Privacy Policy

1. Introduction

Welcome to La Capitol ("we," "us," or "our"). We are committed to protecting your privacy and ensuring transparency in how we collect, use, and protect your personal information.

This Privacy Policy applies to all information collected through our website, mobile applications, in-person interactions at our restaurant, and any related services (collectively, the "Services").

You must be at least 18 years of age to use our Services or provide personal information to us.

By using our Services, you consent to the data practices described in this policy. This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), CAN-SPAM Act, and A2P 10DLC messaging requirements.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide when you:

• Make a reservation: Name, phone number, email address, party size, special requests
• Join our VIP list: Name, email address, phone number (optional), birthday (optional)
• Opt-in to SMS notifications: Mobile phone number, consent records
• Subscribe to emails: Email address, name, communication preferences
• Contact us: Name, email, phone number, message content
• Participate in promotions: Contact information, preferences, feedback
• Create an account: Username, password, profile information

2.2 Information Collected Automatically

When you visit our website or use our Services, we automatically collect:

• Device information: IP address, browser type, operating system, device identifiers
• Usage data: Pages viewed, time spent, links clicked, referring website
• Location data: Approximate geographic location based on IP address
• Cookies and tracking technologies: See Section 6 for details

2.3 Information from Third Parties

We may receive information from:

• Reservation platforms (OpenTable, Resy, etc.)
• Social media platforms (if you interact with our social media pages)
• Marketing and analytics partners
• Payment processors (transaction details only)

3. How We Use Your Information

3.1 Lawful Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Consent: For marketing emails, SMS messages, and optional cookies
• Contract Performance: To process reservations and fulfill services
• Legitimate Interests: To improve our services, prevent fraud, and ensure security
• Legal Obligation: To comply with tax, health, and safety regulations

3.2 Purposes of Data Use

We use your information to:

• Process and confirm reservations
• Provide customer support and respond to inquiries
• Send promotional emails (with your consent)
• Send SMS notifications and promotions (with separate SMS consent)
• Improve our website, menu, and customer experience
• Conduct analytics and market research
• Prevent fraud, security threats, and illegal activity
• Comply with legal obligations (health codes, tax requirements)
• Send reservation reminders and confirmations
• Manage loyalty programs and special offers

4. SMS/Text Messaging (A2P Compliance)

4.1 SMS Program Description

Program Name: La Capitol Text Club

Purpose: Receive promotional offers, reservation reminders, special event notifications, and updates about La Capitol.

4.2 Consent and Opt-In

By providing your mobile phone number and checking the SMS opt-in box on our forms, you explicitly consent to receive:

• Marketing and promotional text messages
• Reservation confirmations and reminders
• Special event announcements
• Limited-time offers and deals

Message Frequency: You will receive up to 4 messages per month. Message frequency may vary based on your activity and preferences.

Message & Data Rates: Standard message and data rates may apply. Check with your mobile carrier for details.

4.3 How to Opt-Out

To stop receiving SMS messages: Text STOP to the number from which you received messages. You will receive one final confirmation message.

To get help: Text HELP for assistance or contact us at (570) 909-2271 or [email protected].

4.4 Carrier Limitations

La Capitol is not liable for delayed or undelivered messages. Supported carriers include major U.S. carriers (AT&T, T-Mobile, Verizon, Sprint, etc.). Check with your carrier for compatibility.

4.5 Data Sharing for SMS

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Your phone number is only used to send you messages you've consented to receive from La Capitol.

We may share your phone number with:

• SMS service providers: To deliver text messages on our behalf (e.g., GoHighLevel, Twilio)
• Legal authorities: If required by law or to protect our rights

5. Email Marketing

5.1 Email Consent

We only send promotional emails to individuals who have explicitly opted in to receive them. Email opt-in is separate from SMS opt-in.

5.2 CAN-SPAM Compliance

All marketing emails include:

• Clear identification that the message is from La Capitol
• Our physical address: 100 N Main Ave, Scranton, PA 18504
• An easy-to-use unsubscribe link in every email
• Accurate subject lines that reflect email content

5.3 Unsubscribing from Emails

You can unsubscribe from marketing emails at any time by:

• Clicking the "Unsubscribe" link at the bottom of any email
• Contacting us at [email protected]
• Calling (570) 909-2271

Please allow up to 10 business days for your request to be processed. You will continue to receive transactional emails (reservation confirmations, etc.) even after unsubscribing from marketing emails.

6. Cookie Policy

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience and analyze website traffic.

6.2 Types of Cookies We Use

Essential Cookies (Required):

• Enable core website functionality
• Remember your preferences and settings
• Maintain security and prevent fraud

Analytics Cookies (Optional):

• Google Analytics: Track website usage and performance
• Understand how visitors interact with our site
• Help us improve user experience

Marketing Cookies (Optional):

• Deliver targeted advertising
• Measure ad campaign effectiveness
• Personalize content based on your interests

6.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View cookies stored on your device
• Delete cookies
• Block all cookies
• Block third-party cookies only

Note: Blocking essential cookies may prevent the website from functioning properly.

7. Sharing Your Information

7.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business:

• GoHighLevel: CRM, email, and SMS marketing platform
• Payment processors: Secure payment processing (we do not store full credit card numbers)
• Reservation platforms: OpenTable, Resy, and similar services
• Analytics providers: Google Analytics, website performance tools
• Email service providers: For sending newsletters and promotions
• Cloud hosting providers: Website and data hosting services

These service providers are contractually obligated to protect your data and only use it to provide services to us.

7.2 Legal Obligations

We may disclose your information if required to:

• Comply with legal processes (subpoenas, court orders)
• Enforce our Terms of Service
• Protect the rights, property, or safety of La Capitol, our customers, or others
• Investigate fraud or security incidents
• Comply with health and safety regulations

7.3 Business Transfers

If La Capitol is involved in a merger, acquisition, or sale of assets, your information may be transferred to the new owner. You will be notified of any such change.

8. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy:

• Reservation data: Retained for 2 years after your last visit
• Marketing lists: Retained until you unsubscribe or request deletion
• Transaction records: Retained for 7 years to comply with tax and accounting regulations
• Website analytics: Aggregated data retained indefinitely; individual data anonymized after 26 months
• Customer support records: Retained for 3 years

Upon request, we will delete your data in accordance with applicable laws (see Section 9 for your rights).

9. Your Rights

9.1 GDPR Rights (EU Residents)

If you are located in the European Union, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Opt-out of certain data processing activities
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

9.2 CCPA/CPRA Rights (California Residents)

If you are a California resident, you have the following rights:

• Right to Know: Request details about the personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the "sale" or "sharing" of your personal information (we do not sell data)
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit Use of Sensitive Information: Limit use of sensitive personal data
• Right to Non-Discrimination: You will not be discriminated against for exercising your rights

9.3 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: [email protected]
• Phone: (570) 909-2271
• Mail: La Capitol, Attn: Privacy Officer, 100 N Main Ave, Scranton, PA 18504

We will respond to your request within 30 days (GDPR) or 45 days (CCPA). We may require verification of your identity before processing requests.

10. Security

We implement industry-standard security measures to protect your personal information:

• SSL/TLS Encryption: All data transmitted to and from our website is encrypted
• Secure servers: Data stored on secure, access-controlled servers
• Regular security audits: We conduct periodic security assessments
• Access controls: Only authorized personnel can access personal data
• PCI DSS Compliance: Payment card data is processed through certified payment processors

Limitations: While we strive to protect your data, no system is 100% secure. We cannot guarantee absolute security of information transmitted over the internet.

11. Age Requirement & Children's Privacy

Our Services are intended for individuals who are at least 18 years of age. We do not knowingly collect personal information from anyone under the age of 18. By using our Services, you represent and warrant that you are at least 18 years old.

If you are a parent or guardian and believe your child under 18 has provided us with personal information, please contact us immediately at [email protected]. We will promptly delete such information from our systems.

If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information as soon as possible.

12. International Data Transfers

La Capitol is based in the United States. If you are located outside the U.S., your information will be transferred to and processed in the United States.

For EU residents, we rely on:

• Standard Contractual Clauses (SCCs): Approved by the European Commission
• EU-U.S. Data Privacy Framework: Our service providers (e.g., GoHighLevel) are certified under this framework

By using our Services, you consent to the transfer of your information to the United States.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

How we notify you:

• We will update the "Last Updated" date at the top of this page
• For material changes, we will notify you via email or prominent notice on our website
• Continued use of our Services after changes constitutes acceptance of the updated policy

We encourage you to review this policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

La Capitol Privacy Officer
100 N Main Ave
Scranton, PA 18504

Email: [email protected]
Phone: (570) 909-2271

We will respond to all inquiries within 30 days.