Privacy Policy

This Privacy Policy describes how Pizzana ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at pizzas-pizzana.rest, place an order, or otherwise interact with our services. We are committed to protecting your privacy and handling your data in an open and transparent manner. Please read this policy carefully to understand our practices regarding your personal information.

By accessing or using our website, placing an order, subscribing to our communications, or otherwise engaging with Pizzana, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this policy, please discontinue use of our services immediately.

1. Who We Are

Pizzana is a food service business operating in the United States. We provide pizza and related food and beverage products through our website and associated service channels. For all privacy-related inquiries, you may contact us using the information below:

2. Information We Collect

We collect several types of information in connection with the services we provide. The categories of personal information we collect are described in detail below.

2.1 Personal Information You Provide Directly

When you interact with Pizzana — whether placing an order, creating an account, signing up for our newsletter, contacting customer support, or participating in promotions — you may voluntarily provide us with personal information, including but not limited to:

• Identity Information: Your full name, username or display name.
• Contact Information: Email address, phone number, and mailing or delivery address.
• Order and Transaction Information: Details about the products you purchase, order history, special instructions, and dietary preferences.
• Payment Information: Billing address, credit or debit card details, or other payment method information. Note that full payment card data is processed by our third-party payment processors and is not stored on our servers.
• Account Credentials: Username, password, and security questions if you create a user account.
• Communications: Content of messages you send us through our contact forms, emails, or customer support channels, including feedback and reviews.
• Promotional Participation Data: Information submitted when entering contests, promotions, or surveys, such as responses, preferences, and demographic data.

2.2 Information Collected Automatically

When you visit our website or use our digital services, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies, including:

• Device Information: Type of device, operating system, browser type and version, device identifiers, screen resolution, and language settings.
• Log Data: Internet Protocol (IP) address, referring and exit pages, date and time stamps of your visit, pages viewed, links clicked, and time spent on pages.
• Location Information: General geographic location derived from your IP address. We may also collect more precise location data if you grant permission through your device settings (for example, to find nearby pickup locations).
• Usage Data: How you navigate our website, features you use, items added to your cart, abandoned cart information, and search queries entered on our site.
• Cookie and Tracking Data: Information collected through cookies, pixel tags, web beacons, and similar technologies. Please see Section 8 of this policy for more information on cookies.

2.3 Information from Third Parties

We may also receive information about you from third-party sources, which we combine with information we collect directly:

• Social Media Platforms: If you connect your social media account or interact with our social media pages, we may receive profile data such as your name, profile picture, and email address, subject to the privacy settings on those platforms.
• Marketing and Analytics Partners: We may receive data about your interests and online behavior from advertising partners and analytics providers to help us improve our marketing efforts.
• Third-Party Delivery Platforms: If you order through a third-party food delivery service, we may receive certain information about your order to fulfill it and manage our operations.
• Public Sources: Publicly available information such as business directories or publicly posted content.

3. How We Use Your Information

We use the personal information we collect for various purposes, all of which are grounded in a legitimate business purpose or your explicit consent. Our uses include:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including coordinating delivery or pickup.
• Creating and managing your user account.
• Processing payments and preventing fraudulent transactions.
• Sending order confirmations, receipts, shipping updates, and delivery notifications.
• Responding to your customer service inquiries, complaints, and requests.
• Enabling features such as saved addresses, favorites, and order history.

3.2 Improving Our Business and Services

• Analyzing how visitors use our website to understand user behavior and improve site performance and user experience.
• Conducting internal research, analytics, and reporting to understand trends and preferences.
• Developing new menu items, features, and service offerings based on customer preferences.
• Monitoring and ensuring the technical functionality and security of our website and systems.
• Carrying out quality assurance and testing of new features.

3.3 Marketing and Communications

• Sending you promotional materials, special offers, newsletters, and updates about Pizzana products and services, subject to your preferences and applicable law.
• Personalizing your experience on our website and displaying content or offers that may be relevant to your interests.
• Delivering targeted advertising through our own channels and third-party advertising networks, including retargeting campaigns.
• Conducting market research and customer satisfaction surveys.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected]. Please note that even if you opt out of marketing, we may still send you transactional communications related to your orders or account.

3.4 Legal Compliance and Safety

• Complying with applicable federal and state laws, regulations, and legal processes.
• Enforcing our Terms of Service and other applicable agreements and policies.
• Protecting the rights, property, or safety of Pizzana, our customers, employees, and the public.
• Preventing, detecting, and investigating fraud, security breaches, and other potentially prohibited or illegal activities.
• Responding to lawful requests from courts, law enforcement agencies, regulatory bodies, and other public authorities.

4. Legal Bases for Processing Your Information

As a business operating in the United States, our data practices are governed primarily by the Federal Trade Commission Act (FTC Act), and for California residents, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). We process your information on the following bases:

• Contractual Necessity: Processing is necessary to fulfill your orders and provide the services you have requested.
• Legitimate Interests: We process data to pursue our legitimate business interests, such as improving our services, preventing fraud, and marketing our products, provided these interests are not overridden by your rights.
• Consent: Where required, we rely on your explicit consent — for example, for certain marketing communications or non-essential cookies. You may withdraw your consent at any time.
• Legal Obligation: Processing is necessary to comply with applicable laws, regulations, and legal processes.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own independent marketing purposes. However, we do share your information with trusted third parties in the following circumstances:

5.1 Service Providers and Business Partners

We share personal information with third-party vendors and service providers that perform services on our behalf, including:

• Payment Processors: Companies such as Stripe or similar providers that securely handle payment card transactions.
• Delivery and Logistics Partners: Third-party delivery services that help fulfill your orders.
• Technology Providers: Hosting, website infrastructure, IT support, and cybersecurity vendors.
• Analytics Providers: Services such as Google Analytics that help us understand website traffic and user behavior.
• Email and Communication Platforms: Providers that manage our email marketing campaigns and customer communications.
• Advertising Networks: Digital advertising platforms that assist us in delivering targeted advertisements.
• Customer Support Tools: Platforms used to manage and respond to customer inquiries and feedback.

All such service providers are required to protect your information and are prohibited from using it for purposes other than providing services to us.

5.2 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website if such a transfer occurs and your information becomes subject to a different privacy policy.

5.3 Legal Requirements and Protection of Rights

We may disclose your information if we believe in good faith that such disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or enforceable governmental request.
• Enforce our Terms of Service or other agreements.
• Detect, prevent, or address fraud, security issues, or technical problems.
• Protect the rights, property, or safety of Pizzana, our users, or others.

5.4 With Your Consent

We may share your personal information with other third parties when you have provided your explicit consent to such sharing.

6. Data Security

We take the security of your personal information seriously and implement a variety of administrative, technical, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: We use Secure Socket Layer (SSL) and Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website.
• Access Controls: Access to your personal data is restricted to employees, contractors, and service providers who need it to perform their job functions, and who are bound by confidentiality obligations.
• Secure Payment Processing: We use PCI-DSS compliant payment processors and do not store full credit card numbers on our systems.
• Firewalls and Intrusion Detection: We deploy firewalls and monitor our systems for unauthorized access and suspicious activity.
• Regular Security Assessments: We periodically review and test our security systems and practices.
• Data Minimization: We collect only the personal information we need for the stated purposes and limit access accordingly.

Despite these measures, no security system is impenetrable. We cannot guarantee the absolute security of your information, and we encourage you to use strong, unique passwords for your account and to contact us immediately if you suspect any unauthorized access or security breach.

7. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information under applicable U.S. law. We are committed to honoring these rights in a timely and transparent manner.

7.1 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the purposes for which we use it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain legal exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell personal information in the traditional sense, but we do share certain data with advertising partners. You may opt out by contacting us.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to purposes necessary for providing our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge different prices, or provide a different level of service based on your exercise of these rights.

To submit a verifiable consumer request under the CCPA/CPRA, please contact us at [email protected]. We will respond to verified requests within 45 days. We may extend this period by an additional 45 days when reasonably necessary and will notify you of any such extension.

7.2 General Privacy Rights (All U.S. Users)

Regardless of your state of residence, we offer all users the following privacy options:

• Access and Review: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete information in your account or records.
• Deletion: You may request that we delete your personal data, subject to applicable legal requirements and legitimate business needs.
• Portability: Where technically feasible, you may request that we provide your personal information in a structured, machine-readable format so you can transfer it to another service provider.
• Opt-Out of Marketing: You may opt out of receiving promotional communications from us at any time by using the unsubscribe link in emails or by contacting us directly.
• Withdraw Consent: Where we rely on your consent to process data, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please submit your request to [email protected]. We may need to verify your identity before processing your request. We will respond within a reasonable timeframe and at no charge to you, unless your requests are repetitive, manifestly unfounded, or excessive.

8. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and support our marketing efforts. Cookies are small text files stored on your device when you visit a website.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the basic functioning of our website, including enabling you to add items to your cart and complete checkout. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our site, which pages are most visited, and where errors occur. This data is used to improve the website.
• Functional Cookies: Allow our website to remember your preferences and settings, such as your language, location, and saved items.
• Marketing and Advertising Cookies: Used to deliver advertisements relevant to your interests and to measure the effectiveness of our advertising campaigns.

You can control and manage cookie settings through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified before a cookie is stored. However, disabling certain cookies may affect your ability to use some features of our website. For more detailed information about the cookies we use and how to manage your preferences, please refer to our full Cookie Policy.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

• Account Information: We retain your account data for as long as your account is active. If you close your account, we will retain certain information for up to 3 years to comply with legal obligations, resolve disputes, and enforce our agreements.
• Order and Transaction Records: We retain order history and transaction records for up to 7 years in accordance with applicable tax and accounting requirements under U.S. federal and state law.
• Marketing Data: We retain email marketing consent and communication records for up to 3 years after your last interaction with our marketing content, or until you withdraw consent.
• Customer Support Records: Correspondence and support tickets are retained for up to 2 years after the issue is resolved.
• Usage and Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely, as it no longer constitutes personal information once anonymized.
• Legal Holds: If we are involved in litigation, a regulatory investigation, or other legal proceedings, we may retain relevant data beyond the standard retention periods until the matter is fully resolved.

When personal information is no longer needed, we securely delete or anonymize it using industry-standard methods to prevent unauthorized access or recovery.

10. Children's Privacy

We comply with the Children's Online Privacy Protection Act (COPPA), which restricts the collection of personal information from children under 13 years of age. We do not knowingly solicit or collect personal data from anyone under 13. If you are under 18, please do not use our website or submit any personal information to us.

If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take immediate steps to delete that information from our records. If you believe we may have collected information from a child under 13, please contact us immediately at [email protected] so we can address the situation promptly.

Parents or guardians who wish to review, correct, or delete information that may have been inadvertently collected from their child may contact us at the email address above.

11. International Data Transfers

Pizzana is based in the United States and primarily processes personal data within the United States. Our website, servers, and service providers operate in the United States and are subject to U.S. federal and applicable state laws, including applicable consumer data protection regulations.

If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence. By using our services, you consent to the transfer of your information to the United States and to the processing of that information as described in this Privacy Policy.

When we transfer data internationally to our service providers or business partners located outside the United States, we take steps to ensure that appropriate safeguards are in place to protect your personal information, including contractual protections and compliance with applicable transfer mechanisms.

12. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated by us, such as social media platforms, delivery apps, or external payment portals. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of third parties and encourage you to review the privacy policies of any third-party sites you visit.

When you click on a link to a third-party website or enable a third-party feature, you are leaving our site and are subject to the privacy practices of that third party. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

13. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to websites and other online services. At this time, there is no universally accepted standard for how websites should respond to such signals. As a result, we do not currently respond to DNT browser signals or similar mechanisms. However, you may manage your tracking preferences through our cookie settings and the opt-out options described in this Privacy Policy.

14. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the services we offer. We will notify you of material changes by:

• Posting the updated Privacy Policy on our website at pizzas-pizzana.rest with a revised "Last Updated" date;
• Sending a notification to the email address associated with your account (for material changes); and/or
• Displaying a prominent notice on our website or app.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

15. How to File a Privacy Complaint

If you believe that your privacy rights have been violated or that we have failed to comply with applicable data protection laws, we encourage you to contact us first so that we can attempt to resolve your concerns directly.

15.1 Internal Complaint Process

To file a privacy complaint with Pizzana, please send a detailed description of your concern to:

• Email: [email protected]
• Subject Line: "Privacy Complaint — [Your Name]"

Please include your name, contact information, a description of your complaint, and any relevant details or documentation. We will acknowledge receipt of your complaint within 5 business days and aim to provide a substantive response within 30 days.

15.2 Regulatory Complaint — California Residents

If you are a California resident and are not satisfied with our response to your privacy complaint, or if you believe we are processing your personal information in violation of the CCPA/CPRA, you may submit a complaint to the California Privacy Protection Agency (CPPA):

• California Privacy Protection Agency (CPPA)
• Website: cppa.ca.gov
• Email: [email protected]

15.3 Regulatory Complaint — Federal

If you believe our data practices violate the Federal Trade Commission Act or other applicable federal consumer protection laws, you may file a complaint with the Federal Trade Commission (FTC):

• Federal Trade Commission (FTC)
• Website: reportfraud.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your inquiries promptly and transparently.