Privacy Policy

Welcome to Punch Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website punch-newpizza.click, place orders, subscribe to our services, or otherwise interact with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our website and services.

This Privacy Policy applies to all information collected through our website, mobile experience, and any related services, sales, marketing, or events (collectively referred to as the "Services").

1. Who We Are

Punch Pizza is a food service business operating in the United States. We operate the website located at punch-newpizza.click and provide pizza and related food products and services to our customers.

For any questions, concerns, or requests regarding this Privacy Policy, you may reach us at the contact information provided above or in the Contact Us section at the end of this document.

2. Applicable Laws and Legal Framework

As a business operating in the United States, Punch Pizza is subject to applicable federal and state privacy laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act), which governs unfair or deceptive practices related to consumer data privacy.
• The California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA), which provide California residents with specific rights regarding their personal information.
• The Children's Online Privacy Protection Act (COPPA), which governs the online collection of personal information from children under the age of 13.
• The CAN-SPAM Act, which governs commercial email communications.
• The Electronic Communications Privacy Act (ECPA) and any other applicable state privacy laws.

We are committed to complying with all applicable privacy and data protection laws in the jurisdictions where we operate. If you are a California resident, please refer to Section 11 for specific rights afforded to you under CCPA/CPRA.

3. Information We Collect

We collect personal information that you voluntarily provide to us, as well as information collected automatically when you use our Services. The categories of information we collect include the following:

3.1 Personal Information You Provide Directly

When you create an account, place an order, subscribe to our newsletter, contact us, participate in promotions, or otherwise engage with our Services, you may provide us with personal information such as:

• Identity Information: Full name, username, or similar identifier.
• Contact Information: Email address, postal address, telephone number, and delivery address.
• Account Credentials: Password and other login details (stored in encrypted form).
• Payment Information: Credit or debit card details, billing address, and transaction history. Please note that full payment card data is processed by our third-party payment processors and is not stored on our servers.
• Order Information: Menu preferences, dietary requirements, order history, and special instructions.
• Communications: Any messages, feedback, reviews, or inquiries you submit to us through email, contact forms, or customer support channels.
• Marketing Preferences: Your choices regarding receiving marketing communications from us.
• Promotional and Survey Data: Responses to contests, promotions, surveys, or questionnaires.

3.2 Information Collected Automatically

When you visit or interact with our website and Services, we automatically collect certain technical and usage information, including:

• Device Information: IP address, device type, operating system, browser type and version, unique device identifiers.
• Usage Data: Pages visited, links clicked, time spent on pages, referring URL, exit pages, and other browsing behavior within our website.
• Location Data: General geographic location based on your IP address, or more precise location data if you grant permission on your mobile device.
• Log Data: Server logs that record activity on our website, including date and time of access, pages requested, and errors encountered.
• Cookie and Tracking Data: Information collected through cookies, pixel tags, web beacons, and similar tracking technologies. See Section 8 for more details.

3.3 Information From Third Parties

We may receive information about you from third parties, such as:

• Social media platforms (if you connect your account or interact with us on social media).
• Third-party delivery partners or food ordering platforms.
• Analytics providers that supplement our data.
• Marketing partners and advertising networks.
• Identity verification or fraud prevention services.

4. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes, including:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including delivery and pickup arrangements.
• Creating and managing your customer account.
• Processing payments and managing billing.
• Sending order confirmations, receipts, and delivery updates.
• Providing customer support and responding to inquiries or complaints.
• Facilitating loyalty programs, rewards, or special offers you have enrolled in.

4.2 Analytics and Service Improvement

• Analyzing website usage patterns and customer behavior to improve our website, menu offerings, and user experience.
• Conducting internal research and development to enhance our products and services.
• Monitoring and analyzing trends, usage, and activities in connection with our Services.
• Assessing the effectiveness of our marketing campaigns and promotions.

4.3 Marketing and Communications

• Sending you promotional emails, newsletters, special offers, and updates about Punch Pizza — only with your consent or where we have a legitimate interest or legal basis to do so.
• Personalizing your experience by showing you content, offers, and recommendations relevant to your preferences and order history.
• Running sweepstakes, contests, or promotional campaigns.
• Delivering targeted advertising on our website and on third-party platforms.

4.4 Legal Compliance and Security

• Complying with applicable laws, regulations, legal processes, or governmental requests.
• Enforcing our Terms of Service and other agreements.
• Detecting, preventing, and addressing fraud, unauthorized activities, security incidents, and technical problems.
• Protecting the rights, property, or safety of Punch Pizza, our customers, or others.

5. Legal Basis for Processing (Applicable Where Required)

Where applicable under state or federal law, we rely on the following legal bases to process your personal information:

• Contract Performance: Processing necessary to fulfill your order or provide services you have requested.
• Consent: Where you have given us explicit consent, such as for marketing communications or certain cookies.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as fraud prevention, improving our services, and direct marketing, provided such interests are not overridden by your rights.
• Legal Obligation: Where processing is necessary to comply with a legal or regulatory obligation.

6. Sharing Your Information With Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

6.1 Service Providers

We share personal information with trusted third-party service providers who assist us in operating our business and delivering our Services. These include:

• Payment Processors: To securely process credit and debit card transactions.
• Delivery Partners: To fulfill food delivery orders to your specified address.
• Email and Communication Platforms: To send order confirmations, marketing emails, and customer service communications.
• Website Hosting and Cloud Services: To maintain and operate our website and data infrastructure.
• Analytics Providers: Such as Google Analytics, to analyze website traffic and user behavior.
• Customer Support Tools: To manage and respond to customer inquiries.
• Advertising Networks: To deliver targeted advertising on our behalf.

All service providers are contractually required to use your personal information only for the purposes of providing services to us and to maintain appropriate security measures.

6.2 Business Transfers

If Punch Pizza undergoes a merger, acquisition, restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

6.3 Legal Requirements

We may disclose your personal information if required to do so by law or in response to valid legal requests, such as:

• Court orders, subpoenas, or other legal processes.
• Requests from law enforcement agencies or government authorities.
• To establish, exercise, or defend our legal rights.
• To protect the vital interests or safety of individuals.

6.4 With Your Consent

We may share your information with third parties for any other purpose with your explicit consent or at your direction.

7. Data Security

We take the security of your personal information seriously and implement a range of technical and organizational measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include:

7.1 Technical Safeguards

• Encryption: All data transmitted between your browser and our website is encrypted using SSL/TLS technology (HTTPS).
• Secure Payment Processing: Payment card data is processed through PCI-DSS compliant payment processors. We do not store full card numbers on our servers.
• Password Security: User account passwords are hashed and stored using industry-standard cryptographic algorithms.
• Access Controls: We restrict access to personal information to authorized employees and contractors who have a legitimate need to access it to perform their job functions.
• Regular Security Assessments: We conduct regular reviews of our security practices and systems.

7.2 Organizational Safeguards

• Staff training on data privacy and security best practices.
• Confidentiality agreements with employees and contractors who handle personal data.
• Data breach response procedures to promptly identify, contain, and notify affected individuals in the event of a security incident.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, personalize content, and deliver targeted advertising.

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites recognize your device, remember your preferences, and provide a more personalized experience.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly, including maintaining your session when you log in or add items to your cart.
• Performance and Analytics Cookies: Collect information about how visitors use our website, such as which pages are visited most often, to help us improve functionality.
• Functionality Cookies: Remember your preferences, such as language settings, saved addresses, or previous order details.
• Targeting and Advertising Cookies: Used to deliver advertisements relevant to your interests, both on our website and on third-party platforms.

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising by visiting the Network Advertising Initiative opt-out page or the Digital Advertising Alliance opt-out page.

For a full explanation of the cookies we use, please refer to our Cookie Policy, available on our website.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.

After the applicable retention period, we will securely delete or anonymize your personal information. In some circumstances, we may anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice.

10. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

10.1 General Rights for All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (e.g., where we are required to retain data for legal purposes).
• Right to Data Portability: You have the right to request that we provide your personal information in a structured, commonly used, and machine-readable format.
• Right to Opt Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time.
• Right to Withdraw Consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

10.2 How to Exercise Your Rights

To exercise any of the rights listed above, please submit a request by:

• Email: [email protected]
• Website: punch-newpizza.click (via our contact form)

We will respond to your request within 30 days of receipt. In some cases, we may need to verify your identity before processing your request. We may extend this response period by an additional 60 days where necessary, and we will inform you of any such extension.

11. Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you are afforded specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) regarding your personal information.

11.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information (as defined under CCPA/CPRA):

• Identifiers (name, email address, IP address, phone number)
• Commercial information (order history, purchase records)
• Internet or other electronic network activity (browsing history on our site, interactions with our online ads)
• Geolocation data (general location based on IP address)
• Inferences drawn from the above to create a profile about your preferences

11.2 Your CCPA/CPRA Rights

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. To opt out, contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to specific permitted purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, provide a different level of quality, or suggest that you may receive a different quality of service for exercising your rights.

11.3 Submitting a CCPA/CPRA Request

California residents may submit a verifiable consumer request by emailing [email protected]. You may designate an authorized agent to submit requests on your behalf. We will verify the identity of the requestor before processing the request.

12. Children's Privacy

Our Services are intended for individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 13, in accordance with the Children's Online Privacy Protection Act (COPPA).

If you are under the age of 18, please do not use our Services or provide any personal information to us. If you are a parent or guardian and you believe your child under 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt steps to delete such information from our records.

13. International Data Transfers

Punch Pizza is based in the United States, and our Services are primarily directed at users located within the United States. If you access our Services from outside the United States, please be aware that your personal information will be transferred to, stored in, and processed in the United States.

The data protection laws in the United States may differ from those in your country of residence. By using our Services and providing your personal information, you consent to the transfer of your information to the United States and the processing of your information in accordance with this Privacy Policy.

If we transfer personal information internationally, we will take appropriate steps to ensure that your personal information is protected in accordance with applicable law, including implementing appropriate contractual safeguards where required.

14. Third-Party Links and Services

Our website may contain links to third-party websites, applications, social media platforms, or other online services. These third-party sites operate independently of us and have their own privacy policies. We are not responsible for the privacy practices of any third-party website or service, and we encourage you to review the privacy policies of any third-party sites you visit.

Links to third-party sites do not constitute our endorsement or recommendation of those sites, their content, or their privacy practices.

15. Social Media and Advertising

We may maintain pages on social media platforms such as Facebook, Instagram, Twitter/X, and others. When you interact with our social media pages or content, the applicable social media platform's privacy policy governs the collection and use of your information on that platform.

We may use social media advertising tools, including Meta Pixel and similar technologies, to deliver targeted advertisements to users on social media platforms. These tools may allow us to target advertising to users based on their interactions with our website. You may opt out of such targeted advertising through the privacy settings of the relevant social media platform.

16. Do Not Track Signals

Some web browsers may transmit "Do Not Track" signals to websites. Currently, there is no universally accepted standard for how websites should respond to Do Not Track signals. As a result, our website does not currently respond to Do Not Track signals from browsers. We will continue to monitor developments in this area and update our practices if and when a standard is established.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post the revised policy on our website at punch-newpizza.click.
• In some cases, notify you via email or a prominent notice on our website, particularly if the changes are significant.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

18. Filing a Complaint With a Data Protection Authority

If you are a California resident and you believe we have not adequately addressed your privacy concerns, you have the right to file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office.

For residents of other states, you may contact your state's attorney general office or applicable consumer protection authority to file a complaint or seek guidance regarding data privacy matters.

We encourage you to contact us first so that we may address your concerns directly before filing a complaint with a regulatory authority.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. Our privacy team is available to assist you.

We aim to respond to all privacy-related inquiries within 30 days of receipt. For verifiable consumer requests under CCPA/CPRA, we will acknowledge receipt within 10 business days and provide a full response within 45 calendar days, with the possibility of a one-time extension of an additional 45 days where reasonably necessary.