Privacy Policy

This Privacy Policy describes how Pizzana ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at pizza-pizzana.rest, place an order, subscribe to our communications, or otherwise interact with our services. We are committed to protecting your privacy and handling your personal data in a transparent, responsible, and lawful manner consistent with applicable United States federal and state privacy laws.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read and understood this policy. If you do not agree with the terms outlined here, please discontinue use of our website and services immediately.

1. Who We Are

Pizzana is a food service business operating in the United States. We operate the website pizza-pizzana.rest and provide food ordering, delivery, and related services to our customers.

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at the email address listed above.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All visitors to our website at pizza-pizzana.rest
• Customers who place orders online or through other channels we operate
• Individuals who register for an account on our platform
• Subscribers to our email newsletters, promotional communications, or loyalty programs
• Users who contact us for customer support, feedback, or general inquiries
• Any person whose personal information we collect in connection with our food service operations

This policy does not apply to third-party websites, apps, or services that may be linked from our website. We encourage you to review the privacy policies of any third-party services you use.

3. Information We Collect

We collect various categories of personal information depending on how you interact with us. The following outlines the types of information we may collect:

3.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and shipping address (including street address, city, state, and ZIP code)
• Account username and password (stored in encrypted form)
• Date of birth (where required for age verification)

3.2 Payment and Transaction Information

When you make a purchase through our website or services, we collect information necessary to process your order, including:

• Payment method details (credit card type, last four digits — we do not store full card numbers)
• Billing address associated with your payment method
• Order history and transaction records
• Details of items ordered, special requests, and delivery preferences

Full payment card data is processed by our PCI-DSS-compliant payment processors and is not stored on our servers.

3.3 Usage and Behavioral Data

We automatically collect certain information about how you interact with our website and services, including:

• Pages viewed, links clicked, and features accessed
• Time and date of your visit
• Time spent on individual pages
• Referring URLs (the website you came from before visiting ours)
• Search queries entered on our website
• Shopping cart activity and order completion rates

3.4 Device and Technical Information

We collect technical information about the device and software you use to access our services, including:

• IP address
• Browser type and version
• Operating system and platform
• Device type (desktop, mobile, tablet)
• Screen resolution
• Language settings
• Unique device identifiers

3.5 Location Information

We may collect approximate or precise location data in order to:

• Determine delivery eligibility and estimated delivery times
• Show you nearby menu options or promotions
• Improve the accuracy of order fulfillment

Precise geolocation data is only collected with your explicit consent through your browser or device settings.

3.6 Communications Data

When you contact us via email, contact form, or other communication channels, we collect:

• The content of your messages
• Your contact details provided in the communication
• Records of correspondence for quality assurance and legal compliance

3.7 Cookie and Tracking Data

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing behavior on our website. Please see Section 8 of this policy for detailed information about our use of cookies.

3.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms if you connect your account or interact with our social media pages
• Third-party delivery or ordering platforms that facilitate orders to our restaurant
• Analytics and advertising partners
• Publicly available sources

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Coordinating delivery or pickup services
• Sending order confirmations, receipts, and status updates
• Managing your account and preferences
• Communicating with you about your orders or inquiries
• Processing payments and preventing fraudulent transactions

4.2 Improvement and Analytics

• Analyzing how visitors use our website to improve user experience
• Monitoring website performance and identifying technical issues
• Conducting internal research to develop new menu items, features, and services
• Measuring the effectiveness of our marketing campaigns
• Understanding customer preferences and purchasing patterns

4.3 Marketing and Promotions

• Sending you promotional emails, special offers, and newsletters if you have opted in
• Notifying you about loyalty rewards, discounts, and new menu additions
• Displaying personalized advertisements on our website or third-party platforms
• Retargeting campaigns based on your browsing and order history

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send, or by contacting us at [email protected].

4.4 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from law enforcement or government agencies
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Pizzana, our customers, and the public
• Detecting, preventing, and addressing fraud, abuse, or security incidents

4.5 Customer Support

• Responding to your questions, complaints, and feedback
• Resolving disputes and troubleshooting issues
• Maintaining records of customer service interactions

5. Legal Basis for Processing

We process your personal information under the following legal grounds under applicable United States law, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the FTC Act, and other relevant federal and state statutes:

• Contract Performance: Processing is necessary to fulfill orders and manage your account
• Legitimate Interests: We have a legitimate business interest in operating and improving our food service, preventing fraud, and communicating with customers, provided such interests do not override your privacy rights
• Consent: Where required by law, we rely on your affirmative consent (e.g., for marketing emails or precise location tracking)
• Legal Obligation: Processing necessary to comply with applicable law

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary consideration. However, we may share your information in the following circumstances:

6.1 Service Providers and Vendors

We engage trusted third-party service providers who assist us in operating our business and delivering services to you. These providers are contractually obligated to protect your information and use it only as directed by us. Categories of service providers include:

• Payment processors (e.g., Stripe, Square, or similar)
• Delivery logistics and fulfillment partners
• Website hosting and cloud storage providers
• Email marketing platforms
• Analytics providers (e.g., Google Analytics)
• Customer relationship management (CRM) software
• Fraud prevention and cybersecurity services

6.2 Third-Party Ordering Platforms

If you place an order through a third-party food delivery or ordering platform that partners with Pizzana, that platform's privacy policy governs the information you provide to them. We may receive order-related information from these platforms to fulfill your request.

6.3 Legal Requirements

We may disclose your personal information to government authorities, law enforcement agencies, or other third parties when we believe disclosure is required or permitted by law, including:

• To comply with a subpoena, court order, or other legal process
• To respond to requests from regulatory or government authorities
• To protect the rights and safety of Pizzana, our staff, or others
• To investigate potential violations of our Terms of Service

6.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to a successor entity as part of that transaction. We will notify you via email or prominent notice on our website if such a transfer occurs and your information becomes subject to a different privacy policy.

6.5 Advertising and Analytics Partners

We may share aggregated, de-identified, or anonymized data with advertising and analytics partners to help us understand usage trends and improve our services. This data cannot reasonably be used to identify you personally.

7. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards to protect it from unauthorized access, loss, misuse, alteration, or destruction.

7.1 Technical Safeguards

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Encrypted storage of sensitive personal data, including passwords and payment-adjacent information
• Firewalls and intrusion detection systems
• Regular security patches and software updates
• Access controls and multi-factor authentication for internal systems

7.2 Administrative Safeguards

• Employee training on data privacy and security practices
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Data processing agreements with all third-party service providers
• Internal policies governing the collection, retention, and deletion of personal data

7.3 Incident Response

In the event of a data breach that may affect your personal information, we will notify you and applicable regulatory authorities as required by applicable United States federal and state breach notification laws, including applicable state breach notification statutes. Notifications will be provided in a timely manner and will include information about the nature of the breach and steps you can take to protect yourself.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing activities.

8.1 Types of Cookies We Use

8.2 Managing Cookie Preferences

You can control cookies through your browser settings, which allow you to refuse some or all cookies. Please note that disabling certain cookies may affect the functionality of our website. Most browsers provide instructions for managing cookies in their help sections.

For California residents, you have the right to opt out of the "sale" or "sharing" of personal information, including data collected through cookies for advertising purposes. You may exercise this right by contacting us at [email protected].

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, accounting, or reporting obligations.

When personal information is no longer required, we securely delete or anonymize it in accordance with our data retention procedures.

10. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information under applicable United States privacy laws.

10.1 Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of collection, the purposes for processing, and the categories of third parties with whom we share your data.
• Right to Delete: You may request that we delete personal information we have collected about you, subject to certain exceptions (e.g., completing transactions, complying with legal obligations).
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You may direct us to limit our use of sensitive personal information to what is necessary for providing requested services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny goods or services, charge different prices, or provide a different quality of service based on the exercise of your privacy rights.
• Right to Data Portability: You may request a copy of your personal information in a portable, readily usable format.

10.2 Rights Available to All U.S. Customers

Regardless of your state of residence, we provide all customers with the following rights as a matter of our company policy:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information where no legal obligation requires us to retain it
• Opt-Out of Marketing: Unsubscribe from marketing communications at any time
• Account Closure: Request the closure and deletion of your account

10.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a request to us using one of the following methods:

• Email: [email protected]
• Website: pizza-pizzana.rest (via contact form)

We will acknowledge receipt of your request within 10 business days and fulfill verifiable consumer requests within 45 calendar days of receipt. If we need additional time (up to 90 days total), we will inform you in writing of the reason for the extension.

We may need to verify your identity before processing your request. Verification may include confirming information associated with your account or asking you to provide additional identifying information. We will not use verification information for any purpose other than confirming your identity.

You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide written permission from you and may be required to verify their identity.

11. Children's Privacy

Our services are not directed to children under the age of 18. We do not knowingly solicit, collect, or process personal information from children. If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information as quickly as possible.

This policy is consistent with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verified parental consent.

If you are a parent or guardian and believe your child has provided personal information to us without your consent, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

12. International Data Transfers

Pizzana is based in the United States, and your personal information is primarily collected, stored, and processed within the United States. Our servers and systems are located in the United States.

If you are accessing our website from outside the United States, please be aware that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence. By using our services, you consent to the transfer of your personal information to the United States.

Where we transfer personal information outside the United States to service providers or partners located in other countries, we take steps to ensure that appropriate safeguards are in place, including through contractual protections such as standard data protection clauses.

13. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or other external services. We are not responsible for the privacy practices of these third parties. Once you leave our website by clicking a third-party link, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party websites you visit.

Third-party integrations we may use include, but are not limited to:

• Social media platforms (Facebook, Instagram, etc.)
• Google Maps or similar mapping services
• Third-party payment gateways
• Food delivery aggregator platforms
• Review and rating platforms (e.g., Yelp, Google Reviews)

14. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) setting that sends a signal to websites requesting that your browsing activity not be tracked. At this time, our website does not respond to DNT signals from browsers because no universally accepted standard for responding to such signals has been established. We will update this policy if we adopt a DNT standard in the future.

California residents may exercise their right to opt out of the sale or sharing of personal information as described in Section 10 of this policy.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy on our website at pizza-pizzana.rest
• Notify registered users via email or through a prominent notice on our website where changes are material

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms.

16. Filing a Complaint

If you believe your privacy rights have been violated or if you are dissatisfied with our response to your privacy request, you have the right to file a complaint with the relevant authorities.

16.1 California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy/ccpa

16.2 Federal Consumer Protection

Consumers in all states may file complaints with the Federal Trade Commission (FTC), which enforces consumer protection laws including those related to unfair or deceptive privacy practices under the FTC Act:

• FTC Complaint Assistant: reportfraud.ftc.gov
• FTC Website: www.ftc.gov

16.3 State Attorney General Offices

Residents of other states may contact their respective state Attorney General's office to file a complaint regarding privacy violations. Most state AG offices have online complaint portals available on their official state government websites.

16.4 Contact Us First

We encourage you to contact us directly before filing a complaint with a regulatory authority, as we are committed to resolving any concerns in a fair and timely manner. Please reach out to us at [email protected] and allow us the opportunity to address your concern.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact our privacy team using the details below:

We aim to respond to all privacy-related inquiries within 10 business days. For requests related to your personal data rights under applicable law, we will respond within the timeframes required by law as described in Section 10.3 of this policy.