Privacy Policy

Welcome to Punch Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website food-punchpizza.digital, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services immediately.

This Privacy Policy applies to all personal information collected by Punch Pizza through our website, mobile interactions, in-store experiences, email communications, and any other channels through which we operate. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

We take your privacy seriously and have designed this policy to be transparent, straightforward, and comprehensive. We encourage you to read it in full so that you understand exactly what information we collect, why we collect it, how we use it, and what rights you have over your personal data.

1. About Us

Punch Pizza is a food service business operating in the United States. We are dedicated to delivering high-quality pizza and food products to our customers through our physical locations and digital platforms.

For all privacy-related inquiries, please contact us using the information provided in Section 14 of this policy.

2. Information We Collect

We collect various types of information in connection with the services we provide. The categories of information we collect are described below.

2.1 Personal Information You Provide Directly

When you interact with Punch Pizza — whether by creating an account, placing an order, signing up for our newsletter, contacting customer support, or participating in promotions — you may voluntarily provide us with personal information, including but not limited to:

• Identity Data: First name, last name, username, or similar identifier.
• Contact Data: Email address, telephone number, billing address, and delivery address.
• Account Credentials: Password and other security information used for authentication purposes.
• Order and Transaction Data: Details about purchases you have made with us, including items ordered, order history, payment details, and delivery preferences.
• Payment Information: Credit card numbers, debit card numbers, and other financial information. Note that we do not store full payment card details on our servers; this information is processed securely by our payment service providers.
• Communication Data: Any information you include in messages you send us, feedback you submit, or reviews you post.
• Preference Data: Your food preferences, dietary restrictions, favorite orders, and marketing preferences.
• Promotional Data: Information provided when you enter contests, participate in surveys, or claim promotional offers.

2.2 Information Collected Automatically

When you visit our website or use our digital services, we automatically collect certain technical information, including:

• Usage Data: Pages visited, links clicked, time spent on pages, navigation paths, search queries within our site, and referring URLs.
• Device Information: IP address, browser type and version, operating system, device type, screen resolution, language settings, and device identifiers.
• Log Data: Server logs that record your interactions with our website, including date and time of access, error messages, and other diagnostic data.
• Location Data: General geographic location derived from your IP address. If you grant permission, we may also collect more precise location data to provide delivery services or find nearby locations.
• Cookie and Tracking Data: Information gathered through cookies, web beacons, pixel tags, and similar tracking technologies as described in Section 8 of this policy.

2.3 Information from Third Parties

We may receive information about you from third-party sources, which we combine with information we collect directly. These sources may include:

• Social Media Platforms: If you connect your social media account (e.g., Facebook, Google, Apple) to our services or interact with our social media pages, we may receive profile information such as your name, email address, profile picture, and other publicly available information.
• Analytics Providers: Third-party analytics services that provide aggregated data about website traffic and user behavior patterns.
• Advertising Partners: Partners who help us deliver relevant advertising and may share data about your interests and online behavior.
• Delivery Service Partners: If your order is fulfilled through a third-party delivery platform, we may receive order-related information from those platforms.
• Business Partners: Other businesses with whom we partner to offer co-branded services, joint promotions, or integrated products.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. Specifically, we use your information to:

3.1 Provide and Manage Our Services

• Process and fulfill your food orders, including managing delivery and pickup logistics.
• Create, manage, and secure your account on our platform.
• Process payments and prevent fraudulent transactions.
• Send you order confirmations, receipts, and status updates.
• Provide customer support and respond to your inquiries, complaints, and feedback.
• Customize your experience, including saving your preferences and order history for faster future ordering.

3.2 Marketing and Communications

• Send you promotional emails, newsletters, special offers, and information about new menu items or events, where you have provided consent or where we have a legitimate interest in doing so.
• Conduct loyalty programs, contests, sweepstakes, and surveys.
• Deliver personalized advertisements based on your browsing behavior and preferences, both on our website and on third-party platforms.
• Contact you about products and services that may be of interest to you.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email we send, by adjusting your account preferences, or by contacting us directly at [email protected].

3.3 Analytics and Service Improvement

• Analyze usage patterns and trends to improve our website, mobile application, menu offerings, and overall user experience.
• Conduct research and development to improve our existing products and develop new offerings.
• Monitor the performance of our website and diagnose technical problems.
• Measure the effectiveness of our marketing campaigns and promotional activities.

3.4 Legal and Compliance Purposes

• Comply with applicable laws, regulations, and legal obligations in the United States.
• Enforce our Terms of Service and other applicable agreements.
• Protect the rights, property, or safety of Punch Pizza, our customers, employees, and the public.
• Detect, investigate, and prevent fraudulent transactions, abuse, security incidents, and other harmful activities.
• Respond to lawful requests from government authorities and law enforcement agencies.

4. Legal Basis for Processing Your Information

As a business operating in the United States, our data practices are governed primarily by the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive practices in commerce, including privacy-related misrepresentations. We are also subject to applicable state privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) for California residents, as well as the privacy laws of other states where our customers reside.

We process your personal information based on the following grounds:

• Contractual Necessity: Processing necessary to fulfill your orders, manage your account, and deliver the services you have requested.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and conducting marketing, provided these interests are not overridden by your privacy rights.
• Legal Obligation: Processing required to comply with applicable laws and regulations.
• Consent: Where you have provided explicit consent, such as for receiving marketing communications or for certain types of data collection through cookies.

5. Sharing Your Information with Third Parties

We do not sell your personal information to unaffiliated third parties for their independent marketing purposes without your consent. However, we do share your information in the following circumstances:

5.1 Service Providers

We engage trusted third-party companies and individuals to perform services on our behalf. These service providers have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose. Categories of service providers include:

• Payment processors and financial institutions (e.g., Stripe, PayPal)
• Delivery and logistics partners
• Cloud hosting and data storage providers
• Email marketing and communication platforms
• Website analytics providers (e.g., Google Analytics)
• Customer relationship management (CRM) software providers
• Fraud detection and security service providers
• Legal and accounting professionals

5.2 Business Transfers

If Punch Pizza is involved in a merger, acquisition, asset sale, financing, reorganization, bankruptcy, or similar business transaction, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and your data becomes subject to a materially different privacy policy.

5.3 Legal Requirements and Protection of Rights

We may disclose your personal information to government authorities, law enforcement officials, or other third parties when we believe disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or other legal process.
• Enforce or apply our Terms of Service and other agreements.
• Protect and defend the rights, property, or safety of Punch Pizza, our employees, customers, or others.
• Investigate or prevent suspected illegal activities, fraud, or security threats.

5.4 Advertising and Analytics Partners

We may share aggregated or de-identified information with advertising and analytics partners for the purpose of improving our marketing efforts, understanding our customer base, and delivering targeted advertisements. This information does not directly identify you.

5.5 With Your Consent

We may share your personal information with third parties when you have given us explicit consent to do so, such as when participating in a co-sponsored promotion or when you authorize us to share your information with a partner service.

6. Data Security

We take the security of your personal information very seriously and have implemented a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, loss, and destruction.

Our security measures include, but are not limited to:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers. Sensitive data, including payment information, is encrypted both in transit and at rest.
• Access Controls: Access to personal information is restricted to employees and service providers who need it to perform their job functions. We implement role-based access controls and require authentication for all system access.
• Secure Payment Processing: We do not store full credit or debit card numbers on our servers. All payment processing is handled by PCI-DSS compliant payment processors.
• Regular Security Assessments: We conduct regular audits, vulnerability assessments, and penetration testing to identify and address potential security weaknesses.
• Incident Response Plan: We maintain a data breach response plan and will notify affected users and relevant authorities as required by applicable law in the event of a data breach.
• Employee Training: All employees who handle personal information receive privacy and security training to ensure they understand their responsibilities.

Despite our best efforts, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your information. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately at [email protected].

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention periods vary depending on the type of data and the purpose for which it was collected.

When your personal information is no longer required for these purposes, we will securely delete, destroy, or anonymize it in accordance with our data retention procedures. Anonymized data that cannot be linked back to you may be retained indefinitely for research and statistical analysis purposes.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, personalize content, and deliver targeted advertisements. Cookies are small text files placed on your device when you visit a website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly. These include session cookies that keep you logged in and security cookies that prevent fraudulent activity. These cookies cannot be disabled.
• Performance and Analytics Cookies: Collect information about how visitors use our website, such as which pages are visited most often and whether users receive error messages. This data helps us improve website performance.
• Functionality Cookies: Allow our website to remember choices you make (such as your preferred language or saved address) and provide enhanced, personalized features.
• Targeting and Advertising Cookies: Used to deliver advertisements relevant to your interests and to limit the number of times you see an advertisement. They also help us measure the effectiveness of advertising campaigns.

8.2 Third-Party Cookies

We may allow certain trusted third parties to place cookies on your device when you visit our website. These parties include analytics providers, advertising networks, and social media platforms. We do not control these third-party cookies and encourage you to review the privacy policies of these parties for more information.

8.3 Managing Your Cookie Preferences

You can control and manage cookies in several ways. Most web browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for certain websites. Please note that restricting cookies may impact the functionality of our website.

For detailed information about the specific cookies we use, the purposes for which they are used, and how to manage your cookie preferences, please refer to our full Cookie Policy, available on our website at food-punchpizza.digital.

9. Your Privacy Rights

Depending on your state of residence in the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights and providing you with the tools to exercise them.

9.1 Rights Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

If you are a California resident, you have the following rights:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purpose for collecting or selling it, and the categories of third parties with whom we shared it.
• Right to Delete: You have the right to request that we delete any personal information we have collected from you, subject to certain exceptions (such as information needed to complete transactions, detect security incidents, or comply with legal obligations).
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. While we do not sell personal information in the traditional sense, we may share certain data with advertising partners in ways that may constitute "sharing" under the CPRA. To opt out, please contact us or use the designated link on our website.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to only what is necessary to perform the services you request.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, provide a different level or quality of services, or suggest that you will receive a different price or rate if you exercise your rights.

9.2 General Privacy Rights for All U.S. Residents

Regardless of your state of residence, we voluntarily offer the following rights to all of our customers:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right of Correction: You may request that we correct any inaccurate or incomplete personal information we hold about you.
• Right of Deletion: You may request that we delete your personal information, subject to our legal obligations and legitimate business needs.
• Right to Withdraw Consent: Where we process your information based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to your withdrawal.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time.

9.3 How to Submit a Privacy Rights Request

To exercise any of your privacy rights, please submit a request by:

• Emailing us at: [email protected]
• Writing to us at our business address listed in Section 14 of this policy

We will respond to verifiable consumer requests within 45 days of receipt. If we require more time (up to an additional 45 days), we will inform you of the reason and extension period in writing. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

To protect your privacy and security, we may need to verify your identity before fulfilling your request. We will take reasonable steps to verify your identity, which may include asking you to provide identifying information that matches what we have on file.

10. Children's Privacy

Punch Pizza's website and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Our services are designed for adults aged 18 and over. We do not knowingly solicit information from or market to children under the age of 18.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. If we discover that a child under the age of 13 has provided us with personal information, we will take immediate steps to delete such information from our systems.

Our practices regarding children's privacy are consistent with the requirements of the Children's Online Privacy Protection Act (COPPA), which restricts the online collection of personal information from children under the age of 13.

11. International Data Transfers

Punch Pizza is based in the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and potentially in other countries where our service providers maintain facilities.

The data protection and privacy laws of the United States and these other countries may not be as comprehensive as those in your country of residence. By using our services, you consent to the transfer of your information to the United States and other countries as described in this Privacy Policy.

When we transfer personal information internationally, we take appropriate steps to ensure that the transfer is made in accordance with applicable privacy laws and that adequate protections are in place to safeguard your personal information. These safeguards may include:

• Contractual clauses requiring the recipient to protect the personal information;
• Transferring to countries with adequacy decisions from relevant data protection authorities;
• Implementing other recognized legal mechanisms for cross-border data transfers.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, and services that are not operated by us. If you click on a third-party link, you will be directed to that third party's website. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. This Privacy Policy does not apply to information collected by third parties through any website, application, or content that may link to or be accessible from our website. Our inclusion of a link to a third-party website does not constitute an endorsement of that website or its privacy practices.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time and for any reason. When we make material changes to this policy, we will notify you by:

• Updating the "Last Updated" date at the top of this policy;
• Sending an email notification to the email address associated with your account (where applicable);
• Posting a prominent notice on our website or within our application.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting the personal information we collect. Your continued use of our website and services following the posting of changes to this Privacy Policy will be deemed your acceptance of those changes. If you do not agree to the updated policy, you should discontinue your use of our services and, if applicable, delete your account.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

When contacting us regarding a privacy matter, please provide sufficient information to allow us to understand and respond to your inquiry, including your name, contact information, and a clear description of your request or concern. We will respond to all legitimate privacy requests within 45 days of receipt, or as otherwise required by applicable law.

15. How to File a Complaint

If you believe that we have violated your privacy rights or have not handled your personal information in accordance with applicable law, we encourage you to first contact us directly so that we may attempt to resolve your concerns. We take all privacy complaints seriously and will investigate any reported concerns thoroughly.

If you are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority. In the United States, the primary federal body responsible for consumer privacy protection is:

California Residents: If you are a resident of California and have concerns about our compliance with the CCPA or CPRA, you may also file a complaint with the California Privacy Protection Agency (CPPA):

Other State Residents: Residents of other states may have the right to file complaints with their respective state attorney general's office or other applicable state consumer protection agency. We encourage you to review your state's specific privacy regulations and enforcement mechanisms.

16. Specific Disclosures for California Residents

In accordance with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), we provide the following additional disclosures for California residents.

16.1 Categories of Personal Information Collected in the Last 12 Months

16.2 "Do Not Sell or Share My Personal Information"

California residents have the right to opt out of the sale or sharing of their personal information. While we do not sell personal information for monetary compensation, we may share certain identifiers and browsing behavior with advertising partners in ways that may be considered "sharing" under the CPRA for purposes of cross-context behavioral advertising.

To opt out of the sharing of your personal information for cross-context behavioral advertising purposes, please contact us at [email protected] with the subject line "Do Not Sell or Share My Personal Information."

We do not have actual knowledge that we sell or share personal information of consumers under 16 years of age.