Privacy Policy

Welcome to Punch Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website punchpizza-food.digital, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy applies to all information collected through our website, mobile experiences, online ordering system, loyalty programs, in-store interactions, and any related services, sales, marketing, or events (collectively, the "Services").

1. Who We Are

Punch Pizza is a food service business operating in the United States. For the purposes of this Privacy Policy, "Punch Pizza," "we," "us," and "our" refer to the company and its authorized representatives.

• Business Name: Punch Pizza
• Website: punchpizza-food.digital
• Email: [email protected]

If you have any questions about this policy or our privacy practices, please contact us using the information provided in the Contact Us section at the end of this document.

2. Information We Collect

We collect information about you in a variety of ways depending on how you interact with our Services. The categories of information we collect are described below.

2.1 Personal Information You Provide to Us

When you create an account, place an order, sign up for our newsletter, participate in a promotion, or contact us for support, you may voluntarily provide us with the following types of personal information:

• Identification Information: First name, last name, username, or similar identifiers.
• Contact Information: Email address, mailing address, billing address, delivery address, and phone number.
• Account Credentials: Passwords and security questions used to protect your account.
• Payment Information: Credit card numbers, debit card numbers, billing details, and other financial information. Note: We do not store full payment card details on our servers; this information is processed by our PCI-DSS compliant payment processors.
• Order Information: Details of the food items you have ordered, your order history, dietary preferences, and special instructions.
• Communications: Records of your correspondence with us, including emails, support tickets, chat logs, and feedback you submit.
• Loyalty Program Data: Points balances, redemption history, and participation in promotions or rewards programs.
• Demographic Information: Age, date of birth (when required for age verification), and similar information when voluntarily provided.

2.2 Information Collected Automatically

When you access or use our website and digital Services, we and our third-party partners automatically collect certain technical and usage information, including:

• Device Information: IP address, browser type and version, operating system, device type, hardware model, unique device identifiers, and mobile network information.
• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, search queries entered on our site, and other actions taken on our website.
• Location Data: General geographic location derived from your IP address. If you grant permission, we may collect more precise GPS-based location data to facilitate delivery services.
• Log Data: Server logs that record your interactions with our website, including access times, error reports, and system activity.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, local storage, and similar technologies to collect information about your browsing behavior and preferences. Please see our Cookie section below for more details.

2.3 Information from Third Parties

We may receive information about you from third-party sources and combine it with the information we collect directly, including:

• Social Media Platforms: If you connect your social media accounts or log in using social sign-on (e.g., Facebook, Google), we may receive your name, email address, profile picture, and other public profile information.
• Delivery Partners: Third-party delivery platforms may share order and fulfillment information with us.
• Analytics Providers: Tools such as Google Analytics may provide us with aggregated or de-identified insights about how visitors use our website.
• Marketing Partners: Advertising networks and marketing platforms may share audience data, engagement data, or conversion data with us.
• Payment Processors: Our payment service providers may share transaction confirmation details and fraud prevention signals.

3. How We Use Your Information

We use the information we collect for the following purposes, based on legitimate business interests, contract performance, legal obligations, or your consent (where applicable):

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including coordinating delivery or pickup.
• Creating and managing your account.
• Processing payments and preventing fraudulent transactions.
• Communicating with you about your orders, including order confirmations, status updates, and receipts.
• Providing customer support and responding to your inquiries and complaints.
• Managing loyalty programs, promotions, and rewards.

3.2 Improving and Personalizing Our Services

• Analyzing usage patterns and trends to understand how customers interact with our website and services.
• Personalizing your experience by displaying menu recommendations, offers, and content tailored to your preferences and order history.
• Conducting research and analytics to improve our menu offerings, website functionality, and overall customer experience.
• Testing new features, promotions, and interfaces before full deployment.

3.3 Marketing and Communications

• Sending you promotional emails, newsletters, special offers, and updates about new menu items — but only where you have provided consent or where permitted by applicable law.
• Delivering targeted advertisements on our website and through third-party advertising networks.
• Conducting surveys and obtaining feedback to improve our products and services.
• Notifying you about changes to our menu, hours, locations, or terms of service.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

3.4 Legal and Security Purposes

• Complying with applicable federal, state, and local laws and regulations.
• Enforcing our Terms of Service and other legal agreements.
• Protecting the rights, property, and safety of Punch Pizza, our customers, and the public.
• Detecting, investigating, and preventing fraudulent transactions, abuse, security incidents, and other harmful or illegal activity.
• Responding to lawful requests from government authorities and law enforcement.

4. How We Share Your Information

We do not sell your personal information to third parties. However, we may share your information with trusted third parties under the circumstances described below.

4.1 Service Providers

We share your information with carefully selected vendors and service providers who perform functions on our behalf, such as:

• Payment processors and fraud prevention services
• Delivery and logistics partners
• Cloud hosting and data storage providers
• Email marketing platforms
• Customer relationship management (CRM) tools
• Website analytics and performance monitoring services
• IT security and cybersecurity providers

These service providers are contractually obligated to use your information only as directed by us and to maintain appropriate security standards.

4.2 Business Transfers

If Punch Pizza undergoes a merger, acquisition, asset sale, reorganization, or other business transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website if such a transfer occurs and if it results in materially different privacy practices.

4.3 Legal Requirements and Safety

We may disclose your personal information if we believe, in good faith, that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Enforce our Terms of Service or other agreements
• Protect the rights, safety, or property of Punch Pizza, our customers, or others
• Investigate, prevent, or take action regarding illegal activities or suspected fraud

4.4 Advertising Partners

With your consent where required, we may share limited information (such as hashed email addresses or cookie identifiers) with advertising networks and social media platforms to deliver targeted advertising. You may opt out of interest-based advertising through the Digital Advertising Alliance's opt-out tool at optout.aboutads.info or through your browser and device settings.

4.5 Aggregated and De-Identified Data

We may share aggregated, de-identified, or anonymized information that cannot reasonably be used to identify you with partners, researchers, or the public for business, analytical, or marketing purposes.

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and assist in our marketing efforts.

5.1 Types of Cookies We Use

5.2 Managing Cookies

Most browsers allow you to control or disable cookies through their settings. Please note that disabling certain cookies may affect the functionality of our website. You can also manage your cookie preferences through our cookie consent banner when you first visit our site.

For more detailed information about the cookies we use and your choices, please refer to our full Cookie Policy available on our website.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, use, disclosure, alteration, or destruction.

6.1 Security Measures

• Encryption: All data transmitted between your browser and our website is protected using industry-standard SSL/TLS encryption (HTTPS).
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions, and all staff are subject to confidentiality obligations.
• Payment Security: We use PCI-DSS compliant payment processors and do not store full credit card numbers on our systems.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and address potential weaknesses.
• Incident Response: We maintain a data breach response plan and will notify affected users and relevant authorities in accordance with applicable law in the event of a security breach.
• Employee Training: Our staff receive regular training on data protection and security best practices.

While we strive to use commercially reasonable means to protect your personal information, please be aware that no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information under applicable U.S. privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable state privacy statutes.

7.1 Rights Available to All Users

• Right to Know / Access: You have the right to request information about the categories and specific pieces of personal data we have collected about you.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions (e.g., information needed to complete a transaction or comply with legal obligations).
• Right to Data Portability: Where technically feasible, you may request a copy of your personal information in a structured, commonly used, machine-readable format.
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time.

7.2 California Residents — CCPA/CPRA Rights

If you are a California resident, you have additional rights under the CCPA/CPRA, including:

• Right to Know the Categories of Personal Information Sold or Shared: You have the right to know whether we sell or share your personal information and with whom.
• Right to Opt Out of Sale or Sharing: You have the right to direct us not to sell or share your personal information with third parties. We do not sell personal information as defined under the CCPA; however, certain data sharing with advertising partners may constitute "sharing" under the CPRA. To exercise this right, click the "Do Not Sell or Share My Personal Information" link on our website or contact us directly.
• Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information, you have the right to limit its use to purposes necessary to provide the services you requested.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge you different prices, or provide you with a lesser quality of service because you exercised your privacy rights.

To submit a CCPA/CPRA request, please contact us at [email protected]. We will respond to verified requests within 45 days as required by law, with an additional 45-day extension available if necessary with notice.

7.3 Exercising Your Rights

To exercise any of the privacy rights described above, please contact us using one of the following methods:

• Email: [email protected]
• Website: punchpizza-food.digital (through our Privacy Request form)

We may need to verify your identity before processing your request to ensure we are not disclosing your information to an unauthorized party. Verification may involve confirming details such as your name, email address, and order history.

You may also designate an authorized agent to make a request on your behalf. We will require written authorization from you and verification of the agent's identity.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to provide our Services, and to comply with our legal obligations. The specific retention periods depend on the type of data and the reason it was collected:

When your personal information is no longer needed for its original purpose, we will securely delete, anonymize, or aggregate it so it can no longer be associated with you.

9. Children's Privacy

Our Services are not intended for individuals under the age of 18 years old. We do not knowingly collect, solicit, or use personal information from children under 18. Our online ordering system, account creation process, and promotional programs are directed at adults.

If you are a parent or guardian and you believe that your child under 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving such a notification, we will take prompt steps to investigate and delete the information from our systems.

We comply with the Children's Online Privacy Protection Act (COPPA) and will not knowingly collect personal information from any person under the age of 13. In the event that we discover we have inadvertently collected information from a child under 13, we will delete that information as quickly as possible.

10. International Data Transfers

Punch Pizza is based in the United States, and our data is primarily collected, stored, and processed within the United States. However, some of our third-party service providers may be located in or operate from other countries, which means your personal information may be transferred to, stored in, or processed in countries outside of the United States.

When we transfer personal information internationally, we take steps to ensure that appropriate safeguards are in place to protect your information and to ensure such transfers comply with applicable U.S. law, including:

• Using service providers that maintain data centers and operations within jurisdictions that have adequate data protection standards
• Incorporating data processing agreements with standard contractual protections where applicable
• Implementing technical and organizational security measures as described in the Data Security section of this policy

If you have questions about international transfers of your personal data, please contact us at [email protected].

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated by us. This includes links to our social media pages, third-party delivery platforms, and payment gateways. Once you leave our website and navigate to a third-party site, this Privacy Policy no longer applies.

We strongly encourage you to review the privacy policies of every website or service you visit. We have no control over, and assume no responsibility for, the content, privacy practices, or security of any third-party sites or services.

12. FTC Act Compliance and Consumer Protection

Punch Pizza operates in compliance with the Federal Trade Commission (FTC) Act, which prohibits unfair or deceptive acts and practices in commerce. We are committed to being transparent about how we collect and use your data, and we do not engage in deceptive data practices.

Our privacy and data security practices are designed to meet the FTC's standards for reasonable data security and fair information practices. If you believe we have engaged in any unfair or deceptive privacy practices, you may file a complaint with the FTC at ftc.gov/complaint.

13. How to File a Complaint

If you have concerns about how we handle your personal information and you are not satisfied with our response to your inquiry, you have the right to file a complaint with the relevant data protection or consumer protection authority.

13.1 Federal Authorities

• Federal Trade Commission (FTC): For concerns about unfair or deceptive privacy practices.
  Website: www.ftc.gov/complaint
  Phone: 1-877-FTC-HELP (1-877-382-4357)

13.2 California Residents

• California Privacy Protection Agency (CPPA):
  Website: cppa.ca.gov
• California Attorney General's Office:
  Website: oag.ca.gov/privacy

13.3 Other States

Residents of other states may contact their respective state attorney general's office or consumer protection agency to file a privacy-related complaint. We encourage you to first contact us directly at [email protected] so we have the opportunity to resolve your concern before escalating to a regulatory authority.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will:

• Post the updated policy on this page with a revised "Last Updated" date
• Send an email notification to registered users where the changes are significant
• Display a prominent notice on our website for a reasonable period of time

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Services after the effective date of any changes constitutes your acceptance of the updated policy.

15. Glossary of Key Terms

For clarity, the following definitions apply throughout this Privacy Policy:

• Personal Information: Any information that identifies or could reasonably be used to identify an individual, directly or indirectly.
• Sensitive Personal Information: A subset of personal information that includes financial data, precise geolocation, login credentials, and similar categories that warrant heightened protection.
• Processing: Any operation performed on personal information, including collection, storage, use, disclosure, or deletion.
• Data Controller: The entity that determines the purposes and means of processing personal information. In this case, Punch Pizza.
• Data Processor: A third party that processes personal information on behalf of the data controller.
• Cookie: A small text file stored on your device by a website to remember your preferences and track your activity.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your privacy concerns promptly and transparently.

We aim to respond to all privacy-related inquiries within 10 business days. For requests under the CCPA/CPRA or other applicable privacy laws, we will respond within the legally required timeframe (typically 45 days, with the possibility of a 45-day extension where necessary).