Privacy Policy

This Privacy Policy describes how Pizzana ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at pizzanapizza.digital, place orders, use our digital services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and care.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described herein. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services immediately.

This Privacy Policy is governed by applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), the CAN-SPAM Act, and other applicable federal and state regulations.

1. About Us

Pizzana is a food service company operating in the United States. We are dedicated to delivering exceptional culinary experiences to our customers through our digital ordering platform, website, and related services.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information, please contact us using the information provided above or in the Contact Us section at the end of this document.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, participate in promotions, or otherwise interact with us, we may collect personal identification information, including but not limited to:

• Full name
• Email address
• Phone number
• Mailing address and delivery address
• Date of birth (for age verification purposes)
• Username and password (for account holders)
• Profile photo (if provided)

2.2 Payment and Financial Information

When you make a purchase or place an order through our platform, we collect payment-related information necessary to process your transaction. This may include:

• Credit or debit card details (processed securely through third-party payment processors)
• Billing address
• Transaction history and order records
• Digital wallet information (such as Apple Pay or Google Pay identifiers)

We do not store full credit card numbers on our servers. All payment information is handled by PCI DSS-compliant third-party payment processors.

2.3 Order and Transaction Data

We collect information related to your food orders and transactions with us, including:

• Items ordered and customizations requested
• Order date, time, and frequency
• Delivery or pickup preferences
• Special dietary requests or notes
• Order status and fulfillment records
• Customer service interactions related to orders

2.4 Usage Data and Behavioral Information

We automatically collect information about how you interact with our website and digital services, including:

• Pages visited and content viewed
• Links clicked and buttons activated
• Time spent on pages and session duration
• Search queries entered on our platform
• Products viewed, added to cart, or abandoned
• Referral URLs and traffic sources
• Scroll depth and interaction patterns

2.5 Device and Technical Information

When you access our website or mobile services, we automatically collect certain technical and device-related information, such as:

• IP address and approximate geographic location derived therefrom
• Browser type and version
• Operating system and device type
• Device identifiers (such as mobile advertising IDs)
• Screen resolution and display settings
• Language settings
• Internet service provider (ISP)
• Time zone settings

2.6 Location Information

With your consent, we may collect precise or approximate geolocation data to facilitate delivery services, suggest nearby locations, and provide location-based promotions. You may disable location tracking through your device or browser settings at any time.

2.7 Communications and Customer Support Data

If you contact us via email, phone, online chat, or social media, we collect the content of those communications, your contact information, and any other information you choose to provide. This helps us respond to inquiries and improve our customer service.

2.8 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing activity on our website. For detailed information about our use of cookies, please refer to Section 8 (Cookie Usage) of this Privacy Policy.

2.9 User-Generated Content

If you submit reviews, ratings, photos, or other content through our platform or social media channels, we collect and may display that content in connection with our services.

2.10 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you connect your social account or interact with our social pages)
• Third-party delivery partners or aggregators
• Analytics and advertising providers
• Fraud prevention services
• Marketing data enrichment providers

3. How We Use Your Information

We use the personal information we collect for a variety of purposes, all consistent with applicable law. These purposes include:

3.1 Providing and Managing Services

• Processing and fulfilling your food orders
• Managing your account and account preferences
• Facilitating payment transactions
• Coordinating delivery or pickup logistics
• Communicating order confirmations, updates, and receipts
• Responding to customer inquiries and resolving complaints

3.2 Analytics and Service Improvement

• Analyzing website traffic patterns and user behavior
• Conducting research and analysis to improve our menu, services, and user experience
• Diagnosing technical problems and maintaining platform performance
• Testing new features and service offerings
• Developing internal business intelligence and reporting

3.3 Marketing and Promotional Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required)
• Delivering personalized content and targeted advertising based on your preferences and order history
• Informing you about new menu items, seasonal specials, and loyalty program benefits
• Retargeting campaigns through digital advertising networks
• Conducting surveys, contests, and promotional campaigns

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly at [email protected].

3.4 Legal Compliance and Protection

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from government authorities or law enforcement
• Detecting, preventing, and investigating fraud, security breaches, and other illegal activity
• Enforcing our Terms of Service and other legal agreements
• Protecting the rights, property, and safety of Pizzana, our customers, and the public

3.5 Personalization

• Remembering your preferences and past orders to enhance your experience
• Providing personalized menu recommendations based on your order history
• Tailoring the website interface to your preferences

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the circumstances described below:

4.1 Service Providers and Vendors

We engage trusted third-party service providers who assist us in operating our business and delivering services to you. These providers are contractually obligated to use your information only as directed by us and to maintain appropriate security measures. Categories of service providers include:

• Payment processors — to handle credit/debit card transactions and financial data securely
• Delivery partners — to fulfill delivery orders to your location
• Cloud hosting and infrastructure providers — to store and manage data on secure servers
• Analytics providers — such as Google Analytics, to help us understand website usage
• Email marketing platforms — to send newsletters and promotional communications
• Customer support platforms — to manage help desk and support ticketing systems
• Fraud detection and cybersecurity firms — to protect our platform from malicious activity

4.2 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, or other similar business transaction, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website if such a transfer affects your data and results in a material change in how your information is used.

4.3 Legal Requirements and Law Enforcement

We may disclose your information when we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, or governmental request
• Respond to a valid subpoena, warrant, or legal process
• Protect and defend the legal rights or property of Pizzana
• Investigate and prevent suspected fraud, illegal activity, or violations of our policies
• Protect the personal safety of our users, employees, or the public

4.4 Advertising and Analytics Partners

We may share aggregated, de-identified, or pseudonymized data with advertising networks and analytics partners to help us deliver relevant advertisements and measure campaign performance. This data does not directly identify you. Where required by law, we will obtain your consent before sharing data with advertising partners.

4.5 With Your Consent

We may share your information with other third parties for purposes not described in this Privacy Policy when we have obtained your explicit consent to do so.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, organizational, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, and destruction.

5.1 Security Measures We Employ

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, and all staff are trained on data protection best practices.
• Secure Payment Processing: All payment data is processed through PCI DSS-compliant third-party processors and is not stored on our servers.
• Regular Security Audits: We conduct periodic reviews of our data security practices and infrastructure to identify and remediate vulnerabilities.
• Firewalls and Intrusion Detection: We deploy firewalls, intrusion detection systems, and monitoring tools to safeguard our network and servers.
• Data Minimization: We collect only the personal information necessary for the purposes described in this Privacy Policy.

5.2 Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with applicable law. Notifications will be made without undue delay and will include information about the nature of the breach, what data was affected, and the steps we are taking to address the situation.

6. Your Privacy Rights

Depending on your state of residence and applicable law, you may have specific rights regarding your personal information. We are committed to honoring these rights to the fullest extent required by law.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you, including the categories and specific pieces of information.
• Right to Delete: You have the right to request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes.
• Right to Limit Use of Sensitive Personal Information: Where applicable, you may limit our use and disclosure of sensitive personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, or provide a different level of service based on your exercise of privacy rights.

6.2 General Privacy Rights (All Users)

Regardless of your location, we strive to provide all users with the following rights:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that inaccurate or incomplete information about you be corrected or updated.
• Right to Deletion: You may request the deletion of your personal information where it is no longer necessary for the purposes for which it was collected.
• Right to Data Portability: You may request that we provide your personal information in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to Object to Marketing: You may opt out of receiving direct marketing communications at any time.

6.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a verifiable request to us by:

• Sending an email to: [email protected]
• Using the contact form available on our website at pizzanapizza.digital

We will acknowledge receipt of your request within 10 business days and respond within 45 calendar days of receiving a verifiable request. If we require additional time, we will notify you of the extension and the reason for the delay. We may need to verify your identity before processing your request to protect the security of your information.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention period depends on the type of information and the purpose for which it was collected.

When personal information is no longer required, we will securely delete or anonymize it in accordance with our data deletion procedures. Where anonymization is not possible (e.g., because information is stored in backup archives), we will isolate the information and protect it from further processing until deletion is possible.

8. Cookie Usage

We use cookies and similar tracking technologies on our website to enhance your browsing experience, analyze website traffic, personalize content, and deliver targeted advertising.

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device, remember your preferences, and collect information about how you use the site.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the basic functioning of our website, including secure login, shopping cart functionality, and order processing. These cannot be disabled.
• Performance and Analytics Cookies: Used to collect information about how visitors use our website, helping us improve site performance and user experience (e.g., Google Analytics).
• Functional Cookies: Allow our website to remember your preferences (such as language, region, or menu customizations) and provide enhanced features.
• Marketing and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns across third-party platforms.

8.3 Managing Cookies

You may control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website. For more detailed information about the specific cookies we use and how to manage them, please review our full Cookie Policy available on our website at pizzanapizza.digital.

9. Children's Privacy

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under the age of 13 without verifiable parental consent.

If you are a parent or guardian and you believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will promptly investigate and, if confirmed, delete the child's personal information from our systems.

By using our website and services, you represent and warrant that you are at least 18 years of age. If you are between the ages of 13 and 17, you may only use our services under the direct supervision of a parent or legal guardian who agrees to be bound by this Privacy Policy.

10. International Data Transfers

Pizzana is based in the United States, and our servers and systems are primarily located within the United States. However, some of our third-party service providers may be located in other countries, which means your personal information may be transferred to, stored in, or processed in countries outside the United States.

When we transfer personal information internationally, we take steps to ensure that appropriate safeguards are in place to protect your information in accordance with applicable law. These safeguards may include:

• Entering into data processing agreements with third-party providers that include appropriate contractual protections
• Ensuring that recipients of data in other countries provide an adequate level of data protection
• Relying on recognized legal transfer mechanisms where required

By using our services, you acknowledge and consent to the transfer of your information to the United States and other countries where our service providers operate, which may have different data protection laws than your country of residence.

11. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, and external services that are not operated by us. We include these links for your convenience and informational purposes only. We have no control over the content, privacy practices, or policies of any third-party websites.

We strongly advise you to review the privacy policies of any third-party websites you visit. We are not responsible for the privacy practices or content of such external sites. The inclusion of a link on our website does not imply our endorsement of the linked site or its privacy practices.

12. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that the user does not wish to be tracked. At this time, our website does not respond to DNT signals from browsers, as there is no universally accepted standard for how websites should respond to such signals. However, you can manage your tracking preferences through your browser settings and our cookie consent tools as described in Section 8.

We will continue to monitor developments in DNT standards and update our practices accordingly if a standard is adopted.

13. California-Specific Disclosures

In addition to the rights described in Section 6, California residents are entitled to specific disclosures under California law, including the Shine the Light Law (California Civil Code Section 1798.83). This law permits California residents to request information about the categories of personal information we share with third parties for their direct marketing purposes.

To make such a request, please contact us at [email protected] with "California Privacy Request" in the subject line. We will respond to your request within the timeframe required by applicable law.

13.1 Categories of Personal Information Collected in the Past 12 Months

• Identifiers (name, email address, phone number, IP address)
• Commercial information (order history, transaction records)
• Internet and electronic network activity (browsing behavior, cookies)
• Geolocation data (with consent)
• Inferences drawn from personal information (preferences, purchase patterns)

13.2 Categories of Personal Information Disclosed for Business Purposes in the Past 12 Months

• Identifiers — shared with payment processors, delivery partners, and analytics providers
• Commercial information — shared with delivery partners and customer service platforms
• Internet activity — shared with analytics and advertising partners

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on this page with a revised "Last Updated" date
• Sending a notification email to the address associated with your account (for registered users)
• Displaying a prominent notice on our website homepage

Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15. Filing Complaints

If you have concerns about our privacy practices that we have not adequately addressed, you have the right to file a complaint with the appropriate regulatory authority.

15.1 Federal Trade Commission (FTC)

The FTC is the primary federal consumer protection authority in the United States. You may file a complaint with the FTC at:

• Website: www.ftc.gov
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

15.2 California Privacy Protection Agency (CPPA)

California residents may also file complaints with the California Privacy Protection Agency (CPPA), the agency responsible for enforcing the CCPA/CPRA:

• Website: cppa.ca.gov
• Address: California Privacy Protection Agency, 2101 Arena Blvd., Sacramento, CA 95834

15.3 State Attorney General Offices

Many states have Attorney General offices that handle consumer privacy complaints. You may contact your state's Attorney General to learn about the privacy complaint process applicable to your jurisdiction.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact our privacy team. We are committed to addressing your concerns promptly and transparently.

When contacting us about a privacy matter, please include your full name, email address associated with your account (if applicable), a description of your request or concern, and any relevant reference numbers. This will help us process your request efficiently and accurately.

We aim to respond to all privacy inquiries within 10 business days of receipt and to fully resolve requests within the timeframes required by applicable law.