Privacy Policy

Name: Palmilla Cocina y Tequila
Address: 3110 Newport Blvd, Newport Beach, CA, 92663, United States
Telephone: (949) 467-4203

Effective Date: April 22, 2026
Last Updated: September 5, 2026

1. Introduction

Palmilla Cocina y Tequila (“Palmilla,” “we,” “our,” or “us”) respects your privacy and is committed to being transparent about the information we collect and how we use it. This Privacy Policy explains how we handle information collected through palmillarestaurant.com (the “Site”) and the services we provide in connection with it, across our Hermosa Beach and Newport Beach locations.

This Privacy Policy complies with the California Online Privacy Protection Act (CalOPPA), the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, “CCPA/CPRA”), and other applicable U.S. state privacy laws.

Please read this Privacy Policy carefully. By using our Site or services, you agree to the practices described here.

2. Information We Collect

2.1 Information You Provide

Our Site does not contain any forms. It does not collect names, email addresses, phone numbers, or payment details directly. We collect information you voluntarily provide when you:

Make a reservation by phone or by email (name, phone number, email address, party size, date and time, location, and any special requests).
Book a table through OpenTable, which our Site links to (OpenTable returns your reservation name, contact details, and dining preferences to us).
Place a delivery or pickup order through DoorDash, which our Site links to (DoorDash shares your name, contact details, order details, and delivery address with us as needed to fulfill the order).
Purchase a gift card through our gift card provider, which our Site links to (name, email, billing information, and recipient details are collected on the provider’s site).
Contact us by phone or email with questions, feedback, or a private event inquiry (name, email, phone, message content, event details, and the location the inquiry relates to).
Participate in a promotion, survey, or contest we run in person or through a third-party platform (information varies with the activity).

2.2 Information Automatically Collected

When you visit our Site, our hosting provider’s servers automatically record standard technical information needed to deliver the pages and keep the Site secure, including:

Device information such as IP address, browser type, and operating system.
Usage information such as pages requested, time and date of the request, and referring website.
General geographic location derived from your IP address.

This information is kept in server logs for security and troubleshooting. We do not use it to build a profile of you. See Section 5 for details about cookies.

2.3 Information From Third Parties

We receive information about you from third-party services you choose to use, including:

Reservation platform. OpenTable provides online reservations for both Palmilla locations and shares reservation details, dining preferences, and account information with us.
Delivery platform. DoorDash provides delivery and pickup ordering for both Palmilla locations and shares order details, customer contact information, and delivery addresses with us so that we can prepare and fulfill your order.
Gift card provider. Our gift card provider may share purchase and redemption information.
Social media. If you interact with our Facebook, Instagram, or other social pages, we may receive publicly available information from those platforms.

3. How We Use Your Information

We use the information we collect to:

Process and confirm reservations, take and fulfill orders, and accommodate special requests at the correct location.
Communicate with you about your visit, reservation, or order, including service messages and confirmations.
Respond to inquiries, provide customer service, and resolve issues or complaints.
Send marketing emails, newsletters, special offers, and event announcements if you have opted in. You can opt out at any time (see Section 12).
Keep the Site secure and troubleshoot technical problems.
Run internal research and operational improvements.
Comply with applicable laws, regulations, and legal processes.
Protect against fraud, unauthorized access, and other security threats.

4. How We Share Your Information

We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising (targeted advertising based on your activity across unaffiliated sites), and we do not use advertising or tracking cookies on the Site.

We share information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including:

Reservation management. OpenTable processes online bookings for both Palmilla locations. Your use of OpenTable is also governed by its own privacy policy.
Delivery and pickup. DoorDash processes delivery and pickup orders for both Palmilla locations. Your use of DoorDash is also governed by its own privacy policy.
Gift cards. Our gift card provider processes gift card purchases and redemptions.
Email and marketing. Email service providers send newsletters and promotional messages on our behalf to guests who have opted in.
Website operations. Hosting, security, backup, and performance-monitoring providers help keep the Site running.
Payment processors. Where we process payments directly (for example, event deposits), PCI-compliant payment processors handle card data on our behalf.

Our service providers are contractually required to protect your information and use it only for the services they provide to us.

4.2 Business Transfers

If Palmilla is involved in a merger, acquisition, financing, sale of assets, reorganization, or bankruptcy, your information may be transferred as part of that transaction, subject to this Privacy Policy or a successor notice.

4.3 Legal Requirements

We may disclose your information when required to do so by law, court order, subpoena, or government request, or when we reasonably believe disclosure is necessary to comply with legal obligations, protect our rights, property, or safety, protect the safety of our guests or others, or prevent fraud or security threats.

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Cookies and Similar Technologies

Our Site uses only the cookies that are necessary for it to work. We do not use a cookie consent banner because we do not set analytics, advertising, or other non-essential cookies.

Functional (essential) cookies are required for the Site to operate, for example to deliver pages securely and to keep the Site running efficiently. These cannot be disabled.
Preference cookies may remember settings such as a dismissed notice so you are not shown it again.

We do not use statistics (analytics) cookies or marketing cookies. If we add any such technologies in the future, we will update this Privacy Policy first and, where required, ask for your consent before they are set.

5.1 Browser Controls

Most browsers let you view, delete, and block cookies through their settings. Blocking essential cookies may prevent some parts of the Site from working correctly. Third-party sites we link to (OpenTable, DoorDash, our gift card provider, Google Maps, Facebook, and Instagram) set their own cookies under their own policies once you leave our Site.

6. Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals. If your browser or device is configured to send a GPC signal when it visits the Site, we will treat that signal as a valid request to opt out of the sale or sharing of your personal information for that browser or device. Because we do not sell or share personal information and do not set non-essential cookies, no additional action is required on your part. You do not need to verify your identity to use GPC.

To learn more about GPC, visit the Global Privacy Control website.

7. Your California Privacy Rights

If you are a California resident, you have the following rights under CCPA/CPRA:

Right to Know. Request disclosure of the categories and specific pieces of personal information we have collected, the sources of that information, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete. Request deletion of personal information we have collected from you, subject to certain legal exceptions.
Right to Correct. Request correction of inaccurate personal information we hold about you.
Right to Opt Out of Sale or Sharing. Opt out of any “sale” or “sharing” of personal information (as those terms are defined under CCPA/CPRA). Palmilla does not sell or share personal information, so there is nothing to opt out of today; if that ever changes, we will provide an opt-out mechanism before doing so.
Right to Limit Use of Sensitive Personal Information. To the extent we use sensitive personal information for purposes that are not strictly necessary to provide the services you request, you have the right to limit that use.
Right to Non-Discrimination. Exercise your privacy rights without receiving discriminatory treatment.

7.1 How to Exercise Your Rights

To submit a privacy request, contact us at:

Email: nbreservations@palmillarestaurant.com with the subject line “California Privacy Request.”
Phone: (949) 467-4203.
Mail: Palmilla Cocina y Tequila, Attn: Privacy Request, 3110 Newport Blvd, Newport Beach, CA 92663.

We will verify your identity before processing your request and will respond within 45 days. This period may be extended by an additional 45 days when reasonably necessary; if we need more time, we will tell you why.

7.2 Categories of Personal Information Collected (Last 12 Months)

Identifiers (name, email, phone, IP address).
Commercial information (reservation history, gift card purchases, order history, dining preferences, location visited).
Internet or electronic network activity (server log records of pages requested from our Site).
Geolocation data (general location based on IP address).

We do not knowingly collect or sell personal information of minors under 16 years of age.

7.3 Authorized Agents

You may designate an authorized agent to submit a privacy request on your behalf. The agent must provide signed written permission from you, and we may ask you to verify your own identity directly.

8. Your Privacy Rights Under Other U.S. State Laws

If you are a resident of a U.S. state with a comprehensive privacy law (for example, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, or other states as those laws take effect), you may have similar rights to know, delete, correct, and opt out of targeted advertising and certain profiling. To exercise these rights, contact us using the information in Section 7.1.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards to help protect your personal information, including SSL/TLS encryption in transit, access controls on a need-to-know basis, and periodic review of our security practices. No method of transmission over the Internet or electronic storage is 100% secure, however, and we cannot guarantee absolute security.

10. Data Retention

We retain your personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, meet legal and regulatory obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete, destroy, or anonymize it.

11. Third-Party Links and Services

Our Site contains links to third parties, including OpenTable for reservations, DoorDash for delivery and pickup orders, our gift card provider (palmilla.cardfoundry.com), Google Maps for directions to each location, and our Facebook and Instagram pages. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing information.

12. Email, SMS, and Marketing Opt-Out

If you have opted in to marketing emails or text messages, you can opt out at any time by:

Clicking the “unsubscribe” link at the bottom of any marketing email.
Replying STOP to any marketing text message.
Emailing nbreservations@palmillarestaurant.com with “Unsubscribe” in the subject line.
Calling (949) 467-4203.

We may still send you transactional messages (such as reservation confirmations, order updates, or customer service replies) after you opt out of marketing.

13. Children’s Privacy

Our Site and services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us and we will promptly delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will update the “Last Updated” date and, where appropriate, provide additional notice. We encourage you to review this Privacy Policy periodically.

15. Contact Information

For privacy-related inquiries, please email nbreservations@palmillarestaurant.com with “Privacy Policy” in the subject line, or write to us at the corporate address below:

Palmilla Cocina y Tequila (Corporate)
3110 Newport Blvd, Newport Beach, CA 92663
Phone: (949) 467-4203
Email: nbreservations@palmillarestaurant.com

Our Locations

Hermosa Beach: 39 Pier Ave, Hermosa Beach, CA 90254. Phone: (310) 374-4440. Reservations: reservations@palmillahb.com.
Newport Beach: 3110 Newport Blvd, Newport Beach, CA 92663. Phone: (949) 467-4203. Reservations: nbreservations@palmillarestaurant.com.

Additional Notice for California Residents

Do Not Sell or Share My Personal Information

Palmilla does not sell personal information and does not share personal information for cross-context behavioral advertising. Details, and how to send us a request, are on our Do Not Sell or Share My Personal Information page. We also honor Global Privacy Control signals sent by your browser.

California Shine the Light

California Civil Code Section 1798.83 permits California residents to request information once per year about personal information we have shared with third parties for their own direct marketing purposes. We do not share personal information with third parties for their own direct marketing.