Privacy Policy

This Privacy Policy explains how Punch Pizza ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects your personal information when you visit our website at delivery-punchpizza.click, place orders through our online platform, or otherwise interact with our services. Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood the practices described herein.

We are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy complies with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant regulations governing consumer data protection in the food delivery and e-commerce industry.

1. About Us

Punch Pizza operates an online food ordering and delivery platform. Our contact details are as follows:

For all privacy-related inquiries, requests, or complaints, please use the contact information provided in Section 16 of this policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to all individuals who:

• Visit or browse our website at delivery-punchpizza.click;
• Create an account or register on our platform;
• Place food orders through our online ordering system;
• Subscribe to our marketing communications, newsletters, or promotional offers;
• Contact our customer service team via email, telephone, or any other means;
• Participate in surveys, contests, promotions, or loyalty programs we may offer;
• Interact with us through social media channels or third-party platforms linked to our services.

This policy does not apply to information collected by third-party websites, applications, or services that may link to or be accessible through our platform. We encourage you to review the privacy policies of those third parties before sharing your personal information with them.

3. Information We Collect

We collect several categories of personal information depending on how you interact with our platform. Below is a comprehensive description of the types of data we collect:

3.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect the following personal identification details:

• Full name — to identify you and personalize your experience;
• Email address — for account creation, order confirmations, and communications;
• Phone number — for delivery coordination and customer support;
• Delivery address — including street address, city, state, and ZIP code, to fulfill your orders;
• Billing information — such as payment card details, processed securely through third-party payment processors;
• Username and password — for account authentication and security.

3.2 Order and Transaction Data

We collect information about the transactions you conduct through our platform, including:

• Items ordered, quantities, and special instructions;
• Order history and frequency of purchases;
• Payment method type (e.g., credit card, debit card, digital wallet);
• Transaction amounts, dates, and times;
• Delivery preferences and scheduling information;
• Promotional codes or discount vouchers applied.

3.3 Usage and Behavioral Data

When you use our website or mobile platform, we automatically collect information about your interactions, including:

• Pages visited and content viewed;
• Search queries and menu browsing activity;
• Time and duration of visits;
• Links clicked and features used;
• Shopping cart activity and abandoned orders;
• Referring websites or sources that directed you to our platform.

3.4 Device and Technical Information

We collect technical information from the devices you use to access our services:

• IP address and approximate geographic location;
• Browser type and version;
• Operating system and device type (desktop, tablet, smartphone);
• Screen resolution and display settings;
• Device identifiers and unique device tokens;
• Cookie identifiers and session tokens (see Section 10 for more details on cookies).

3.5 Communications Data

When you communicate with us, we may collect:

• The content of emails, messages, or feedback you send us;
• Records of customer service interactions;
• Survey responses and reviews you submit;
• Information provided when reporting a problem or making a complaint.

3.6 Marketing and Preference Data

We collect information about your preferences and responses to our marketing activities, including:

• Email open rates and click-through rates;
• Subscription preferences and opt-out choices;
• Favorite menu items and dietary preferences you voluntarily share;
• Participation in loyalty programs, contests, or promotions.

3.7 Information From Third Parties

We may receive information about you from third parties, including:

• Payment processors and fraud detection services;
• Social media platforms, if you choose to connect your social account or share our content;
• Analytics providers who help us understand how users interact with our site;
• Delivery partners and logistics providers involved in fulfilling your orders.

4. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. Specifically, we use your data to:

4.1 Provide and Manage Our Services

• Process and fulfill your food orders accurately and efficiently;
• Coordinate delivery logistics and communicate delivery status updates;
• Create and manage your user account;
• Verify your identity and authenticate your access to our platform;
• Handle billing and process payments securely;
• Provide customer support and respond to your inquiries and complaints.

4.2 Improve and Personalize Our Platform

• Analyze usage patterns to enhance the performance and functionality of our website;
• Personalize your experience by displaying relevant menu items, offers, and recommendations;
• Conduct research and development to improve our food offerings and delivery services;
• Test new features and functionalities on our platform;
• Monitor and troubleshoot technical issues affecting service quality.

4.3 Marketing and Promotional Communications

• Send you promotional emails, newsletters, and special offers based on your preferences;
• Notify you of exclusive deals, seasonal promotions, and loyalty rewards;
• Conduct targeted advertising on our platform and third-party advertising networks;
• Retarget users who have previously visited our website with relevant advertisements.

4.4 Legal Compliance and Safety

• Comply with applicable federal and state laws, regulations, and legal obligations;
• Detect, investigate, and prevent fraudulent transactions, unauthorized access, and security threats;
• Enforce our Terms of Service and other agreements;
• Protect the rights, property, and safety of Punch Pizza, our users, and the public;
• Respond to lawful requests from governmental authorities, courts, or law enforcement agencies.

4.5 Business Operations

• Maintain accurate business records and financial accounts;
• Conduct internal audits and quality assurance reviews;
• Facilitate mergers, acquisitions, or other business transactions where user data may be transferred as a business asset;
• Evaluate customer satisfaction through surveys and feedback mechanisms.

5. Sharing Your Information With Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we do share your information with certain third parties as necessary to operate our business and provide you with our services. Below are the categories of third parties with whom we may share your data:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in delivering our services, including:

• Payment processors — to securely handle payment card transactions and prevent fraud;
• Delivery and logistics partners — to coordinate and fulfill food delivery to your address;
• Cloud hosting and technology providers — to host our website, databases, and IT infrastructure;
• Email service providers — to deliver order confirmations, receipts, and marketing communications;
• Analytics providers — such as Google Analytics, to help us understand website traffic and user behavior;
• Customer relationship management (CRM) platforms — to manage customer interactions and support tickets;
• Advertising networks — to deliver targeted advertisements on our platform and partner websites.

All service providers we work with are required to handle your personal information confidentially, use it only for the specific purposes we authorize, and implement appropriate security measures.

5.2 Legal and Regulatory Disclosure

We may disclose your personal information when required to do so by law or in good faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request;
• Enforce our legal rights or defend against legal claims;
• Protect against fraud, security threats, or illegal activity;
• Protect the health or safety of any individual in emergency situations.

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, financing, or other corporate restructuring, your personal information may be transferred to the acquiring entity as part of the business transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your personal information with other third parties not described above when you have provided your explicit consent to such sharing.

6. Data Security

Protecting your personal information is a top priority for Punch Pizza. We implement a range of technical, administrative, and physical security measures designed to safeguard your data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers;
• Secure payment processing: Payment card information is handled by PCI DSS-compliant third-party processors; we do not store full payment card numbers on our servers;
• Access controls: We restrict access to personal data to authorized employees and contractors who need it to perform their job functions;
• Authentication measures: We use strong password requirements and session management to protect user accounts;
• Regular security assessments: We conduct periodic reviews of our security practices and infrastructure to identify and address vulnerabilities;
• Incident response procedures: We maintain data breach response protocols to promptly detect, contain, and notify affected individuals of any security incidents in accordance with applicable law.

7. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information under applicable law. We honor the following rights for all users, regardless of location:

7.1 Right to Know and Access

You have the right to request information about the categories and specific pieces of personal information we have collected about you, the purposes for which we use it, and the categories of third parties with whom we share it. You may submit an access request to us at any time.

7.2 Right to Correction

If you believe that any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. You may update certain information directly through your account settings or by contacting us.

7.3 Right to Deletion

You may request that we delete the personal information we have collected about you. Please note that we may retain certain information where required by law, for fraud prevention, to complete transactions, or for other legitimate business purposes permitted under applicable law.

7.4 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information with third parties for cross-context behavioral advertising purposes. To exercise this right, please contact us using the details in Section 16, or look for the "Do Not Sell or Share My Personal Information" link on our website.

7.5 Right to Data Portability

You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format so that you may transfer it to another service provider where technically feasible.

7.6 Right to Limit Use of Sensitive Personal Information

Under the CPRA, California residents have the right to limit our use and disclosure of sensitive personal information (such as precise geolocation data or financial information) to only those uses necessary to provide the requested services.

7.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you goods or services, charge you different prices, or provide a different level of service quality because you exercised your rights under this policy or applicable law.

7.8 How to Submit a Privacy Rights Request

To exercise any of the rights described above, please contact us by:

• Email: [email protected]

We will acknowledge your request within 10 business days and respond substantively within 45 days of receipt. If we require additional time (up to 90 days), we will notify you in writing with the reason for the extension. We may need to verify your identity before processing your request to protect your privacy and the security of your data.

You may also designate an authorized agent to submit requests on your behalf. Authorized agents must provide written authorization from you, and we may still require you to verify your identity directly with us.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. Our general retention guidelines are as follows:

When personal data is no longer needed, we will securely delete, destroy, or anonymize it in accordance with our data disposal procedures.

9. Children's Privacy

Our platform and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 13, nor do we knowingly allow children under the age of 18 to place orders or create accounts on our platform without parental consent.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verifiable parental consent. If we discover that we have inadvertently collected personal information from a child under 13 without proper consent, we will take immediate steps to delete that information from our systems.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to enhance your browsing experience, analyze traffic patterns, and deliver personalized content and advertising. Cookies are small text files that are placed on your device when you visit our website.

10.1 Types of Cookies We Use

• Essential Cookies: Strictly necessary for the website to function properly (e.g., session management, shopping cart functionality). These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our site by collecting anonymous usage data (e.g., Google Analytics).
• Functional Cookies: Remember your preferences and settings (e.g., saved delivery addresses, language preferences).
• Marketing and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns across websites.

10.2 Managing Cookies

You may manage or disable cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or set preferences for specific websites. Please note that disabling certain cookies may affect the functionality of our website and your ability to use some features. For more detailed information about how we use cookies and how to manage your preferences, please refer to our Cookie Policy, which is available on our website.

We also honor the Global Privacy Control (GPC) signal as a valid opt-out request for the sale and sharing of personal data under applicable California law.

11. International Data Transfers

Punch Pizza operates primarily within the United States. Your personal information is collected, stored, and processed on servers located in the United States. If you access our website from outside the United States, please be aware that your data will be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our services from outside the United States, you acknowledge and consent to the transfer of your personal information to the United States for processing as described in this Privacy Policy. We take appropriate measures to ensure that any international transfers of personal data are conducted in accordance with applicable law and that your data receives an adequate level of protection.

Where required, we rely on standard contractual clauses, data processing agreements, and other legally recognized transfer mechanisms to lawfully transfer personal data across borders.

12. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Punch Pizza. This Privacy Policy applies only to our website and services. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party sites or services. We strongly encourage you to review the privacy policy of any third-party website you visit.

When you use third-party payment processors, social media sharing buttons, or embedded maps on our platform, those third parties may independently collect data about you in accordance with their own privacy policies. We are not responsible for the data practices of these third parties.

13. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), which became fully operative on January 1, 2023.

13.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information from California consumers:

• Identifiers (name, email, IP address, phone number);
• Commercial information (order history, purchase records);
• Internet or electronic network activity (browsing history, search queries on our site);
• Geolocation data (approximate location based on IP address or delivery address);
• Inferences drawn from the above to create a profile about consumer preferences.

13.2 Sources of Personal Information

We collect personal information directly from you, from your devices automatically, and from third-party service providers, as described in Section 3 of this policy.

13.3 Business and Commercial Purposes

We use and disclose personal information for the business and commercial purposes described in Sections 4 and 5 of this policy.

13.4 Do Not Sell or Share

We do not sell personal information to third parties in exchange for money. However, we may share certain data with advertising partners in ways that could be considered "sharing" under CPRA. California residents may opt out of such sharing by contacting us at [email protected] or using the GPC browser signal.

13.5 Exercising California Rights

California residents may exercise their rights described in Section 7 by submitting a verifiable consumer request to us. We will respond within the timeframes required by law. California residents also have the right to designate an authorized agent to make requests on their behalf.

14. Federal Trade Commission (FTC) Compliance

Punch Pizza complies with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive practices in commerce, including those related to privacy and data security. We are committed to truthful and transparent data practices and will not engage in deceptive methods of collecting or using your personal information.

If you have concerns about our data practices that you believe may constitute an unfair or deceptive trade practice, you may file a complaint with the Federal Trade Commission at www.ftc.gov/complaint or by calling 1-877-382-4357.

15. How to File a Complaint

If you believe that we have violated your privacy rights or have concerns about how we have handled your personal information, we encourage you to first contact us directly using the information in Section 16 so that we can work to resolve your concerns.

If we are unable to resolve your complaint to your satisfaction, you have the right to file a complaint with the relevant data protection or consumer protection authority. Depending on your state of residence, this may include:

• California Privacy Protection Agency (CPPA) — for California residents with CCPA/CPRA-related complaints:
  Website: cppa.ca.gov
• Federal Trade Commission (FTC) — for general consumer protection and privacy complaints:
  Website: www.ftc.gov/complaint
  Phone: 1-877-382-4357
• State Attorney General's Office — consumers may also contact the Attorney General of their state of residence for privacy-related complaints. Contact information varies by state.

16. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. Our dedicated privacy team is available to assist you:

When contacting us regarding a privacy rights request or complaint, please include your full name, email address associated with your account (if applicable), a description of your request or concern, and your preferred method of response. This will help us process your request efficiently and accurately.

We are committed to responding to all privacy inquiries within 10 business days of receipt and resolving substantive requests within the timeframes required by applicable law.

17. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the services we offer. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page;
• Post a prominent notice on our website informing users of the changes;
• Where required by law, notify registered users via email of significant changes to how we handle their personal data.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms.

If you disagree with any changes to this Privacy Policy, you should discontinue use of our website and services and may request deletion of your personal information by contacting us as described in Section 16.