Privacy Policy

This Privacy Policy describes how Punch Pizza ("we," "us," "our," or "Company") collects, uses, discloses, and protects the personal information of visitors and customers who access our website at punch-delivery.rest and use our food ordering and delivery services. We are committed to safeguarding your privacy and handling your personal data with transparency, integrity, and in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act).

Please read this Privacy Policy carefully before using our website or submitting any personal information. By accessing or using our services, you acknowledge that you have read, understood, and agree to the terms described herein. If you do not agree with this Privacy Policy, please discontinue use of our website and services immediately.

1. Who We Are

Punch Pizza operates an online food ordering and delivery platform through its website punch-delivery.rest. We provide customers with the ability to browse our menu, place orders, arrange for delivery or pickup, create accounts, and communicate with our team regarding their orders and preferences.

For all privacy-related inquiries, you may contact us using the following details:

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All users who visit our website at punch-delivery.rest;
• Customers who create an account or place food orders through our platform;
• Individuals who contact us via email, telephone, or any other communication channel;
• Users who subscribe to our newsletters, promotional emails, or marketing communications;
• Any person who interacts with us through social media or other online channels associated with Punch Pizza.

This Policy does not apply to third-party websites, applications, or services linked from our platform. We encourage you to review the privacy policies of any third parties before sharing your personal information with them.

3. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we collect are described below.

3.1 Personal Identification Information

When you register for an account, place an order, or contact us, we may collect the following personal identification details:

• Full name;
• Email address;
• Telephone number;
• Delivery address and billing address;
• Date of birth (where required for age verification);
• Username and password for your account.

3.2 Payment and Financial Information

When you make a purchase through our platform, we collect payment-related information necessary to process your transaction. This may include:

• Credit or debit card details (processed through secure, PCI-DSS-compliant third-party payment processors);
• Billing address;
• Transaction history and order amounts.

We do not store complete credit card numbers on our servers. Payment data is processed and secured by our trusted third-party payment service providers.

3.3 Order and Transaction Data

We collect information related to your food orders, including:

• Items ordered, quantities, and special instructions;
• Order time, date, and delivery/pickup preferences;
• Order history and frequency of purchases;
• Loyalty program participation and reward redemptions;
• Customer feedback, ratings, and reviews submitted after your order.

3.4 Usage and Technical Data

When you visit our website, we automatically collect certain technical data about your device and browsing activity, including:

• IP address;
• Browser type and version;
• Operating system and device type;
• Pages viewed, time spent on each page, and navigation paths;
• Referring URL (the website that directed you to ours);
• Date and time of your visit;
• Search terms used on our website;
• Links clicked and interactions with website features.

3.5 Location Data

To facilitate accurate delivery of your orders, we may collect:

• Your delivery address as provided by you during checkout;
• General geographic location based on your IP address;
• Precise geolocation data from your mobile device, if you grant permission through your browser or mobile application settings.

3.6 Communications Data

If you contact us directly by email, telephone, or through our website's contact forms, we may retain records of those communications, including:

• The content of your messages or inquiries;
• Complaint or feedback details;
• Customer support interaction records.

3.7 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect data about your interactions with our website. Please refer to Section 9 of this Policy for full details on cookie usage. The types of data collected through cookies include session identifiers, preferences, and behavioral analytics data.

3.8 Marketing Preferences

When you subscribe to our newsletter or opt into marketing communications, we collect your email address, name, and marketing preference settings, including records of your consent and opt-out requests.

4. How We Use Your Information

We use the personal information we collect for the following lawful purposes:

4.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including delivery and pickup coordination;
• Creating and managing your customer account;
• Sending order confirmations, delivery updates, and status notifications via email or SMS;
• Processing payments and managing refunds or chargebacks;
• Responding to your customer service inquiries, complaints, and feedback.

4.2 Improving Our Products and Services

• Analyzing usage trends to understand how customers interact with our menu and website;
• Conducting internal research and analysis to improve our food offerings, delivery efficiency, and website functionality;
• Testing new features, website designs, and menu items;
• Monitoring website performance and resolving technical issues.

4.3 Marketing and Promotional Communications

• Sending you promotional emails, special offers, seasonal deals, and newsletters where you have provided your consent or where permitted under applicable law;
• Personalizing marketing content based on your order history and stated preferences;
• Running loyalty programs, contests, and referral campaigns;
• Delivering targeted advertisements through our website or third-party advertising platforms.

You have the right to opt out of marketing communications at any time. Each marketing email we send includes an unsubscribe link. You may also contact us at [email protected] to update your preferences.

4.4 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations;
• Responding to lawful requests from law enforcement, courts, or regulatory authorities;
• Detecting, investigating, and preventing fraudulent transactions, abuse, or security threats;
• Enforcing our Terms of Service and other applicable agreements;
• Protecting the rights, property, and safety of Punch Pizza, our employees, customers, and the public.

4.5 Business Operations

• Maintaining accurate business and financial records;
• Managing supplier, vendor, and service provider relationships;
• Facilitating business restructuring, mergers, acquisitions, or asset transfers where applicable.

5. How We Share Your Information

We do not sell your personal information to third parties. However, we may share your data with trusted third parties under the following limited circumstances:

5.1 Service Providers and Business Partners

We engage carefully selected third-party companies and individuals to perform services on our behalf, including:

• Payment processors: to securely process credit/debit card transactions;
• Delivery logistics providers: to coordinate and fulfill food delivery orders;
• Email and SMS marketing platforms: to send communications on our behalf;
• Analytics providers: such as Google Analytics, to help us understand website traffic and user behavior;
• Cloud hosting and IT services: to maintain and operate our website and data infrastructure;
• Customer support software: to manage customer inquiries and ticketing systems.

These service providers are contractually bound to use your personal data only for the specific services they provide to us and are prohibited from disclosing or using your data for any other purpose.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that such disclosure is required or permitted by law, including:

• In response to a valid subpoena, court order, or government investigation;
• To comply with applicable federal or state laws;
• To protect the rights, safety, and property of Punch Pizza or others;
• In connection with preventing or detecting fraud or other illegal activity.

5.3 Business Transfers

In the event that Punch Pizza undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you via email and/or a prominent notice on our website if such a transfer occurs and your data becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated or anonymized data that cannot reasonably be used to identify you with third parties for industry research, analytics, marketing, or other business purposes. This data is not considered personal information under applicable law.

5.5 With Your Consent

We may share your personal information with other third parties when we have obtained your explicit consent to do so.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction.

6.1 Security Measures We Employ

• Encryption: Our website uses Secure Socket Layer (SSL)/TLS encryption to protect data transmitted between your browser and our servers;
• Access controls: We restrict access to personal data to authorized employees, contractors, and service providers who need it to perform their job functions;
• PCI-DSS compliance: Payment transactions are handled by PCI-DSS-compliant payment processors;
• Regular security audits: We conduct periodic reviews of our data security practices and systems;
• Password protection: Customer accounts are protected by passwords. We encourage you to use a strong, unique password and to keep it confidential;
• Incident response: We maintain a data breach response plan to address potential security incidents promptly and notify affected individuals as required by applicable law.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information and encourage you to take precautions when sharing personal data online.

If you suspect any unauthorized access to your account or believe your personal information has been compromised, please contact us immediately at [email protected].

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable United States privacy law.

7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA, as amended by the CPRA:

7.2 Rights Available to All Users

Regardless of your state of residence, we provide all users with the following privacy rights:

• Access: You may request access to the personal information we hold about you;
• Correction: You may request correction of any inaccurate or incomplete personal information;
• Deletion: You may request that we delete your personal information, subject to certain exceptions (e.g., legal obligations);
• Marketing Opt-Out: You may opt out of receiving marketing communications at any time;
• Account Closure: You may request closure of your account at any time by contacting us.

7.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a verifiable request to us by:

• Emailing us at: [email protected]
• Visiting our website: punch-delivery.rest

We will acknowledge your request within 10 business days and respond substantively within 45 days of receipt. If we require additional time (up to 90 days total), we will notify you in writing of the extension and the reason for it. We may need to verify your identity before processing your request to protect the security of your personal information.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including providing our services, complying with legal obligations, resolving disputes, and enforcing our agreements.

When personal data is no longer required for the relevant purpose, we will securely delete, anonymize, or de-identify it in accordance with our data disposal procedures.

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, understand how visitors use our site, and deliver personalized content and advertising.

9.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They help websites remember your preferences and activity across sessions.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for our website to function correctly, including maintaining your session when logged in and processing your orders;
• Functional Cookies: Remember your preferences, such as saved address, language settings, and menu selections;
• Analytics Cookies: Collect information about how visitors use our website (e.g., Google Analytics) to help us improve performance and user experience;
• Marketing and Advertising Cookies: Track your browsing habits to deliver relevant advertising and measure campaign effectiveness;
• Third-Party Cookies: Placed by external service providers for analytics, payment processing, or advertising purposes.

9.3 Managing Your Cookie Preferences

You may control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders. You may also opt out of certain analytics cookies by visiting the Google Analytics opt-out page.

For full details on the cookies we use and how to manage them, please refer to our dedicated Cookie Policy available on our website at punch-delivery.rest.

10. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, as defined under the Children's Online Privacy Protection Act (COPPA), or from minors under the age of 18 without verifiable parental consent.

If you are under 18 years of age, please do not use our website or submit any personal information through our platform. If we become aware that we have inadvertently collected personal information from a minor without appropriate consent, we will take immediate steps to delete such information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can promptly investigate and remove the information.

11. International Data Transfers

Punch Pizza is based in the United States and primarily processes personal data within the United States. However, some of our third-party service providers (including cloud hosting providers, analytics platforms, and email service providers) may operate in or transfer data to countries outside the United States.

When we transfer personal information internationally, we take steps to ensure that appropriate safeguards are in place to protect your data in accordance with applicable privacy laws, including:

• Entering into data processing agreements with service providers that include standard contractual clauses or other legally recognized transfer mechanisms;
• Working with service providers that participate in recognized data privacy frameworks;
• Verifying that recipient countries provide an adequate level of data protection or that alternative safeguards are in place.

By using our services, you understand and acknowledge that your personal information may be transferred to and processed in the United States or other countries, which may have different data protection laws than your country of residence.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, payment portals, or other external services. These links are provided for your convenience and informational purposes only. We are not responsible for the privacy practices or content of third-party websites and encourage you to review their privacy policies independently before providing any personal information.

Our website may also integrate third-party services such as:

• Social media sharing buttons (e.g., Facebook, Instagram, Twitter/X);
• Google Maps for delivery address verification;
• Third-party payment gateways;
• Review and rating platforms.

Use of these third-party integrations is subject to the respective provider's privacy policy and terms of service.

13. FTC Act Compliance and Consumer Protection

In accordance with the Federal Trade Commission Act (FTC Act), we are committed to engaging in fair and non-deceptive practices with respect to the collection and use of your personal information. We will not make false or misleading statements about our privacy practices and will honor all commitments made in this Privacy Policy.

We follow the FTC's guidelines on behavioral advertising, data security, and consumer privacy, including providing clear notice and choice regarding data collection practices. If you believe we have engaged in any unfair or deceptive privacy practices, you may file a complaint with the FTC at www.ftc.gov/complaint.

14. How to File a Privacy Complaint

If you have concerns about how we handle your personal information and wish to file a formal complaint, we encourage you to contact us first so that we can attempt to resolve the matter directly.

14.1 Internal Complaint Process

1. Submit your complaint in writing to: [email protected];
2. Include your full name, contact information, and a detailed description of your concern;
3. We will acknowledge your complaint within 5 business days and aim to provide a substantive response within 30 days.

14.2 Complaints to Regulatory Authorities

If you are not satisfied with our response, or if you believe your privacy rights have been violated, you may file a complaint with the appropriate regulatory authority:

15. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Currently, there is no universally accepted standard for responding to DNT signals. Our website does not currently alter its data collection practices in response to browser-based DNT signals. We will continue to monitor the development of DNT standards and update our practices accordingly.

California residents may also be entitled to request information about whether we disclose personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their independent direct marketing purposes without your consent.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page;
• Post a prominent notice on our website notifying you of the changes;
• Send an email notification to registered users where required by law or where we deem it appropriate.

Your continued use of our website or services following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your privacy inquiries promptly and transparently.