Privacy Policy

Introduction

At Lomito, we care deeply about your privacy and want you to understand how we collect, use, and share your personal information when you use the Lomito Mobile App (the “App”) and our website www.orderlomito.com (together, the “Services”).

1. Personal Information We Collect

We may collect the following categories of information when you use our Services:

a. Contact Information

  • Name, email address, phone number, and delivery or billing address.

b. Orders and Order History

  • Items ordered, order amounts, date/time, delivery details, tips, preferred locations, frequency, and saved favorites.

c. Payment Information

  • Payment card details (number, expiration date, and CVV) or digital wallet information (Apple Pay, Google Pay, etc.).
    Payment data is securely processed by Toast and its payment partners — Lomito does not store or access your full payment card details.

d. Location Information

  • If you enable location services, the App may collect your precise location to show nearby restaurants, provide delivery estimates, and improve accuracy.
    You can disable location sharing anytime through your device settings.

e. Rewards and Gift Cards

  • If you join Lomito’s rewards program, we collect information such as points balance, redemptions, and gift card balances or transfers.

f. Device & Usage Information

  • Device type, IP address, browser, language, operating system, carrier, and general location.

  • App usage data such as pages viewed, time spent, clicks, scrolls, and interactions.

  • Crash reports and diagnostics for performance and troubleshooting.

g. Preferences and Feedback

  • Dietary preferences, delivery notes, or any information you voluntarily submit (e.g., reviews, feedback forms, or surveys).

2. How We Use Your Information

We use your information to:

  • Provide and operate our Services, including processing orders, payments, and deliveries.

  • Authenticate and manage your account and saved preferences.

  • Improve your experience, recommend menu items, and personalize communications.

  • Analyze and enhance performance, fix bugs, and develop new features.

  • Send marketing messages, promotions, and updates (you can opt out anytime).

  • Comply with legal obligations and prevent fraud or unauthorized activity.

  • Conduct analytics and reporting to understand trends and improve customer satisfaction.

3. How We Share Your Information

Your personal information may be shared as follows:

a. With Toast

Because the App runs on Toast’s technology, any data you provide through the App may be hosted, processed, and stored by Toast on our behalf.

b. Service Providers

We work with trusted service providers that help us operate the App and website, including:

  • Payment processors

  • Hosting and IT providers

  • Customer communications tools

  • Security and fraud prevention systems

  • Marketing and analytics platforms

These providers are contractually required to protect your personal information and use it only for the services they provide to us.

c. Merchant Partners

Lomito may share limited data with:

  • Delivery partners and logistics providers

  • Loyalty and gift card program operators

  • Advertising and social media partners to display promotions or target similar audiences

We do not sell or rent personal information.

d. Legal and Compliance Disclosures

We may share your information with:

  • Law enforcement or government authorities, when required by law or in response to valid legal requests.

  • Attorneys, auditors, and advisors, to enforce our terms, protect our business, or comply with regulatory obligations.

  • Third parties in connection with a business transaction (such as a merger, acquisition, or sale of assets), provided they maintain confidentiality and data protection standards.

4. Your Privacy Choices

You can manage your personal information in several ways:

  • Access or update your account information directly through the App or website.

  • Delete your account anytime through the App settings or by contacting us.

  • Manage marketing preferences or unsubscribe from emails and texts.

  • Control cookies and location settings via your device or browser.

You may also have rights to access, correct, delete, or limit use of your personal information under applicable laws. To exercise these rights, contact us at info@orderlomito.com.

5. Do Not Track

Some browsers send “Do Not Track” signals. Our App and website currently do not respond to these signals. To learn more, visit www.allaboutdnt.com.

6. Data Retention

We retain personal information as long as needed to:

  • Fulfill your orders and provide support;

  • Meet legal, tax, or accounting requirements; and

  • Analyze performance and improve operations.

When your data is no longer required, we securely delete or anonymize it.

7. Data Security

We use industry-standard measures to protect your information, including encryption, firewalls, and secure storage through Toast and our trusted vendors.
While no system is completely secure, we continually evaluate and improve our security practices.

8. Children’s Privacy

Our Services are not intended for children under 13 years old. We do not knowingly collect personal data from children.
If you believe your child has provided information, contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy periodically to reflect operational or legal changes.
We will notify you of any material updates via email, within the App, or on our website. The latest version will always be dated at the top of this page.

10. Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact:

Lomito Peruvian Food
Westport, Connecticut, USA
📧info@orderlomito.com

California Addendum (CCPA)

This section applies to California residents under the California Consumer Privacy Act (CCPA).

CategoryCollectedPurpose of UseShared WithCan You Limit Sharing?Identifiers (name, email, IP)YesProvide, personalize, troubleshoot servicesToast, service providersNoCommercial Info (orders, payments)YesProcess orders, personalization, analyticsToast, service providersNoGeolocationYesDelivery and location featuresToast, service providersNoInternet/Usage DataYesAnalytics, optimizationToast, service providersNoSensitive Data (dietary, location)PossiblePersonalization and serviceToastYes – via device or account settings

Your Rights Under the CCPA

You have the right to:

  • Know what data we collect and how it’s used;

  • Request access, correction, or deletion of your personal information; and

  • Limit the use of sensitive personal information.

To exercise your rights, email info@orderlomito.com.
We may ask for verification before processing your request.

U.S. State Law Addendum

This addendum applies to residents of Connecticut, Virginia, Colorado, Texas, Montana, Oregon, and Utah under applicable state privacy laws.

You may have the right to:

  • Access, correct, or delete personal information;

  • Withdraw consent for sensitive data (e.g., precise location or dietary preferences).

To make a request or appeal a decision, email info@orderlomito.com.
We will respond within the timeframe required by law.

Retention and Deletion

We retain your personal information only for as long as necessary to deliver our services, comply with legal obligations, or resolve disputes.
When it’s no longer required, your data is securely deleted or anonymized.

Lomito is responsible for the personal information collected through the App and website.
The App uses technology provided by Toast, Inc. (“Toast”). To learn more about Toast’s privacy practices, please visit Toast’s Privacy Statement.

© 2025 Lomito Peruvian Food. All rights reserved.
Powered by Toast.