Privacy Policy

Welcome to Pizzana. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website food-pizzana.digital, place an order with us, or otherwise interact with our services. Please read this policy carefully. If you disagree with any part of this policy, please discontinue use of our website and services.

This Privacy Policy applies to all information collected through our website, mobile interactions, online ordering platform, email communications, and any related services, sales, marketing, or events (collectively referred to as the "Services").

1. Who We Are

Pizzana is a food service business operating in the United States. We are the data controller responsible for your personal information collected through our Services. Our contact details are as follows:

For any privacy-related questions, concerns, or requests, you may reach us at the email address listed above.

2. Information We Collect

We collect information about you in various ways depending on how you interact with our Services. Below is a detailed breakdown of the categories of information we may collect.

2.1 Personal Information You Provide to Us

When you use our Services — including placing an order, creating an account, signing up for our newsletter, contacting customer support, or participating in promotions — you may voluntarily provide us with personal information, including but not limited to:

• Identity Information: First and last name, username or similar identifier.
• Contact Information: Billing address, delivery address, email address, and telephone number.
• Payment Information: Credit card numbers, debit card numbers, and other payment details. Note: Full payment card details are processed by secure third-party payment processors and are not stored on our servers.
• Account Credentials: Username and password when you register an account with us.
• Order History: Details about the food and beverages you have ordered, including special instructions and dietary preferences.
• Communications: Messages you send to us via email, contact forms, or customer support channels.
• Marketing Preferences: Your preferences regarding receiving marketing communications from us and our third parties.

2.2 Information Collected Automatically

When you access or use our website, certain information is collected automatically through cookies, web beacons, pixel tags, and similar tracking technologies. This includes:

• Device Information: IP address, browser type and version, operating system, device identifiers, and hardware model.
• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, and navigation patterns within our website.
• Log Data: Server logs, error reports, and activity timestamps.
• Location Data: General geographic location inferred from your IP address, and (with your permission) more precise GPS location for delivery purposes.
• Cookie Data: Information stored in cookies placed on your browser. See Section 8 for more details on our use of cookies.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Third-party food delivery platforms or ordering aggregators that refer orders to our Services.
• Social media platforms if you choose to link your social media account or interact with us on social channels.
• Analytics providers and advertising partners who supply us with demographic and behavioral data.
• Payment processors who confirm transaction status and fraud signals.

3. How We Use Your Information

We use the personal information we collect for legitimate business purposes in connection with operating and improving our Services. Specifically, we use your information for the following purposes:

3.1 Service Provision and Order Fulfillment

• To process and complete your food orders, including arranging delivery or pickup.
• To create and manage your account on our platform.
• To communicate with you about your orders, including order confirmations, estimated delivery times, and receipt of payment.
• To provide customer support and respond to your inquiries and complaints.
• To process payments and prevent fraudulent transactions.

3.2 Analytics and Service Improvement

• To understand how users interact with our website and Services so we can improve functionality and user experience.
• To monitor and analyze usage trends and preferences.
• To evaluate the popularity of menu items and make data-driven decisions about our offerings.
• To conduct internal research, quality control, and testing.
• To troubleshoot technical issues and maintain the security of our platform.

3.3 Marketing and Promotional Communications

• To send you promotional emails, special offers, discount codes, and updates about new menu items, with your consent or where otherwise permitted by applicable law.
• To personalize the content and advertisements you see based on your interests and past interactions with us.
• To manage loyalty programs, sweepstakes, contests, and other promotions.
• To display targeted advertisements on third-party websites and platforms.

3.4 Legal and Compliance Purposes

• To comply with applicable laws, regulations, and legal processes, including under the Federal Trade Commission Act (FTC Act), the California Consumer Privacy Act (CCPA), and the California Privacy Rights Act (CPRA) where applicable.
• To enforce our Terms of Service and other agreements.
• To protect the rights, property, or safety of Pizzana, our customers, and others.
• To detect, investigate, and prevent fraudulent transactions and other illegal activity.

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill your orders and provide the Services you have requested.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our Services, fraud prevention, and direct marketing, provided these interests are not overridden by your rights.
• Legal Obligation: Processing necessary to comply with our legal obligations under applicable United States laws and regulations.
• Consent: Where you have provided explicit consent, such as opting in to receive marketing communications or accepting non-essential cookies. You may withdraw consent at any time.

5. Sharing Your Information with Third Parties

We respect your privacy and will not sell your personal information to third parties. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to facilitate our Services on our behalf. These service providers are given access to your personal information only to the extent necessary to perform their functions and are contractually obligated to protect your data. Categories of service providers include:

• Payment processors (e.g., Stripe, Square, or similar) who handle secure payment transactions.
• Delivery logistics providers who coordinate the physical delivery of your food orders.
• Cloud hosting and infrastructure providers who store and process data on our behalf.
• Email and marketing communication platforms used to send newsletters and promotional content.
• Analytics providers (e.g., Google Analytics) who help us understand website usage.
• Customer relationship management (CRM) software providers.
• Fraud detection and security service providers.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we are required to do so by law, or in response to a valid legal process, such as a subpoena, court order, or government request. We may also disclose information where we believe in good faith that disclosure is necessary to:

• Comply with any applicable federal, state, or local law or regulation.
• Protect the safety or rights of Pizzana, its employees, customers, or the public.
• Detect, prevent, or address fraud, security, or technical issues.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to a successor or affiliated entity. We will notify you via email or a prominent notice on our website if such a transfer occurs and if your information becomes subject to a materially different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other business purposes.

6. Data Security

We take the security of your personal information seriously. We have implemented a variety of administrative, technical, and physical security measures to protect your personal information from unauthorized access, use, alteration, and disclosure, including:

• Encryption: Sensitive data, including payment information, is transmitted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption technology.
• Access Controls: Access to personal information is restricted to authorized personnel who need the information to perform their job functions. All employees are subject to confidentiality obligations.
• Secure Storage: Personal data is stored on secured servers with firewalls and intrusion detection systems.
• Password Security: Account passwords are stored using one-way hashing algorithms. We never store your password in plain text.
• Regular Security Audits: We conduct periodic reviews of our data collection, storage, and processing practices to identify and address potential vulnerabilities.
• Incident Response: We have procedures in place to detect and respond to data breaches. In the event of a breach affecting your rights, we will notify affected individuals as required by applicable law.

7. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights with respect to your personal information. We are committed to honoring these rights in accordance with applicable law, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) for California residents, and broader consumer protections under the Federal Trade Commission Act (FTC Act).

7.1 Right to Know and Access

You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.

7.2 Right to Correction

You have the right to request that we correct inaccurate personal information we maintain about you. We will take reasonable steps to correct the information following verification of your identity.

7.3 Right to Deletion

You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions. We may retain information where necessary to complete a transaction, detect security incidents, comply with legal obligations, or exercise other rights permitted by law.

7.4 Right to Opt Out of Sale or Sharing

We do not sell your personal information for monetary consideration. However, under the CCPA/CPRA, "sale" may include sharing data with third parties for cross-context behavioral advertising. California residents have the right to opt out of the sharing of their personal information for targeted advertising purposes. To exercise this right, please contact us at [email protected].

7.5 Right to Data Portability

Where technically feasible, you have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format. You may also request that we transmit this information to another service provider where this is technically possible.

7.6 Right to Limit Use of Sensitive Personal Information

Under the CPRA, California residents have the right to limit our use and disclosure of sensitive personal information (such as precise geolocation data or financial account details) to uses that are necessary to perform our Services or as otherwise permitted by law.

7.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you Services, charge you different prices, or provide a different level of quality of service because you exercised your rights under applicable privacy law.

7.8 How to Submit a Privacy Rights Request

To exercise any of the rights described above, please submit a verifiable consumer request by contacting us at:

• Email: [email protected]
• Website: food-pizzana.digital

We will respond to your request within 45 days of receipt. If we require additional time, we will notify you of the extension and the reason for it. We may need to verify your identity before processing your request. Authorized agents may also submit requests on your behalf with proper written authorization.

8. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising. A cookie is a small text file placed on your device when you visit a website.

8.1 Types of Cookies We Use

8.2 Managing Cookies

You can control and manage cookies in your browser settings. Most browsers allow you to refuse cookies or delete cookies already stored on your device. Please note that disabling certain cookies may impact the functionality of our website and your ability to place orders. For more detailed information about how we use cookies and how to opt out, please review our full Cookie Policy available on our website at food-pizzana.digital.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

• Account Data: Retained for the duration of your account registration plus an additional period of up to 3 years after account closure to handle any outstanding matters.
• Order and Transaction Data: Retained for a minimum of 7 years to comply with federal and state tax laws, accounting obligations, and potential legal disputes.
• Marketing Data: Retained until you unsubscribe or opt out of marketing communications, plus a short period thereafter for administrative purposes.
• Customer Support Communications: Retained for up to 3 years from the date of the last interaction.
• Usage and Analytics Data: Typically retained for up to 26 months in an identifiable form, after which it may be anonymized and retained indefinitely for trend analysis.
• Legal Hold Data: Data subject to litigation holds or regulatory investigations will be retained for as long as required by the applicable legal obligation.

When your personal information is no longer needed, we will securely delete or anonymize it in accordance with our data disposal procedures.

10. Children's Privacy

Pizzana does not direct its Services to minors, and we do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete such information from our records.

We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly market to or solicit information from children under 13. If we discover that we have inadvertently collected information from a child under 13, we will delete that information as quickly as possible.

11. International Data Transfers

Pizzana is based in the United States, and your personal information is primarily stored and processed in the United States. If you are accessing our Services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

In the event we transfer personal data of individuals located in jurisdictions with specific data transfer requirements (such as the European Economic Area or the United Kingdom), we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses or other legally recognized mechanisms, to protect your information.

By using our Services, you acknowledge and consent to the transfer, processing, and storage of your personal information in the United States in accordance with this Privacy Policy.

12. Third-Party Links and Services

Our website may contain links to third-party websites, plug-ins, and applications (such as social media platforms, third-party delivery apps, or review platforms). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to review the privacy policy of every website you visit.

Our website may use third-party tools including:

• Google Analytics: For website traffic analysis. Data collected is subject to Google's Privacy Policy.
• Google Maps: For delivery address lookup and location services.
• Social Media Widgets: Buttons or feeds from platforms such as Facebook, Instagram, or Twitter may collect data about your interaction with those features.

13. Your Marketing Choices

You have control over the marketing communications we send you. Specifically:

• Email Marketing: You may unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any marketing email or by contacting us at [email protected]. Please note that transactional emails related to your orders (such as order confirmations and delivery updates) are not subject to opt-out.
• SMS/Text Marketing: If you have opted in to receive text messages from us, you may opt out at any time by replying "STOP" to any marketing text message.
• Personalized Advertising: You may opt out of interest-based advertising by adjusting your cookie preferences through our cookie consent tool or by visiting the Digital Advertising Alliance's opt-out page at optout.aboutads.info.

14. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked across websites. Currently, there is no uniform standard for recognizing and responding to DNT signals. As such, our website does not respond to DNT browser signals at this time. However, you can manage your privacy preferences through our cookie consent tool and by exercising your opt-out rights as described in this policy.

15. California Privacy Rights (CCPA / CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA). In addition to the rights described in Section 7, California residents have the following rights:

• The right to know what categories of personal information we have collected, disclosed, or sold about you in the past 12 months.
• The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• The right to limit the use and disclosure of your sensitive personal information.
• The right to non-discrimination for exercising your CCPA rights.

15.1 Categories of Personal Information Collected (CCPA)

California residents may submit privacy rights requests by emailing [email protected]. We will verify your identity and respond within the timeframes required by California law.

16. Filing a Complaint with a Data Protection Authority

If you believe that we have not handled your personal information in accordance with applicable law, you have the right to file a complaint with the appropriate data protection authority. In the United States, you may contact:

• Federal Trade Commission (FTC):
  The FTC oversees consumer protection and privacy practices under the FTC Act.
  Website: www.ftc.gov
  Phone: 1-877-382-4357
• California Privacy Protection Agency (CPPA) (for California residents):
  The CPPA is the agency responsible for enforcing the CPRA.
  Website: cppa.ca.gov
• State Attorney General:
  Residents of all US states may also file complaints with their respective State Attorney General's office regarding unfair or deceptive privacy practices.

We encourage you to contact us first at [email protected] so we have the opportunity to address your concerns directly before you escalate to a regulatory authority.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or for other business reasons. When we make material changes to this policy, we will notify you by:

• Updating the "Last Updated" date at the top of this page.
• Posting a prominent notice on our website homepage.
• Sending you an email notification if the changes are significant and you have provided us with your email address.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us using the details below. We are committed to resolving any privacy-related issues in a timely and transparent manner.

We aim to respond to all privacy inquiries within 30 days of receipt. For requests related to your California privacy rights under the CCPA/CPRA, we will respond within 45 days, with the possibility of a 45-day extension where reasonably necessary, provided that we notify you of the extension and the reason within the initial 45-day period.