Privacy Policy

Welcome to Punch Pizza. This Privacy Policy explains how Punch Pizza ("we," "us," "our," or "the Company") collects, uses, discloses, and safeguards your personal information when you visit our website at punchs-pizza.digital, place an order, use our services, or interact with us in any capacity. Please read this policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.

We are committed to protecting your privacy and handling your personal information with transparency, integrity, and care. This policy is designed to comply with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission (FTC) Act, and other applicable consumer protection regulations.

If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services immediately.

1. About Punch Pizza

Punch Pizza is a food service business operating in the United States. Our contact information is as follows:

For all privacy-related inquiries, requests, or complaints, please contact us using the information provided above or refer to Section 16 (Contact Us) of this policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All visitors to our website at punchs-pizza.digital
• Customers who place online or in-person orders for food and beverages
• Individuals who create accounts or register on our platform
• Users who subscribe to our email newsletters, promotions, or loyalty programs
• Individuals who contact us through any communication channel, including phone, email, or social media
• Any person whose personal information we collect in connection with our business operations

This policy does not apply to third-party websites, applications, or services that may be linked to or from our website. We encourage you to review the privacy policies of any third-party platforms you visit independently.

3. Information We Collect

We collect various types of information in connection with our operations. The categories of personal information we may collect include the following:

3.1 Personal Identification Information

• Full name
• Email address
• Phone number
• Mailing or delivery address
• Date of birth (where required for age verification or loyalty programs)
• Username and password for account registration

3.2 Transaction and Order Information

• Order history, including items purchased, quantities, and special instructions
• Payment method details (we do not store full credit or debit card numbers; payment processing is handled by secure third-party processors)
• Billing information
• Delivery instructions and preferences
• Loyalty points balance and redemption history

3.3 Usage Data and Online Activity

When you visit our website, we automatically collect certain technical and behavioral information, including:

• Internet Protocol (IP) address
• Browser type and version
• Operating system and device type
• Pages viewed and navigation paths on our website
• Time and date of your visit
• Referring URL (the website that directed you to ours)
• Search queries entered on our website
• Duration of your visit and session interactions

3.4 Device Information

• Device identifiers (such as mobile device ID or advertising ID)
• Hardware model and configuration
• Screen resolution
• Network connection type (Wi-Fi, mobile data)
• Geolocation data (if you grant permission through your device settings)

3.5 Communications and Customer Support Information

• Messages and correspondence you send to us via email, contact forms, or live chat
• Records of phone calls with our customer service team (where permitted by law)
• Feedback, reviews, and survey responses you provide

3.6 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior. Please refer to Section 10 (Cookie Usage) for more detailed information about how we use cookies and how you can manage your preferences.

3.7 Information You Provide Voluntarily

• Profile photos or avatars (if uploaded to an account)
• Dietary preferences and food allergy information
• Marketing preferences and communication opt-ins
• Social media handles (if you connect social accounts)

4. How We Collect Information

We collect personal information through several methods:

4.1 Directly From You

We collect information you provide directly when you create an account, place an order, sign up for newsletters, contact our support team, fill out a form on our website, participate in surveys, or engage with promotions and contests.

4.2 Automatically Through Technology

When you interact with our website, we automatically collect certain data using cookies, analytics tools, server logs, and tracking pixels. This collection is largely passive and occurs as part of standard website operation.

4.3 From Third Parties

We may receive information about you from third-party sources, including:

• Food delivery platform partners (such as third-party delivery apps)
• Payment processors who confirm transaction details
• Marketing and advertising partners who provide audience insights
• Social media platforms, if you log in using social authentication or interact with our social media pages
• Fraud prevention and identity verification services

5. How We Use Your Information

Punch Pizza uses the personal information we collect for a range of legitimate business purposes, including:

5.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including delivery and pickup coordination
• Creating and managing your customer account
• Sending order confirmations, receipts, and status updates
• Facilitating payment processing and preventing fraudulent transactions
• Providing customer support and resolving complaints or inquiries

5.2 Analytics and Business Improvement

• Analyzing website usage patterns to improve navigation, design, and functionality
• Understanding customer preferences to enhance our menu offerings
• Conducting internal research, data analysis, and business forecasting
• Monitoring and improving the performance and security of our website and systems

5.3 Marketing and Promotional Communications

• Sending promotional emails, newsletters, and special offers (subject to your consent or opt-in)
• Personalizing advertisements and promotions based on your order history and preferences
• Running loyalty programs, rewards campaigns, and referral programs
• Conducting market research and customer satisfaction surveys
• Serving targeted advertisements through online advertising networks

5.4 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from government authorities, courts, and law enforcement agencies
• Enforcing our Terms of Service and other contractual agreements
• Protecting the rights, property, and safety of Punch Pizza, our customers, and the public
• Detecting, preventing, and investigating fraud, abuse, or other illegal activities

5.5 Operational and Administrative Purposes

• Maintaining accurate business records
• Managing supplier and partner relationships
• Training staff and improving service quality
• Processing refunds, credits, and adjustments to orders

6. Data Sharing With Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

6.1 Service Providers and Business Partners

We work with carefully selected third-party service providers who assist us in operating our business. These providers may have access to your personal information only to the extent necessary to perform their services on our behalf and are contractually obligated to maintain confidentiality and data security. Service providers include:

• Payment processing companies (e.g., Stripe, PayPal, Square)
• Cloud hosting and infrastructure providers
• Email marketing and communication platforms
• Website analytics providers (e.g., Google Analytics)
• Delivery logistics and courier services
• Customer relationship management (CRM) software providers
• Fraud detection and security services

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required to do so by law or in good-faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Protect and defend our legal rights or property
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of our users, employees, or the public

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring or successor entity. We will notify you via email or a prominent notice on our website prior to any such transfer and inform you of your choices regarding your information.

6.4 With Your Consent

We may share your information with other third parties when you have provided your explicit consent for us to do so, such as when you participate in co-branded promotions or authorize integration with third-party applications.

6.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other business purposes.

7. Data Security Measures

Punch Pizza takes the security of your personal information seriously. We implement a range of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, and destruction.

7.1 Technical Safeguards

• Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption for all data transmitted between your browser and our website
• Encrypted storage of sensitive personal data in our databases
• Firewalls, intrusion detection systems, and malware protection
• Secure, access-controlled hosting environments
• Regular security audits and vulnerability assessments

7.2 Administrative Safeguards

• Strict access controls limiting employee access to personal data on a need-to-know basis
• Staff training on data privacy best practices and security awareness
• Data handling policies and confidentiality agreements for all personnel
• Incident response procedures to address potential data breaches promptly

7.3 Payment Security

We do not store complete credit or debit card information on our servers. All payment transactions are processed through PCI DSS-compliant third-party payment processors. We only retain the last four digits of card numbers for reference purposes.

8. Your Privacy Rights

Depending on your state of residence within the United States, you may have a variety of rights with respect to your personal information. We are committed to honoring these rights in accordance with applicable law.

8.1 Rights Under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)

If you are a California resident, you have the following rights:

8.2 General Privacy Rights for All U.S. Residents

Regardless of your state of residence, we offer all users the following options:

• The ability to access and update your account information at any time by logging into your account
• The ability to opt out of marketing emails by clicking the "unsubscribe" link in any promotional email
• The ability to request deletion of your account and associated personal data by contacting us directly
• The ability to opt out of certain tracking technologies through your browser settings or our cookie preference tool

8.3 How to Submit a Privacy Rights Request

To exercise any of your privacy rights, please contact us using the following methods:

• Email: [email protected]
• Website: punchs-pizza.digital

We will acknowledge your request within 10 business days and respond substantively within 45 calendar days. If we require additional time, we will notify you of the extension and the reason for it. We may need to verify your identity before processing your request to ensure we are releasing information to the correct individual.

9. Cookie Usage

Punch Pizza uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising. Cookies are small text files stored on your device when you visit our website.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly, including enabling you to log in, add items to your cart, and complete transactions.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data. We use tools like Google Analytics for this purpose.
• Functionality Cookies: Remember your preferences (such as language, location, and order history) to provide a personalized experience.
• Marketing and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns across third-party websites.

9.2 Managing Your Cookie Preferences

You can control and manage cookies in several ways. Most browsers allow you to refuse cookies or to alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of our website. You can manage your preferences through:

• Your browser settings (consult your browser's help documentation)
• Our cookie consent banner displayed on your first visit
• Opt-out tools provided by third-party analytics providers (e.g., Google Analytics Opt-Out)

For more detailed information about the cookies we use and how to manage them, please refer to our dedicated Cookie Policy, available on our website.

10. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy, or as required by applicable law. Our general data retention guidelines are as follows:

When personal information is no longer required, we securely delete, destroy, or anonymize it in accordance with our data disposal procedures. Anonymized data may be retained indefinitely for analytical and business intelligence purposes.

11. Children's Privacy

Punch Pizza does not market directly to children and does not knowingly solicit or collect personal information from minors. Our website is not designed or intended for use by individuals under 18 years of age.

In compliance with the Children's Online Privacy Protection Act (COPPA), if we discover that we have inadvertently collected personal information from a child under the age of 13, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected].

Parents and guardians are encouraged to monitor their children's online activity and to educate them about safe internet practices. If you are between the ages of 13 and 17, please obtain parental or guardian consent before using our website or providing any personal information.

12. International Data Transfers

Punch Pizza is a United States-based business, and your personal information is primarily collected, stored, and processed within the United States. However, some of our third-party service providers may operate internationally, which means your data could be transferred to, stored in, or processed in countries outside of the United States.

When we transfer personal data internationally, we take appropriate steps to ensure that such transfers comply with applicable data protection laws and that your information is afforded an adequate level of protection. These steps may include:

• Entering into data processing agreements with international service providers that include appropriate contractual protections
• Ensuring that recipient countries provide an adequate level of data protection as determined by applicable authority
• Relying on recognized legal transfer mechanisms, such as Standard Contractual Clauses where applicable

By using our website and services, you acknowledge and consent to the potential transfer of your personal information to countries outside of the United States, where data protection laws may differ from those in your home state. We will always ensure that your information is treated securely and in accordance with this Privacy Policy.

13. Third-Party Links and Services

Our website may contain links to third-party websites, applications, social media platforms, or services that are not owned or operated by Punch Pizza. These links are provided for your convenience and informational purposes only. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We strongly encourage you to review the privacy policy of every website or application you visit. The presence of a link to a third-party website on our platform does not constitute our endorsement, sponsorship, or approval of that website or its privacy practices. Your interactions with such third-party platforms are governed solely by their respective privacy policies and terms of service.

14. Marketing Communications and Opt-Out

With your consent, we may send you promotional emails, text messages, push notifications, and other marketing communications about our menu, special offers, loyalty rewards, new products, and seasonal promotions.

14.1 How to Opt Out

You may withdraw your consent and opt out of marketing communications at any time using the following methods:

• Email: Click the "Unsubscribe" or "Opt-Out" link located at the bottom of any marketing email we send you
• Account Settings: Log into your account at punchs-pizza.digital and update your communication preferences
• Contact Us: Send a request to [email protected]

Please note that even if you opt out of marketing communications, we may still send you transactional and operational emails related to your orders, account activity, security alerts, and other service-related matters.

14.2 Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Currently, there is no universally accepted standard for responding to DNT signals. We will continue to monitor industry developments regarding DNT and update our practices accordingly.

15. Your Rights Under the FTC Act and Other Federal Protections

The Federal Trade Commission (FTC) Act prohibits unfair or deceptive acts or practices in commerce, including deceptive privacy practices. Punch Pizza is committed to maintaining truthful, transparent, and fair data practices in compliance with FTC guidelines and enforcement standards.

The FTC has authority over commercial privacy practices and may take enforcement action against businesses that engage in deceptive or misleading data collection, sharing, or use practices. We take our obligations under the FTC Act seriously and continuously review our privacy practices to ensure compliance.

Additionally, we comply with the CAN-SPAM Act governing commercial email communications, the Telephone Consumer Protection Act (TCPA) governing text message and telephone marketing, and all other applicable federal consumer protection statutes.

16. Filing a Complaint With a Data Protection Authority

If you believe that your privacy rights have been violated or that we have not adequately addressed your concerns, you have the right to file a complaint with the appropriate regulatory authority.

16.1 Federal Trade Commission (FTC)

For privacy concerns related to unfair or deceptive business practices at the federal level, you may contact:

• Federal Trade Commission (FTC)
• Website: www.ftc.gov
• Consumer Helpline: 1-877-FTC-HELP (1-877-382-4357)
• Online Complaint Assistant: reportfraud.ftc.gov

16.2 California Privacy Protection Agency (CPPA)

If you are a California resident and have concerns about our compliance with the CCPA/CPRA, you may contact:

• California Privacy Protection Agency (CPPA)
• Website: cppa.ca.gov
• Email: [email protected]

16.3 State Attorney General Offices

Residents of other states may also contact their respective State Attorney General's office to file privacy-related complaints. Most state attorneys general have consumer protection divisions that handle data privacy matters.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website informing you of the changes
• Send an email notification to registered users where the changes are significant

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website or services following the posting of changes constitutes your acceptance of the revised policy. If you do not agree with the updated terms, please discontinue use of our services and contact us to close your account.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact us. We take all privacy inquiries seriously and will respond promptly.

When contacting us with a privacy request, please provide sufficient information to help us identify your account and process your request efficiently. We will acknowledge all privacy-related inquiries within 10 business days and provide a substantive response within 45 calendar days, unless a longer period is permitted by law.