Privacy Policy
Last updated: April 29, 2026
This policy explains how El Tarasco Mexican Restaurants ("we," "us," "our") collects, uses, and protects information when you visit eltarascomexicanrestaurants.com or submit our signup form. We operate three locations in California (Sylmar, Santa Clarita / Valencia, and Palmdale) and we comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
1. Information we collect
The only personal information we actively collect is what you submit to us:
- Name when you submit our signup form.
- Email address when you submit our signup form.
- Favorite location (Sylmar, Valencia, or Palmdale) when you submit our signup form, so we can send you location-relevant updates.
When you visit the site, our hosting provider (Cloudflare) automatically logs limited technical information for security and operational reasons:
- Your IP address (we store only a hashed value tied to email submissions, never the raw IP)
- Approximate country of access
- Browser user-agent string
- Date and time of the request
If you click an online ordering link, you leave our site and visit a third party (Clover, Grubhub, or Clover Online). Their privacy practices govern that visit, not ours.
2. How we use information
- To send you specials, new menu items, and updates from your favorite location.
- To detect and prevent abuse, spam, and automated submissions (rate limiting via the hashed IP).
- To comply with legal obligations.
We do not use your information for advertising. We do not run third-party advertising trackers on this site.
3. Cookies and tracking
This site does not set tracking cookies and does not run third-party analytics, advertising pixels, or social media trackers. We use browser localStorage for one purpose only: to remember that you dismissed our data-use notice banner.
4. How we share information
We do not sell or "share" (as defined by the CPRA) your personal information. We use the following service providers under contract:
- Cloudflare, Inc. hosts the website and stores submitted signup data in Cloudflare KV. See Cloudflare's privacy policy.
We may disclose information when required by law, subpoena, or court order, or to protect our legal rights.
5. Data retention
- Signups: retained until you ask us to remove them.
- Hashed IP and technical logs: retained up to 90 days for abuse prevention.
6. Your California privacy rights (CCPA / CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and share.
- Request deletion of personal information we hold about you.
- Request correction of inaccurate personal information.
- Opt out of the sale or sharing of personal information (we do not sell or share).
- Limit the use and disclosure of sensitive personal information (we do not collect sensitive PI).
- Be free from retaliation for exercising any of these rights.
We honor Global Privacy Control (GPC) signals.
To exercise any right, email privacy@eltarascomexicanrestaurants.com with the subject "CCPA Request" and include the email address you submitted to us. We will respond within 45 days.
7. Children's privacy
This site is not directed to children under 13, and we do not knowingly collect information from anyone under 13.
8. Security
Submitted data is transmitted over HTTPS. Signup data is stored on Cloudflare's encrypted infrastructure. No system is perfectly secure, but we use reasonable technical and organizational measures to protect your information.
9. Changes to this policy
We may update this policy. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be highlighted on the homepage for 30 days after the change.
10. Contact
El Tarasco Mexican Restaurants
13039 Glenoaks Blvd, Sylmar, CA 91342
Email: privacy@eltarascomexicanrestaurants.com