Privacy Policy

This Privacy Policy describes how Punch Pizza ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects your personal information when you visit our website at pizzapunch.rest, place orders online, subscribe to our communications, or otherwise interact with our services. We are committed to protecting your privacy and handling your personal data with transparency, care, and in full compliance with applicable United States privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with the terms of this policy, please discontinue use of our website and services immediately.

If you have questions or concerns about this Privacy Policy, you may contact us at any time using the information provided in the Contact Us section below.

1. About Us

Punch Pizza operates the website pizzapunch.rest and provides food ordering, delivery, and related services to customers across the United States. We are the data controller responsible for the personal information collected through our website and associated services.

2. Information We Collect

We collect various types of information in connection with your use of our website, services, and food ordering platform. The categories of personal information we collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, make a reservation, sign up for our newsletter, or contact us directly, we may collect the following personal identification information:

• Full name
• Email address
• Phone number
• Billing and shipping address (including street address, city, state, ZIP code)
• Username and password (stored in encrypted form)
• Profile preferences and dietary restrictions (if voluntarily provided)
• Date of birth (where applicable, to verify age eligibility)

2.2 Payment and Transaction Information

When you place an order or make a payment through our platform, we collect transaction-related information. Please note that full payment card details (card numbers, CVV codes) are processed directly by our third-party payment processors and are not stored on our servers. We may retain:

• Order history and details (items ordered, quantities, special instructions)
• Transaction amount and date
• Partial payment card information (last four digits, card type) for your reference
• Billing address associated with your payment method
• Refund and dispute records

2.3 Usage Data and Behavioral Information

We automatically collect certain information when you visit or interact with our website. This usage data helps us understand how our services are used and how we can improve them:

• Pages viewed and links clicked on our website
• Time and duration of your visits
• Search queries made within our website
• Items added to your cart or viewed but not purchased
• Referring URLs (the website that directed you to ours)
• Interactions with promotional content or emails
• Session replay data (anonymized or aggregated)

2.4 Device and Technical Information

We collect technical information about the device and software you use to access our website:

• IP address
• Browser type and version
• Operating system and device type (desktop, tablet, mobile)
• Device identifiers
• Screen resolution and display settings
• Language preferences
• Time zone settings
• Network and connection type

2.5 Location Data

To facilitate food delivery and to show you relevant menu items or promotions in your area, we may collect approximate or precise location data, subject to your device settings and consent:

• Delivery address provided during checkout
• General geographic location inferred from your IP address
• GPS or precise location data, if you grant permission through your browser or mobile device

2.6 Communications and Customer Support Data

When you contact us via email, phone, or any other channel, we may collect:

• Your name and contact details
• The content of your inquiry, complaint, or feedback
• Records of our correspondence with you
• Call recordings, if applicable and permitted by law

2.7 Cookie and Tracking Technology Data

We use cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage) to collect information about your browsing behavior and preferences. For detailed information, please refer to Section 9 (Cookie Usage) of this Privacy Policy.

2.8 Information You Voluntarily Provide

From time to time, we may invite you to participate in surveys, promotions, contests, or to submit reviews and feedback. Any information you voluntarily submit in these contexts will be collected and used as described in this Privacy Policy.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. These purposes include:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders
• Managing your account and user profile
• Coordinating delivery logistics and communicating delivery status
• Processing payments and issuing receipts or invoices
• Handling returns, refunds, and disputes
• Responding to your inquiries and providing customer support
• Maintaining the security and integrity of our platform

3.2 Personalization and User Experience

• Personalizing your experience on our website by displaying relevant menu items and offers
• Remembering your preferences, saved addresses, and past orders for convenience
• Providing you with location-based services and promotions
• Tailoring our website content to your device and browsing behavior

3.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, and special offers (with your consent where required)
• Notifying you about new menu items, seasonal promotions, and loyalty rewards
• Displaying targeted advertisements on our website and third-party platforms
• Conducting customer satisfaction surveys and collecting feedback

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected].

3.4 Analytics and Business Improvement

• Analyzing website traffic, usage patterns, and user behavior to improve our services
• Conducting internal research and product development
• Monitoring and improving the performance of our website and ordering platform
• Generating aggregated, anonymized reports for business planning purposes

3.5 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities or law enforcement
• Preventing, detecting, and investigating fraud, abuse, and security incidents
• Protecting the rights, property, and safety of Punch Pizza, our customers, and the public
• Enforcing our Terms of Service and other applicable agreements

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own direct marketing purposes. However, we may share your personal information with certain trusted third parties in the circumstances described below:

4.1 Service Providers and Business Partners

We engage third-party service providers to assist us in operating our business and delivering our services. These service providers are permitted to use your personal information only as necessary to perform services on our behalf and are contractually obligated to maintain appropriate security and confidentiality standards. Service providers may include:

• Payment processors: To securely process your payment transactions
• Delivery partners: To coordinate and fulfill food delivery to your address
• Cloud hosting and IT providers: To store and manage our data infrastructure
• Email marketing platforms: To send promotional communications and newsletters
• Analytics providers: To analyze website usage and performance (e.g., Google Analytics)
• Customer support platforms: To manage and respond to customer inquiries
• Advertising networks: To display targeted advertisements on our behalf

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Enforce our Terms of Service or other applicable agreements
• Protect the rights, property, or safety of Punch Pizza, our users, or the public
• Prevent or investigate possible wrongdoing, fraud, or security breaches

4.3 Business Transfers

In the event that Punch Pizza undergoes a merger, acquisition, sale of assets, reorganization, or bankruptcy proceeding, your personal information may be transferred to the acquiring entity or successor as part of the transaction. We will notify you of any such change in ownership or control of your personal information, as required by applicable law.

4.4 With Your Consent

We may share your personal information with other third parties when we have obtained your explicit consent to do so, such as for co-branded promotions or partnerships.

4.5 Aggregated and Anonymized Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other purposes. This data is not considered personal information under applicable privacy laws.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards to protect it from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers.
• Secure storage: Personal information is stored on secure, access-controlled servers hosted by reputable cloud providers.
• Access controls: Access to personal information is restricted to authorized employees and contractors who need it to perform their job functions.
• Password protection: User passwords are stored using strong cryptographic hashing algorithms.
• Regular security assessments: We conduct periodic security reviews and vulnerability assessments of our systems.
• Data minimization: We collect only the personal information necessary for the purposes described in this Privacy Policy.
• Incident response: We maintain a data breach response plan to promptly address and notify affected users in the event of a security incident, as required by applicable law.

Despite our best efforts, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your personal information. If you believe your account has been compromised, please contact us immediately at [email protected].

6. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable federal and state laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) for California residents.

6.1 Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (e.g., where retention is required by law or for legitimate business purposes).
• Right to Opt Out of Marketing: You have the right to opt out of receiving marketing and promotional communications from us at any time.

6.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the CCPA/CPRA:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Data Portability: You have the right to receive a copy of your personal information in a portable and, to the extent technically feasible, readily usable format.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You have the right to direct us to limit the use and disclosure of your sensitive personal information to purposes necessary for providing our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality because you exercised your privacy rights.

6.3 How to Exercise Your Rights

To exercise any of your privacy rights, you may submit a verifiable consumer request by:

• Emailing us at: [email protected]
• Visiting our website: pizzapunch.rest

We will verify your identity before processing your request to protect the security of your personal information. We will respond to your request within 45 days of receipt. If we require additional time, we will notify you of the extension and the reason for it. We may request additional information to verify your identity. We will not charge a fee for processing your request unless it is manifestly unfounded or excessive.

You may designate an authorized agent to submit a request on your behalf. Authorized agents must provide written proof of authorization, and we may still require you to verify your identity directly.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

When personal information is no longer needed, we will securely delete, anonymize, or destroy it in accordance with our data retention procedures and applicable legal requirements.

8. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, in compliance with the Children's Online Privacy Protection Act (COPPA). We also do not knowingly collect personal information from individuals between the ages of 13 and 17.

If you are under 18 years of age, you are not permitted to use our website or services or provide us with any personal information. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete such information from our records.

9. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising. Cookies are small text files placed on your device when you visit a website.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly (e.g., session management, shopping cart functionality). These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous data (e.g., Google Analytics).
• Functionality Cookies: Allow the website to remember your preferences, such as saved addresses and language settings.
• Marketing and Advertising Cookies: Used to deliver relevant advertisements on our website and third-party platforms, and to measure the effectiveness of our campaigns.

9.2 Managing Your Cookie Preferences

You may manage or disable cookies through your browser settings at any time. Most browsers allow you to refuse all cookies or to alert you when cookies are being sent. However, disabling certain cookies may affect the functionality of our website and your ability to place orders or access certain features.

You may also opt out of interest-based advertising through industry opt-out tools such as the Network Advertising Initiative (NAI) opt-out tool or the Digital Advertising Alliance (DAA) opt-out tool.

For more detailed information about the cookies we use and how to manage them, please refer to our separate Cookie Policy, which is available on our website at pizzapunch.rest.

10. International Data Transfers

Punch Pizza is based in the United States, and your personal information is collected and primarily processed within the United States. However, some of our third-party service providers may be located in other countries, which means your personal information may be transferred to, stored in, or processed in countries outside of the United States.

When we transfer your personal information internationally, we take steps to ensure that appropriate safeguards are in place to protect your information, including:

• Using standard contractual clauses or data processing agreements with our international service providers
• Ensuring that our service providers maintain security practices consistent with this Privacy Policy
• Transferring data only to countries or recipients that provide an adequate level of data protection

By using our website and services, you acknowledge and consent to the transfer of your personal information to the United States and, where applicable, to other countries in accordance with this Privacy Policy.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Punch Pizza. This Privacy Policy does not apply to such third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites or services you visit.

Examples of third-party integrations may include social media platforms (such as Facebook, Instagram, or Twitter), payment gateways, delivery tracking systems, and advertising networks. Your interactions with these third-party services are governed by their respective privacy policies and terms of service.

12. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not wish to be tracked across different websites. Currently, our website does not respond to DNT signals because there is no universally accepted standard for how such signals should be interpreted. However, you may use the cookie management tools described in Section 9 to limit tracking on our website.

We will continue to monitor developments in DNT standards and update our practices accordingly if a recognized standard emerges.

13. Your California Privacy Rights — "Shine the Light" Law

Under California Civil Code Section 1798.83 (the "Shine the Light" law), California residents who have provided personal information to a business may request information about whether the business has disclosed personal information to any third parties for their direct marketing purposes during the preceding calendar year.

We do not disclose personal information to third parties for their direct marketing purposes without your prior consent. If you are a California resident and wish to inquire about our compliance with this law, you may contact us at [email protected].

14. FTC Act Compliance

We are committed to compliance with the Federal Trade Commission (FTC) Act, which prohibits unfair or deceptive acts or practices in commerce. Our privacy practices are designed to be transparent, fair, and consistent with the representations we make to our users. We will not engage in deceptive data practices, will honor any commitments we make regarding how personal information is used, and will take reasonable steps to secure personal information against unauthorized access or misuse.

If you believe we have engaged in any unfair or deceptive practices in connection with your personal information, you have the right to file a complaint with the FTC at reportfraud.ftc.gov.

15. How to File a Complaint with a Data Protection Authority

If you believe that our processing of your personal information violates applicable privacy laws and we have failed to address your concerns satisfactorily, you have the right to file a complaint with the relevant data protection or consumer protection authority.

15.1 For United States Residents

You may file a complaint with the Federal Trade Commission (FTC):

• Website: www.ftc.gov
• Report Fraud: reportfraud.ftc.gov
• Phone: 1-877-382-4357

15.2 For California Residents

California residents may also file a complaint with the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Email: [email protected]

Additionally, California residents may contact the California Attorney General's Office:

• Website: oag.ca.gov/privacy

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on our website at pizzapunch.rest with a revised "Last Updated" date
• Sending you an email notification (if you have provided your email address and we have your consent to communicate with you)
• Displaying a prominent notice on our website homepage

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

If the changes materially affect how we use your personal information in a manner that requires your consent under applicable law, we will seek your consent before applying those changes to your personal information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

We aim to respond to all privacy-related inquiries within 10 business days. For formal rights requests (such as access, deletion, or portability requests), we will respond within 45 days as required by applicable law.

When contacting us, please include sufficient detail to enable us to identify you and your request, such as your name, email address associated with your account, and a description of your inquiry. We may need to verify your identity before processing certain requests.