Privacy Policy

Welcome to Punch Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website punchpizza-eat.rest, place orders online, interact with our services, or otherwise engage with us. Please read this policy carefully. If you disagree with any terms of this Privacy Policy, please discontinue use of our website and services.

This Privacy Policy is governed by applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

Punch Pizza is a food service business operating in the United States. We provide pizza and related food products to customers through our website, in-store, and delivery services.

For any privacy-related inquiries, questions, complaints, or requests, please contact us using the details provided above or refer to the dedicated contact section at the end of this policy.

2. Information We Collect

We collect various types of information in connection with the operation of our food service business and website. The categories of information we collect include the following:

2.1 Personal Information You Provide Directly

When you interact with us — whether by placing an order, creating an account, signing up for our newsletter, contacting us via email, or otherwise communicating with us — you may voluntarily provide us with personal information such as:

• Full name — used to identify you and address your orders or communications.
• Email address — used to send order confirmations, receipts, promotional communications, and service updates.
• Phone number — used for order-related communications, delivery coordination, and customer support.
• Billing and delivery address — used to process and deliver your food orders to the correct location.
• Payment information — including credit card numbers, debit card numbers, and billing information. Note: we do not store complete payment card details on our servers; this data is processed by PCI-DSS-compliant third-party payment processors.
• Account credentials — if you create an account, we store your username and encrypted password.
• Order history and preferences — records of what items you have ordered, dietary preferences, and special instructions.
• Communications and feedback — any messages, reviews, complaints, or feedback you send us directly.

2.2 Information Collected Automatically

When you visit our website punchpizza-eat.rest, certain information is collected automatically through your browser and device, including:

• IP address — your internet protocol address, which may be used to determine your approximate geographic location.
• Browser type and version — the web browser software you use to access our website.
• Operating system — the operating system running on your device.
• Device identifiers — unique identifiers associated with your mobile or desktop device.
• Pages visited — records of which pages on our website you view, how long you spend on each page, and the sequence of pages visited.
• Referring URLs — the website or link that directed you to our website.
• Date and time stamps — the date and time of your visit and interactions.
• Clickstream data — information about your interactions with elements on our website, such as links clicked and buttons pressed.

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect and store information about your interactions with our website. For a detailed explanation of how we use cookies, the types of cookies we deploy, and how you can manage your cookie preferences, please refer to our Cookie Policy available on our website.

In brief, we use the following categories of cookies:

• Strictly necessary cookies — essential for the website to function properly, including enabling you to add items to your cart and complete a purchase.
• Performance and analytics cookies — help us understand how visitors interact with our website by collecting anonymous information.
• Functional cookies — allow the website to remember choices you make (such as your preferred language or saved address) to provide enhanced features.
• Marketing and targeting cookies — used to deliver advertisements relevant to your interests and to track the effectiveness of our marketing campaigns.

2.4 Information from Third Parties

We may receive information about you from third-party sources, including:

• Third-party food delivery platforms or aggregators through which you place orders.
• Social media platforms if you interact with our social media profiles or use social login features.
• Marketing partners and advertising networks that may provide us with data to enhance our understanding of our customer base.
• Analytics providers that aggregate and supply us with data about website usage and trends.

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes, all of which are aimed at delivering a high-quality food service experience and operating our business lawfully and efficiently. Specifically, we use your information to:

3.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders, including coordinating delivery or pickup.
• Send order confirmations, receipts, and status updates via email or SMS.
• Manage your account, including account creation, authentication, and preferences.
• Process payments and handle refunds or disputes.
• Respond to your customer service inquiries, complaints, and requests.
• Communicate with you about changes to your orders or to our menu and services.

3.2 Analytics and Service Improvement

• Analyze how customers use our website and services to improve their functionality and user experience.
• Monitor and evaluate the performance of our website, including page load times and error rates.
• Conduct internal research and analysis to better understand customer preferences and dining habits.
• Develop new features, menu items, and promotional offers based on customer behavior and feedback.

3.3 Marketing and Communications

• Send you promotional emails, newsletters, special offers, and information about new menu items or events, but only where you have given your consent or where permitted by applicable law.
• Deliver targeted advertising on our website and on third-party platforms based on your browsing and purchasing behavior.
• Measure the effectiveness of our marketing campaigns and adjust our strategies accordingly.
• You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us directly at [email protected].

3.4 Legal Compliance and Security

• Comply with applicable federal and state laws, regulations, and legal obligations.
• Enforce our Terms of Service and other applicable agreements and policies.
• Detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities.
• Protect the rights, property, and safety of Punch Pizza, our customers, and the public.
• Respond to lawful requests from courts, law enforcement agencies, and government authorities.

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your information in the following limited and controlled circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf and to assist us in operating our business. These service providers are given access to your personal information only to the extent necessary to perform their specific functions and are contractually obligated to maintain the confidentiality and security of your data. Such service providers include:

• Payment processors — to securely process your credit and debit card transactions.
• Delivery partners — third-party delivery services used to fulfill food delivery orders.
• Email service providers — to send transactional and marketing email communications on our behalf.
• Website hosting and cloud infrastructure providers — to host and maintain our website and store data securely.
• Analytics providers — such as Google Analytics, to help us understand website usage and improve our services.
• Customer support platforms — to manage and respond to customer inquiries and complaints.
• Marketing and advertising platforms — to run targeted advertising campaigns.

4.2 Legal Requirements

We may disclose your personal information if required to do so by law or in good-faith belief that such action is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request.
• Protect and defend the rights or property of Punch Pizza.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of users of our services or the public.
• Protect against legal liability.

4.3 Business Transfers

In the event that Punch Pizza undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal information may be transferred to a successor or affiliated entity as part of that transaction. We will notify you via email or a prominent notice on our website of any such change in ownership and any choices you may have regarding your personal information.

4.4 Aggregated and Anonymized Data

We may share aggregated or de-identified information — which cannot reasonably be used to identify you — with third parties for industry research, analytics, marketing, or other purposes. This type of data sharing does not constitute a disclosure of personal information.

5. Data Security

We take the security of your personal information very seriously. We have implemented a range of administrative, technical, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, loss, and destruction. These measures include:

• SSL/TLS encryption — all data transmitted between your browser and our website is encrypted using Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocols.
• PCI-DSS compliance — our payment processing systems comply with the Payment Card Industry Data Security Standard to protect your financial information.
• Access controls — access to personal information is restricted to authorized personnel on a need-to-know basis, and all staff are trained in data privacy best practices.
• Firewalls and intrusion detection systems — we employ network security tools to monitor for and prevent unauthorized access to our systems.
• Regular security audits — we periodically assess our security infrastructure to identify and address potential vulnerabilities.
• Data minimization — we collect only the personal information that is necessary for the purposes described in this policy.

6. Your Privacy Rights

Depending on your state of residence and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights and providing you with meaningful control over your data.

6.1 Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know — You have the right to request that we disclose what personal information we have collected about you, including the categories of information, the sources from which it was collected, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete — You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions (e.g., where we are required to retain the information by law).
• Right to Correct — You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing — We do not sell your personal information. However, if this practice changes, you have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information — You have the right to limit our use and disclosure of sensitive personal information to that which is necessary to provide the services you have requested.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you a different price, or provide a lesser quality of service as a result of exercising your rights.

To exercise any of these rights, please submit a verifiable consumer request to us at [email protected]. We will respond to your request within 45 days, with the possibility of a 45-day extension where necessary and with prior notice to you.

6.2 General Privacy Rights (All Users)

Regardless of your state of residence, we offer all users the following rights:

• Right of Access — You may request a copy of the personal information we hold about you.
• Right to Correction — You may request that we correct or update any inaccurate or incomplete information we hold about you.
• Right to Deletion — You may request that we delete your personal information, subject to applicable legal requirements and our legitimate business needs.
• Right to Data Portability — You may request that we provide your personal information in a structured, commonly used, machine-readable format where technically feasible.
• Right to Withdraw Consent — Where we process your data based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Opt Out of Marketing — You may opt out of receiving marketing communications from us at any time.

To exercise any of these rights, please contact us using the information provided in the Contact section below.

7. Cookie Policy Summary

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content and advertisements. Cookies are small text files placed on your device when you visit a website.

We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period or until you delete them). You can control and manage cookies through your browser settings or through our cookie preference center on the website.

Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders or use certain features. For full details about the specific cookies we use, their purposes, and how to manage them, please read our complete Cookie Policy available on our website at punchpizza-eat.rest.

8. Data Retention

We retain your personal information only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The specific retention periods we apply are as follows:

When personal information is no longer required for any of the purposes listed above, we will securely delete or anonymize it in accordance with our data retention schedule and applicable law.

9. Children's Privacy

Punch Pizza's website and online ordering services are not directed to children under the age of 18. We do not knowingly solicit or collect personal information from minors. If you are a parent or legal guardian and you believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected].

Upon receiving notification that a child under 18 has provided us with personal information, we will take prompt steps to verify the claim and, if confirmed, delete the information from our records as quickly as possible. If you become aware of any data we may have collected from children under 18, please contact us using the information provided at the end of this policy.

Additionally, in accordance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under the age of 13 without verifiable parental consent.

10. International Data Transfers

Punch Pizza operates primarily in the United States. If you are accessing our website from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where our servers are located and our central operations are conducted.

The data protection laws in the United States may differ from those in your country of residence. However, by using our website and providing us with your personal information, you acknowledge and consent to the transfer of your data to the United States as described in this Privacy Policy.

Where we transfer personal data internationally, we take appropriate steps to ensure that such transfers comply with applicable privacy laws and that your personal information receives an adequate level of protection. Where required, we implement appropriate contractual safeguards (such as standard data protection clauses) to protect your information during international transfers.

Some of our third-party service providers may operate outside the United States. In such cases, we ensure that these providers maintain data protection practices consistent with applicable legal requirements and equivalent to those described in this Privacy Policy.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, and services that are not operated or controlled by Punch Pizza. These may include third-party food delivery platforms, payment processors, and social media platforms. This Privacy Policy does not apply to such third-party sites and services.

We are not responsible for the privacy practices, content, or policies of any third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit, as their information practices may differ significantly from ours. The inclusion of a link to a third-party site does not constitute our endorsement of that site or its privacy practices.

12. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked across different websites. At this time, there is no universally accepted standard for recognizing and implementing DNT signals, and our website does not currently respond to DNT browser signals.

However, you can manage your tracking preferences through your browser settings and through our cookie preference center. We will continue to monitor developments in DNT standards and update our practices accordingly.

13. FTC Act Compliance

We are committed to complying with the Federal Trade Commission Act (FTC Act) and all applicable FTC regulations and guidelines regarding the collection, use, and disclosure of consumer information. Specifically:

• We will not engage in deceptive practices regarding the collection or use of your personal information.
• We will not use unfair methods of competition or unfair or deceptive acts or practices in connection with our business.
• We honor all opt-out requests for marketing communications promptly and in accordance with applicable law.
• We are transparent about our data collection and use practices as described in this Privacy Policy.
• We comply with the CAN-SPAM Act requirements for commercial email communications, including providing a clear unsubscribe mechanism in all marketing emails.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or for other operational, legal, or regulatory reasons. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Post a prominent notice on our website notifying you of the change.
• Where required by applicable law or where we deem appropriate, send you a direct notification via email.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services following the posting of changes to this Privacy Policy constitutes your acceptance of those changes.

15. How to File a Complaint

If you believe that we have not complied with this Privacy Policy or applicable data protection laws, or if you have concerns about how we have handled your personal information, we encourage you to contact us first so that we can attempt to resolve the issue directly.

You may contact our privacy team at: [email protected]

If you are not satisfied with our response or believe we are processing your personal data in a manner inconsistent with applicable law, you have the right to lodge a complaint with the relevant regulatory authorities:

• Federal Trade Commission (FTC): If you believe your consumer privacy rights have been violated under federal law, you may file a complaint with the Federal Trade Commission at www.ftc.gov/complaint or by calling 1-877-FTC-HELP (1-877-382-4357).
• California Residents — California Privacy Protection Agency (CPPA): California residents may submit complaints to the California Privacy Protection Agency, which oversees enforcement of the CCPA/CPRA. More information is available at cppa.ca.gov.
• State Attorney General: Depending on your state of residence, you may also be able to file a complaint with your state's Attorney General's office regarding consumer privacy violations.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise any of your privacy rights, please do not hesitate to contact us:

We are committed to resolving privacy concerns promptly and transparently. Upon receiving a privacy inquiry or request, we will acknowledge your communication within 10 business days and provide a substantive response within the timeframe required by applicable law.

When submitting a request to exercise your privacy rights, please provide sufficient information to allow us to verify your identity and locate your information in our systems. We may request additional information from you in order to verify your identity before processing your request, particularly for sensitive requests such as data deletion.