Privacy Policy

Welcome to Punch Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website pizzapunch-food.rest, place an order with us, or otherwise interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy applies to all personal information collected by Punch Pizza through our website, mobile ordering platforms, in-store interactions, loyalty programs, email communications, social media channels, and any other services we provide (collectively, the "Services"). By using our Services, you acknowledge that you have read, understood, and agree to the collection and use of information in accordance with this policy.

Punch Pizza operates in the United States and is subject to applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable federal and state regulations governing data privacy and consumer protection.

1. Who We Are

Punch Pizza is a food service business dedicated to delivering high-quality pizza and related food products to our valued customers. We operate both physical locations and online ordering services to serve our community. For the purposes of this Privacy Policy, Punch Pizza acts as the data controller for personal information collected through our Services.

2. Information We Collect

We collect various types of information in connection with your use of our Services. The categories of information we collect are described below. We only collect information that is reasonably necessary to fulfill the purposes outlined in this Privacy Policy.

2.1 Personal Information You Provide Directly

When you interact with us — whether by placing an order, creating an account, subscribing to our newsletter, or contacting our support team — you may voluntarily provide us with personal information, including:

• Identity Information: Your first name, last name, username or similar identifier.
• Contact Information: Email address, telephone number, billing address, and delivery address.
• Account Credentials: Password and other security information used to access your account.
• Payment Information: Credit or debit card numbers, billing details, and other financial information necessary to process your orders. Note that full payment card data is processed by our third-party payment processors and is not stored directly on our servers.
• Order History and Preferences: Details about the food items you have ordered, your dietary preferences, special instructions, and favorite orders.
• Communications Data: Any messages, feedback, reviews, or other content you send to us through email, contact forms, social media, or other channels.
• Loyalty Program Information: Points balances, redemption history, and rewards associated with any loyalty or rewards program membership.
• Promotional Responses: Information you provide when entering contests, promotions, or surveys we may conduct.

2.2 Information Collected Automatically

When you access or use our website and digital Services, we automatically collect certain technical and usage information, including:

• Device Information: IP address, browser type and version, operating system, device identifiers, hardware model, and mobile network information.
• Usage Data: Pages visited on our website, links clicked, time and date of your visit, time spent on pages, referring website addresses, and other browsing statistics.
• Location Data: General geographic location inferred from your IP address. If you use our mobile application or grant location permissions, we may collect more precise location data to facilitate delivery services or suggest nearby locations.
• Log Data: Server logs, error reports, and diagnostic information related to your use of our Services.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies. Please refer to Section 7 of this policy for more details about our cookie practices.

2.3 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media account to our Services or interact with our social media pages, we may receive information from those platforms consistent with your privacy settings on those platforms.
• Third-Party Delivery Platforms: If you place an order through a third-party food delivery app or platform (such as DoorDash, Uber Eats, or Grubhub), we may receive order-related information from those services to fulfill your order.
• Analytics Providers: We may receive aggregated or de-identified data from analytics service providers about how users interact with our website.
• Payment Processors: Our payment processing partners may share limited transaction confirmation and fraud prevention information with us.
• Publicly Available Sources: We may supplement information we hold about you with publicly available information from public records or other publicly accessible sources.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. We will only use your information when we have a lawful basis to do so. The primary purposes for which we use your information include:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including coordinating delivery or pickup.
• Creating and managing your account with us.
• Processing payments and preventing fraudulent transactions.
• Providing customer support and responding to your inquiries, complaints, and requests.
• Sending you order confirmations, receipts, and delivery updates via email or SMS.
• Administering loyalty programs, rewards points, and promotional offers.
• Personalizing your experience by remembering your preferences and past orders.

3.2 Business Operations and Improvement

• Analyzing usage patterns and customer behavior to improve our menu, website functionality, and overall service quality.
• Conducting internal research and development to enhance our products and Services.
• Monitoring and ensuring the security and integrity of our systems and networks.
• Troubleshooting technical issues and resolving errors in our Services.
• Maintaining accurate business records and complying with our internal policies and procedures.
• Training staff and quality assurance purposes.

3.3 Marketing and Communications

• Sending you promotional emails, newsletters, special offers, and information about new menu items, with your consent where required by applicable law.
• Displaying personalized advertisements and promotions on our website and third-party platforms.
• Running sweepstakes, contests, and other promotional campaigns.
• Conducting customer satisfaction surveys and soliciting reviews and feedback.
• Retargeting and remarketing to users who have visited our website or expressed interest in our products.

Your Marketing Choices: You may opt out of receiving promotional communications from us at any time by clicking the "unsubscribe" link in any marketing email we send, by contacting us at [email protected], or by updating your communication preferences in your account settings. Please note that even if you opt out of marketing communications, we will still send you transactional and service-related communications necessary to fulfill your orders.

3.4 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal obligations under federal and state law, including the FTC Act and applicable state consumer protection statutes.
• Responding to lawful requests from public authorities, including law enforcement and regulatory agencies.
• Enforcing our Terms of Service and other agreements.
• Protecting the rights, property, and safety of Punch Pizza, our customers, employees, and the public.
• Establishing, exercising, or defending legal claims.

4. How We Share Your Information

We do not sell your personal information for monetary consideration. However, we may share your information with certain third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf. These service providers are given access to your personal information only as necessary to perform their functions and are contractually obligated to maintain the confidentiality and security of your data. Our service providers include:

• Payment Processors: Companies that securely process credit and debit card transactions (e.g., Stripe, Square, or similar providers).
• Delivery and Logistics Partners: Third-party delivery drivers and platforms that assist in delivering your orders to your location.
• Email Marketing Platforms: Services we use to send marketing and transactional emails (e.g., Mailchimp, Klaviyo, or similar).
• Analytics Providers: Platforms such as Google Analytics that help us understand how users engage with our website.
• Cloud Hosting and IT Services: Providers that host our website, databases, and other digital infrastructure.
• Customer Support Tools: Platforms that help us manage and respond to customer inquiries and support tickets.
• Advertising Networks: Partners that assist us in displaying targeted advertisements on our website and on third-party platforms.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in the good-faith belief that such disclosure is reasonably necessary to:

• Comply with a legal obligation, subpoena, court order, or governmental regulation.
• Respond to requests from law enforcement agencies or other government authorities.
• Protect and defend the rights or property of Punch Pizza.
• Prevent or investigate possible wrongdoing in connection with the Services.
• Protect the personal safety of our customers, employees, or the public.

4.3 Business Transfers

In the event that Punch Pizza undergoes a merger, acquisition, reorganization, bankruptcy, dissolution, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any such change in ownership or control of your personal information, and you will have the opportunity to exercise any applicable rights under this policy or applicable law.

4.4 With Your Consent

We may share your information with other third parties when we have your explicit consent to do so, such as when you authorize us to share your information with a partner organization for a joint promotion or loyalty program.

4.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for business, marketing, or research purposes, including industry reports and analytics. This information does not constitute personal information under applicable privacy laws.

5. Data Security

The security of your personal information is important to us. We implement a variety of technical, administrative, and physical safeguards designed to protect your personal information from unauthorized access, use, alteration, and disclosure. Our security measures include, but are not limited to:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers. Sensitive data such as payment information is encrypted both in transit and at rest.
• Access Controls: We restrict access to personal information to authorized employees, contractors, and service providers who need to know that information to provide our Services. All personnel with access to personal data are subject to confidentiality obligations.
• Secure Payment Processing: We use PCI DSS-compliant payment processors and do not store full credit card numbers on our systems.
• Regular Security Assessments: We conduct periodic reviews and assessments of our data collection, storage, and processing practices to identify and address potential vulnerabilities.
• Incident Response: We maintain incident response procedures designed to detect, respond to, and recover from data security incidents in a timely manner.
• Employee Training: Our staff receives regular training on data protection practices and security awareness.

6. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. We are committed to honoring these rights in compliance with applicable law, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) for California residents, as well as applicable privacy laws in other states.

6.1 Rights Available to All Users

• Right to Know / Access: You have the right to request information about the personal data we hold about you, including the categories of data collected, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (such as where we are required to retain data for legal, contractual, or security purposes).
• Right to Data Portability: Where technically feasible and required by applicable law, you have the right to receive a copy of your personal information in a structured, commonly used, machine-readable format.
• Right to Opt Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge different prices, or provide a different quality of service because you exercised your rights under this policy.

6.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the CCPA and CPRA:

• Right to Opt Out of the Sale or Sharing of Personal Information: California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising purposes. You may exercise this right by contacting us at [email protected] or by submitting a request through our website.
• Right to Limit Use of Sensitive Personal Information: California residents have the right to limit our use and disclosure of sensitive personal information to what is necessary to perform the services requested.
• Right to Know About Automated Decision-Making: California residents may have rights related to automated decision-making and profiling in certain circumstances.

6.3 How to Submit a Privacy Rights Request

To exercise any of your privacy rights, please submit a verifiable consumer request to us by:

• Email: [email protected]
• Website: pizzapunch-food.rest

Your request must provide sufficient information to allow us to reasonably verify your identity. We will respond to verifiable consumer requests within 45 days of receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.

You may designate an authorized agent to submit a request on your behalf. We will require written proof of authorization and may still require you to verify your own identity directly with us.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage) to enhance your browsing experience, analyze site traffic, and deliver targeted advertising. Cookies are small text files placed on your device when you visit our website.

7.1 Types of Cookies We Use

7.2 Managing Your Cookie Preferences

You can control and manage cookies in several ways. Most web browsers allow you to manage your cookie preferences through the browser settings. You may choose to block or delete cookies, but please note that doing so may affect the functionality of our website and your ability to place orders. For more information about cookies and how to manage them, you can visit www.allaboutcookies.org.

For California residents, you may also opt out of the use of cookies for advertising purposes by visiting the Network Advertising Initiative's opt-out page or the Digital Advertising Alliance's opt-out page.

For full details about our use of cookies, please refer to our separate Cookie Policy, which is available on our website at pizzapunch-food.rest.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

• Active Account Data: We retain your account information and order history for as long as your account is active or as needed to provide you with our Services.
• Transaction Records: Financial and order transaction records are retained for a minimum of seven (7) years in accordance with applicable tax, accounting, and legal requirements under federal and state law.
• Marketing Data: Information used for marketing purposes is retained until you withdraw your consent or opt out of marketing communications, after which we will retain only the minimum information necessary to honor your opt-out preferences.
• Customer Support Records: Records of customer support interactions are generally retained for three (3) years following the resolution of the relevant matter.
• Legal Compliance Data: Information retained for legal compliance purposes is kept for the period required by applicable law or regulation, or for the duration of any ongoing legal proceedings.
• Website Analytics Data: Anonymized or aggregated analytics data may be retained indefinitely for business analysis and improvement purposes.

When your personal information is no longer needed for the purposes for which it was collected and there is no legal requirement to retain it, we will securely delete, destroy, or anonymize it in accordance with our data retention and disposal procedures.

9. Children's Privacy

Punch Pizza does not direct its Services to children, and we do not knowingly collect, use, or disclose personal information from individuals under the age of 18. Our website, mobile app, and ordering platforms are not designed or intended for use by minors.

If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving such a request and verifying the situation, we will take prompt steps to delete the child's information from our systems.

We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect or solicit personal information from children under 13 years of age. If we learn that we have inadvertently collected personal information from a child under 13, we will delete that information as quickly as possible.

10. International Data Transfers

Punch Pizza is based in the United States, and your personal information is primarily collected, stored, and processed in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country of residence.

Some of our third-party service providers and partners may be located in or operate from countries other than the United States. When we transfer personal information internationally, we take appropriate steps to ensure that such transfers are conducted in compliance with applicable law and that adequate safeguards are in place to protect your personal information. Such safeguards may include standard contractual clauses, data processing agreements, or reliance on adequacy decisions issued by relevant regulatory authorities.

By using our Services and providing us with your personal information, you acknowledge and consent to the transfer of your information to the United States and other countries as described in this Privacy Policy.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, platforms, and applications that are not operated by Punch Pizza. This includes links to social media platforms, delivery partner websites, and other external resources. This Privacy Policy does not apply to those third-party websites, and we are not responsible for the privacy practices of those sites.

We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link on our website does not imply our endorsement of the linked site or its privacy practices. When you click on a third-party link, you leave our website and are subject to the terms and privacy policy of the third-party site.

12. How to File a Complaint

If you have concerns about how we handle your personal information and feel that we have not adequately addressed your privacy concerns, you have the right to file a complaint with the appropriate regulatory authority.

12.1 Filing a Complaint with Us

We take all privacy complaints seriously. If you believe we have not complied with this Privacy Policy or applicable privacy laws, we encourage you to first contact us directly so that we have the opportunity to address your concern:

• Email: [email protected]
• Website: pizzapunch-food.rest

We will acknowledge your complaint within 10 business days and strive to resolve it within 30 to 45 business days.

12.2 Regulatory Authorities

If you are not satisfied with our response to your privacy complaint, you may file a complaint with the following regulatory authorities:

• Federal Trade Commission (FTC): The FTC enforces federal consumer protection laws, including provisions related to unfair or deceptive practices involving personal information. You may file a complaint at ftc.gov/complaint or call 1-877-382-4357.
• California Privacy Protection Agency (CPPA): If you are a California resident, you may file a complaint with the California Privacy Protection Agency, which enforces the CCPA and CPRA. Visit cppa.ca.gov for more information.
• State Attorney General: Residents of many states may also file consumer protection complaints with their state's Attorney General office. Please visit your state's official government website for more information on how to file a privacy-related complaint.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or for any other reason. When we make material changes to this policy, we will notify you by:

• Updating the "Last Updated" date at the top of this Privacy Policy.
• Sending you an email notification to the email address associated with your account (where required by applicable law or where the change is material).
• Displaying a prominent notice on our website or within our Services for a period of time after the change takes effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after the effective date of any changes to this Privacy Policy constitutes your acceptance of those changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, or if you wish to exercise any of your privacy rights as described in this policy, please do not hesitate to contact us using the information below. We are committed to responding to your inquiries promptly and transparently.

When contacting us regarding a privacy matter, please include your full name, the email address associated with your account (if applicable), a clear description of your request or concern, and any relevant details that will help us address your inquiry efficiently. We will make every effort to respond to your request within 45 days of receipt, as required by applicable law.