Privacy Policy

1. Introduction

At Punch pizza, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, mobile application, or services.

This policy applies to all personal information collected through our website (pizz-punch.rest), mobile applications, in-store interactions, phone orders, delivery services, and any other touchpoints where you interact with our brand.

By using our services, placing orders, creating an account, or providing your information to us, you agree to the terms outlined in this Privacy Policy. We want you to know that we never sell your personal data to third parties.

2. Information We Collect

2.1 Information You Provide

• Personal Identification: Name, email address, phone number, delivery address, billing address
• Account Information: Username, password, order history, purchase preferences, saved payment methods
• Food Service Specific Data:
  • Order history and favorite menu items
  • Dietary preferences and restrictions (vegetarian, vegan, gluten-free, etc.)
  • Allergen information you provide for food safety
  • Special dietary requirements (halal, kosher, keto, etc.)
  • Delivery addresses and location data
  • Table reservation information and party size
  • Catering event details and requirements
  • Loyalty program participation and rewards data
• Payment Information: Credit/debit card details, billing address (encrypted and securely stored)
• Communication Data: Contact form submissions, customer service interactions, reviews, feedback, and ratings
• Marketing Preferences: Email subscription preferences, notification settings, promotional opt-ins

2.2 Automatically Collected Information

• Device Information: IP address, browser type and version, operating system, device type, screen resolution
• Usage Data: Pages visited, time spent on site, click patterns, search queries, referring websites
• Cookie Data: Session IDs, user preferences, shopping cart contents, analytics data
• Location Information: Approximate location based on IP address, precise location if you enable GPS for delivery
• Performance Data: Page load times, error messages, system performance metrics

2.3 Information from Third Parties

• Social Media: Profile information if you connect social media accounts or sign in through social platforms
• Payment Processors: Transaction verification and fraud prevention data from payment service providers
• Delivery Partners: Delivery status updates, GPS tracking data, driver information
• Marketing Partners: Campaign performance data, advertising effectiveness metrics
• Data Enrichment Services: Address verification, demographic information for better service delivery

3. How We Use Your Information

3.1 Service Provision

• Processing and fulfilling food orders, including special dietary requirements
• Managing delivery logistics and coordinating with delivery partners
• Providing customer support and resolving order issues
• Managing table reservations and catering bookings
• Account creation, authentication, and maintenance
• Processing payments and preventing fraudulent transactions
• Quality improvement and menu optimization based on customer preferences

3.2 Communication

• Sending order confirmations, preparation updates, and delivery notifications
• Providing customer support responses and follow-up communications
• Sending important notices about policy changes or service updates
• Delivering marketing emails and promotional offers (with your consent only)
• Sharing loyalty program benefits and reward notifications
• Collecting feedback through surveys and review requests

3.3 Marketing and Analytics

• Creating personalized advertising and menu recommendations
• Analyzing website traffic patterns and user behavior
• Measuring campaign effectiveness and marketing ROI
• Conducting market research for new products and services
• Segmenting customers for targeted promotions
• Optimizing website performance and user experience

3.4 Legal Compliance

• Responding to legal requests, court orders, and regulatory inquiries
• Preventing fraud, abuse, and security threats
• Protecting our rights, property, and intellectual property
• Resolving disputes and enforcing our terms of service
• Complying with food safety regulations and health department requirements

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Payment Processors: Secure transaction processing (Stripe, PayPal, Square)
• Delivery Companies: Order fulfillment and delivery coordination
• Cloud Storage Providers: Secure data storage and backup services (AWS, Google Cloud)
• Email Service Providers: Marketing campaigns and transactional emails (Mailchimp, SendGrid)
• Analytics Tools: Usage analysis and performance monitoring (Google Analytics, Hotjar)
• Customer Support: Help desk software and communication tools

4.2 Legal Requirements

We may disclose your information when required by law or to protect our legitimate interests:

• Court orders, subpoenas, and legal process
• Compliance with regulatory requirements and health department investigations
• Protection of rights, property, and safety of our customers and employees
• Emergency situations involving public safety
• Investigation and prevention of fraud or illegal activities

4.3 Business Transfers

In the event of a merger, acquisition, or sale of business assets:

• Your information may be transferred to the new owner
• We will notify customers before any transfer occurs
• The new owner must comply with this privacy policy or provide notice of changes

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as:

• Participating in loyalty program partnerships
• Joining marketing collaborations with other brands
• Contributing to customer testimonials or case studies

5. Data Security

5.1 Technical Measures

• Encryption: SSL/TLS encryption for all data transmission between your device and our servers
• Firewall Protection: Advanced firewall systems to prevent unauthorized access
• Access Control: Restricted access to personal data on a need-to-know basis with minimum necessary personnel
• Security Monitoring: 24/7 automated monitoring for suspicious activities and potential threats
• Data Backups: Regular encrypted backups stored in secure, geographically distributed locations
• Vulnerability Testing: Regular penetration testing and security audits

5.2 Organizational Measures

• Employee Training: Regular security awareness training for all staff members
• Data Handling Procedures: Strict protocols for accessing, processing, and storing personal data
• Third-Party Agreements: Confidentiality and data protection agreements with all service providers
• Incident Response: Comprehensive security incident response plan with clear escalation procedures
• Compliance Audits: Regular internal and external security audits to ensure policy compliance

5.3 Your Responsibilities

You can help protect your personal information by:

• Creating strong, unique passwords and updating them regularly
• Never sharing your login credentials with others
• Logging out of your account on shared or public computers
• Being cautious of suspicious emails or messages asking for personal information
• Reporting any unauthorized account access immediately
• Keeping your contact information up to date

Security Breach Notification: In the unlikely event of a security breach that affects your personal data, we will promptly notify you and relevant authorities within 72 hours as required by law. We will provide clear information about what happened, what data was involved, and what steps we are taking to address the issue.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website. Below is a detailed breakdown of the types of cookies we use:

Tracking Technologies We Use

• Google Analytics: Website traffic analysis and user behavior insights
• Facebook Pixel: Advertising effectiveness measurement and retargeting
• Web Beacons: Email open rates and engagement tracking
• Local Storage: Browser-based data storage for improved performance
• Heat Mapping Tools: Understanding how users interact with our website

Cookie Management

You can manage cookies through your browser settings to accept, reject, or delete cookies. Please note that disabling certain cookies may affect website functionality, including:

• Inability to maintain shopping cart contents
• Loss of personalized preferences
• Reduced website performance
• Limited access to certain features

7. Your Rights (GDPR/CCPA Compliance)

Under applicable privacy laws, including GDPR and CCPA, you have the following rights regarding your personal data:

7.1 Right of Access

Request to view all personal data we have collected about you, including order history, preferences, and account information.

7.2 Right to Rectification

Request correction of inaccurate or outdated personal information, including contact details and dietary preferences.

7.3 Right to Erasure (Right to be Forgotten)

Request deletion of your personal data when it is no longer necessary for the purposes it was collected or you withdraw consent.

7.4 Right to Restrict Processing

Limit how we use your data while maintaining your account, such as stopping marketing communications but keeping order history.

7.5 Right to Data Portability

Receive your personal data in a machine-readable format to transfer to another service provider.

7.6 Right to Object

Object to processing of your data for direct marketing purposes or other legitimate interests.

7.7 Right Against Automated Decision-Making

Request human review of decisions made solely by automated processing, including pricing algorithms and promotional targeting.

How to Exercise Your Rights

8. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect, use, or store personal information from children under 16 without verified parental consent.

If We Discover Children's Data

• We will immediately stop collecting the information
• We will delete any previously collected data
• We will not use the information for any purpose
• We will implement additional safeguards to prevent future collection

Parent Notification

If you believe your child under 16 has provided personal information to us, please contact us immediately at [email protected]. We will work with you to:

• Verify your identity as the parent or guardian
• Confirm what information was collected
• Promptly delete all information associated with the child
• Implement measures to prevent future collection

9. International Data Transfers

We may transfer your personal data to countries outside your residence for processing and storage. We ensure appropriate protection through:

9.1 Protection Measures

• Adequacy Decisions: Transfers to countries with EU-recognized adequate protection levels
• Standard Contractual Clauses (SCC): Legally binding agreements ensuring data protection
• Data Processing Agreements: Comprehensive contracts with all international partners
• Security Measures: Enhanced encryption and security protocols for international transfers
• Compliance Audits: Regular verification of international partners' data protection practices

9.2 Transfer Destinations

• United States: Cloud storage services and payment processing
• European Union: Data analytics and customer relationship management
• Other Countries: As needed for business operations, always with appropriate safeguards

We regularly review our international data transfer practices to ensure compliance with evolving privacy regulations.

10. Data Retention Periods

We retain your personal information only as long as necessary for the purposes described in this policy or as required by law:

Safe Data Disposal

When data retention periods expire, we ensure secure disposal through:

• Electronic Deletion: Complete, unrecoverable deletion from all systems
• Physical Record Destruction: Secure shredding of any paper documents
• Backup Data Removal: Deletion from all backup systems and archives
• Disposal Records: Maintenance of secure disposal records for compliance

11. Third-Party Links

Our website may contain links to external websites, social media platforms, payment processors, and other third-party services. Please be aware that:

• External Privacy Policies: We are not responsible for the privacy practices of third-party websites
• Independent Review: You should review the privacy policies of any third-party sites before providing personal information
• Data Collection: Third-party sites may collect information independently of our privacy policy
• Your Responsibility: Exercise caution when sharing personal information on external platforms

Common Third-Party Links

• Social media platforms (Facebook, Instagram, Twitter)
• Payment processors (PayPal, Stripe)
• Review platforms (Yelp, Google Reviews)
• Delivery tracking services
• Partner restaurant websites

12. Policy Changes

12.1 Change Notification

We may update this Privacy Policy from time to time. When we make changes, we will notify you through:

• Website Notice: Prominent notice on our homepage and privacy policy page
• Email Notification: Direct email to all registered users for significant changes
• Account Notification: Pop-up notification upon your next login
• Explicit Consent: Request for new consent for material changes to data processing

12.2 Checking for Changes

• The most current version will always be available on our website
• Check the "Last Updated" date at the top of this policy
• Continued use of our services constitutes acceptance of policy changes
• You may stop using our services if you disagree with changes

Significant Changes

For material changes that affect how we use your personal data, we will:

• Provide at least 30 days advance notice
• Clearly explain what changes have been made
• Explain how the changes affect you
• Give you the opportunity to withdraw consent if applicable

13. Contact Information

Response Commitment: We will respond to all privacy-related inquiries within 3 business days.

13.1 Filing Complaints

If you have concerns about our privacy practices:

1. Contact Us First: We encourage you to contact us directly for resolution
2. Supervisory Authority: If unsatisfied with our response, you may contact your local data protection authority
3. U.S. Residents: Federal Trade Commission (FTC) - consumer.ftc.gov
4. EU Residents: Your local Data Protection Authority

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal

You can withdraw consent for marketing communications at any time through:

• Email Unsubscribe: Click the unsubscribe link at the bottom of any marketing email
• Account Settings: Update your communication preferences in your online account
• Customer Support: Contact our support team to update your preferences
• Phone: Call +1 202-789-1234 to speak with a representative

14.2 Account Deletion Process

To delete your account and associated data:

1. Log into your account and go to Settings > Account Management
2. Click "Delete Account" and confirm your identity
3. Review what data will be deleted and what will be retained for legal compliance
4. Confirm deletion - this action cannot be undone
5. You will receive email confirmation within 24 hours

Note: Some data may be retained for legal compliance, including order history for tax purposes and payment records for fraud prevention. This retained data will be kept securely and not used for marketing or service provision.

15. Conclusion

At Punch pizza, your privacy is fundamental to our relationship with you. We are committed to maintaining the highest standards of data protection and transparency in all our practices.

We believe that protecting your personal information is not just a legal obligation, but a cornerstone of the trust you place in us when you choose our food and services. Our comprehensive approach to privacy includes continuous improvement of our security measures, regular training of our staff, and staying current with evolving privacy regulations.

We value the trust relationship we have built with our customers over the years, and we understand that this trust must be earned every day through our actions and commitment to your privacy.

If you have any questions, concerns, or suggestions about this Privacy Policy or our data practices, please don't hesitate to reach out to us. We are here to help and ensure that you feel confident about how your information is handled.

Thank you for choosing Punch pizza and for taking the time to understand how we protect your privacy. We look forward to continuing to serve you with the same dedication to excellence that you've come to expect from us.

Remember: This Privacy Policy was last updated on December 15, 2024. Please check back regularly for any updates or changes.