Privacy Policy

Welcome to Punch Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website punchpizza-food.click, place orders, or interact with our food services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

This Privacy Policy applies to all information collected through our website, as well as any related services, sales, marketing, or events. We respect your privacy and are committed to being transparent about our data practices in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable regulations.

1. About Us

Punch Pizza is a food business operating in the United States. We provide customers with delicious pizza and related food products through our online ordering platform and physical locations.

For all privacy-related inquiries, requests, or concerns, please use the contact details provided above or refer to the dedicated contact section at the end of this document.

2. Information We Collect

We collect several types of information from and about users of our website and services. The categories of personal information we may collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, participate in promotions, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and delivery address
• Username and password (stored in encrypted form)
• Date of birth (where required for age verification)
• Profile photo (if voluntarily submitted)

2.2 Payment and Transaction Information

To process your food orders and payments, we may collect:

• Credit or debit card information (processed through secure third-party payment processors)
• Billing address
• Transaction history and order details
• Refund and return information

Please note: We do not store full payment card numbers directly on our servers. All payment data is handled by PCI DSS-compliant third-party processors.

2.3 Usage Data and Online Activity

When you access and use our website, we automatically collect certain information about your interaction with our platform, including:

• Pages viewed and time spent on each page
• Links clicked and menu items browsed
• Search queries entered on our website
• Referring URLs (the website that directed you to ours)
• Shopping cart activity and order history
• Date and time of visits

2.4 Device and Technical Information

We automatically collect technical information from your device when you visit our site, including:

• IP address
• Browser type and version
• Operating system
• Device type (desktop, mobile, tablet)
• Unique device identifiers
• Mobile network information
• Time zone settings and geographic location (general)

2.5 Location Information

With your permission, we may collect precise or approximate location information from your mobile device or browser to provide delivery services, suggest nearby locations, or show relevant content. You may disable location services through your device settings at any time.

2.6 Communications and Correspondence

When you contact us via email, phone, or our website contact form, we retain records of those communications, including:

• Content of messages and inquiries
• Customer support chat logs
• Feedback and reviews submitted
• Survey responses

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience. For detailed information, please see Section 8 – Cookie Usage of this policy.

2.8 User-Generated Content

Any content you voluntarily submit to our platform — including reviews, ratings, comments, or photographs of our food products — may be collected and stored by us.

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes, including:

3.1 Order Fulfillment and Service Delivery

• Processing and confirming your food orders
• Coordinating delivery or pickup logistics
• Sending order confirmation, status updates, and receipts
• Managing your account and user profile
• Providing customer support and resolving disputes

3.2 Business Operations and Improvements

• Analyzing website traffic and user behavior to improve our menu and user experience
• Identifying and fixing technical issues or errors
• Conducting internal audits and quality assurance
• Developing new products, features, and promotions
• Training staff and improving service quality

3.3 Marketing and Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required)
• Personalizing your experience and recommending menu items based on your preferences
• Retargeting advertising through third-party platforms
• Conducting surveys and gathering feedback on our food and services
• Notifying you of important updates, policy changes, or service interruptions

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us at [email protected].

3.4 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities
• Detecting and preventing fraud, abuse, or unauthorized activity
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of our users and business

3.5 Analytics and Research

We use aggregated and anonymized data to understand trends in food preferences, peak ordering times, popular menu items, and regional preferences. This helps us make better business decisions and improve our offerings.

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own marketing purposes. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to assist us in operating our website and delivering our services. These service providers have access to your personal information only to perform specific tasks on our behalf and are contractually obligated to protect it. Categories of service providers include:

4.2 Legal Requirements

We may disclose your personal information if required to do so by law or in response to valid requests by public authorities, including:

• Court orders, subpoenas, or legal process
• Requests from law enforcement agencies
• Regulatory investigations or audits
• National security or law enforcement requirements

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other business transfer, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

4.4 Protection of Rights

We may disclose your information when we believe disclosure is appropriate to protect the rights, property, or safety of Punch Pizza, our customers, or the public, or to investigate potential violations of our Terms of Service.

4.5 With Your Consent

We may share your information with third parties when you have explicitly consented to such sharing, such as when you participate in joint promotional activities or integrate third-party apps with your account.

5. Data Security

We take the security of your personal information seriously and implement a range of technical and organizational measures to protect it from unauthorized access, disclosure, alteration, and destruction.

5.1 Security Measures

• Encryption: All data transmitted between your browser and our servers is protected using SSL/TLS encryption (HTTPS protocol).
• Password Security: User passwords are hashed and salted using industry-standard cryptographic algorithms and are never stored in plain text.
• Access Controls: Access to personal data is restricted to authorized employees who need it to perform their job functions.
• Secure Payment Processing: Payment transactions are handled by PCI DSS-compliant payment processors. We do not store complete card data on our servers.
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing of our systems.
• Data Minimization: We collect only the minimum amount of personal data necessary for the purposes described in this policy.
• Incident Response: We maintain a data breach response plan and will notify affected users and relevant authorities as required by applicable law.

5.2 Limitations

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach that affects your rights and freedoms, we will notify you promptly in accordance with applicable laws.

6. Your Privacy Rights

Depending on your location within the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights and will respond to verified requests within the timeframes required by applicable law.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (such as when the information is needed to complete a transaction or comply with legal obligations).
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. We do not sell personal information in the traditional sense, but we may share data with advertising partners. You may exercise this right by contacting us directly.
• Right to Limit Use of Sensitive Personal Information: Where applicable, you have the right to limit our use and disclosure of sensitive personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny services, charge different prices, or provide a lower quality of service because you exercised your rights.

6.2 General Privacy Rights (All Users)

Regardless of your location, we provide the following rights to all users of our services:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request correction of any inaccurate or incomplete information in your account or records.
• Right to Deletion: You may request deletion of your account and associated personal data, subject to our legal retention obligations.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where our processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time.

6.3 How to Exercise Your Rights

To exercise any of the above rights, please submit a verifiable request to us using the following methods:

• Email: [email protected]
• Website: punchpizza-food.click

We will respond to your request within 45 days of receipt. If we require more time, we will inform you of the reason and extension period (up to an additional 45 days). We may need to verify your identity before processing your request. We will not charge a fee for a reasonable first request but reserve the right to charge a reasonable fee for subsequent or excessive requests.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When personal information is no longer required, we securely destroy or anonymize it in accordance with our data destruction procedures. Anonymized data, which cannot be used to identify you, may be retained indefinitely for analytical purposes.

8. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content.

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device and remember certain information about your preferences or actions over time.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly. These enable core features like shopping cart functionality and user authentication. These cookies cannot be disabled.
• Performance and Analytics Cookies: These collect information about how visitors use our website, such as which pages are visited most often. This data helps us improve our website performance.
• Functional Cookies: These allow our website to remember choices you make (such as saved addresses, language preferences, or favorite menu items) and provide a more personalized experience.
• Targeting and Advertising Cookies: These are used to deliver advertisements that are relevant to your interests. They may also be used to limit the number of times you see an advertisement and to measure the effectiveness of advertising campaigns.

8.3 Managing Cookies

You can control and manage cookies in several ways:

• Through our cookie consent banner when you first visit our website
• Through your browser settings (most browsers allow you to refuse or delete cookies)
• Through opt-out tools provided by third-party analytics and advertising services (such as Google Analytics Opt-out)

Please note that disabling certain cookies may affect the functionality of our website, including your ability to place orders or access your account.

For more detailed information about the specific cookies we use, their purposes, and how long they last, please refer to our full Cookie Policy available on our website at punchpizza-food.click.

9. Children's Privacy

Punch Pizza does not knowingly solicit data from or market to children under 18 years of age. Our website, ordering platform, and related services are directed to adults. If you are under the age of 18, please do not use our services or submit any personal information to us.

If we learn that we have inadvertently collected personal information from a child under 18 without parental consent, we will take steps to delete that information from our systems as quickly as possible. If you believe that we might have any information from or about a child under 18, please contact us immediately at [email protected].

We comply with the Children's Online Privacy Protection Act (COPPA), which restricts our ability to collect personal information from individuals under 13 years of age in the United States. Our policies exceed these minimum standards by applying age restrictions to all users under 18.

10. International Data Transfers

Punch Pizza is based in the United States and primarily collects, stores, and processes your personal information within the United States. However, some of our third-party service providers may operate in or transfer data to other countries.

If your personal data is transferred outside of the United States, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law. These safeguards may include:

• Contractual clauses with service providers requiring them to maintain data protection standards equivalent to those in the United States
• Ensuring third-party processors operate in jurisdictions with adequate data protection frameworks
• Obtaining your explicit consent where required for specific international transfers

By using our services, you acknowledge that your personal information may be processed in the United States, where privacy laws may differ from those in your country of residence. We are committed to ensuring your information receives an adequate level of protection wherever it is processed.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not operated by Punch Pizza. These may include social media platforms, payment gateways, delivery tracking platforms, or review sites. This Privacy Policy does not apply to those third-party services.

We strongly encourage you to review the privacy policies of any third-party websites you visit. We have no control over and assume no responsibility for the content, privacy practices, or policies of third-party sites or services. The inclusion of a link to a third-party website does not imply our endorsement of that website or its privacy practices.

12. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. At this time, there is no universally accepted standard for how websites should respond to DNT signals, and our website does not currently respond to DNT browser signals.

However, you can use the cookie management options described in Section 8 of this policy to control tracking on our website. We will update this policy if we adopt a standard DNT response protocol in the future.

13. Your California Privacy Rights – Additional Disclosures

In addition to the rights described in Section 6, California residents are entitled to the following additional disclosures under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

13.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email address, IP address, account name)
• Personal information under California Civil Code § 1798.80 (name, address, payment information)
• Commercial information (products purchased, order history, payment information)
• Internet or electronic network activity (browsing history, search history, interaction with website)
• Geolocation data (delivery address, general location)
• Inferences drawn from personal information to create a profile about your preferences

13.2 Sources of Personal Information

We collect personal information from the following categories of sources:

• Directly from you (account registration, orders, customer support)
• Automatically from your device or browser (usage data, cookies)
• From third-party service providers (payment processors, analytics platforms)
• From social media platforms (when you connect social media accounts or engage with our social media pages)

13.3 "Shine the Light" Law

California Civil Code Section 1798.83 permits California residents to request information regarding the disclosure of personal information to third parties for direct marketing purposes during the preceding calendar year. If you are a California resident and wish to make such a request, please contact us at [email protected].

14. FTC Compliance and Consumer Protection

Punch Pizza operates in compliance with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive practices in commerce, including those related to privacy and data security. We are committed to:

• Being transparent about our data collection and use practices
• Honoring our commitments to users regarding their personal information
• Implementing reasonable security measures to protect consumer data
• Not engaging in deceptive or misleading privacy practices
• Promptly addressing privacy concerns raised by consumers

If you believe that we are engaging in unfair or deceptive practices relating to your privacy, you may file a complaint with the Federal Trade Commission (FTC) at ftc.gov/complaint or by calling 1-877-FTC-HELP (1-877-382-4357).

15. How to File a Privacy Complaint

We encourage you to contact us first if you have any concerns about how we handle your personal information. We will do our best to address your complaint promptly and fairly.

15.1 Internal Complaint Process

1. Submit your complaint or concern in writing to [email protected]
2. Include your name, contact information, a description of your concern, and any relevant details
3. We will acknowledge receipt of your complaint within 5 business days
4. We will investigate and provide a substantive response within 30 days of receipt
5. If we require additional time, we will inform you of the reason and new expected response date

15.2 External Complaint Options

If you are not satisfied with our response to your privacy complaint, you have the right to file a complaint with the relevant data protection or consumer protection authority:

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post the revised policy on our website at punchpizza-food.click
• Notify you via email if the changes are material and affect your rights in significant ways
• Where required by law, obtain your consent before implementing material changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after any modifications to this policy will constitute your acknowledgment of the modifications and your consent to abide by the updated policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us using the information below. Our team is committed to responding to all privacy-related inquiries promptly and thoroughly.

When contacting us about a privacy matter, please include your full name, email address associated with your account (if applicable), a clear description of your request or concern, and the best way for us to reach you. This will help us respond to your inquiry as efficiently as possible.