Privacy Policy

Welcome to Pizzana. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website pizz-pizzana.click, place orders, or otherwise interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

This Privacy Policy applies to all information collected through our website (pizz-pizzana.click), and any related services, sales, marketing, or events (collectively referred to as the "Services").

1. Who We Are

Pizzana is a food service business operating in the United States. We are dedicated to providing our customers with high-quality food and a seamless ordering experience. For the purposes of this Privacy Policy, "we," "us," or "our" refers to Pizzana, and "you" refers to the user, visitor, or customer engaging with our Services.

• Business Name: Pizzana
• Website: pizz-pizzana.click
• Email: [email protected]

If you have any questions about this Privacy Policy or our data practices, please contact us at the information listed in Section 16 of this document.

2. Applicable Laws and Legal Framework

As a business operating in the United States, our privacy practices are governed by applicable federal and state privacy laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce, including those related to privacy and data security.
• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), which provides California residents with specific rights regarding their personal information.
• The Children's Online Privacy Protection Act (COPPA), which restricts the collection of personal information from children under the age of 13.
• The CAN-SPAM Act, which governs commercial email communications.
• The Electronic Communications Privacy Act (ECPA).
• Any other applicable state or federal privacy laws in the United States.

We are committed to complying with all applicable laws and regulations and updating our practices as legal requirements evolve.

3. Information We Collect

We collect information about you in various ways when you interact with our Services. The types of information we collect include:

3.1 Personal Information You Provide Directly

When you place an order, create an account, contact us, or otherwise voluntarily provide information, we may collect:

• Identity Information: First name, last name, username, or similar identifiers.
• Contact Information: Email address, telephone number, billing address, delivery address, and postal code.
• Account Credentials: Passwords and security questions (stored in encrypted form).
• Payment Information: Credit or debit card numbers, billing address, and other financial information necessary to process payments. Note: We do not store full payment card details on our servers; this information is processed through secure third-party payment processors.
• Order Information: Details of your food orders, preferences, dietary requirements, and special instructions.
• Communications: Any messages, feedback, complaints, or inquiries you submit to us through email, contact forms, or other channels.
• Marketing Preferences: Your preferences regarding receiving marketing communications from us.

3.2 Information Collected Automatically

When you visit our website or use our Services, we automatically collect certain information about your device and browsing activity, including:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, and the date and time of your visits.
• Location Data: General geographic location derived from your IP address. If you grant permission, we may collect more precise location data to facilitate delivery services.
• Cookies and Tracking Technologies: Information collected via cookies, web beacons, pixels, and similar tracking technologies. Please see Section 10 for more details.
• Log Data: Server logs that record information such as your IP address, browser type, pages visited, and error reports.

3.3 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Payment Processors: Confirmation of payment status and transaction identifiers.
• Social Media Platforms: If you interact with our social media pages or use social login features, we may receive profile information as permitted by your privacy settings on those platforms.
• Analytics Providers: Aggregated and anonymized data about website usage patterns.
• Delivery Partners: Delivery status and fulfillment information when applicable.
• Marketing Partners: Information that helps us reach you with relevant advertising, subject to your consent where required.

4. How We Use Your Information

We use the information we collect for various legitimate business purposes, including:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including coordinating delivery or pickup.
• Managing your account and providing customer support.
• Sending order confirmations, receipts, and status updates.
• Processing payments and preventing fraudulent transactions.
• Communicating with you about your orders, requests, or complaints.

4.2 Business Operations and Improvement

• Analyzing usage patterns to improve our website, menu offerings, and overall service quality.
• Conducting internal research, audits, and data analysis.
• Troubleshooting technical issues and maintaining website security.
• Complying with legal and regulatory obligations.
• Enforcing our Terms of Service and other legal agreements.

4.3 Marketing and Communications

• Sending you promotional emails, newsletters, and special offers, where you have provided consent or where permitted by law.
• Personalizing your experience on our website based on your past orders and preferences.
• Displaying targeted advertising on our platform and on third-party websites.
• Notifying you about changes to our services, menu, or policies.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

4.4 Legal Compliance and Safety

• Complying with applicable laws, regulations, legal processes, or governmental requests.
• Protecting the safety, rights, and property of Pizzana, our customers, and the public.
• Detecting, preventing, and addressing fraud, abuse, security breaches, and other harmful activities.

5. Legal Bases for Processing

We process your personal information based on the following legal grounds:

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your information in the following circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to assist in operating our Services. These service providers are authorized to use your personal information only as necessary to provide services to us and are contractually obligated to protect your data. Our service providers may include:

• Payment Processors: To securely handle payment transactions (e.g., Stripe, Square, PayPal).
• Delivery and Logistics Partners: To coordinate food delivery to your location.
• Email Service Providers: To send transactional and marketing emails on our behalf.
• Analytics Providers: Such as Google Analytics, to help us understand how users interact with our website.
• Cloud Hosting and Storage Providers: To host our website and store data securely.
• Customer Support Platforms: To manage customer inquiries and complaints.
• Marketing and Advertising Platforms: To deliver targeted advertisements.

6.2 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

6.3 Legal Requirements

We may disclose your information when required to do so by law or in response to valid legal requests, such as:

• Court orders, subpoenas, or other legal processes.
• Requests from law enforcement or regulatory agencies.
• Compliance with applicable federal or state laws.
• Protection of the rights, property, or safety of Pizzana, our users, or others.

6.4 With Your Consent

We may share your information with third parties for purposes not described in this policy when we have obtained your express consent to do so.

7. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical security measures to protect your data from unauthorized access, use, alteration, or disclosure.

7.1 Security Measures

• Encryption: All data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology.
• Access Controls: Access to personal information is restricted to authorized personnel who have a legitimate business need to access it. All employees with access to personal data are bound by confidentiality obligations.
• Password Security: User passwords are stored using strong cryptographic hashing algorithms and are never stored in plain text.
• Payment Security: Payment card data is handled in accordance with the Payment Card Industry Data Security Standards (PCI DSS). We use third-party PCI-compliant payment processors and do not store full card numbers on our systems.
• Regular Security Audits: We conduct periodic reviews of our information collection, storage, and processing practices, as well as security measures, to protect against unauthorized access.
• Data Minimization: We only collect and retain the personal information necessary for the purposes described in this Privacy Policy.

7.2 Breach Notification

In the event of a data breach that may affect your personal information, we will notify you and the relevant authorities in accordance with applicable laws, including any state breach notification laws applicable in your state of residence. Notification will be provided as expeditiously as reasonably possible and in compliance with the legitimate needs of law enforcement.

8. Your Privacy Rights

Depending on your state of residence, you may have various rights with respect to your personal information. We are committed to honoring these rights in compliance with applicable laws.

8.1 Rights for All Users

• Right to Know / Access: You have the right to request information about the personal data we hold about you, including the categories of data collected, the purposes for which it is used, and the third parties with whom it is shared.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (such as when we are required to retain data by law).
• Right to Opt-Out of Marketing: You can opt out of receiving marketing communications from us at any time.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.

8.2 Additional Rights for California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: The right to know what personal information is collected, used, shared, or sold.
• Right to Delete: The right to request deletion of personal information we have collected, subject to certain exemptions.
• Right to Opt-Out of Sale or Sharing: The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. Note: We do not sell personal information as defined under CCPA/CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level or quality of service because you exercised your privacy rights.
• Right to Correct: The right to correct inaccurate personal information we maintain about you.
• Right to Limit Use of Sensitive Personal Information: The right to limit our use of sensitive personal information to that which is necessary to perform the services you requested.

To submit a request to exercise your California privacy rights, please contact us using the details in Section 16. We will verify your identity before fulfilling your request and respond within 45 days, with an extension of an additional 45 days when reasonably necessary.

8.3 How to Exercise Your Rights

To exercise any of the rights described above, you may:

• Send an email to [email protected] with the subject line "Privacy Rights Request."
• Include your full name, email address associated with your account, and the specific right you wish to exercise.
• We may ask you to verify your identity to protect against fraudulent requests.

We will not charge a fee for processing your request unless it is manifestly unfounded, excessive, or repetitive. We will respond to all legitimate requests within the timeframes required by applicable law.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

After the applicable retention period, we will securely delete or anonymize your personal information. In some circumstances, we may anonymize your personal information so that it can no longer be associated with you, in which case we may use such information indefinitely without further notice.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your interactions with our website. Cookies are small text files placed on your device that help us recognize you, remember your preferences, and improve your experience.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website and cannot be disabled. These include cookies that enable core functionality such as security, shopping cart management, and account authentication.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously (e.g., Google Analytics).
• Functional Cookies: Allow us to remember your preferences, such as your language settings, saved addresses, or recently viewed items.
• Marketing and Advertising Cookies: Track your browsing habits to enable us to show you relevant advertisements across the web, subject to your consent.

10.2 Managing Cookies

You can control and/or delete cookies as you wish. You can delete all cookies that are already on your device and set most browsers to prevent them from being placed. However, if you do so, some features of our website may not function properly.

Most web browsers allow you to manage cookie settings through the browser's settings menu. For detailed information on how to manage cookies in your specific browser, please visit the browser's help documentation.

For more detailed information about the cookies we use and your choices regarding cookies, please refer to our Cookie Policy.

11. Children's Privacy

Consistent with the requirements of the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under the age of 13 without verifiable parental consent. Furthermore, in alignment with our terms of service, we require all users to be at least 18 years of age.

If we become aware that we have inadvertently collected personal information from a child under 13 (or under 18, as applicable), we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided personal information to us without your consent, please contact us immediately at [email protected].

We encourage parents and guardians to monitor their children's internet usage and to help enforce this Privacy Policy by instructing their children never to provide personal information through our Services without parental permission.

12. International Data Transfers

Pizzana is based in the United States, and the information we collect is governed by U.S. law. Our servers and operations are primarily located within the United States. However, some of our third-party service providers may be located in or operate from countries outside the United States.

If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated. Data protection laws in the United States may differ from those in your country of residence.

By using our Services, you consent to the transfer of your information to the United States and other countries where our service providers may operate, to the extent permitted by applicable law. We take steps to ensure that appropriate safeguards are in place when transferring data internationally, including entering into data processing agreements with our service providers that incorporate standard contractual clauses or other recognized mechanisms for international data transfers.

13. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Pizzana. This Privacy Policy applies only to our Services and does not cover the privacy practices of any third parties. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We encourage you to review the privacy policies of any third-party websites or services you visit. The inclusion of a link on our website does not imply our endorsement of that site or service.

When you use third-party payment services to complete a transaction on our website, those transactions are subject to the privacy policies of those third-party services. We encourage you to review the privacy policies of any payment processor you use.

14. Do Not Track Signals

Some browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activities tracked. Because there is currently no uniform standard for recognizing and implementing DNT signals, our website does not currently respond to browser DNT signals.

However, you can use some of the privacy choices described in this Privacy Policy (such as cookie management and opting out of marketing) to limit the collection and use of your data. We will continue to monitor developments related to DNT and update our practices as industry standards evolve.

For California residents, please note that we do not engage in the sale of personal information as defined under the CCPA/CPRA, and we do not share personal information for cross-context behavioral advertising in a manner that would require a DNT response under applicable law.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time and from time to time. When we make changes to this policy, we will post the updated policy on this page and update the "Last Updated" date at the top of this document.

If we make material changes to this Privacy Policy that significantly affect how we handle your personal information, we will provide more prominent notice, which may include:

• Sending a notification to the email address associated with your account.
• Displaying a prominent notice on our website prior to the change becoming effective.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the changes, you should discontinue use of our Services and, if applicable, delete your account.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us using the information below:

When contacting us about a privacy matter, please include "Privacy Inquiry" or "Privacy Rights Request" in the subject line of your email. To help us respond to your inquiry efficiently, please include your full name, the email address associated with your account, and a clear description of your request or concern.

We will make every effort to respond to your privacy inquiries within 30 days of receipt. For requests related to California privacy rights, we will respond within 45 days as required by the CCPA/CPRA, with a possible extension of an additional 45 days when reasonably necessary.

17. Filing a Complaint with a Data Protection Authority

If you believe that we have violated your privacy rights or applicable data protection laws, you have the right to file a complaint with the appropriate regulatory authority.

17.1 For California Residents

California residents who believe their rights under the CCPA/CPRA have been violated may file a complaint with the California Privacy Protection Agency (CPPA):

17.2 For All U.S. Consumers

If you believe we have engaged in unfair or deceptive privacy practices, you may file a complaint with the Federal Trade Commission (FTC):

17.3 State-Specific Authorities

Depending on your state of residence, you may also have the right to file a complaint with your state's Attorney General office. Many states have consumer protection divisions that handle privacy-related complaints. We encourage you to contact the appropriate authority in your state if you believe your privacy rights have been violated.

Before filing a complaint with any regulatory authority, we encourage you to contact us first at [email protected] so that we have the opportunity to address your concerns directly and promptly.

18. Additional California Disclosures

In accordance with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), we provide the following additional disclosures for California residents:

18.1 Categories of Personal Information Collected in the Past 12 Months

18.2 Sale or Sharing of Personal Information

We do not sell your personal information as defined under the CCPA/CPRA. We do not share your personal information for cross-context behavioral advertising purposes beyond what is described in this policy. However, certain uses of cookies and tracking technologies for targeted advertising may constitute "sharing" under the CPRA. You have the right to opt out of such sharing by contacting us at [email protected].

18.3 Shine the Light

California's "Shine the Light" law (Civil Code Section 1798.83) permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes during the preceding calendar year. If applicable, this information includes a list of the categories of personal information that was shared and the names and addresses of all third parties with which we shared personal information. To make such a request, please contact us at [email protected].