Privacy Policy

This Privacy Policy describes how Punch Pizza ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects your personal information when you visit our website at pizzpunch.digital, place orders through our platform, interact with our digital services, or otherwise engage with us in connection with our food and restaurant services. Please read this Privacy Policy carefully before using our services.

By accessing or using our website, submitting an order, creating an account, or otherwise interacting with Punch Pizza's digital presence, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with these terms, please discontinue use of our services immediately.

This Privacy Policy applies to all users located in the United States and is governed by applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant consumer protection statutes.

1. About Us

Punch Pizza is a food service business operating in the United States. We are committed to protecting your privacy and handling your personal data responsibly, transparently, and in accordance with applicable law.

2. Information We Collect

We collect various categories of personal and non-personal information to provide, improve, and maintain our services. The types of information we collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you register for an account, place a food order, subscribe to our newsletter, participate in promotions, or otherwise interact with our services, we may collect:

• Full name
• Email address
• Phone number
• Billing and delivery address (street address, city, state, ZIP code)
• Date of birth (where required for age verification)
• Username and password for your account
• Profile photo (if voluntarily uploaded)
• Payment information (processed securely through third-party payment processors; we do not store full credit card numbers)

2.2 Order and Transaction Data

When you purchase food, place delivery orders, or engage in any commercial transaction through our platform, we collect:

• Order history and itemized purchase records
• Preferred menu items and dietary preferences you submit
• Delivery instructions and special requests
• Payment method type (e.g., credit card, debit card, digital wallet)
• Transaction amounts, dates, and times
• Loyalty points, rewards, and promotion redemptions

2.3 Usage Data and Analytics

We automatically collect information about how you interact with our website and digital services, including:

• Pages viewed and time spent on each page
• Links clicked and navigation paths
• Search queries entered on our website
• Referral source (how you arrived at our website)
• Cart activity including items added, removed, or abandoned
• Error logs and performance data
• Session duration and frequency of visits

2.4 Device and Technical Information

When you access our website from any device, we may automatically collect technical information, including:

• IP address
• Browser type and version
• Operating system and platform
• Device identifiers (including mobile device IDs)
• Screen resolution and display settings
• Time zone and regional settings
• Network provider information

2.5 Location Data

With your explicit consent, or as necessary to fulfill delivery services, we may collect:

• Precise GPS location (if you enable location services in your browser or app)
• General geographic location derived from your IP address
• Delivery addresses you provide manually

2.6 Communications and Feedback

When you contact our customer support team, submit feedback, write reviews, or communicate with us through any channel, we collect:

• The content of your messages and inquiries
• Feedback and survey responses
• Reviews and ratings submitted about our products or services
• Records of correspondence for quality assurance purposes

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, local storage, and similar tracking technologies to collect information about your browsing behavior. For detailed information, please refer to Section 8: Cookie Policy of this document.

2.8 Information from Third Parties

We may receive information about you from third parties, such as:

• Social media platforms (if you connect your account or interact with our social pages)
• Third-party food delivery and ordering platforms we partner with
• Payment processors and fraud prevention services
• Marketing analytics and advertising partners
• Publicly available sources and consumer data providers

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business and operational purposes. Below is a detailed breakdown of how your data is used:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders and delivery requests
• Creating, managing, and maintaining your customer account
• Sending order confirmations, receipts, and delivery status updates
• Verifying your identity and preventing unauthorized account access
• Processing payments and managing billing
• Providing customer support and resolving disputes or complaints

3.2 Personalization

• Personalizing your browsing and ordering experience based on your history
• Offering menu recommendations based on your preferences
• Displaying relevant promotions, deals, and offers tailored to your location or order history
• Remembering your preferences, saved addresses, and payment methods

3.3 Marketing and Promotional Communications

• Sending promotional emails, newsletters, or SMS messages about new menu items, offers, and discounts (only where you have opted in or where permitted by law)
• Running loyalty programs, contests, giveaways, and promotional campaigns
• Delivering targeted advertising on our website and third-party platforms
• Retargeting users who have previously visited our website

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us at [email protected].

3.4 Analytics and Service Improvement

• Analyzing website traffic, user behavior, and engagement metrics
• Conducting internal research and development to improve our menu, website, and services
• Identifying and resolving technical issues, bugs, and performance problems
• Understanding customer preferences to improve operational efficiency

3.5 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal obligations
• Responding to lawful requests from government authorities or law enforcement
• Enforcing our Terms of Service and other agreements
• Detecting, investigating, and preventing fraud, abuse, or security incidents
• Protecting the rights, safety, and property of Punch Pizza, our users, and the public

4. Sharing of Your Information with Third Parties

Punch Pizza does not sell your personal information for monetary compensation. However, we may share your information with third parties in the following circumstances:

4.1 Service Providers and Vendors

We work with trusted third-party companies and individuals who assist us in operating our business. These service providers are given access only to the information necessary to perform their functions and are contractually required to maintain confidentiality. They include:

• Payment processors (e.g., Stripe, Square, PayPal) for secure transaction handling
• Delivery logistics partners for coordinating order fulfillment
• Email and SMS marketing platforms for sending communications
• Cloud hosting and infrastructure providers for data storage and website performance
• Analytics providers (e.g., Google Analytics) for tracking and reporting on website performance
• Customer relationship management (CRM) software providers
• Fraud prevention and identity verification services

4.2 Business Partners

We may share data with select business partners for joint promotions, co-branded offerings, or integrated services. In such cases, both parties will provide notice to you and will be jointly responsible for the handling of your data.

4.3 Legal Requirements

We may disclose your personal information where required to do so by law or in good-faith belief that such action is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request
• Protect and defend the legal rights of Punch Pizza
• Investigate potential violations of our policies
• Protect the personal safety of users or the public
• Prevent fraud or illegal activity

4.4 Business Transfers

In the event that Punch Pizza undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or part of its assets, your personal information may be transferred to the successor entity. We will notify you via email or prominent website notice prior to any such transfer if your data will be subject to a materially different privacy policy.

4.5 Aggregated or De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, industry reporting, or marketing purposes.

5. Data Security

Punch Pizza takes the security of your personal information seriously. We implement a range of administrative, technical, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your browser and our servers is protected using industry-standard SSL/TLS encryption protocols.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis and governed by role-based permissions.
• Secure Payment Processing: Payment card data is processed exclusively through PCI-DSS compliant third-party payment processors. We do not store full payment card numbers on our systems.
• Password Hashing: User account passwords are stored in hashed and salted formats using industry best practices.
• Regular Security Audits: We periodically review our data collection, storage, and processing practices and conduct security assessments to identify potential vulnerabilities.
• Incident Response: We maintain a data breach response plan and will notify affected users and relevant authorities in the event of a data breach as required by applicable law.

6. Your Privacy Rights

Depending on your state of residence within the United States, you may have various rights with respect to your personal information. We are committed to honoring these rights to the fullest extent required by law.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

6.2 General Privacy Rights (All U.S. Users)

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Correction: You may request that we correct inaccurate or outdated information.
• Right to Deletion: You may request deletion of your personal data where we no longer have a legitimate basis to retain it.
• Right to Portability: You may request your data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications at any time.

6.3 How to Exercise Your Rights

To exercise any of the rights described in this section, please contact us using the following methods:

• Email: [email protected]
• Website: pizzpunch.digital

We will respond to verifiable consumer requests within 45 days of receipt. If we require more time (up to 90 days total), we will inform you in writing. We may need to verify your identity before processing your request to protect your privacy and prevent unauthorized access.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention practices are as follows:

When your data is no longer needed, we will securely delete or anonymize it so it can no longer be associated with you.

8. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver targeted advertising. By continuing to use our website, you consent to our use of cookies in accordance with this section.

8.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They allow the website to recognize your device on subsequent visits, remember your preferences, and collect information about your usage patterns.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function. They enable core features such as login sessions, shopping cart functionality, and security. These cookies cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting information such as page views, traffic sources, and user journeys. We use tools such as Google Analytics for this purpose.
• Functional Cookies: Allow the website to remember your preferences (e.g., saved addresses, language preferences, and menu favorites) to provide an enhanced, personalized experience.
• Targeting and Advertising Cookies: Used to deliver advertisements relevant to your interests. They also help measure the effectiveness of our advertising campaigns on third-party platforms.

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders. You may also opt out of interest-based advertising through the Digital Advertising Alliance or the Network Advertising Initiative.

9. Children's Privacy

Punch Pizza does not knowingly collect, solicit, or maintain personal information from any person under the age of 18. Our services, including online ordering, account registration, and marketing communications, are directed exclusively toward adults.

If you are a parent or guardian and believe that your child has provided personal information to us without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly delete such information from our systems in accordance with applicable law, including the Children's Online Privacy Protection Act (COPPA).

We do not use any personal information collected from minors for marketing purposes and do not condition participation in any promotion or service on the collection of more information from a child than is reasonably necessary.

10. International Data Transfers

Punch Pizza is a United States-based business and our primary data processing activities occur within the United States. However, some of our third-party service providers, technology platforms, and cloud infrastructure partners may store or process data in other countries.

If your personal data is transferred outside of the United States to jurisdictions that may not offer the same level of data protection, we take appropriate steps to ensure that your data remains protected in accordance with applicable U.S. law. These steps may include:

• Entering into data processing agreements with third-party service providers that include standard contractual protections
• Ensuring that third-party providers implement equivalent security measures
• Only transferring data to countries or organizations that provide an adequate level of protection

By using our services, you acknowledge and consent to the potential transfer of your personal information to countries outside of your state or country of residence for the purposes described in this Privacy Policy.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services (such as social media platforms, delivery partners, or payment portals) that are not operated by Punch Pizza. We have no control over and assume no responsibility for the privacy practices, content, or security of these third-party services.

We encourage you to review the privacy policies of any third-party websites you visit through links on our platform. The inclusion of any link does not imply endorsement by Punch Pizza of the linked website or its privacy practices.

12. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your browsing activity not be tracked. As there is no universally accepted standard for how businesses should respond to DNT signals, our website does not currently alter its data collection practices in response to DNT signals. However, you may manage your tracking preferences through cookie settings as described in Section 8.

13. Your California Privacy Rights (Shine the Light Law)

California Civil Code Section 1798.83, known as the "Shine the Light" law, permits California residents who have an established business relationship with us to request information about how we share personal information with third parties for their direct marketing purposes.

If you are a California resident and wish to make such a request, please contact us at [email protected] with the subject line "California Shine the Light Request." We will respond within 30 days of receiving your verified request.

14. How to File a Complaint

We are committed to resolving any concerns or complaints about our privacy practices. If you believe that we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to first contact us directly so that we can address your concern.

14.1 Contact Us Directly

Please send your complaint or inquiry to:

• Email: [email protected]
• Website: pizzpunch.digital

We will acknowledge receipt of your complaint within 5 business days and aim to resolve all privacy-related complaints within 30 days.

14.2 Filing a Complaint with a Regulatory Authority

If you are not satisfied with our response or believe that we are processing your personal data in violation of applicable law, you have the right to file a complaint with the appropriate regulatory authority:

• Federal Trade Commission (FTC): The FTC enforces consumer protection laws in the United States, including protections against unfair or deceptive privacy practices under Section 5 of the FTC Act.
  Website: https://www.ftc.gov/about-ftc/contact
  Phone: 1-877-382-4357
• California Privacy Protection Agency (CPPA): California residents may file complaints regarding violations of the CCPA/CPRA with the California Privacy Protection Agency.
  Website: https://cppa.ca.gov/
• California Attorney General: Complaints about CCPA violations may also be submitted to the California Attorney General's office.
  Website: https://oag.ca.gov/privacy/ccpa

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website homepage
• Send an email notification to registered users where required by law

Your continued use of our website or services after any modifications to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

16. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team:

We aim to respond to all privacy inquiries within 5 to 10 business days. For urgent matters involving potential data breaches or significant privacy violations, please mark your communication as urgent in the subject line.