Privacy Policy

Welcome to Via 313. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website eatvia-313.rest, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you disagree with the terms of this Privacy Policy, please discontinue use of our website and services immediately.

By accessing or using our website, placing an order, creating an account, or otherwise interacting with Via 313, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and our Terms of Service. This Privacy Policy is incorporated into and subject to our Terms of Service.

1. About Us

Via 313 is a food service business operating in the United States. We are committed to responsible data stewardship and maintaining the trust of our customers, guests, and website visitors. If you have any questions about this policy or our data practices, please contact us using the information below.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected by Via 313 through any means, including but not limited to:

• Our website located at eatvia-313.rest
• Online ordering platforms, mobile applications, and third-party delivery integrations
• In-person interactions at our physical locations
• Email, telephone, or written communications
• Social media pages and platforms operated by or on behalf of Via 313
• Loyalty programs, promotions, surveys, and contests
• Any other interaction you may have with Via 313 as a customer, guest, job applicant, or visitor

This policy does not apply to third-party websites, applications, or services linked to or from our website. We encourage you to review the privacy policies of those third parties before providing your personal information.

3. Information We Collect

We collect several types of information in connection with your use of our services and website. The categories of personal information we may collect are described below.

3.1 Information You Provide Directly

When you voluntarily interact with Via 313, you may provide us with personal information, including:

• Identity Information: First name, last name, username or similar identifier, title, date of birth (where required for age verification).
• Contact Information: Billing address, delivery address, email address, telephone number, and zip or postal code.
• Account Information: Login credentials (username and password), account preferences, saved addresses, and order history.
• Payment Information: Credit or debit card details, billing address, and other financial information necessary to complete a transaction. Please note that full payment card data is processed by our PCI-DSS-compliant payment processors and is not stored on our systems in raw form.
• Order Information: Details of food orders, dietary preferences, special instructions, delivery instructions, and feedback on orders.
• Communications Data: Information contained in emails, messages, or other communications you send to us, including customer service inquiries, complaints, and feedback.
• Marketing Preferences: Your preferences for receiving marketing communications from us and our third-party partners.
• Survey and Promotion Data: Information you provide when participating in contests, promotions, surveys, or loyalty programs.
• Employment Application Data: Resume or CV, cover letter, employment history, references, and other information provided during the application process.

3.2 Information Collected Automatically

When you visit our website or use our digital services, we and our authorized third-party service providers may automatically collect certain information about your device and browsing activity, including:

• Device Information: IP address, browser type and version, operating system and platform, device identifiers, hardware configuration, and language settings.
• Usage Data: Pages visited, time spent on pages, links clicked, search queries entered on our site, referring URLs, exit pages, and other interaction data.
• Location Data: General geographic location derived from your IP address. With your express consent, we may also collect more precise geolocation data from your mobile device to facilitate delivery services.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies as described in Section 8 of this policy.
• Transaction and Log Data: Server logs, access times, error logs, and other diagnostic data related to your use of our website.

3.3 Information From Third Parties

We may receive personal information about you from third-party sources, including:

• Delivery and Ordering Platforms: Third-party food delivery services (such as DoorDash, Uber Eats, Grubhub, or similar platforms) may share order-related information with us to fulfill your orders.
• Payment Processors: Our payment service providers may share transaction confirmation data with us.
• Social Media Platforms: If you interact with our social media pages or use social login features, we may receive certain profile information from those platforms.
• Analytics Providers: We receive aggregated and sometimes individualized analytics data from third-party analytics services to help us understand how our website is used.
• Marketing Partners: We may receive contact and preference information from marketing partners to send you relevant offers, subject to applicable law and your consent where required.

4. How We Use Your Information

Via 313 uses the information we collect for the following purposes. We rely on different legal bases for processing depending on the applicable law.

4.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, including delivery, pickup, or dine-in arrangements.
• To create and manage your account on our website or app.
• To process payments and refunds and to prevent fraudulent transactions.
• To send you order confirmations, receipts, delivery updates, and other transactional communications.
• To respond to your inquiries, complaints, and customer service requests.

4.2 Business Operations and Improvement

• To analyze usage patterns, diagnose technical problems, and improve the performance and functionality of our website and services.
• To conduct research and analytics to better understand customer preferences, improve our menu offerings, and enhance the overall customer experience.
• To administer surveys, contests, promotions, and loyalty programs.
• To train our staff and improve our operational processes.

4.3 Marketing and Communications

• To send you promotional emails, newsletters, special offers, and information about new menu items or events, where you have opted in to receive such communications or where we have a legitimate interest to do so under applicable law.
• To personalize your experience on our website and show you relevant content, offers, and recommendations.
• To run targeted advertising campaigns on third-party platforms, including social media, using your information or hashed identifiers where permitted.
• To measure the effectiveness of our marketing campaigns.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email we send, by contacting us at [email protected], or by adjusting your account preferences. Opting out of marketing communications does not affect your receipt of transactional or service-related communications.

4.4 Legal Compliance and Safety

• To comply with applicable federal, state, and local laws and regulations.
• To respond to lawful requests from law enforcement, regulatory authorities, or other government agencies.
• To enforce our Terms of Service and other agreements.
• To detect, investigate, and prevent fraudulent transactions, abuse, security incidents, and other harmful activity.
• To protect the rights, property, and safety of Via 313, our customers, employees, and the public.

5. Sharing Your Information with Third Parties

Via 313 does not sell your personal information to third parties for their own independent marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers

We engage trusted third-party companies and individuals to perform services on our behalf. These service providers have access to your personal information only as necessary to perform their functions and are contractually obligated to maintain its confidentiality and security. Categories of service providers include:

• Payment processors and fraud prevention services
• Website hosting and cloud infrastructure providers
• Email and SMS communication platforms
• Analytics and business intelligence tools
• Customer relationship management (CRM) software providers
• Delivery logistics and mapping service providers
• Online ordering platforms and third-party delivery aggregators
• Marketing and advertising technology platforms
• Legal, accounting, and professional services firms

5.2 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, sale of all or substantially all of our assets, or other business transaction, your personal information may be transferred to the acquiring entity or successor. We will notify you of any such change in ownership or control of your personal information by posting a notice on our website or by sending you an email, and the acquirer will be required to handle your data in accordance with this Privacy Policy or a substantially equivalent policy.

5.3 Legal Requirements and Protection of Rights

We may disclose your personal information if we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or other lawful government request.
• Enforce our Terms of Service or other contracts.
• Protect and defend the rights, property, or safety of Via 313, our customers, employees, or the public.
• Prevent or investigate possible wrongdoing, fraud, or security issues in connection with our services.

5.4 With Your Consent

We may share your information with third parties for purposes not described in this policy when we have obtained your explicit consent to do so. You may withdraw your consent at any time by contacting us at [email protected].

6. Data Security

Via 313 takes the security of your personal information seriously. We implement a variety of technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, disclosure, or destruction. These measures include:

• Encryption: We use industry-standard SSL/TLS encryption for data transmitted between your browser and our website. Payment information is encrypted in transit and at rest.
• Access Controls: We restrict access to personal information to employees, contractors, and service providers who need it to perform their job functions. All such individuals are subject to confidentiality obligations.
• Payment Card Security: We use PCI-DSS-compliant payment processors and do not store raw payment card numbers on our servers.
• Regular Security Assessments: We conduct periodic vulnerability assessments and security reviews of our systems and practices.
• Incident Response: We maintain an incident response plan to address potential data breaches promptly and in accordance with applicable law.
• Employee Training: Our staff receive training on data privacy and security best practices.

In the event of a data breach affecting your personal information, we will notify you as required by applicable federal and state law, including the notification requirements under applicable state breach notification statutes.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. Via 313 respects and honors these rights as described below.

7.1 Rights for California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), grants you the following rights:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purposes for collecting or selling it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (e.g., completing a transaction, detecting security incidents, complying with legal obligations).
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. To exercise this right, please contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to certain permitted purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, provide a different level of service, or suggest that you may receive a different price or rate solely because you exercised your privacy rights.

To exercise your California privacy rights, please submit a verifiable consumer request by emailing [email protected] with the subject line "California Privacy Request." We will respond to your verified request within 45 days, with an extension of an additional 45 days where reasonably necessary.

We may need to verify your identity before processing your request. Authorized agents may submit requests on behalf of California consumers, subject to verification requirements.

7.2 General Privacy Rights (All U.S. Residents)

Regardless of your state of residence, Via 313 provides the following rights to all individuals whose personal information we process:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information about you.
• Right to Deletion: You may request deletion of your personal information, subject to legal and operational exceptions.
• Right to Portability: Where technically feasible and applicable, you may request that your personal information be provided to you in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where we process your personal information based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Opt Out of Marketing: You may opt out of marketing communications at any time by following the unsubscribe instructions in our emails or by contacting us directly.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

7.3 State-Specific Rights

In addition to California, several other U.S. states have enacted consumer data privacy laws that may grant residents additional rights (including, but not limited to, Virginia's Consumer Data Protection Act, Colorado's Privacy Act, Connecticut's Data Privacy Act, and Texas's Data Privacy and Security Act). Where applicable, Via 313 will honor the privacy rights afforded to residents of those states. Please contact us to learn more about your specific state rights.

8. Cookies and Tracking Technologies

Via 313 and our authorized third-party partners use cookies, web beacons, pixel tags, local storage objects, and similar tracking technologies to enhance your experience on our website, analyze site usage, and deliver targeted advertising.

8.1 Types of Cookies We Use

• Essential/Strictly Necessary Cookies: These cookies are required for the website to function properly. They enable core features such as shopping cart functionality, user authentication, and security. These cookies cannot be disabled without impairing your use of our site.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often and whether visitors receive error messages. This data helps us improve the performance and usability of our site. We use tools such as Google Analytics for this purpose.
• Functionality Cookies: These cookies enable the website to remember your preferences (such as your preferred location, saved addresses, or language settings) to provide a more personalized experience.
• Marketing and Advertising Cookies: These cookies are used to deliver advertisements more relevant to you and your interests. They also help measure the effectiveness of advertising campaigns. They may be set by us or by third-party advertising partners.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse some or all cookies, or to alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of our website and your ability to use some of our services.

You may also opt out of interest-based advertising through industry opt-out tools such as the Digital Advertising Alliance's opt-out page at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

For more detailed information about the cookies we use and your choices regarding cookies, please refer to our separate Cookie Policy, available on our website.

9. Data Retention

Via 313 retains personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations, to resolve disputes, and to enforce our agreements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, and whether we can achieve those purposes through other means.

Upon expiration of the applicable retention period, we will securely delete, anonymize, or aggregate your personal information so that it can no longer be associated with you.

10. Children's Privacy

Via 313 does not knowingly collect, solicit, or process personal information from children under 18 years of age. If you are under 18, please do not use our website or services or provide any personal information to us.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the online collection of personal information from children under the age of 13 without verifiable parental consent. Our services are not designed for or marketed to children under the age of 13, and we do not knowingly collect information from this age group.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving such a notification, we will take appropriate steps to investigate and, if confirmed, promptly delete the child's personal information from our systems.

11. International Data Transfers

Via 313 is a United States-based business and processes personal information primarily within the United States. If you are accessing our website or services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. The data protection laws of those countries may differ from those in your country of residence and may not offer the same level of protection.

By using our website or services, you consent to the transfer of your personal information to the United States and other countries as described in this Privacy Policy. We take appropriate safeguards to ensure that any international transfers of personal information are conducted in compliance with applicable law, including implementing contractual protections where required.

If you are a resident of the European Economic Area (EEA), the United Kingdom, or other regions with data protection laws governing the transfer of personal data, please note that we rely on recognized legal mechanisms (such as Standard Contractual Clauses) to legitimize any such transfers where applicable.

12. Third-Party Links and Services

Our website may contain links to third-party websites, applications, and services, including social media platforms, online ordering and delivery platforms, and payment processors. These third-party services are governed by their own privacy policies, which we encourage you to review before providing your personal information. Via 313 is not responsible for the privacy practices or content of any third-party websites or services linked to or from our website.

When you click on a link to a third-party site or use a third-party service integrated into our platform, any data you provide to that third party is subject to their own privacy policy, not ours. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

13. FTC Act and Consumer Protection Compliance

Via 313 is committed to compliance with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce. Our privacy and data practices are designed to be transparent, fair, and consistent with the representations we make to consumers. We do not engage in deceptive data collection or use practices, and we honor all opt-out and consent choices made by our customers.

We also comply with applicable FTC guidance on data security, endorsements, and advertising disclosures. Any material connections between Via 313 and endorsers or affiliates will be clearly disclosed in accordance with FTC guidelines.

14. California Shine the Light Law

California Civil Code Section 1798.83 (the "Shine the Light" law) permits California residents who have provided personal information to Via 313 to request, once per calendar year, information about whether we have shared personal information with third parties for their own direct marketing purposes. If applicable, this information would include a list of categories of personal information shared and the names and addresses of those third parties.

If you are a California resident and wish to make such a request, please contact us at [email protected] with the subject line "Shine the Light Request."

15. Do Not Track Signals

Some browsers and mobile operating systems include a "Do Not Track" (DNT) feature that sends a signal to websites you visit indicating that you do not wish to be tracked. At this time, our website does not respond to browser "Do Not Track" signals, as there is no uniform industry standard for how websites should respond to such signals. We will continue to monitor regulatory developments in this area and update our practices as appropriate.

However, you may exercise your opt-out rights as described in this Privacy Policy, including opting out of marketing communications and managing your cookie preferences.

16. Changes to This Privacy Policy

Via 313 reserves the right to modify, update, or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will notify you by:

• Posting the updated Privacy Policy on our website at eatvia-313.rest with a revised "Last Updated" date
• Sending you an email notification to the address associated with your account (if applicable)
• Displaying a prominent notice on our website homepage or login page

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services following the posting of changes constitutes your acceptance of those changes, to the extent permitted by applicable law.

If you do not agree with any changes to this Privacy Policy, you should discontinue use of our website and services and, if applicable, close your account.

17. Filing a Complaint

If you believe that Via 313 has violated your privacy rights or has not complied with applicable data protection laws, we encourage you to first contact us directly so that we can address your concerns. We take all privacy complaints seriously and will respond promptly.

You may file a complaint with us by emailing [email protected] with the subject line "Privacy Complaint." Please provide as much detail as possible about the nature of your complaint.

If you are a California resident and are not satisfied with our response, you may contact the California Privacy Protection Agency (CPPA) or the California Attorney General's Office to file a formal complaint:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

If you are a resident of another U.S. state, you may also have the right to file a complaint with your state's Attorney General office or equivalent data protection authority. Please consult your state's applicable consumer protection or privacy law for more information.

For general consumer protection complaints, you may also contact the Federal Trade Commission (FTC):

• FTC Consumer Information: consumer.ftc.gov
• FTC Complaint Assistant: reportfraud.ftc.gov

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team:

We are committed to resolving privacy-related questions and concerns in a timely and respectful manner. We will make every reasonable effort to respond to your inquiry within 30 days, and in any event, within the timeframe required by applicable law.

When contacting us to exercise your privacy rights or make an inquiry, please provide sufficient information to allow us to identify you and process your request. We may need to verify your identity before fulfilling certain requests to protect the security of your personal information.