Privacy Policy

This Privacy Policy describes how Pizzana ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at pizzanapizza.rest, place an order, use our services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and respect.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this document. If you do not agree with any part of this policy, please discontinue use of our website and services immediately.

We operate in the United States and are subject to applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations.

1. About Us and How to Contact Us

Pizzana is a food business operating in the United States. For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us using the information below:

Our privacy team is available to respond to your inquiries. We strive to respond to all privacy-related communications within 45 business days, as required under applicable law.

2. Information We Collect

We collect various categories of information depending on how you interact with our website and services. The types of information we collect are described in detail below.

2.1 Personal Information You Provide Directly

When you interact with our website, create an account, place an order, or communicate with us, you may voluntarily provide us with the following personal information:

• Identity Information: Full name, username, or similar identifiers.
• Contact Information: Email address, mailing address, billing address, delivery address, and telephone number.
• Account Credentials: Username and encrypted password when you register an account with us.
• Payment Information: Credit or debit card numbers, billing details, and other financial information necessary to process your transactions. Note that full payment card numbers are not stored by us — they are processed securely by our authorized payment processors.
• Order Information: Details of the food items you order, special dietary requests, delivery instructions, and order history.
• Communications Data: Records of your correspondence with us, including emails, chat messages, and customer service inquiries.
• Marketing Preferences: Your preferences for receiving marketing and promotional communications from us.
• Feedback and Reviews: Reviews, ratings, survey responses, and other feedback you voluntarily provide.

2.2 Information We Collect Automatically

When you visit our website, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies. This includes:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, and hardware model.
• Log Data: IP address, date and time of your visit, pages viewed, links clicked, referring website URL, and time spent on pages.
• Usage Data: Information about how you interact with our website, including clickstream data, search queries entered, features used, and navigation patterns.
• Location Data: Approximate geographic location derived from your IP address. If you grant permission, we may also collect more precise geolocation data to provide delivery services.
• Cookie and Tracking Data: Information collected via cookies, pixel tags, web beacons, and similar technologies. Please refer to Section 8 of this policy for more details about our cookie practices.

2.3 Information We Collect from Third Parties

We may receive information about you from third-party sources, which we may combine with the information we already hold about you. These sources include:

• Business Partners: Delivery service platforms, reservation platforms, and third-party ordering apps that facilitate orders on our behalf.
• Social Media Platforms: If you connect your social media account to our services or interact with our branded social media pages, we may receive information consistent with your privacy settings on those platforms.
• Payment Processors: Transaction confirmation and fraud prevention signals from our authorized payment processors.
• Analytics Providers: Aggregated or pseudonymized analytics data from third-party analytics services to help us understand website traffic and user behavior.
• Publicly Available Sources: Publicly available information, such as reviews posted on public platforms.

3. How We Use Your Information

We use the information we collect for the following purposes, each grounded in a legitimate business reason or your explicit consent:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including coordinating delivery or pickup.
• Creating and managing your customer account.
• Processing payments and preventing fraudulent transactions.
• Providing customer support and responding to your inquiries and complaints.
• Sending you order confirmations, receipts, and transactional communications.
• Managing loyalty programs, rewards, or promotional offers you participate in.

3.2 Improving Our Website and Services

• Analyzing how visitors use our website to improve its design, functionality, and content.
• Conducting internal research, data analysis, and testing to enhance our offerings.
• Monitoring for and addressing technical issues, bugs, and security vulnerabilities.
• Developing new menu items, features, and services based on customer preferences and behavior.

3.3 Marketing and Communications

• Sending you marketing emails, newsletters, special offers, and promotional materials about our food, services, and events — but only where you have opted in or where permitted by applicable law.
• Personalizing the content and advertisements you see on our website and on third-party platforms based on your interests and browsing behavior.
• Retargeting campaigns on third-party advertising networks where permitted.
• Conducting surveys and collecting feedback to measure customer satisfaction.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email we send you, or by contacting us at [email protected]. Opting out of marketing communications will not affect your receipt of transactional messages related to your orders.

3.4 Legal Compliance and Protection

• Complying with applicable federal, state, and local laws and regulations.
• Responding to lawful requests from government authorities, courts, and law enforcement agencies.
• Enforcing our Terms of Service and other agreements.
• Protecting the rights, property, and safety of Pizzana, our customers, and the public.
• Detecting, investigating, and preventing fraud, abuse, and other harmful activities.

4. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own independent marketing purposes. However, we do share your information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf. These service providers have access to your personal information only as necessary to perform their functions and are contractually prohibited from using it for any other purpose. Our service providers include:

• Payment Processors: To securely process your payments (e.g., Stripe, Square, or similar providers).
• Delivery Partners: To fulfill food delivery orders to your specified address.
• Cloud Hosting Providers: To host our website, databases, and infrastructure securely.
• Email Service Providers: To send transactional and marketing emails on our behalf.
• Analytics Providers: To help us understand website usage (e.g., Google Analytics).
• Customer Support Tools: To manage and respond to customer inquiries.
• Advertising Networks: To serve targeted advertisements on our behalf on third-party platforms.

4.2 Legal Requirements

We may disclose your personal information if required to do so by law or in good faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request.
• Protect and defend the rights or property of Pizzana.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of our customers, employees, or the public.
• Protect against legal liability.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as part of the transaction. We will notify you via email and/or a prominent notice on our website of any such change in ownership or use of your personal information, and we will outline your choices in that event.

4.4 With Your Consent

We may share your information with third parties for purposes not listed above when we have obtained your explicit consent to do so.

5. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards to protect your data from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: All data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology.
• Access Controls: Access to personal data is restricted to authorized personnel who need the information to perform their job functions, and all staff are subject to confidentiality obligations.
• Payment Security: We comply with the Payment Card Industry Data Security Standard (PCI-DSS) requirements and do not store full credit card numbers on our systems.
• Secure Infrastructure: Our website and databases are hosted on secure, industry-standard cloud infrastructure with regular security audits and vulnerability assessments.
• Data Minimization: We collect only the personal information necessary for the purposes described in this policy.
• Incident Response: We maintain an incident response plan and will notify affected users in the event of a data breach as required by applicable law, including state breach notification laws.

6. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We are committed to honoring all applicable rights under federal and state law, including those provided under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

6.1 Rights Available to All Users

• Right to Know / Access: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the purposes for which we collect it, and the third parties with whom we share it.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (e.g., where we are required by law to retain it, or where it is necessary to complete a transaction).
• Right to Opt Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time.

6.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the CCPA/CPRA:

• Right to Know the Sale or Sharing of Personal Information: You have the right to know whether we sell or share your personal information with third parties. We do not sell personal information in the traditional sense, but we may share data with advertising partners, which may constitute "sharing" under CPRA.
• Right to Opt Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. You may exercise this right by contacting us at [email protected].
• Right to Limit Use of Sensitive Personal Information: Where we collect sensitive personal information (as defined by CPRA), you have the right to limit our use of that information to what is necessary to provide the requested services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide a different quality of service based solely on your exercise of your privacy rights.
• Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that information to another service provider where technically feasible.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a request to us by:

• Email: [email protected] (please include "Privacy Rights Request" in the subject line)
• Website: pizzanapizza.rest

We may need to verify your identity before processing your request. Verification may require you to provide certain information to confirm that you are the person whose data we hold. We will respond to verified requests within 45 days, with the possibility of a 45-day extension where reasonably necessary and upon prior notice to you.

You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide proof of authorization, and we may still verify your identity directly before processing the request.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The criteria we use to determine retention periods include:

• Active Account Data: We retain your personal information for as long as your account remains active or as needed to provide you with services.
• Order Records: We retain transactional and order records for a minimum of 5 years to comply with tax, accounting, and financial record-keeping requirements under applicable federal and state law.
• Marketing Data: Marketing preferences and related data are retained until you opt out or request deletion.
• Customer Support Records: Communications related to customer support are typically retained for 3 years following resolution of the inquiry.
• Legal Compliance: Certain data may be retained for longer periods where required by law, court order, or for the establishment, exercise, or defense of legal claims.
• Anonymized Data: We may retain anonymized or aggregated data that cannot reasonably be used to identify you indefinitely for statistical and research purposes.

Upon expiration of the applicable retention period, we will securely delete or anonymize your personal information in accordance with our internal data retention policies.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage) to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising.

8.1 Types of Cookies We Use

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, please note that disabling certain cookies may affect the functionality of our website. For more detailed information about our use of cookies and how to manage them, please refer to our Cookie Policy.

9. Children's Privacy

We do not knowingly market to, solicit, or collect personal information from minors under the age of 18. If you are under 18 years old, please do not use our website or provide any personal information to us.

If we become aware that we have inadvertently collected personal information from a child under the age of 18 without verifiable parental consent, we will take prompt steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

Our practices in this regard are consistent with the requirements of the Children's Online Privacy Protection Act (COPPA) and applicable Federal Trade Commission regulations.

10. International Data Transfers

Pizzana is based in the United States, and your personal information is primarily stored and processed within the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in a country where data protection laws may differ from those in your home country.

By using our website and providing us with your personal information, you acknowledge and consent to the transfer of your data to the United States and to its processing in accordance with this Privacy Policy.

We take reasonable steps to ensure that any international transfers of personal data are conducted in compliance with applicable law and with adequate safeguards to protect your privacy and rights. If you have questions about the specific safeguards in place for international data transfers, please contact us at [email protected].

11. Third-Party Websites and Links

Our website may contain links to third-party websites, platforms, social media pages, and services that are not operated or controlled by Pizzana. This Privacy Policy does not apply to those third-party websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We encourage you to review the privacy policies of every website you visit before providing any personal information. The inclusion of a link on our website does not imply our endorsement of the linked website or service.

12. Do Not Track Signals

Some web browsers may transmit "Do Not Track" (DNT) signals to websites you visit. There is currently no universally accepted standard for how websites should respond to DNT signals. As a result, our website does not currently respond to DNT signals. We will continue to monitor developments in this area and update our practices accordingly if a recognized standard is established.

California residents may have additional rights under the California Online Privacy Protection Act (CalOPPA) with respect to online tracking. If you are a California resident and have concerns about online tracking, please contact us at [email protected].

13. FTC Act Compliance

Our privacy and data practices are conducted in accordance with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce. We are committed to being transparent about our data collection and use practices and will not engage in deceptive or misleading practices with respect to your personal information.

The FTC enforces a range of privacy-related requirements applicable to businesses operating in the United States, including requirements related to data security, children's privacy (COPPA), and unfair data practices. We take these obligations seriously and have implemented policies and procedures designed to ensure full compliance.

14. How to File a Complaint

If you have a concern or complaint about how we are handling your personal information, we encourage you to first contact us directly so that we can work to resolve the matter promptly and fairly.

14.1 Contact Us First

Please send your privacy-related complaint to:

We will acknowledge receipt of your complaint within 10 business days and aim to resolve all complaints within 45 days.

14.2 File a Complaint with a Regulatory Authority

If you are not satisfied with our response or believe that we are not handling your personal information in accordance with applicable law, you have the right to file a complaint with the appropriate regulatory authority:

• Federal Trade Commission (FTC): The FTC handles complaints related to unfair or deceptive business practices, including privacy violations. You can file a complaint at:
  https://reportfraud.ftc.gov
• California Privacy Protection Agency (CPPA): If you are a California resident, you may contact the California Privacy Protection Agency regarding CCPA/CPRA violations at:
  https://cppa.ca.gov
• California Attorney General: California residents may also submit privacy-related complaints to the Office of the California Attorney General at:
  https://oag.ca.gov/privacy
• State Attorney General: Residents of other states may file privacy-related complaints with their respective state Attorney General's office. Contact information for each state's Attorney General can typically be found through your state government's official website.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or for other operational reasons. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our website at pizzanapizza.rest with a new "Last Updated" date.
• Sending a notification email to the email address associated with your account (where the changes are significant).
• Displaying a prominent notice on our website homepage when material changes are made.

Your continued use of our website and services after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

16. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United States. Any disputes arising under or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of the United States and the state in which Pizzana operates.

17. Contact Information for Privacy Inquiries

For all privacy-related questions, requests, complaints, or concerns, please do not hesitate to reach out to us. We are committed to working with you to address any concerns about your personal information: