Privacy Policy for CaboFishTaco.com

Last Updated: June 29, 2026

This Privacy Policy describes how Cabo Fish Taco (“Cabo Fish Taco,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information when you visit or interact with cabofishtaco.com, including its pages, forms, and related website services (collectively, the “Website”).

This Privacy Policy applies only to the Website. It does not apply to the Cabo Fish Taco mobile application, which is governed by the separate Privacy Policy for the Cabo Fish Taco Mobile App, or to websites and services operated by third parties.

Personal Information We Collect

Depending on how you interact with the Website, we may collect the following categories of personal information.

Information You Provide to Us

We may collect information you submit through the Website, including:

  • Contact information, such as your name, email address, telephone number, mailing address, and preferred restaurant location.

  • Communications, including messages, questions, comments, feedback, catering requests, and other information you provide when contacting us.

  • Franchise inquiry information, such as contact details, location preferences, business experience, financial qualifications, and other information included in a franchise inquiry or application.

  • Employment application information, such as contact information, employment history, education, qualifications, availability, references, résumé information, and other information you submit when applying for a position.

  • Dining and service preferences, such as catering needs, dietary preferences, allergy information, accessibility requests, or other information you voluntarily provide.

  • Marketing preferences, including your decision to join a mailing list, rewards program, or other promotional program.

Please do not submit sensitive personal information that is not necessary for your request or application.

Information Collected Automatically

When you visit the Website, we and our technology providers may automatically collect information about your device and use of the Website, such as:

  • Internet Protocol address;

  • Device type, operating system, and browser type;

  • Device or online identifiers;

  • Approximate location derived from an IP address;

  • Referring website, traffic source, or advertising campaign;

  • Pages viewed and links clicked;

  • Dates, times, and duration of visits;

  • Website interactions, navigation paths, and session information; and

  • Information about Website performance, errors, and security events.

We may collect this information using cookies, tags, pixels, scripts, server logs, and similar technologies.

Information Received from Other Sources

We may receive personal information from:

  • Ordering, delivery, gift-card, loyalty, and rewards providers;

  • Catering and reservation providers;

  • Employment-application and form providers;

  • Franchise-related service providers;

  • Analytics and advertising providers;

  • Social-media platforms when you interact with our pages or content; and

  • Other service providers and business partners.

For example, when you place an order through a third-party ordering service, that service may provide us with information needed to prepare, fulfill, and support your order. Payment-card information is generally collected and processed by the applicable payment or ordering provider rather than directly through cabofishtaco.com.

How We Use Personal Information

We may use personal information to:

  • Operate, maintain, secure, and improve the Website;

  • Respond to questions, requests, feedback, and customer-service inquiries;

  • Process and manage catering inquiries;

  • Evaluate employment applications and communicate with applicants;

  • Evaluate franchise inquiries and communicate with prospective franchisees;

  • Facilitate orders, deliveries, gift cards, rewards, and related services;

  • Personalize Website content and understand visitor preferences;

  • Measure Website traffic, usage, performance, and marketing effectiveness;

  • Conduct analytics, testing, research, forecasting, and business planning;

  • Send marketing or promotional communications where permitted by law;

  • Detect, investigate, and prevent fraud, misuse, security incidents, and unlawful activity;

  • Protect our rights, property, operations, customers, employees, and others;

  • Comply with legal, regulatory, tax, accounting, and contractual obligations; and

  • Carry out other purposes disclosed when information is collected or with your consent.

We may aggregate or de-identify information and use it for analytics, research, planning, and other lawful business purposes. We will not attempt to reidentify information that is maintained in de-identified form except as permitted by law.

Cookies, Analytics, and Advertising Technologies

We and our service providers use cookies and similar technologies to operate the Website, understand how visitors use it, measure performance, identify traffic sources, and evaluate marketing campaigns. These technologies include analytics and advertising tools provided by Google, such as Google Analytics, Google Tag Manager, and Google Ads.

Information collected through these technologies may include device identifiers, IP address, browser information, pages visited, Website interactions, referring sources, and campaign information. For more information about the cookies used on the Website—including their purposes, providers, and retention periods—and how to manage your preferences, please review our Cookie Policy. You may also control cookies through your browser settings, although disabling certain cookies may affect Website functionality.

How We Disclose Personal Information

We may disclose personal information to the following recipients:

  • Website and technology providers that provide hosting, maintenance, security, analytics, communications, and technical support.

  • Google, in connection with Google Tag Manager, Google Analytics, Google Ads, traffic measurement, campaign attribution, and related services.

  • Ordering, payment, delivery, gift-card, loyalty, and rewards providers, including Toast or other platforms used at the time of your transaction.

  • Form and applicant-management providers, including Jotform or another provider used to host or process employment applications and Website forms.

  • Catering providers, including third-party catering marketplaces or fulfillment partners.

  • Professional advisers, such as attorneys, accountants, insurers, auditors, and consultants.

  • Government agencies, law enforcement, courts, and other parties when disclosure is required by law or reasonably necessary to protect legal rights, safety, security, or property.

  • Parties to a business transaction, such as an actual or prospective purchaser, investor, lender, successor, or adviser in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business.

  • Other parties at your direction or with your consent.

We may also disclose aggregated or de-identified information that cannot reasonably be used to identify you.

Third-Party Websites and Services

The Website contains links to or integrations with services operated by third parties, including ordering, delivery, payment, rewards, gift-card, catering, employment, mapping, and social-media services.

When you follow a link to or interact with a third-party service, that third party may collect and process your information under its own privacy policy and terms. Cabo Fish Taco does not control the privacy or security practices of independently operated third-party services. We encourage you to review their policies before submitting personal information.

The Cabo Fish Taco mobile application is also governed by a separate mobile-app privacy policy.

Marketing Communications

If you subscribe to marketing emails or other promotional communications, we may use your contact information to send news, promotions, offers, or information about Cabo Fish Taco.

You may unsubscribe from marketing emails by using the unsubscribe link included in the message. If text-message marketing is offered, the applicable messages will include instructions for opting out. Even if you opt out of marketing, we may continue sending non-promotional communications relating to transactions, requests, applications, or our ongoing relationship with you.

Data Retention

We retain personal information for as long as reasonably necessary and proportionate to:

  • Provide the services or information you requested;

  • Maintain our relationship with you;

  • Evaluate and document employment or franchise applications;

  • Complete transactions and maintain appropriate business records;

  • Conduct analytics and improve the Website;

  • Comply with legal, tax, accounting, and regulatory obligations;

  • Resolve disputes and enforce agreements; and

  • Protect against fraud, misuse, and security threats.

Retention periods vary according to the type of information, the purpose for which it was collected, legal requirements, and operational needs. When personal information is no longer reasonably necessary, we may delete, destroy, or de-identify it.

Cookie retention periods are described in our separate Cookie Policy.

Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no website, transmission method, or storage system can be guaranteed to be completely secure. You should use caution when transmitting personal information online.

Your Privacy Choices and Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

  • Confirm whether we process your personal information;

  • Request access to or a copy of your personal information;

  • Request correction of inaccurate personal information;

  • Request deletion of personal information;

  • Request information about categories of personal information collected, used, or disclosed;

  • Opt out of targeted advertising or certain sales or sharing of personal information;

  • Limit certain uses or disclosures of sensitive personal information;

  • Obtain certain information in a portable format;

  • Withdraw consent where processing is based on consent; and

  • Appeal a decision regarding a privacy request.

You may submit a privacy request by emailing web@cabofishtaco.com with the subject line “Privacy Request.” Please describe your request and the state in which you reside.

We may need to verify your identity before completing a request. You may use an authorized agent where permitted by law, but we may require proof of the agent’s authority and verification of your identity. We will not discriminate against you for exercising an applicable privacy right.

If we process personal information in a manner legally defined as selling, sharing, or targeted advertising, you may also use any “Your Privacy Choices,” “Do Not Sell or Share My Personal Information,” or cookie-settings link made available on the Website. We process legally recognized browser-based opt-out preference signals as required by applicable law.

These rights are not absolute. We may deny or limit a request where permitted by law, including when we cannot verify the request, an exception applies, or retaining information is required for legal or security purposes.

Browser Controls and Do Not Track

You can configure your browser to block, restrict, or delete cookies. Because browser controls differ, consult your browser’s help materials for instructions.

Some browsers transmit “Do Not Track” signals. There is not a universally accepted standard for responding to these signals, and the Website may not respond to ordinary Do Not Track signals. This is separate from legally recognized opt-out preference signals, which we process as required by applicable law.

Children’s Privacy

The Website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information online from children under 13. If you believe a child has provided personal information through the Website, please contact us so we can take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or services. When we make changes, we will update the “Last Updated” date at the top of this Policy. We will provide additional notice when required by applicable law.

Contact Us

For questions about this Privacy Policy or our privacy practices, or to submit a privacy request, contact:

Cabo Fish Taco
Email: web@cabofishtaco.com

Privacy Policy for Cabo Fish Taco Mobile App

Powered by Toast

Last Updated: 2/20/2025

This Privacy Policy describes how personal information is collected, used, and disclosed when you download and use the Cabo Fish Taco Mobile App (the “App”), and the choices and rights you have to protect your personal information collected via the App.

Cabo Fish Taco (“Merchant”) is responsible for the personal information collected when you use the App. The App uses technology provided by Toast, Inc. (“Toast”). To learn more about Toast’s privacy practices, please visit Toast’s Privacy Statement at https://pos.toasttab.com/privacy.

Personal Information Collected Via the App

The App collects the following categories of personal information.

  • Contact information. You may submit your name, email, phone number, and address to the App.
  • Orders and order history. The App collects and retains the orders you place via the App, including the items you order, date and time of the order, order amounts, delivery locations, tips, order frequency, favorite restaurant locations or menu items, and any preferences or selections you submit with your order.
  • Payment information. You may input your payment card information, including your card number, security code, and expiration date, or provide other payment information (such as Apple Pay or Google Pay).
  • Precise location. If you choose to enable it, the App will collect your precise location information to provide you with certain location-enabled features, such as to display and alert you to restaurants nearby and provide live map views. You can disable precise location at any time through your device settings.
  • Rewards program and gift cards. If you participate in Merchant’s rewards program or any other reward program supported by Merchant or the App, the App collects information about your rewards program status, including your points balance and redemptions. The App also collects information about any gift cards you receive or send, including the value of the card and balances.
  • Device and usage information. The App automatically logs information about you, your mobile device, and your interaction over time with the App. This includes: device information, such as your device type, browser type, IP address, device identifiers, language settings, carrier, and general location information; and usage information, such as screens you viewed, how long you spent on a page, browsing history, and access times, and page clicks, page scrolls, and page element interactions. The App also sends crash reports in the event of an error for analysis and troubleshooting purposes.

How Your Personal Information is Used

Merchant may use your personal information for the following purposes:

  • To provide the App and any features you use. This includes authenticating your access to the App; administering your account; allowing you to place orders and remember your preferences; processing transactions; and providing any features that you use within the App, such as location-enabled features and access to loyalty program benefits.
  • To personalize your experience in the App and provide recommendations. This includes personalizing the items you see displayed in the App and recommending restaurant locations and menu items that may interest you based on your past orders and preferences. The App may also send you notifications of locations or items that may interest you. You can control notifications in your device or App settings.
  • Troubleshooting and App improvement. Your information may be used to analyze the performance of the App, identify and correct errors, and develop and improve App features and functionality. Your information may also be aggregated with other users’ information, or otherwise anonymized, to create statistics or for other lawful business purposes, including analytics, forecasting, and strategic planning.

Merchant may also use personal information collected through the App for the following purposes:

  • To analyze users’ selections and preferences in order to improve Merchant’s offerings, identify opportunities for growth, and conduct market research;
  • To send you marketing communications outside the App (including by email, text message or other channels) and to advertise to you and others with similar interests on third-party websites and platforms; and
  • For compliance and protection, including to enforce any Applicable terms and conditions, comply with legal obligations, defend against legal claims or disputes, protect the security and integrity of the App, and identify and investigate fraudulent, harmful, unauthorized, unethical or illegal activity.

These uses outside the App are just examples and may not reflect all the ways Merchant uses personal information outside the App. To learn more, please contact Merchant directly.

How Your Information Is Shared

Personal information collected via the App may be shared as follows:

  • Sharing with Toast. Because the App is operated by Toast, any information you provide via the App, or that Merchant inputs to the App, may be hosted and stored by Toast on Merchant’s behalf.
  • Service providers. The App relies on other service providers that are needed to administer and support the App and its features, including hosting services, communications, data and cybersecurity services, payment processing services, identity verification, fraud detection, investigation and prevention services, and customer relationship management systems.
  • Sharing initiated by Merchant. The App may share information with partners selected by Merchant, such as delivery services and loyalty programs offered by third parties. Merchant may also share information with advertising partners, including via pixels and similar technologies, to allow Merchant to advertise to you and others with similar interests on third-party websites and platforms.
  • Authorities and others. Your personal information may be shared with law enforcement, government authorities, and private parties, where required by law or necessary or Appropriate to protect legal rights or the security or integrity of the App.

Your Privacy Choices

Within your App settings, you have the following choices regarding your personal information:

  • Access, change your account information. You may access your personal information through your account on the App. You can also correct account information that is out of date or inaccurate.
  • Delete your account. To delete your account, follow the instructions within the App settings page.
  • Additional rights and choices. To disable third-party advertising pixels and similar technologies, visit the privacy page in your App settings. Merchant may offer additional choices and allow you to exercise any rights accorded to you under Applicable laws. For more information, please contact Merchant directly.

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. The App does not respond to "Do Not Track" signals. To find out more about "Do Not Track," please visit http://www.allaboutdnt.com.

Changes to This Privacy Policy

This Privacy Policy may be modified at any time. You will be notified of any material changes to the Privacy Policy in accordance with Applicable laws.

Contact Us

For any questions about the privacy practices described in this Privacy Policy, please contact Cabo Fish Taco at: info@cabofishtaco.com

California Addendum

This California Addendum supplements the Privacy Policy for [Merchant] Mobile App and applies only to personal information collected via the App that relates to California residents and is regulated by the California Consumer Privacy Act (“CCPA”).

CCPA Categories of Personal Information

The App collects the following categories of personal information:

Data Category Collected Collected? Primary Purposes of Processing Key Disclosures Can You Limit Sharing?
Identifiers, such as name, email address, and IP address Yes To provide the App and any features you use.
To personalize your experience in the App and provide recommendations.
Troubleshooting and App improvement.		 Toast and other service providers No
Personal information categories listed in the California Customer Records Statute (e.g., name, contact details) Yes To provide the App and any features you use.
To personalize your experience in the App and provide recommendations.
Troubleshooting and App improvement.		 Toast and other service providers No
Protected characteristics under California or federal law No N/A N/A N/A
Commercial information, including but not limited to records of products or services purchased Yes To provide the App and any features you use.
To personalize your experience in the App and provide recommendations.
Troubleshooting and App improvement.		 Toast and other service providers No
Professional or employment-related information No N/A N/A N/A
Biometric information No N/A N/A N/A
Internet or other electronic network activity information, including but not limited to browsing history and search history Yes To provide the App and any features you use.
To personalize your experience in the App and provide recommendations.
Troubleshooting and App improvement.		 Toast and other service providers No
Geolocation data Yes To provide the App and any features you use.
To personalize your experience in the App and provide recommendations.
Troubleshooting and App improvement.		 Toast and other service providers No
Audio, electronic, visual, thermal, olfactory, or similar information No N/A N/A N/A
Education records No N/A N/A N/A
Inferences drawn from information to create a profile about your behavior, preferences, etc. Yes To provide the App and any features you use.
To personalize your experience in the App and provide recommendations.
Troubleshooting and App improvement.		 Toast and other service providers No

Additional Purposes of Processing

Merchant may also use personal information collected through the App for the following purposes:

  • To analyze users’ selections and preferences in order to improve Merchant’s offerings, identify opportunities for growth, and conduct market research;
  • To send you marketing communications outside the App (including by email, text message or other channels) and to advertise to you and others with similar interests on third-party websites and platforms; and
  • For compliance and protection, including to enforce any applicable terms and conditions, comply with legal obligations, defend against legal claims or disputes, protect the security and integrity of the App, and identify and investigate fraudulent, harmful, unauthorized, unethical or illegal activity.

These uses outside the App are just examples and may not reflect all the ways Merchant uses personal information outside the App. To learn more, please contact Merchant directly.

Additional Disclosures of Personal Information

Merchant may also share personal information with third parties as follows:

  • Sharing initiated by Merchant. The App may share information with partners selected by Merchant, such as delivery services and loyalty programs offered by third parties. Merchant may also share personal information with acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of the business.
  • Authorities and others. Your personal information may be shared with law enforcement, government authorities, and private parties, where required by law or necessary or appropriate to protect legal rights or the security or integrity of the App.

Your Privacy Choices

The CCPA grants California residents the following rights:

  • Information. You may have the right to obtain information about how your personal information is collected, used, and disclosed. This information is available within this Privacy Policy.
  • Access, correction and deletion. You may also have the right to request access to your personal information, to correct personal information that is out of date or inaccurate, or to delete personal information that is no longer needed for a permitted purpose.

Please note that your ability to invoke the rights above are limited pursuant to the scope and limitations of the CCPA, including any available exceptions. For example, an access request can only be made twice within a 12-month period.

Sensitive Personal Information

The App may collect sensitive personal information as follows:

  • Precise location. If you choose to enable it, the App will collect your precise location information to provide you with certain location-enabled features, such as to display and alert you to restaurants nearby and provide live map views. You can disable precise location at any time through your device settings.
  • Dietary and dining preferences. Your dietary and dining preferences may reveal sensitive personal information about you, such as your allergies, accessibility requirements, and religious beliefs. You can submit this information to the App to allow the Merchant to better serve your needs and preferences.

Right to Limit the Use of Sensitive Personal Information

The CCPA grants California residents the right to limit the use of sensitive personal information beyond certain permitted purposes. In general, your sensitive personal information is used only for the limited purposes of providing and personalizing the App for you.

Personal Information Retention

Your personal information is retained for as long as is necessary to allow you to access and use the App and for a reasonable time thereafter for the purposes described in the Privacy Policy. Your personal information will be deleted or destroyed when its continued retention is no longer reasonable necessary and proportionate in accordance with applicable laws.

US State Law Addendum

This US State Law Addendum supplements the Privacy Policy for [Merchant] Mobile App and applies only to personal information collected via the App that relates to Virginia, Colorado, Connecticut, Texas, Montana, Oregon, and Utah residents and is regulated by applicable consumer privacy laws in such states (“US State Privacy Laws”).

Additional Rights Under US State Privacy Laws

Where applicable, US State Privacy Laws grant consumers the following rights:

  • Information. You may have the right to obtain information about how your personal information is collected, used, and disclosed. This information is available within this Privacy Policy.
  • Access, correction and deletion. You may also have the right to request access to your personal information, to correct personal information that is out of date or inaccurate, or to delete personal information that is no longer needed for a permitted purpose.

To make a request, please consult the “Contact Us” section of the Privacy Policy. You may be asked for specific information from you to confirm your identity.

Please note that your ability to invoke the rights above are limited pursuant to the scope and limitations of the US State Privacy Laws, including any available exceptions. If you are not satisfied with how your request was addressed, you may consult the “Contact Us” section of the Privacy Policy to appeal and submit a complaint.

Sensitive Personal Information

The App may collect and use sensitive personal information as follows:

  • Precise location. If you choose to enable it, the App will collect your precise location information to provide you with certain location-enabled features, such as to display and alert you to restaurants nearby and provide live map views. You can withdraw your consent at any time by disabling precise location collection within your device settings.
  • Dietary and dining preferences. If you choose to submit information about your dietary or dining preferences, you may reveal sensitive personal information about you, such as your allergies, accessibility requirements, and religious beliefs. By providing this information within the App, you consent to Merchant’s use of this information to better serve your needs and preferences. You can withdraw consent at any time by deleting such information within your profile in the App.

Please note that your withdrawal of consent will not affect use of your information before you withdrew your consent.

Personal Information Retention

Your personal information is retained for as long as is necessary to allow you to access and use the App and for a reasonable time thereafter for the purposes described in the Privacy Policy. Your personal information will be deleted or destroyed when its continued retention is no longer reasonable necessary and proportionate in accordance with applicable laws.