Privacy Policy

Welcome to Punch Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website punchpizzafood.click, place orders, or otherwise interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

This Privacy Policy applies to all information collected through our website, mobile experience, and any related services, sales, marketing, or events (collectively referred to as the "Services").

1. Who We Are

Punch Pizza is a food service business operating in the United States. We operate the website located at punchpizzafood.click and offer food ordering, delivery, and related services to our customers.

For all privacy-related questions, concerns, or requests, please contact us using the information provided above or refer to Section 15 (Contact Us) of this policy.

2. Information We Collect

We collect several types of information from and about users of our Services, including information you provide directly to us, information we collect automatically, and information we receive from third parties.

2.1 Personal Information You Provide Directly

When you interact with our website, create an account, place an order, sign up for promotions, or contact us, you may voluntarily provide us with personal information, including but not limited to:

• Identity Information: First name, last name, username or similar identifier
• Contact Information: Billing address, delivery address, email address, and telephone numbers
• Financial Information: Payment card details, bank account details (processed securely through third-party payment processors)
• Transaction Data: Details about payments to and from you, and details of products and services you have purchased from us
• Account Data: Username, password, purchase history, and preferences stored in your account profile
• Communication Data: Your preferences in receiving marketing communications from us, your communication preferences, and information you share when you contact us for support
• Feedback and Reviews: Comments, reviews, ratings, or other content you submit about our products or services
• Promotional Data: Information provided when entering a competition or promotion, or completing a survey

2.2 Information We Collect Automatically

When you visit, use, or navigate our website and Services, we may automatically collect certain technical and usage data. This information does not reveal your specific identity but may include device and usage information, such as:

• Device Information: IP address, browser type and version, operating system and platform, device identifiers, hardware model
• Usage Data: Pages you viewed, links you clicked, time spent on pages, the page you visited before navigating to our website, and other diagnostic data
• Location Data: General geographic location based on IP address; precise location data if you grant permission through your device settings
• Log Data: Server logs, error reports, and activity logs associated with your use of our Services
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixels, and similar tracking technologies (see Section 9 for more details)

2.3 Information From Third Parties

We may receive personal information about you from third-party sources, including:

• Social media platforms, if you connect your account or interact with our pages
• Third-party payment processors who handle payment authentication
• Delivery partners and logistics services used to fulfill your orders
• Analytics providers who help us understand website traffic and user behavior
• Advertising networks that assist us with our marketing activities
• Publicly available databases and directories

3. How We Use Your Information

We use the information we collect for various purposes based on legitimate business interests, contractual necessity, legal obligations, and your consent where applicable. Specifically, we use your information to:

3.1 Service Provision and Order Fulfillment

• Process and manage your food orders, including preparation and delivery coordination
• Process payments and prevent fraudulent transactions
• Create and manage your account
• Provide customer support and respond to your inquiries and complaints
• Send order confirmations, receipts, and delivery status updates
• Facilitate returns, refunds, or complaint resolutions

3.2 Analytics and Service Improvement

• Analyze how users interact with our website to improve functionality and user experience
• Monitor and analyze usage trends, traffic patterns, and activity on our Services
• Conduct research and statistical analysis to improve our menu offerings and services
• Test new features, menus, and website changes before broader deployment
• Identify and fix technical issues, bugs, and errors

3.3 Marketing and Communications

• Send promotional emails, newsletters, special offers, and information about new menu items (subject to your marketing preferences)
• Deliver personalized content, offers, and recommendations based on your order history and preferences
• Administer contests, sweepstakes, promotions, surveys, and events
• Display targeted advertisements on our website and third-party platforms
• Measure the effectiveness of our marketing campaigns

3.4 Legal and Compliance Purposes

• Comply with applicable federal, state, and local laws and regulations
• Enforce our Terms of Service and other applicable agreements and policies
• Protect the rights, property, or safety of Punch Pizza, our customers, or others
• Respond to legal requests, court orders, or governmental authority inquiries
• Investigate potential violations, fraud, or illegal activity

4. Legal Basis for Processing

As a business operating in the United States, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing necessary to fulfill your orders and deliver our services to you
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, network security, and improving our services, provided such interests are not overridden by your rights
• Legal Obligation: Processing necessary to comply with applicable federal and state laws
• Consent: Where you have given us specific consent to process your data, such as for marketing communications, you may withdraw that consent at any time

For California residents, please also refer to Section 11 (California Privacy Rights) for additional information about your rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

5. Sharing Your Information With Third Parties

We do not sell, trade, or rent your personal information to third parties for their own marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We may share your information with trusted third-party vendors and service providers who perform services on our behalf, including:

• Payment Processors: Companies that process payments securely on our behalf (e.g., Stripe, Square, PayPal)
• Delivery and Logistics Partners: Third-party delivery platforms and drivers who fulfill your food orders
• Cloud Hosting and Infrastructure Providers: Companies that host our website and store our data securely
• Analytics Providers: Services such as Google Analytics that help us understand website usage
• Email and Marketing Platforms: Services that assist us in sending marketing communications and managing customer relationships
• Customer Support Tools: Platforms that enable us to respond to and manage customer inquiries

All service providers are contractually required to process your data only as instructed by us and to maintain appropriate security standards.

5.2 Legal Requirements and Safety

We may disclose your personal information if we believe disclosure is necessary or required to:

• Comply with a legal obligation, subpoena, court order, or government request
• Enforce our Terms of Service and other agreements
• Protect and defend the rights and property of Punch Pizza
• Prevent or investigate possible wrongdoing in connection with our Services
• Protect the personal safety of users of our Services or the public
• Protect against legal liability

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

5.4 With Your Consent

We may share your personal information with other parties with your explicit consent or at your direction. For example, if you authorize us to share your information with a third-party partner service or referral program.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical security measures designed to protect your data from unauthorized access, use, alteration, disclosure, or destruction.

6.1 Security Measures We Implement

• Encryption: All data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology
• Secure Payment Processing: We do not store complete payment card information on our servers. All payment transactions are processed by PCI-DSS compliant third-party payment processors
• Access Controls: Access to personal information is restricted to authorized personnel who have a legitimate business need to access it
• Password Protection: User accounts are protected with password authentication, and we encourage users to use strong, unique passwords
• Regular Security Assessments: We regularly review our data collection, storage, and processing practices and security measures
• Data Minimization: We collect only the personal data that is necessary for the purposes described in this policy

6.2 Limitations

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials and for any activities that occur under your account. Please notify us immediately at [email protected] if you suspect any unauthorized use of your account.

7. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

When we no longer have a legitimate business purpose to process your personal information, we will either delete or anonymize it. If deletion is not immediately possible (for example, because the information is stored in backup archives), we will securely store your personal information and isolate it from further processing until deletion is possible.

8. Your Privacy Rights

Depending on your location within the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights and providing you with transparent control over your data.

8.1 General Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions
• Right to Opt-Out of Marketing: You may unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing

8.2 California Residents – CCPA/CPRA Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023:

• Right to Know: The right to know what personal information we collect, use, disclose, and sell about you
• Right to Delete: The right to request deletion of personal information we have collected from you, subject to certain exceptions
• Right to Correct: The right to request correction of inaccurate personal information we maintain about you
• Right to Opt-Out of Sale or Sharing: The right to opt out of the sale or sharing of your personal information. We do not sell personal information, but if this changes, we will provide a "Do Not Sell or Share My Personal Information" link on our website
• Right to Limit Use of Sensitive Personal Information: The right to limit our use and disclosure of sensitive personal information to necessary purposes
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights
• Right to Portability: The right to receive your personal information in a portable and readily usable format

To submit a California privacy rights request, please contact us at [email protected] with the subject line "California Privacy Rights Request." We will respond to verifiable consumer requests within 45 days, with a possible extension of an additional 45 days where reasonably necessary.

8.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a request by:

• Emailing us at [email protected]
• Visiting our website at punchpizzafood.click and using the contact form

We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights. We aim to respond to all legitimate requests within 30 days. Occasionally, it may take longer if your request is particularly complex or if you have made multiple requests, in which case we will notify you and keep you updated.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and use personal information about you, including to serve interest-based advertising. This section provides a brief overview of our cookie practices.

9.1 What Are Cookies?

Cookies are small data files that are placed on your device when you visit a website. Cookies are widely used by website owners to make their websites work, or work more efficiently, as well as to provide reporting information.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the operation of our website, such as enabling you to log in, add items to your cart, and complete transactions
• Analytical/Performance Cookies: These allow us to recognize and count the number of visitors and see how visitors move around our website. This helps us improve the way our website works
• Functionality Cookies: These enable the website to provide enhanced functionality and personalization, such as remembering your preferences and login details
• Targeting/Advertising Cookies: These record your visit to our website, the pages you have visited, and the links you have followed. We use this information to make our advertising more relevant to your interests

9.3 Managing Your Cookie Preferences

You can control cookies through your browser settings and other tools. Most browsers allow you to refuse cookies or alert you when a cookie is being sent. However, if you disable certain cookies, some parts of our website may not function properly.

For more detailed information about the cookies we use and how to manage them, please refer to our full Cookie Policy available on our website at punchpizzafood.click.

10. Children's Privacy

Punch Pizza's website and Services are not directed to, designed for, or intended to be used by individuals under the age of 18 years. We do not knowingly collect, solicit, or maintain personal information from children under 18. If we learn that we have inadvertently collected personal information from a child under the age of 18, we will take prompt steps to delete such information from our records.

If you are a parent or guardian and believe your child under 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will investigate and take appropriate action, including deletion of any such information.

In addition to COPPA (Children's Online Privacy Protection Act) compliance at the federal level, we are mindful of state-specific laws protecting minors' online privacy, and we are committed to full compliance with all applicable regulations.

11. International Data Transfers

Punch Pizza is based in the United States, and your personal information is primarily stored and processed in the United States. However, in some cases, we may transfer your information to service providers located in other countries.

If we transfer personal information outside of the United States, we take steps to ensure that the transfer is conducted lawfully and that your information remains protected to the standard described in this Privacy Policy. These steps may include:

• Entering into data processing agreements with recipients that include appropriate data protection terms
• Ensuring that the recipient country provides an adequate level of data protection
• Implementing Standard Contractual Clauses or other legally recognized transfer mechanisms where required

By using our Services and providing your personal information, you acknowledge that your information may be processed in countries outside of your country of residence, which may have different data protection laws than those in your country.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, plug-ins, applications, and services. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices or content.

We encourage you to review the privacy policies of any third-party website you visit after leaving our website. This Privacy Policy applies only to information collected through our website and Services at punchpizzafood.click.

13. FTC Act Compliance and Consumer Protection

As a business operating in the United States, Punch Pizza is subject to the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive practices in commerce. We are committed to maintaining honest and transparent practices regarding the collection, use, and protection of your personal information, consistent with FTC guidelines and regulations.

We will not engage in deceptive data practices, and our privacy disclosures accurately reflect how we collect and use your information. If you believe we have engaged in any unfair or deceptive privacy practices, you may report your concerns to the Federal Trade Commission at www.ftc.gov/complaint.

14. How to File a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to escalate your complaint to the appropriate authority.

14.1 Contacting Us First

We encourage you to contact us first to give us the opportunity to address your concerns directly. Please email us at [email protected] with a detailed description of your complaint. We will acknowledge receipt of your complaint within 5 business days and aim to resolve it within 30 days.

14.2 Regulatory Authorities

If you are not satisfied with our response, or if you believe we are processing your personal data not in accordance with applicable law, you may lodge a complaint with the relevant authorities:

• Federal Trade Commission (FTC):
  The FTC handles complaints related to unfair or deceptive business practices, including privacy violations.
  Website: reportfraud.ftc.gov
  Phone: 1-877-FTC-HELP (1-877-382-4357)
• California Residents – California Privacy Protection Agency (CPPA):
  If you are a California resident, you may file a complaint with the California Privacy Protection Agency.
  Website: cppa.ca.gov
• State Attorney General:
  Residents of any U.S. state may contact their state's Attorney General's office regarding privacy-related complaints.

15. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As such, our website does not currently respond to browser DNT signals. However, you can manage your tracking preferences through our cookie settings and by adjusting your browser settings as described in Section 9 of this policy.

16. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this Privacy Policy
• Sending an email notification to the email address associated with your account (for significant changes)
• Posting a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Services after any changes to this Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide by and be bound by the updated policy.

If we make material changes to how we treat your personal information, we will provide you with notice as described above and, where required by law, seek your renewed consent before implementing the changes.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact our privacy team using any of the methods below:

We will make every effort to respond to your inquiry promptly and thoroughly. For requests related to your personal data rights, please allow up to 30 days for a full response, and up to 45 days for California residents' rights requests under the CCPA/CPRA.