Privacy Policy

Your trust is the key ingredient

At AlaMexicana, we value your privacy just as much as the taste of our food. This Privacy Policy explains how we collect, use, and protect your personal information when you order our food, purchase our merchandise, book a catering service, or sign up as a business partner.

What information do we collect?

To make sure your tacos arrive hot and your bill arrives on time, we need some information:

• Delivery Service: Name, shipping address, phone number, and payment information (processed securely by third parties).
• Catering Service: Event date, location, number of guests, and dietary preferences.
• Kitchen Service (B2B): Tax information, business name, and purchasing contact.

How do we use your data?

We don't sell your information to third parties. We only use it to:

• Manage your orders and make sure the delivery person finds your door.
• Coordinate the logistics for your catering events.
• Sign up as a supplier and manage the supply chain.
• Send you delicious promotions (only if you give us permission).

Safety and Security

Your data is protected by technical security measures to prevent unauthorized access. For card payments, we do not store your card numbers; they are processed directly through our certified payment gateways.

The personal data we collect may be transferred to and stored at a destination outside the European Economic Area (“EEA”). It may be processed by staff outside the EEA who work for us or for one of our service providers involved in processing your personal data. We will take all reasonable and necessary measures to ensure that your personal data is processed securely and in accordance with this Privacy Policy and applicable data protection laws, and will not transfer personal data outside the EEA unless adequate safeguards are in place, such as entering into EU standard contractual clauses (or equivalent measures) with the party outside the EEA receiving the data.

Please note that, unfortunately, transmitting information over the Internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee its security once it has been transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

Your Rights (ARCO)

You are in control. You can request access to, correction of, deletion of, or objection to the processing of your data at any time by sending an email through our contact page.

You have the right to ask us at any time not to process your personal data for marketing purposes, or to stop processing your data for these purposes if you have previously consented to it. You can exercise your right to opt out of the processing of your personal data for marketing purposes by checking certain boxes on the forms we use to collect your data. If you have already agreed to receive our marketing communications but have now changed your mind, you can easily unsubscribe at any time by following the instructions (such as clicking an “Unsubscribe” link in emails) included in these marketing communications. Alternatively, you can contact us via the contact form.

Our site may contain links to and from the websites of our partner networks, advertisers, and affiliates. If you follow a link to these websites, please note that they have their own privacy policies, and we accept no responsibility or liability for these policies. Please review these policies before submitting any personal information to these websites.

Data Controller and Legal Address

The data controller for your personal data is AlaMexicana, with its registered office in Tallinn, Estonia, and a business registration number currently pending.

As we operate from Estonia, we process your information in accordance with the guidelines of the European Union’s General Data Protection Regulation (GDPR). This ensures that you have extensive rights regarding your data, including the right to data portability and the right to be forgotten. For any legal inquiries or to exercise your rights, you may contact us at our office in Tallinn or via email through our contact page.