Privacy Policy

Mon Arroza LLC Privacy Policy
Effective Date: October 1, 2025

This Privacy Policy describes how Mon Arroza LLC, a California limited liability company (“Mon Arroza,” “seller,” “we,” “our,” or “us”) collects, uses, discloses, and protects the personal information of individuals (“Buyer,” “you,” “your,” or “customer”) who visit or interact with our website, book our services, or otherwise engage with us. By engaging with our business, you consent to the practices described herein.

1. Definitions and Scope

This Privacy Policy governs all interactions between the Seller and the Buyer in connection with Mon Arroza’s food products, catering, booth, and cart services, as well as website and marketing operations. It applies solely to activities within the United States, specifically within the State of California. This Policy does not apply to third-party websites, applications, or services that may be linked through our platforms.

2. Information We Collect

We collect the following categories of personal information, depending on how you interact with us:

  • Identity and Contact Information: First and last name, email address, phone number, billing and event addresses, and date of birth.

  • Transactional Information: Payment method (processed via Square), order details, purchase history, catering requests, and event details such as location, date, and time.

  • Marketing and Communication Preferences: Newsletter subscriptions, email preferences, and opt-in status for marketing campaigns.

  • Technical and Website Data: IP address, browser type, operating system, and device information automatically collected through Squarespace hosting and analytics tools.

  • User-Generated Content: Photos, testimonials, or social media posts that tag or mention Mon Arroza publicly.

We do not knowingly collect sensitive personal information such as government IDs, Social Security numbers, or full payment card numbers.

3. How We Collect Information

We collect personal information in the following ways:

  • Directly from you when you make a purchase, submit an inquiry, book an event, or sign up for marketing.

  • Automatically through Squarespace and similar website technologies (cookies, analytics, or pixels, now or in the future).

  • From social media platforms when you voluntarily interact, tag, or mention our brand.

4. How We Use Information

We use personal information for legitimate business purposes, including:

  • Process and fulfill orders, invoices, and payments.

  • Communicate with you about purchases, bookings, and customer service.

  • Send newsletters, promotions, and marketing communications periodically and in moderation.

  • Improve our products, services, and customer experience.

  • Maintain business and accounting records.

  • Comply with legal obligations and resolve disputes.

  • Prevent fraud or misuse of our systems.

Marketing communications are sent only to individuals who have opted in or who have previously made a purchase, as described in our Terms & Conditions. You may opt out at any time by following the unsubscribe link in emails or contacting us directly.

5. Data Sharing and Processors

We do not sell or rent personal information. We may share it only with trusted service providers and business partners who perform services on our behalf, including:

  • Payment Processing: Square, Inc., which securely processes payment card information.

  • Hosting & Platform Services: Squarespace, which provides our website infrastructure and may process limited technical data.

  • Email Marketing: Squarespace Email Campaigns or other compliant providers used for newsletters and promotions.

6. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this Policy or as required by law.

  • Transaction and order records (including payment receipts and invoices) are retained for seven (7) years to comply with tax and accounting obligations.

  • Customer contact and marketing information are retained indefinitely unless you opt out, unsubscribe, or request deletion.

  • Technical analytics and cookie data are stored in accordance with Squarespace’s policies and applicable legal limits.

7. Cookies and Tracking Technologies

Our website is built and hosted on the Squarespace platform, which automatically uses cookies and similar technologies to ensure site functionality and analyze basic visitor behavior.

What Cookies Are:

  • Cookies are small data files stored on your device that help websites operate efficiently, remember preferences, and understand how visitors interact with the site.

Cookies Used on Our Website: Because our website is powered by Squarespace, the cookies placed on visitors’ browsers fall into two general categories:

  • Necessary Cookies – These are essential for the website to function properly and securely. They enable features like navigation, checkout, form submissions, and page redirection.

  • Analytics and Performance Cookies – These cookies collect limited, non-personal information about how visitors use the site. They help us understand traffic sources, page views, and general browsing behavior so we can improve user experience.

Mon Arroza does not place advertising, targeting, or third-party cookies on visitors’ devices. We do not currently use Google Analytics, Meta Pixel, or any other external tracking tools.

Managing Cookies:

  • Visitors can manage or disable cookies at any time through their web browser settings or through the cookie banner that appears on our website. Please note that disabling certain cookies may affect site functionality or prevent some features from working as intended.

Squarespace Cookies:

8. User Rights and Requests

You have the right to:

  • Request access to the personal information we hold about you.

  • Request correction or deletion of your information.

  • Request that we disclose the categories and sources of data collected.

  • Opt out of marketing or targeted advertising.

Submitting a Request:

  • Send your request to info@monarroza.com

  • or by mail to:
    Mon Arroza LLC – Attn: Privacy Requests
    350 Clinton St Ste A, Costa Mesa, CA 92626

Verification:
To protect your privacy, we will verify your identity before fulfilling any request. Verification may include confirming your email address, order number, or partial payment card details. We respond to verifiable requests within 45 days, with one 45-day extension if necessary.

9. Payment and PCI Compliance

All payment transactions are processed by Square, Inc. Mon Arroza does not store or have access to full payment card details. Square is responsible for maintaining compliance with the Payment Card Industry Data Security Standard (PCI-DSS). For more information, please review Square’s privacy and security documentation.

10. Data Security

We implement industry-standard administrative, technical, and physical safeguards to protect personal information, including encryption (TLS) for data in transit, restricted access to sensitive information, password protection, regular system monitoring, and training on data handling.

Breach Notification:
In the unlikely event of a data breach affecting personal information, we will promptly investigate and notify affected individuals and any applicable authorities within 72 hours of confirmation, in accordance with applicable laws and regulations.

11. Photographs, Testimonials, and Media

We may use customer photographs, testimonials, or public social media posts that tag or mention Mon Arroza in our digital and physical marketing materials, including, but not limited to, our website, social media platforms, printed collateral, and advertisements.
By tagging or publicly referencing Mon Arroza, you grant the Seller a non-exclusive, royalty-free, perpetual license to display, reproduce, and distribute such content for promotional purposes.

12. Children’s Privacy

Our Services are intended solely for adults aged 18 years or older. We do not knowingly collect or store personal information from individuals under the age of 18. If we discover that we have inadvertently collected data from an individual under 18, we will promptly delete it upon notification. Parents or guardians may contact info@monarroza.com to request removal.

13. Force Majeure and Legal Compliance

Mon Arroza will not be liable for failure to comply with this Policy or fulfill obligations caused by circumstances beyond its reasonable control, including natural disasters, pandemics, labor shortages, power failures, or similar events. All collection and use of information shall comply with applicable California and U.S. privacy laws.

14. Policy Updates and Notifications

We reserve the right to update this Privacy Policy from time to time to reflect operational or legal changes. The latest version will always be posted on our website, accompanied by the “Effective Date” above. Additionally, any individual whose information is maintained in our customer database will receive an email notification informing them that an updated Privacy Policy has taken effect. Continued use of our Services following notice constitutes acceptance of the revised Policy.

15. Governing Law and Dispute Resolution

This Privacy Policy is governed by the laws of the State of California and the federal laws of the United States. Any dispute arising under this Policy shall be resolved in accordance with the dispute-resolution procedures outlined in our Terms & Conditions, including good-faith mediation and negotiation, followed by resolution in the appropriate state or federal court if necessary.

 

For questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact:

Mon Arroza LLC
350 Clinton St Ste A
Costa Mesa, California 92626

Email: info@monarroza.com
Website: www.monarroza.com