Privacy Policy

1. Who We Are

This Privacy Policy applies to Yaya Mas Greek Kuzina (“Yaya Mas,” “we,” “us,” or “our”), a Greek restaurant located at 1755 N Sheffield Ave, Lincoln Park, Chicago, IL 60614.

This policy describes how we collect, use, and protect personal information when you visit our website at yayamas.com, place an order, use our mobile app, or interact with us in any way.

By using our website or services, you agree to the practices described in this Privacy Policy. If you have any questions, please contact us directly.

2. Information We Collect

Information You Provide Directly

• Order information: Name, delivery address, phone number, email address, and order details when you place an order online or through our app
• Payment information: We do not store your full credit card details. Payments are processed securely through third-party payment processors (GloriaFood / Stripe)
• Contact form submissions: Name, email address, and message content when you contact us through our website
• Catering inquiries: Contact details and event information provided when requesting catering services
• Account creation: Email address and password if you create an account on our app or website

Information Collected Automatically

• Usage data: Pages visited, time spent on pages, links clicked, and referring URLs
• Device information: Browser type, operating system, device type, and screen resolution
• IP address: Used to determine approximate geographic location for delivery zone purposes
• Cookies and similar tracking technologies: See Section 5 for full details

Information from Third Parties

• Delivery platforms: DoorDash, Uber Eats, and other platforms may share order information with us to fulfill deliveries
• Review platforms: Publicly available reviews from Google, Yelp, and Trustindex
• Social media: If you interact with our social media accounts (Facebook, Instagram, TikTok, YouTube), those platforms’ privacy policies also apply

3. How We Use Your Information

We use the information we collect for the following purposes:

• Order fulfillment: Processing and delivering your food orders, sending order confirmations and updates
• Customer service: Responding to your questions, feedback, and support requests
• Catering services: Planning and executing catering events you book with us
• App functionality: Providing order history, saved addresses, and personalized recommendations in our mobile app
• Communications: Sending promotional offers, new menu announcements, and special events if you have opted in
• Website improvement: Analyzing how visitors use our website to improve your experience
• Legal compliance: Complying with applicable laws, regulations, and legal requests
• Fraud prevention: Detecting and preventing fraudulent orders or unauthorized access

4. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Delivery partners: Shipday, Uber Eats, and DoorDash drivers to fulfill your delivery orders
• Payment processors: GloriaFood (FoodBooking) and Stripe to process payments securely
• Catering platforms: ezCater when you book catering through their platform
• Analytics providers: Google Analytics to understand website traffic and usage patterns
• Email service providers: To send order confirmations and marketing emails you have opted into
• Legal authorities: When required by law, court order, or to protect the safety of our customers or staff

All third-party service providers we work with are required to handle your information securely and only use it for the purposes we specify.

5. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to improve your experience. Here is what we use:

Essential Cookies

Required for the website to function. These cannot be disabled. They include session cookies that remember your cart items and login status.

Analytics Cookies

Google Analytics cookies help us understand how visitors use our website — which pages are most popular, how long people stay, and where they come from. This data is anonymous and aggregated.

Marketing Cookies

If you arrive at our site from a Google or Facebook ad, cookies help us measure the effectiveness of our advertising. We do not use this data to build individual profiles for advertising purposes.

Third-Party Ordering Cookies

Our online ordering system (GloriaFood / FoodBooking) requires third-party cookies to function on certain browsers. If your browser blocks these cookies, you may be directed to open the ordering page in a new tab.

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing ones. Note that disabling certain cookies may affect the functionality of our website.

6. Third-Party Services

Our website and services integrate with the following third-party platforms, each with their own privacy policies:

• Google Analytics & Google Maps — Google Privacy Policy
• GloriaFood / FoodBooking (online ordering) — GloriaFood Privacy Policy
• ezCater (catering bookings) — ezCater Privacy Policy
• Shipday (delivery dispatch) — Shipday Privacy Policy
• Stripe (payment processing) — Stripe Privacy Policy
• Trustindex (Google review widget) — Trustindex Privacy Policy
• Facebook / Instagram / TikTok / YouTube — respective platform privacy policies apply when you interact with our social media pages

7. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Order records: Retained for 7 years for tax and accounting purposes
• Account information: Retained until you delete your account or request deletion
• Marketing preferences: Retained until you unsubscribe or request deletion
• Analytics data: Aggregated and anonymized data retained for up to 26 months
• Contact form submissions: Retained for up to 2 years

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (“right to be forgotten”)
• Portability: Request your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time
• Restriction: Request that we limit how we use your information

9. Children’s Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will delete it promptly.

10. Data Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, use, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our website
• Secure payment processing through PCI-compliant third-party processors
• Limited access to personal data on a need-to-know basis among our staff
• Regular review of our data collection and storage practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will update the “Last updated” date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

• Restaurant: Yaya Mas Greek Kuzina
• Address: 1755 N Sheffield Ave, Lincoln Park, Chicago, IL 60614
• Phone: (312) 313-7006
• Contact form: yayamas.com/contact-us