or interact with third-party websites, services, and social media platforms. These third parties have their own privacy practices, and this Privacy Policy doesn't apply to them. We recommend reviewing the privacy policies of any third party before sharing information with them.

If you have questions about this Privacy Policy or want to exercise any of your privacy rights, please contact us:

BISBAS
536 Driggs Ave, Brooklyn, NY 11211 · +1 (646) 755-0450
Email: driggsfood@gmail.com