Privacy Policy

At Punch Pizza, we are deeply committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at punchcafepizza.rest, place an order with us, sign up for our loyalty programs, or interact with us in any other way. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services.

This Privacy Policy applies to all information collected through our website (punchcafepizza.rest), and/or any related services, sales, marketing, or events. We encourage you to review this document in its entirety to make informed decisions about sharing your personal information with us.

1. Who We Are

Punch Pizza is a food service business operating in the United States. We are dedicated to providing our customers with exceptional pizza and café dining experiences, both in-person and online. For all matters related to this Privacy Policy, you may contact us using the details provided below:

2. Information We Collect

We collect different types of information depending on how you interact with us. Below is a detailed description of the categories of information we may collect.

2.1 Personal Information You Provide to Us

We collect personal information that you voluntarily provide to us when you register on our website, express an interest in obtaining information about us or our products and services, participate in activities on the website, or otherwise contact us. The personal information we collect may include:

• Identity Information: Full name, username or similar identifier, date of birth, and gender.
• Contact Information: Email address, telephone number, billing address, delivery address, and other similar contact data.
• Account Credentials: Password and other security information used for authentication and account access.
• Payment and Financial Information: Credit card numbers, debit card details, bank account information, and other payment data necessary to process your orders. Please note that payment card details are processed through secure third-party payment processors and are not stored directly on our servers.
• Order Information: Details about the food items you purchase, your order history, special dietary requirements or preferences, delivery instructions, and related transaction data.
• Marketing and Communications Preferences: Your preferences in receiving marketing communications from us and your communication preferences.
• Profile Information: Your username, password, purchases or orders made, your interests, preferences, and any other information you choose to provide in your profile or account.
• Feedback and Survey Responses: Responses you provide when you complete our surveys, leave reviews, or provide feedback about our food or services.
• Loyalty Program Data: Information related to any rewards or loyalty programs you participate in, including points earned and redeemed.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and your interaction with our website. This information includes:

• Device Information: IP address, browser type and version, operating system and platform, device identifiers, and other technology on the devices you use to access our website.
• Usage Data: Pages you visit, links you click, time and date of your visit, time spent on each page, page views, referral URLs, and other diagnostic data relating to how you interact with our website.
• Location Data: General geographic location inferred from your IP address, and, if you grant permission, more precise location data from your device to facilitate delivery services.
• Log Data: Server log files that may include your IP address, browser type, pages visited, and other standard log information.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixels, and similar tracking technologies as described further in Section 7 of this policy.

2.3 Information from Third Parties

We may receive information about you from third parties in certain circumstances, including:

• Social Media Platforms: If you choose to log in or register using a social media account (such as Facebook or Google), we may receive certain profile information from that platform, such as your name and email address.
• Delivery Partners: Third-party delivery services that fulfill your food orders may share relevant delivery and contact information with us.
• Analytics Providers: Third-party analytics services that help us understand website traffic and usage patterns.
• Advertising Partners: Partners that help us serve relevant advertisements may share audience data with us.
• Review Platforms: Publicly available reviews and feedback you post on third-party review websites.

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes, including the following:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including delivery and pickup arrangements.
• Creating and managing your user account on our website.
• Sending you order confirmations, receipts, and related transactional communications.
• Processing payments and preventing fraudulent transactions.
• Administering loyalty or rewards programs you participate in.
• Responding to your inquiries, complaints, and requests for customer support.

3.2 Analytics and Service Improvement

• Analyzing how users interact with our website to improve its functionality, layout, and content.
• Monitoring and analyzing trends, usage, and activities in connection with our services.
• Conducting research and developing new products and menu offerings.
• Measuring the effectiveness of our marketing campaigns and promotions.
• Identifying and troubleshooting technical issues with our website and services.

3.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, and offers about our food, services, and special events, where you have opted in to receive such communications.
• Personalizing the content and offers you see on our website based on your preferences and order history.
• Displaying targeted advertisements on our website and on third-party platforms.
• Running contests, promotions, and sweepstakes in which you choose to participate.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send or by contacting us at [email protected]. Please note that even if you opt out of marketing emails, we may still send you transactional or administrative messages related to your orders and account.

3.4 Legal and Safety Purposes

• Complying with applicable laws and regulations, including food safety, consumer protection, and data protection laws.
• Enforcing our Terms of Service and other agreements.
• Protecting the rights, property, and safety of Punch Pizza, our customers, and others.
• Detecting, preventing, and addressing fraud, security issues, and technical vulnerabilities.
• Responding to lawful requests from public authorities, including law enforcement agencies.

3.5 Legal Basis for Processing (Where Applicable)

Depending on how you interact with us and the laws applicable to you, we process your personal information on the following legal bases:

• Contract Performance: Processing necessary to fulfill orders and manage your account.
• Legitimate Interests: Processing for analytics, fraud prevention, and business improvement where our interests are not overridden by your rights.
• Consent: Where you have given explicit consent, such as for marketing emails or certain cookies.
• Legal Obligation: Where processing is required to comply with applicable law.

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We may share your information with trusted third-party vendors and service providers who perform services on our behalf and require access to your information to do so. These include:

• Payment Processors: Companies that securely process your payment transactions.
• Delivery and Logistics Partners: Services that facilitate the delivery of your food orders to your location.
• Cloud Hosting Providers: Companies that host our website and store our data securely.
• Email Service Providers: Services used to send transactional and marketing emails on our behalf.
• Analytics Providers: Companies such as Google Analytics that help us understand website usage and performance.
• Customer Support Platforms: Tools used to manage customer inquiries and support tickets.
• Marketing and Advertising Platforms: Services that assist us in delivering targeted advertising campaigns.

All service providers are contractually obligated to protect your personal information, use it only for the purposes for which it was disclosed, and comply with applicable privacy and data protection laws.

4.2 Legal Requirements and Protection of Rights

We may disclose your personal information if required to do so by law or in good-faith belief that such action is necessary to:

• Comply with a legal obligation, court order, or government request.
• Protect and defend the legal rights or property of Punch Pizza.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of users of our services or the public.
• Protect against legal liability.

4.3 Business Transfers

In the event that Punch Pizza undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

4.4 Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other purposes.

5. Data Security

We take the security of your personal information seriously and have implemented appropriate technical and organizational measures designed to protect it against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption: We use Secure Socket Layer (SSL) technology and Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website.
• Access Controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions, and all such personnel are bound by confidentiality obligations.
• Secure Payment Processing: Payment card information is processed through PCI-DSS-compliant payment processors and is not stored on our systems.
• Regular Security Assessments: We conduct periodic reviews of our data collection, storage, and processing practices, as well as security measures.
• Firewalls and Intrusion Detection: We employ firewalls, monitoring systems, and intrusion detection tools to protect our network and servers.
• Data Minimization: We only collect and retain personal information that is necessary for the purposes outlined in this policy.

However, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.

6. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights with respect to your personal information. We are committed to honoring these rights and providing you with meaningful control over your data.

6.1 Rights Under U.S. Law

As a business operating in the United States, we comply with applicable federal and state privacy laws, including the Federal Trade Commission (FTC) Act, which governs unfair or deceptive acts or practices in commerce, and state-specific privacy laws where applicable.

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to Know: You have the right to request that we disclose what personal information we have collected about you, the categories and sources of that information, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain legal exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we hold about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell your personal information as defined under the CCPA/CPRA.
• Right to Limit Use of Sensitive Personal Information: You may have the right to limit the use of your sensitive personal information to specific purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To submit a verifiable consumer request under California law, please contact us at [email protected]. You may also authorize an agent to make a request on your behalf by providing written authorization.

6.2 General Rights for All Users

Regardless of your location, we provide all users with the following options:

• Access and Update: You may access and update your account information by logging into your account on our website and visiting your profile settings.
• Marketing Opt-Out: You may unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any promotional email or by contacting us directly.
• Account Deletion: You may request deletion of your account and associated personal information by contacting us at [email protected].
• Data Portability: Upon request, we will provide you with a copy of your personal information in a structured, commonly used, and machine-readable format where technically feasible.
• Cookie Preferences: You may manage your cookie preferences through our cookie consent tool or your browser settings. See Section 7 for more details.

6.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a request to us by:

• Email: [email protected]
• Website: punchcafepizza.rest

We will respond to your request within 45 days of receipt. If we require additional time, we will notify you of the reason and the extension period. We may need to verify your identity before processing your request to ensure the security of your personal information. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to collect and store certain information about your interactions with our site. Cookies are small text files placed on your device by your browser when you visit a website.

7.1 Types of Cookies We Use

• Essential Cookies: These cookies are strictly necessary for the website to function and cannot be switched off. They enable core features such as shopping cart functionality, account login, and security.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most frequently and whether error messages are received. This data helps us improve the website's performance and user experience.
• Functional Cookies: These cookies allow the website to remember your preferences and choices, such as your language, region, or saved items, to provide a more personalized experience.
• Targeting and Advertising Cookies: These cookies are set by our advertising partners to build a profile of your interests and deliver relevant advertisements on our website and across other sites. They are based on uniquely identifying your browser and device.

7.2 Managing Your Cookie Preferences

You can manage your cookie preferences at any time. Most web browsers allow you to control cookies through their settings. You may also use our cookie consent tool, available on our website, to customize which categories of cookies you accept. Please note that restricting certain cookies may impact the functionality and performance of our website.

For more detailed information about the specific cookies we use and how to manage them, please refer to our Cookie Policy, available on our website at punchcafepizza.rest.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine data retention periods include:

• Account Information: We retain your account information for as long as your account remains active and for a reasonable period thereafter in case you choose to reactivate it. If you request account deletion, we will delete your personal information within 30 to 45 days, subject to any legal obligations to retain certain data.
• Order and Transaction Records: We retain records of your food orders and transactions for up to seven (7) years to comply with accounting, tax, and legal requirements under U.S. law.
• Marketing Data: We retain your marketing preferences and related data until you opt out of communications or request deletion.
• Communications and Support Records: We retain records of customer support interactions for up to three (3) years to help us resolve future inquiries and improve our service.
• Usage and Analytics Data: Anonymized or aggregated analytics data may be retained indefinitely as it cannot be used to identify individual users.
• Cookie Data: Retention periods for cookie data vary depending on the type of cookie. Session cookies expire when you close your browser, while persistent cookies may remain on your device for a defined period. Please refer to our Cookie Policy for specific retention periods.

When personal information is no longer required, we will securely delete or anonymize it in accordance with our data retention procedures.

9. Children's Privacy

Our website, online ordering system, and related services are not directed to, and are not intended for use by, children under the age of 18 years. We do not knowingly collect, solicit, or process personal information from children under 18. If you are under 18, please do not use our website or provide any personal information to us.

If we become aware that we have inadvertently collected personal information from a child under the age of 18 without appropriate parental consent, we will take immediate steps to delete that information from our records. If you are a parent or guardian and you believe that your child under 18 has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and all other applicable laws relating to the privacy of children online.

10. International Data Transfers

Punch Pizza is based in the United States, and our primary data processing activities occur within the United States. However, our website is accessible globally, and some of our service providers may be located in, or process data in, countries other than the United States.

If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country of residence. By using our website and services and providing us with your personal information, you acknowledge and consent to the transfer of your data to the United States.

Where we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place to protect your personal information, including contractual clauses and data processing agreements with our service providers that require them to maintain appropriate security standards and comply with applicable data protection laws.

If you have questions about international data transfers or the safeguards we have in place, please contact us at [email protected].

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Punch Pizza. These third-party platforms have their own privacy policies, and we are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party websites you visit before providing any personal information.

Additionally, our website may integrate with third-party services such as social media sharing buttons, embedded maps, and online review platforms. When you interact with these features, the respective third parties may collect data about you in accordance with their own privacy policies. Your use of such third-party features is at your own risk.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you are entitled to specific privacy rights under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA). This section supplements the information contained elsewhere in this Privacy Policy and applies solely to California residents.

12.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information from California consumers:

12.2 No Sale of Personal Information

Punch Pizza does not sell your personal information to third parties for monetary or other valuable consideration, as defined under the CCPA/CPRA. We also do not share your personal information for cross-context behavioral advertising purposes without providing you the opportunity to opt out.

12.3 Submitting a California Privacy Request

California residents may submit privacy requests by contacting us at [email protected]. We will respond to verifiable consumer requests within 45 calendar days. We are required to verify your identity before fulfilling any consumer rights request.

13. How to File a Complaint

If you believe that we have not handled your personal information in accordance with applicable privacy laws or this Privacy Policy, we encourage you to first contact us directly so that we can attempt to resolve your concern:

• Email: [email protected]
• Website: punchcafepizza.rest

We take all privacy complaints seriously and will investigate your concern promptly. You will receive a response within 30 business days of submitting your complaint.

If you are not satisfied with our response, or if you believe we are not handling your personal information in compliance with the law, you have the right to file a complaint with the appropriate data protection authority.

13.1 Complaints for California Residents

California residents who have concerns about our privacy practices that are not resolved through direct contact with us may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency (CPPA): cppa.ca.gov
• California Attorney General's Office: oag.ca.gov

13.2 Complaints for Other U.S. Residents

Consumers in other U.S. states may contact the Federal Trade Commission (FTC) regarding unfair or deceptive practices related to privacy:

• Federal Trade Commission: ftc.gov | 1-877-FTC-HELP (1-877-382-4357)
• You may also file a complaint at: reportfraud.ftc.gov

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time in response to changes in our business practices, legal requirements, or for other operational, legal, or regulatory reasons. When we make material changes to this policy, we will notify you by:

• Posting the updated Privacy Policy on our website at punchcafepizza.rest with a revised "Last Updated" date.
• Sending an email notification to the address associated with your account (where we have your email address and the changes are material).
• Displaying a prominent notice on our website for a period of time following the update.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact our privacy team. We are committed to addressing your inquiries promptly and transparently.

We strive to respond to all legitimate privacy inquiries within 30 business days of receipt. To help us process your request efficiently, please clearly describe the nature of your inquiry and provide any relevant details, including your name and the email address associated with your account.