Privacy Policy

Welcome to Punch Pizza. We are deeply committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website punchpizza.digital, place orders, interact with our services, or otherwise engage with us in any way. Please read this policy carefully. If you disagree with the terms of this Privacy Policy, please discontinue use of our site and services immediately.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. This policy applies to all users located in the United States and is governed by applicable U.S. federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act regarding unfair or deceptive practices.

1. About Us

Punch Pizza operates as a food service business in the United States. We are committed to maintaining transparency about how we collect and use personal data in connection with our online and in-person food ordering and delivery services.

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information provided in the Contact Us section at the end of this document.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of information we collect are described below.

2.1 Personal Information You Provide Directly

When you interact with Punch Pizza — whether by placing an online order, creating an account, signing up for our newsletter, contacting our customer support team, or participating in promotions — you may voluntarily provide us with personal information, including but not limited to:

• Identity Information: Your full name, username, or similar identifiers.
• Contact Information: Email address, telephone number, billing address, and delivery address.
• Account Credentials: Password and other login information used to access your account on our platform.
• Payment Information: Credit card numbers, debit card numbers, billing details, and other financial information necessary to process your transactions. Please note that we do not store full payment card details on our servers; this information is processed securely through PCI-DSS-compliant third-party payment processors.
• Order Information: Details about the food items you have ordered, your order history, special dietary requests, and delivery preferences.
• Communications: Any messages, feedback, reviews, complaints, or other communications you submit to us via email, contact forms, or other channels.
• Marketing Preferences: Your preferences for receiving marketing communications and promotional offers from us.

2.2 Information Collected Automatically

When you visit our website at punchpizza.digital, we automatically collect certain technical and usage data, including:

• Device Information: IP address, device type, operating system, browser type and version, browser language, and unique device identifiers.
• Usage Data: Pages you visit on our website, the time and date of your visits, the duration of your sessions, links you click, and other actions taken on our site.
• Location Data: General geographic location derived from your IP address, and, where you have given explicit consent, more precise location data from your mobile device to facilitate delivery services.
• Referral Data: The URL that referred you to our website and the URL you visit when you leave our website.
• Log Data: Server logs, error reports, and other diagnostic information.

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage objects, and similar tracking technologies to collect information about your browsing behavior and to enhance your experience on our website. These technologies allow us to remember your preferences, understand how you use our services, and deliver more relevant content and advertising. For detailed information about our use of cookies and how to manage your cookie preferences, please refer to our Cookie Policy available on our website. Your consent for non-essential cookies will be obtained in accordance with applicable laws.

2.4 Information From Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media accounts (e.g., Facebook, Google, Instagram) to our services or log in using social sign-on, we may receive profile information from those platforms subject to your privacy settings.
• Payment Processors: Transaction confirmations and fraud screening data from our payment processing partners.
• Delivery Partners: Information related to the fulfillment and delivery of your orders from third-party delivery service providers we work with.
• Analytics Providers: Aggregated and anonymized data about website traffic and user behavior from analytics service providers.
• Marketing Partners: Information about your interests, demographics, or prior engagement with advertising campaigns to help us refine our marketing efforts.

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes. Specifically, we use your personal information to:

3.1 Provide and Manage Our Services

• Process and fulfill your food orders, including delivery and pickup services.
• Create and manage your account on our platform.
• Process payments and prevent fraudulent transactions.
• Send you order confirmations, receipts, and status updates.
• Respond to your customer service inquiries and resolve disputes.
• Maintain and improve the functionality and security of our website and services.

3.2 Analytics and Service Improvement

• Analyze trends in user behavior to understand how our website and services are used.
• Conduct internal research and development to enhance our menu offerings, website features, and overall customer experience.
• Monitor and analyze the effectiveness of our marketing campaigns.
• Generate aggregated, non-personally identifiable reports about usage patterns for internal business purposes.

3.3 Marketing and Communications

• Send you promotional offers, newsletters, special deals, and updates about Punch Pizza, where you have opted in or where we have a legitimate interest in doing so under applicable law.
• Personalize your experience on our website by displaying content, products, and offers relevant to your preferences and order history.
• Conduct contests, sweepstakes, and other promotional activities.
• Display targeted advertising on our website and on third-party platforms, including social media.

You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any email we send, or by contacting us directly at [email protected]. Please note that even if you opt out of marketing communications, we may still send you transactional or service-related messages necessary for the administration of your account or orders.

3.4 Legal Compliance and Safety

• Comply with applicable federal, state, and local laws and regulations.
• Enforce our Terms of Service and other legal agreements.
• Protect the rights, property, and safety of Punch Pizza, our customers, and the public.
• Detect, prevent, and respond to fraud, abuse, security incidents, and other potentially harmful or illegal activities.
• Cooperate with law enforcement agencies and regulatory bodies as required by law.

4. How We Share Your Information

We respect your privacy and do not sell your personal information to third parties for monetary compensation. However, we may share your information with certain trusted third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage third-party companies and individuals to perform services on our behalf, such as payment processing, delivery logistics, website hosting, data analytics, email delivery, customer support, and marketing assistance. These service providers are given access to your personal information only as necessary to perform their functions and are contractually obligated to protect your data and not use it for any other purpose.

4.2 Delivery Partners

To fulfill your food orders, we may share your name, delivery address, phone number, and order details with our delivery partners and logistics providers. These parties use your information solely to complete your delivery and are bound by appropriate confidentiality obligations.

4.3 Payment Processors

All payment transactions are handled by secure, PCI-DSS-compliant third-party payment processors. We share only the information necessary to authorize and complete your payment with these processors. We do not store your full payment card information on our servers.

4.4 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal process, such as a subpoena, court order, or government request. We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a legal obligation under federal or state law, including the FTC Act.

4.5 Business Transfers

In the event that Punch Pizza undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website of any such change in ownership or control and any choices you may have regarding your personal information.

4.6 With Your Consent

We may share your information with third parties for purposes not covered by this policy when we have your explicit consent to do so.

4.7 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes without restriction.

5. Data Security

Punch Pizza takes the security of your personal information seriously. We implement a variety of industry-standard technical, administrative, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, loss, misuse, or destruction. These measures include:

• Encryption: We use Secure Sockets Layer (SSL) / Transport Layer Security (TLS) technology to encrypt data transmitted between your browser and our servers. Sensitive information such as payment data is encrypted both in transit and at rest.
• Access Controls: Access to personal information is restricted to authorized personnel who need the information to perform their job functions. All employees and contractors with access to personal data are required to maintain confidentiality.
• Secure Infrastructure: Our website and databases are hosted on secure servers with firewalls, intrusion detection systems, and other security measures in place.
• Regular Security Audits: We conduct periodic reviews and assessments of our information security practices to identify and address vulnerabilities.
• Payment Card Security: We use PCI-DSS-compliant payment processors and do not store full credit or debit card numbers on our systems.
• Employee Training: Our staff receive regular training on data privacy and security best practices.

Despite our best efforts, no method of data transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal information using commercially acceptable means, we cannot guarantee its absolute security. In the event of a data breach that is reasonably likely to result in harm to you, we will notify you as required by applicable U.S. state and federal law.

6. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights to the fullest extent required by applicable law.

6.1 Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the purposes for which we use it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions permitted by law.
• Right to Correct: You have the right to request that we correct inaccurate personal information that we hold about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. As stated above, we do not sell your personal information for monetary compensation.
• Right to Limit Use of Sensitive Personal Information: You may have the right to limit our use and disclosure of sensitive personal information to only those uses necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different quality of service because you exercised your privacy rights.
• Right to Data Portability: You have the right to receive a copy of your personal information in a portable, readily usable format.

To exercise your California privacy rights, please submit a verifiable consumer request by contacting us at [email protected]. We will respond to your request within 45 days of receipt, or notify you if we require additional time (up to 90 days total) to respond.

6.2 Rights for All U.S. Users

Regardless of your state of residence, we offer the following privacy-related options to all users:

• Access and Update: You may access and update the personal information stored in your account by logging into your account settings on our website.
• Marketing Opt-Out: You may opt out of receiving promotional communications from us at any time by following the unsubscribe instructions in any marketing email or by contacting us directly.
• Cookie Preferences: You may manage your cookie preferences through our cookie consent tool or through your browser settings.
• Account Deletion: You may request the deletion of your Punch Pizza account and associated personal information by contacting us at [email protected].

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your browsing experience and to analyze site usage. Cookies are small text files stored on your device that help us recognize you on future visits, remember your preferences, and provide personalized content.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the operation of our website and enable core functions such as security, account login, and order processing. They cannot be disabled.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website (e.g., which pages are visited most often, error messages received). This data helps us improve our website's performance. We use services such as Google Analytics for this purpose.
• Functionality Cookies: These cookies allow our website to remember choices you make (such as your language preference or location) to provide a more personalized experience.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements more relevant to you and your interests, and to measure the effectiveness of our advertising campaigns on third-party platforms.

You can manage your cookie preferences at any time through your browser settings or our cookie consent tool. Please note that disabling certain cookies may affect the functionality of our website. For full details on our use of cookies, please review our dedicated Cookie Policy available at punchpizza.digital.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting obligations. The criteria we use to determine appropriate retention periods include:

• Account Data: We retain your account information for as long as your account remains active and for a reasonable period thereafter to allow you to reactivate your account if needed, or until you request deletion.
• Order History: We retain your order records for a minimum of five (5) years to comply with tax and accounting regulations and to assist with customer service inquiries.
• Payment Records: Financial transaction records are retained as required by applicable U.S. tax laws and financial regulations, typically for a minimum of seven (7) years.
• Marketing Data: We retain marketing preference data and communications until you opt out, after which we will retain a record of your opt-out to prevent future unsolicited communications.
• Usage and Log Data: Automatically collected usage and technical data is generally retained for up to twenty-four (24) months for analytics and security purposes.
• Legal Holds: In some cases, we may be required to retain personal information for longer periods in connection with ongoing legal proceedings, regulatory investigations, or as required by applicable law.

When personal information is no longer required, we securely delete or anonymize it in accordance with our internal data retention and disposal policies.

9. Children's Privacy

Punch Pizza's website and ordering services are not directed at, designed for, or intended for use by children under the age of 18. We do not knowingly collect, solicit, or maintain personal information from anyone under 18 years of age. If we become aware that we have inadvertently collected personal information from a child under 18 without verifiable parental consent, we will take prompt steps to delete that information from our records.

If you are a parent or guardian and believe that your child under the age of 18 has provided personal information to us, please contact us immediately at [email protected] so that we can take appropriate action. We comply with the Children's Online Privacy Protection Act (COPPA) and take our obligations under this law seriously.

10. International Data Transfers

Punch Pizza is a U.S.-based business, and your personal information is primarily collected, stored, and processed in the United States. If you are accessing our website from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

Our third-party service providers, including analytics platforms, cloud hosting providers, and payment processors, may also process your data in countries outside the United States. Where such transfers occur, we take appropriate steps to ensure that your personal information is treated securely and in accordance with this Privacy Policy and applicable data protection laws. We may use standard contractual clauses, data processing agreements, or other legally recognized transfer mechanisms to safeguard your information during international transfers.

By using our website and services, you acknowledge and consent to the transfer of your personal information to the United States and other countries as described in this policy.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Punch Pizza. This Privacy Policy applies only to our website and services. We have no control over and assume no responsibility for the privacy practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party websites you visit through links on our site. The inclusion of a link on our website does not imply our endorsement of that third party's privacy practices.

Our website may also integrate with third-party platforms such as Google Maps (for location services), social media sharing buttons, and embedded content from other providers. These third-party integrations may collect data about your usage and interactions, subject to their own privacy policies.

12. Do Not Track Signals

Some browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. Because there is currently no universally accepted standard for responding to DNT signals, our website does not currently respond to DNT browser signals. However, you can manage your tracking preferences through our cookie consent tool and through your browser settings as described in the Cookies section of this policy.

We will continue to monitor developments in DNT technology and regulatory guidance and update our practices accordingly.

13. Your Choices and Opt-Out Options

We believe in giving you meaningful control over your personal information. In addition to the rights described in Section 6, you have the following options:

• Email Marketing: You may opt out of our marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any promotional email or by contacting us at [email protected]. Please allow up to 10 business days for your opt-out request to take effect.
• SMS Marketing: If you have subscribed to SMS marketing messages, you may opt out by replying "STOP" to any message you receive from us.
• Push Notifications: If you have enabled push notifications on your device or browser, you may disable them through your device or browser settings at any time.
• Behavioral Advertising: You may opt out of interest-based advertising from many networks by visiting the Network Advertising Initiative opt-out page or the Digital Advertising Alliance opt-out page.
• Google Analytics: You may opt out of Google Analytics data collection by installing the Google Analytics Opt-out Browser Add-on.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, the services we offer, applicable laws, or for other operational, legal, or regulatory reasons. When we make material changes to this policy, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending you an email notification or displaying a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the updated policy, you must stop using our services and may request deletion of your account and personal information.

15. Filing a Complaint

If you believe that we have handled your personal information in a manner that violates applicable privacy laws, we encourage you to first contact us directly so that we can attempt to resolve your concern. You may also have the right to file a complaint with the appropriate regulatory authority.

15.1 Contact Us First

We take all privacy complaints seriously and will investigate and respond to your complaint promptly. Please contact our privacy team at [email protected] with the subject line "Privacy Complaint" and include a detailed description of your concern.

15.2 Federal Trade Commission (FTC)

If you are a U.S. consumer and believe that your privacy rights under the FTC Act have been violated, you may file a complaint with the Federal Trade Commission:

15.3 California Attorney General (California Residents)

If you are a California resident and believe your CCPA/CPRA rights have been violated, you may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

15.4 State-Specific Authorities

Residents of other U.S. states with applicable privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas, and others) may have the right to appeal our decisions regarding their privacy requests and to file complaints with their respective state attorneys general or designated privacy authorities. We encourage you to consult your state's official government website for the appropriate contact information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise any of your privacy rights, please do not hesitate to contact us. We are here to help and will respond to your inquiry as promptly as possible.

When submitting a privacy rights request, please include your full name, email address associated with your account (if applicable), the nature of your request, and any relevant details to help us verify your identity and process your request efficiently. We are committed to responding to all verifiable privacy rights requests within the timeframes required by applicable law.