Your California Privacy Choices
Use the controls below to manage non-essential cookies, exercise your California CCPA/CPRA Right to Opt-Out of Sale or Sharing, verify Global Privacy Control (GPC) recognition, or submit a formal privacy request.
1. Your Right to Opt-Out of Sale or Sharing (CCPA / CPRA)
Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), California residents have the right to direct a business not to "sell" or "share" their personal information for cross-context behavioral advertising. Tacos Gavilan does not sell your personal information for monetary consideration. Furthermore, non-essential analytics and marketing tags (Google Tag Manager GTM-WW2N58Z, Google Analytics, Meta Pixel, and TikTok Pixel) are blocked by default prior to your consent. You can use the checkboxes and buttons above at any time to accept or reject Analytics, accept or reject Marketing, or record an explicit Opt-Out of Sale/Sharing.
2. Global Privacy Control (GPC) Signal Recognition
Our Site automatically detects and honors the Global Privacy Control (GPC) browser signal (navigator.globalPrivacyControl === true) as a valid request to opt out of the sale or sharing of personal information. When GPC is active in your browser or privacy extension, marketing and advertising tags are automatically blocked and you will see the green "Opt-out request honored" badge above and in our Cookie Preference Center.
3. What Happens When You Opt Out or Change Your Decision
When you click "Opt-Out of Sale / Sharing Now" or toggle off Analytics/Marketing above: (1) your choice is saved in your browser's localStorage (tg_cookie_consent and tacosgavilan_cookie_consent); (2) Google Consent Mode v2 immediately updates ad_storage, ad_user_data, ad_personalization, and/or analytics_storage to denied; (3) accessible first-party domain tracking cookies (including _ga, _gid, _gat, _fbp, _ttp, and _gcl_au) and session telemetry identifiers (tg_session_id) are deleted from your browser; and (4) if third-party scripts had already loaded during your current session, the page performs a clean reload so no revoked scripts remain active in memory. Please note that cookies set directly on third-party domains (such as google.com, facebook.com, tiktok.com, or order.online) are isolated by browser security policies and can be cleared via your browser settings.
4. Submitting Requests to Know, Delete, or Correct
To submit a request to Know/Access, Delete, or Correct personal information maintained in our database (such as past Contact Form submissions), please use our Contact & Privacy Request Form (/contact/) and select the corresponding CCPA request category, or email support@tacosgavilan.com. Full details on verification, authorized agents, timelines, and appeals are available in Section F of our Privacy Policy.
Need to Submit a Request to Know, Delete, or Correct?
Use our Contact & Privacy Request Form (/contact/) and select your CCPA request type, or email support@tacosgavilan.com.