Privacy Policy

Welcome to Pizzana. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website pizzana.rest, place an order with us, or otherwise interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services immediately.

This Privacy Policy applies to all information collected through our website (pizzana.rest), our online ordering system, any related services, sales, marketing, or events, and any other interactions you may have with us (collectively referred to as the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the terms described in this Privacy Policy. We encourage you to review this document periodically, as it may be updated from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated effective date.

1. Who We Are

Pizzana is a food service business operating in the United States. We operate under the domain pizzana.rest and provide online and in-person food ordering, delivery, and related services to customers across our service areas. As the operator of this website and provider of these Services, Pizzana acts as the data controller responsible for your personal information.

For any questions, concerns, or requests relating to your privacy or this policy, please contact us using the information provided in Section 15 of this document.

2. Information We Collect

We collect various types of information in connection with your use of our Services. The categories of information we may collect are described below.

2.1 Personal Information You Provide to Us

When you interact with our Services — such as when you create an account, place a food order, subscribe to our newsletter, contact our customer support, or participate in promotions — you may voluntarily provide us with personal information, including but not limited to:

• Contact Information: Full name, email address, phone number, and delivery address.
• Account Credentials: Username and password created when registering for an account.
• Order Information: Details about the food items you order, special dietary instructions, and preferred delivery times.
• Payment Information: Credit or debit card numbers, billing address, and other payment details. Note that payment data is processed through secure third-party payment processors and is not stored directly on our servers.
• Communications: Messages, feedback, reviews, or other content you submit to us through email, contact forms, or other channels.
• Promotional Participation Data: Information provided when you enter a contest, sweepstakes, or promotional offer.
• Profile Preferences: Saved food preferences, favorite orders, and any other preferences you configure within your account.

2.2 Information Collected Automatically

When you visit our website or use our digital Services, we and our third-party service providers may automatically collect certain technical and usage information, including:

• Device Information: IP address, browser type and version, operating system, device identifiers, screen resolution, and language settings.
• Usage Data: Pages visited, links clicked, time spent on pages, referring URLs, search queries entered on our site, and other behavioral data.
• Log Data: Server logs that record your interactions with our website, including timestamps, error reports, and access requests.
• Location Data: General geographic location inferred from your IP address, and, with your explicit consent, precise geolocation data from your mobile device to facilitate delivery services.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies (see Section 8 for details).

2.3 Information From Third Parties

We may also receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media account to our Services or log in through a social media provider (e.g., Google, Facebook), we may receive information from that platform such as your name, email address, and profile picture, subject to your privacy settings on that platform.
• Delivery Partners: Third-party delivery services may provide us with order fulfillment and delivery confirmation data.
• Marketing Partners: Analytics and advertising partners may provide us with aggregated or pseudonymized information to help us improve our marketing efforts.
• Payment Processors: Transaction confirmation and fraud-detection signals from our payment processing partners.

3. How We Use Your Information

We use the information we collect for a variety of purposes consistent with providing and improving our Services, including:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including coordinating delivery or pickup.
• Sending order confirmations, receipts, and status updates via email or SMS.
• Managing your account and authenticating your identity when you log in.
• Processing payments and preventing fraudulent transactions.
• Responding to your customer service inquiries and resolving disputes.

3.2 Website Operation and Improvement

• Operating, maintaining, and improving our website and digital Services.
• Troubleshooting technical issues and ensuring the security and integrity of our platform.
• Conducting internal analytics to understand how users interact with our site and to identify areas for improvement.
• Personalizing your experience, such as remembering your preferences and previous orders.

3.3 Marketing and Communications

• Sending you promotional emails, newsletters, special offers, and information about new menu items or services, where you have given us consent or where permitted by applicable law.
• Delivering targeted advertising across our website and on third-party platforms.
• Conducting surveys, contests, and other promotional activities.
• Measuring the effectiveness of our marketing campaigns.

3.4 Legal and Compliance Purposes

• Complying with applicable federal, state, and local laws and regulations.
• Enforcing our Terms of Service and other legal agreements.
• Protecting the rights, property, and safety of Pizzana, our customers, and the public.
• Responding to lawful requests from courts, regulatory authorities, and law enforcement agencies.

4. Legal Basis for Processing (Where Applicable)

Depending on your location and the applicable law, we rely on the following legal bases to process your personal information:

• Performance of a Contract: Processing is necessary to fulfill your order, manage your account, and deliver the Services you have requested.
• Legitimate Interests: We process certain data to pursue our legitimate business interests, such as improving our Services, preventing fraud, and conducting marketing, provided these interests are not overridden by your fundamental rights.
• Consent: Where required by law, we will obtain your consent before processing your data, such as for certain marketing communications or the use of non-essential cookies.
• Legal Obligation: We process data where necessary to comply with a legal obligation, such as tax reporting or responding to law enforcement requests.

5. Sharing Your Information With Third Parties

We do not sell your personal information to third parties. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform functions on our behalf, including payment processing, order delivery, email communications, web hosting, data analytics, customer support, and marketing assistance. These service providers are granted access to your personal information only to the extent necessary to perform their functions and are contractually obligated to maintain the confidentiality and security of your data. They are not permitted to use it for any other purpose.

5.2 Delivery Partners

When you place a delivery order, we share your name, delivery address, phone number, and order details with our delivery partners to facilitate the safe and timely delivery of your food.

5.3 Analytics and Advertising Partners

We may share aggregated or pseudonymized data with analytics providers (such as Google Analytics) and advertising networks to help us understand how our Services are used and to serve relevant advertisements. These partners may use cookies and similar tracking technologies to collect information about your online activities over time and across different websites.

5.4 Legal Requirements and Protection of Rights

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or governmental request.
• Enforce our Terms of Service or other agreements.
• Protect and defend the rights, property, or safety of Pizzana, our employees, customers, or others.
• Prevent or investigate possible wrongdoing in connection with the Services.

5.5 Business Transfers

In the event that Pizzana is involved in a merger, acquisition, asset sale, financing, reorganization, bankruptcy, or other similar transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website if such a transfer occurs and your information becomes subject to a different privacy policy.

5.6 With Your Consent

We may share your information with other third parties when we have obtained your explicit consent to do so.

6. Your Privacy Rights Under U.S. Law

As a business operating in the United States, we comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) for California residents, and the Federal Trade Commission (FTC) Act governing unfair or deceptive acts or practices. Depending on your state of residence, you may have some or all of the following rights:

6.1 Right to Know and Access

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, our business or commercial purpose for collecting it, and the categories of third parties with whom we share it.

6.2 Right to Correction

You have the right to request that we correct inaccurate personal information that we hold about you, taking into account the nature of the information and the purposes of processing.

6.3 Right to Deletion

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions permitted by law, such as where the information is necessary to complete a transaction, detect security incidents, comply with a legal obligation, or fulfill other legitimate purposes.

6.4 Right to Opt-Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the "sale" or "sharing" of their personal information for cross-context behavioral advertising purposes. While we do not sell personal information in the traditional sense, we may share certain data with advertising partners in a manner that may constitute "sharing" under California law. To exercise this right, please contact us at [email protected].

6.5 Right to Limit Use of Sensitive Personal Information

Where we process sensitive personal information (such as precise geolocation data or financial information), California residents have the right to limit our use of such information to purposes strictly necessary for providing the Services.

6.6 Right to Data Portability

You may request a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible and required by applicable law.

6.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge different prices, or provide a lower quality of service because you exercised a right under applicable privacy law.

6.8 How to Submit a Privacy Rights Request

To exercise any of the rights described above, please submit a verifiable consumer request by:

• Emailing us at [email protected] with the subject line "Privacy Rights Request."
• Visiting our website at pizzana.rest and using our designated request form if available.

We will verify your identity before processing your request. We aim to respond to all verifiable requests within 45 days of receipt. If we require more time, we will inform you of the reason and the extension period. Authorized agents may submit requests on your behalf, provided appropriate documentation is provided.

7. Data Security

Protecting your personal information is a top priority at Pizzana. We implement a range of administrative, technical, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, destruction, or misuse. These measures include:

• Encryption: Transmission of sensitive data (including payment information) is protected using Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption protocols.
• Access Controls: Access to personal information is restricted to authorized employees and contractors who have a legitimate business need to access such data and are bound by confidentiality obligations.
• Payment Security: We use PCI-DSS-compliant third-party payment processors to handle payment card information. We do not store full credit card numbers on our servers.
• Regular Security Assessments: We conduct periodic reviews of our data collection, storage, and processing practices, as well as security measures, to guard against unauthorized access.
• Incident Response: We maintain procedures to detect, respond to, and notify affected individuals and authorities of data security incidents in accordance with applicable law.

While we take commercially reasonable precautions to safeguard your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately at [email protected].

8. Cookies and Tracking Technologies

Our website uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience, analyze site usage, and deliver relevant advertising. A cookie is a small text file placed on your device when you visit our website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website, such as enabling you to log into secure areas and complete orders. These cannot be disabled without affecting site functionality.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting information anonymously. We use tools such as Google Analytics for this purpose.
• Functionality Cookies: Allow us to remember your preferences, such as your saved delivery address or language settings, to provide a more personalized experience.
• Targeting and Advertising Cookies: Used to deliver advertisements that are relevant to you and your interests. They are placed by us and our advertising partners.

8.2 Managing Your Cookie Preferences

You can control and manage cookies in several ways. Most web browsers allow you to refuse or delete cookies through their settings. Please note that disabling certain cookies may affect the functionality of our website. You can also opt out of interest-based advertising through industry tools such as the Digital Advertising Alliance (DAA) opt-out platform at optout.aboutads.info.

For a full description of the cookies we use and how to manage your preferences, please refer to our Cookie Policy, available at pizzana.rest.

9. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. The specific retention periods vary depending on the type of data and the purpose of processing:

When personal information is no longer required, we will securely delete or anonymize it in accordance with our data retention procedures. In some cases, we may retain anonymized, aggregated data indefinitely for analytical and statistical purposes without restriction, as it no longer identifies you.

10. Children's Privacy

Our Services are intended exclusively for individuals who are 18 years of age or older. We do not knowingly collect, solicit, or use personal information from individuals under the age of 18. If you are under 18, please do not use our Services or submit any personal information to us.

If we become aware that we have inadvertently collected personal information from a child under 18 without verifiable parental consent, we will take immediate steps to delete that information from our servers. If you believe we may have any information from or about a child under the age of 18, please contact us immediately at [email protected].

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 years of age without verifiable parental consent. Given that our Services are not directed at minors, we do not specifically collect information from this age group.

11. International Data Transfers

Pizzana is based in the United States, and the information we collect is governed by United States law. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers maintain facilities. These countries may have data protection laws that differ from those of your country of residence.

By using our Services and providing us with your information, you acknowledge that your personal data may be transferred to and processed in the United States. We take appropriate measures to ensure that any international transfers of personal data are handled securely and in compliance with applicable laws, including implementing contractual protections such as Standard Contractual Clauses where required.

If you have questions about how we handle cross-border data transfers, please contact us at [email protected].

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or services that are not operated by us. This Privacy Policy applies solely to our website and Services. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly encourage you to review the privacy policy of every site you visit.

When you interact with social media features on our site, such as a "Like" or "Share" button, those interactions are governed by the privacy policies of the respective social media companies, not by this Privacy Policy.

13. Marketing Communications and Opt-Out

With your consent or where permitted by applicable law, we may send you promotional emails, text messages, or push notifications about our menu, special offers, new locations, seasonal promotions, and other news related to Pizzana.

13.1 Email Marketing

You can opt out of receiving marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any marketing email we send you, or by contacting us at [email protected]. Please note that even if you opt out of marketing emails, we may still send you transactional or administrative emails related to your orders or account.

13.2 SMS and Text Message Marketing

If you have opted in to receive SMS marketing messages, you may opt out at any time by replying "STOP" to any text message we send or by contacting us at [email protected]. Standard message and data rates may apply.

13.3 Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals to websites. Because there is currently no industry standard for responding to DNT signals, our website does not currently alter its practices when it receives a DNT signal from your browser. However, you can manage your cookie preferences as described in Section 8.

14. How to File a Complaint

If you believe that we have violated your privacy rights or have concerns about how we handle your personal information, we encourage you to first contact us directly so we can attempt to resolve the matter. You may contact us at:

• Email: [email protected]
• Website: pizzana.rest

We will respond to your complaint within a reasonable timeframe and will work with you to address your concerns. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant regulatory authority.

14.1 California Residents

California residents who have unresolved complaints regarding our data practices may contact the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

14.2 Federal Consumer Protection

Residents of any U.S. state may file a complaint with the Federal Trade Commission (FTC), which enforces consumer protection laws including those related to privacy and data security:

• FTC Complaint Center: reportfraud.ftc.gov
• FTC Website: www.ftc.gov

14.3 Other State Privacy Authorities

If you reside in a state that has enacted comprehensive consumer privacy legislation (such as Virginia, Colorado, Connecticut, Texas, or other states with applicable privacy laws), you may also have the right to appeal our decisions regarding your privacy rights requests and to contact your state's relevant consumer protection or privacy authority for assistance.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your inquiries promptly and transparently.

When contacting us about a privacy matter, please include your full name, contact information, and a clear description of your request or concern so that we can respond effectively. For verifiable consumer requests, we may need to verify your identity before processing your request.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make changes, we will revise the "Last Updated" date at the top of this page. If we make material changes to how we collect, use, or share your personal information, we will provide more prominent notice, such as by sending you an email notification or displaying a prominent banner on our website.

We encourage you to review this Privacy Policy periodically to stay informed about our data practices. Your continued use of our Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised terms, please discontinue your use of our Services and contact us to request deletion of your account and data.

17. Additional Disclosures for California Residents (CCPA/CPRA)

In addition to the rights described in Section 6, California residents are entitled to the following additional disclosures pursuant to the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

17.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email address, IP address, account username)
• Customer records information (phone number, billing address, payment information)
• Commercial information (order history, purchasing preferences)
• Internet or other electronic network activity (browsing history on our site, cookie data)
• Geolocation data (general location, and precise location with consent)
• Inferences drawn from personal information (user preferences, behavioral trends)

17.2 Business and Commercial Purposes for Collection

We collect personal information for the business and commercial purposes described in Section 3 of this Privacy Policy, including order processing, customer service, analytics, marketing, and legal compliance.

17.3 Disclosure of Personal Information

In the past 12 months, we have disclosed personal information to service providers, delivery partners, payment processors, and analytics and advertising partners for the business purposes described in this Privacy Policy. We have not sold personal information for monetary consideration.

17.4 Shine the Light Law

California Civil Code Section 1798.83 (the "Shine the Light" law) permits California residents to request information about the disclosure of personal information to third parties for direct marketing purposes. If you are a California resident and wish to make such a request, please contact us at [email protected].