Privacy Policy
Effective date: August 2, 2026. Last updated: August 2, 2026.
1. Introduction
This Privacy Policy describes how Wahoo’s Fish Taco (“Wahoo’s,” “we,” “us,” or “our”) collects, uses, and discloses personal information when you visit www.wahoos.com (the “Site”), use the Wahoo’s mobile app (the “App”), join our loyalty program, sign up for text messages, purchase merchandise or gift cards, contact us, or otherwise interact with us online. It also explains the privacy rights available to you and how to exercise them.
This Policy does not cover information collected in our restaurants except where stated, and it does not cover third-party online ordering platforms, which have their own privacy policies.
2. Our Privacy Principles
Your privacy is very important to us. Accordingly, we have developed this Policy in order for you to understand how we collect, use, communicate and disclose and make use of personal information. The following outlines our privacy policy.
- Before or at the time of collecting personal information, we will identify the purposes for which information is being collected.
- We will collect and use of personal information solely with the objective of fulfilling those purposes specified by us and for other compatible purposes, unless we obtain the consent of the individual concerned or as required by law.
- We will only retain personal information as long as necessary for the fulfillment of those purposes.
- We will collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned.
- Personal data should be relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes, should be accurate, complete, and up-to-date.
- We will protect personal information by reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use or modification.
- We will make readily available to customers information about our policies and practices relating to the management of personal information.
We are committed to conducting our business in accordance with these principles in order to ensure that the confidentiality of personal information is protected and maintained.
3. Information We Collect
Information you provide to us: contact information (such as name, email address, and phone number) when you fill out our contact form, join the loyalty program, or sign up for text messages; purchase information (such as items ordered and billing and shipping address) when you buy merchandise or gift cards, with payment card details collected and processed by our payment processor (Stripe) and gift card service provider so that we do not store full card numbers; account information if you create an account in the App or loyalty program; and communications you send us.
Information collected automatically: device and usage information such as IP address, browser type, pages viewed, and links clicked, collected through the technologies described in Section 4.
4. Cookies and Tracking Technologies
The Site uses a consent banner. You can change your choices at any time using the “Cookie Preferences” link in the Site footer, and a full list of the cookies and technologies in use, with category toggles, is available on our Opt-out preferences page. In summary, the Site uses:
- Google Analytics (Google LLC): site usage statistics.
- Cloudflare Web Analytics (Cloudflare, Inc.): site performance and aggregate traffic measurement.
- Spotify Pixel (Spotify AB): advertising measurement, described further in Sections 5 and 10.
- WooCommerce and Stripe cookies: shopping cart and secure checkout functionality.
We honor the Global Privacy Control (GPC) browser signal as an opt-out of sharing for cross-context behavioral advertising.
5. How We Disclose Personal Information
Service providers. We disclose personal information to companies that perform services for us, including payment processing, gift card administration, website hosting and security, analytics, and email or text message delivery. These companies are permitted to use personal information only to provide services to us.
Advertising partners. Through the Spotify Pixel, information about your activity on the Site (such as pages viewed and links clicked) is made available to Spotify for advertising measurement and related advertising purposes. Under California law this may be considered “sharing” of personal information for cross-context behavioral advertising. You can opt out as described in Section 10.
Legal and safety. We may disclose personal information to comply with law, respond to lawful requests, protect our rights and the safety of others, or in connection with a merger, acquisition, or sale of assets.
We do not sell personal information for money.
6. Location Information
Our app may access and use your device’s geolocation information to provide location-based services and features, including identifying nearby locations, displaying relevant content and offers, and improving your overall app experience.
Location access is optional and can be enabled or disabled at any time through your device settings. Certain location-based features may not function properly if location access is disabled.
7. Account Deletion
Users may request deletion of their account and associated personal information through the app’s account settings or by contacting us directly at [email protected]. Upon receiving a valid request, we will process the deletion in accordance with applicable laws and our data retention requirements.
8. Third-Party Sites and Services
Online ordering is provided through third-party platforms that you reach by following links from the Site. Gift card balance and account services are hosted by our gift card service provider. Social media links lead to platforms we do not control. Each of these services has its own privacy policy, and we encourage you to review them.
9. Data Retention and Security
We keep personal information for as long as needed for the purposes described above, to comply with legal obligations, or to resolve disputes, and then delete or de-identify it. We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure.
10. Your California Privacy Rights (CCPA/CPRA)
This section applies to California residents and supplements the rest of this Policy.
Notice at collection. In the last 12 months we have collected the following categories of personal information: identifiers (such as name, email, phone number, IP address); commercial information (such as purchases); internet or other electronic network activity (such as pages viewed and actions on the Site); approximate geolocation (App, if enabled); and inferences drawn from the above. We collect them for the purposes described in this Policy and retain them as described in Section 9.
Your rights. Subject to certain exceptions, you have the right to know and access the personal information we have collected about you; delete personal information we have collected from you; correct inaccurate personal information; opt out of the sale or sharing of your personal information (see Section 11); and not be discriminated against for exercising these rights.
How to exercise your rights. Submit a request by email to [email protected] or by phone at 949 223 6127. We will verify your request using information such as your email address and recent interactions with us. You may designate an authorized agent to submit requests on your behalf; we may require proof of authorization and verification of your identity.
We do not use or disclose sensitive personal information for purposes requiring a right to limit. We do not knowingly sell or share the personal information of consumers under 16 years of age.
Shine the Light. California Civil Code Section 1798.83 permits California residents to request certain information about disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.
11. Do Not Sell or Share My Personal Information
California residents have the right to opt out of the “sale” or “sharing” of their personal information. Residents of certain other states, including Colorado, Texas, and New Jersey, have a similar right to opt out of targeted advertising. We do not sell personal information for money, but our use of the Spotify Pixel may be considered “sharing” for cross-context behavioral advertising under California law.
You can opt out in any of these ways:
- Visit our Opt-out preferences page and turn off the Marketing category, or use the “Cookie Preferences” link in the Site footer.
- Enable the Global Privacy Control (GPC) signal in your browser; we honor it automatically as an opt-out for that browser.
- Email [email protected] with the subject “Opt-Out Request.”
Your opt-out applies to the browser and device you use to make it. If you clear cookies or use a different browser or device, you may need to opt out again.
12. Other U.S. State Privacy Rights
Residents of Colorado, Texas, and New Jersey have rights under their state privacy laws, including the right to access, correct, delete, and obtain a copy of personal information, and to opt out of targeted advertising using the methods in Section 11. If we decline to act on your request, you may appeal by contacting [email protected] with the subject line “Privacy Appeal.” If your appeal is denied, you may contact your state Attorney General. Nevada residents may direct us not to sell certain covered information by contacting [email protected]; we do not currently sell covered information as defined by Nevada law.
13. Children
The Site, App, and our programs are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided us personal information, contact us and we will delete it.
14. Changes to This Policy
We may update this Policy from time to time. The “Last updated” date above shows when it was last revised. Material changes will be posted on the Site.
15. Contact Us
Wahoo’s Fish Taco
1185 Warner Avenue, Tustin, California 92780
Email: [email protected]
Phone: 949 223 6127