Privacy Policy

This Privacy Policy describes how Pizzana ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at pizzas-pizzana.click, place an order with us, or otherwise interact with our services. We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner.

Please read this Privacy Policy carefully. By using our website or services, you acknowledge that you have read, understood, and agree to the practices described in this document. If you do not agree with any part of this Privacy Policy, please discontinue use of our website and services immediately.

This Privacy Policy applies to all users located in the United States. Where applicable, we comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission (FTC) Act, and other applicable U.S. federal and state privacy laws.

1. Who We Are

Pizzana is a food service business dedicated to delivering high-quality pizza and related food products to our customers. We operate through our online platform at pizzas-pizzana.click and may also operate physical locations. For all privacy-related inquiries, you may contact us using the details provided at the end of this document.

As the entity that determines the purposes and means of processing your personal information, Pizzana acts as the data controller with respect to your personal data collected through this website and our services.

2. Information We Collect

We collect several categories of information depending on how you interact with our website and services. The categories include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Delivery address and billing address
• Date of birth (where required for age verification)
• Username and password (encrypted)
• Profile picture (if you choose to upload one)

2.2 Financial and Payment Information

When you make a purchase through our platform, we collect payment-related information necessary to process your transaction. This may include:

• Credit or debit card number (last four digits only, stored by our payment processor)
• Billing address associated with your payment method
• Transaction history and order records
• Refund and dispute records

Please note that full payment card details are processed and stored by our third-party payment processors and are not retained directly on our servers. Our payment processors are required to comply with the Payment Card Industry Data Security Standard (PCI DSS).

2.3 Order and Transaction Data

We collect information related to your orders and transactions with us, including:

• Items ordered (menu selections, quantities, customizations)
• Order dates and times
• Delivery or pickup preferences
• Special instructions and dietary preferences you provide
• Order history and frequency
• Loyalty program participation and points balances

2.4 Usage and Technical Data

When you visit our website, we automatically collect certain technical information through cookies, web beacons, log files, and similar tracking technologies. This includes:

• IP address
• Browser type and version
• Operating system and device type
• Screen resolution and display settings
• Pages visited, links clicked, and time spent on each page
• Referring URLs (the page you visited before arriving at our site)
• Search terms used within our website
• Date and time of visits
• Session identifiers and cookie data

2.5 Location Data

With your permission, we may collect geolocation data to help facilitate delivery services, identify nearby restaurant locations, and provide location-relevant offers. You can disable location sharing through your device settings at any time. Even without explicit location permission, we may infer your approximate location from your IP address.

2.6 Communications Data

If you contact our customer service team, submit feedback, participate in surveys, or engage with us on social media, we may collect and retain:

• Records of your communications with us
• Your feedback, reviews, ratings, and complaints
• Responses to surveys and promotional activities
• Social media profile information (where you interact with our official pages)

2.7 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you log in via social sign-on features)
• Food delivery aggregator platforms or partner services
• Analytics providers and advertising networks
• Publicly available sources

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes, all of which are described in detail below. We only process your personal data when we have a valid legal basis for doing so, including your consent, the performance of a contract, compliance with legal obligations, or our legitimate business interests.

3.1 Providing and Improving Our Services

• Processing and fulfilling your food orders, including delivery coordination
• Creating and managing your account
• Personalizing your experience and suggesting menu items based on your order history
• Operating, maintaining, and improving our website and mobile application
• Conducting internal research to develop new products and services
• Testing new features and diagnosing technical issues

3.2 Customer Communication

• Sending order confirmations, receipts, and delivery notifications
• Responding to your inquiries, complaints, or requests
• Sending important service updates and policy change notifications
• Providing customer support and resolving disputes

3.3 Marketing and Promotions

• Sending promotional emails, newsletters, and special offers — with your prior consent where required by law
• Displaying targeted advertising on our website and third-party platforms
• Administering contests, sweepstakes, loyalty programs, and promotional campaigns
• Measuring the effectiveness of our marketing campaigns

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly at [email protected].

3.4 Analytics and Research

• Analyzing trends in website traffic and user behavior
• Measuring the performance of our website and marketing activities
• Generating aggregated, anonymized statistical reports
• Understanding our customer base and improving our offerings

3.5 Security and Fraud Prevention

• Detecting, investigating, and preventing fraudulent transactions and other illegal activities
• Protecting the security and integrity of our platform
• Enforcing our Terms of Service and other agreements
• Verifying user identity where required

3.6 Legal Compliance

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities and law enforcement
• Establishing, exercising, or defending legal claims
• Fulfilling tax, accounting, and other statutory obligations

4. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to unaffiliated third parties for their own independent marketing purposes without your explicit consent. However, we may share your information with trusted third parties in the following circumstances:

4.1 Service Providers and Business Partners

We work with carefully selected third-party companies and individuals who assist us in operating our business and providing our services. These may include:

• Payment processors — to securely handle financial transactions
• Delivery and logistics partners — to fulfill your food delivery orders
• Cloud hosting and IT infrastructure providers — to store and process data securely
• Email and SMS communication platforms — to send you order updates and marketing communications
• Analytics providers — such as Google Analytics, to help us understand website usage
• Advertising networks — to deliver targeted advertisements on our behalf
• Customer support platforms — to manage customer service interactions

All service providers are contractually bound to use your personal data only for the purposes we specify and to maintain appropriate security standards. They are not permitted to use your data for their own independent purposes.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we are required to do so by law, regulation, or legal process (such as a court order or subpoena), or if we believe in good faith that such disclosure is necessary to:

• Comply with applicable law or legal obligations
• Protect the rights, property, or safety of Pizzana, our customers, or the public
• Detect and prevent fraud, security incidents, or other illegal activity
• Respond to lawful requests from public authorities, including law enforcement agencies

4.3 Business Transfers

In the event that Pizzana undergoes a business transaction such as a merger, acquisition, sale of assets, reorganization, or bankruptcy, your personal information may be transferred to the successor entity as part of that transaction. We will notify you via email and/or a prominent notice on our website prior to such a transfer, and we will inform you of any changes in how your personal data is handled.

4.4 With Your Consent

We may share your information with third parties for purposes not described in this Privacy Policy when we have obtained your explicit prior consent to do so.

5. Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect and store information about your interactions with our website. Cookies are small text files placed on your device that help us recognize you and remember your preferences.

5.1 Types of Cookies We Use

You can manage your cookie preferences through your browser settings or through our cookie consent banner displayed upon your first visit. Please note that disabling certain cookies may affect the functionality of our website. For more detailed information about our use of cookies, please refer to our Cookie Policy, available on our website.

6. Data Security

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

6.1 Security Measures We Employ

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers. Sensitive data, including passwords, are encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions. All employees with access to personal data are subject to confidentiality obligations.
• Secure Payment Processing: All payment transactions are processed by PCI DSS-compliant payment processors. We do not store full credit card numbers on our systems.
• Regular Security Audits: We conduct periodic reviews of our data collection, storage, and processing practices, and assess our security measures regularly.
• Incident Response Plan: We maintain a formal data breach response plan to ensure we can promptly identify, contain, and remediate any security incidents, and notify affected users as required by law.
• Firewalls and Intrusion Detection: Our servers are protected by firewalls and monitored for suspicious activity.

While we strive to protect your personal information, please be aware that no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and you share information with us at your own risk. You are responsible for keeping your account credentials confidential and should notify us immediately if you suspect any unauthorized access to your account.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law. The specific retention periods we apply are outlined below:

After the applicable retention period has expired, we will securely delete or anonymize your personal data. If complete deletion is not immediately possible (e.g., because data is stored in backup archives), we will isolate the data from further processing until deletion is possible.

8. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. We are committed to honoring these rights and providing you with a straightforward process to exercise them.

8.1 Rights for All U.S. Residents

• Right to Know/Access: You have the right to request information about what personal data we hold about you, the categories of sources from which it was collected, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Correction: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (such as where we are required to retain data for legal compliance).
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide a different level of service based solely on your exercise of these rights.
• Right to Opt Out of Marketing: You can opt out of receiving marketing communications at any time.

8.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know (Specific Pieces): You can request specific pieces of personal information we have collected about you in a portable and, to the extent technically feasible, readily usable format.
• Right to Data Portability: You may receive a copy of your personal data in a machine-readable format.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. To exercise this right, click "Do Not Sell or Share My Personal Information" on our website, or contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to only those purposes necessary to provide the services you requested.
• Shine the Light Law: California residents may also request information about disclosure of personal information to third parties for their direct marketing purposes under California Civil Code Section 1798.83.

8.3 How to Exercise Your Rights

To submit a privacy rights request, you may:

• Email us at: [email protected]
• Visit our website: pizzas-pizzana.click

We will acknowledge receipt of your request within 10 business days and respond to your request within 45 days. If we require additional time, we will notify you of the extension and the reason for it. We may need to verify your identity before fulfilling your request. Verification may require you to provide information consistent with what we have on file for you.

You may also designate an authorized agent to submit requests on your behalf. To do so, the authorized agent must provide written authorization signed by you, and you may also be required to verify your identity directly with us.

9. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or use personal information from children under the age of 18.

In compliance with the Children's Online Privacy Protection Act (COPPA) and other applicable laws, if we learn that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take prompt steps to delete that information from our records. If you believe that a child under 18 has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

Parents and guardians are encouraged to monitor and supervise their children's online activities. If you are a parent and have concerns about your child's privacy in connection with our services, please do not hesitate to reach out to us.

10. International Data Transfers

Pizzana is based in the United States, and our primary data processing activities occur within the United States. However, some of our third-party service providers and partners may be located in, or operate servers in, other countries outside the United States.

If your personal information is transferred to, stored in, or processed in a country other than your country of residence, we will take appropriate steps to ensure that such transfers comply with applicable data protection laws and that your information remains protected to the standards described in this Privacy Policy. These steps may include:

• Entering into data transfer agreements with our service providers that incorporate appropriate safeguards
• Ensuring that service providers in other countries maintain security standards equivalent to those described in this Privacy Policy
• Taking any other steps required by applicable law in connection with international data transfers

By using our services and providing us with your personal information, you acknowledge that your data may be processed in countries outside of your home country, including in the United States where data protection laws may differ from those in your country.

11. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, payment gateways, or other services that are not operated by Pizzana. We provide these links for your convenience and information only. When you click on a third-party link, you will be directed to that third party's website, which operates under its own privacy policy and terms of service.

We are not responsible for the privacy practices of third-party websites or services, and we encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link to a third-party website does not imply our endorsement or recommendation of that website or its privacy practices.

12. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not wish to be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. At this time, our website does not respond to Do Not Track browser signals in a standardized way. However, you can manage your tracking preferences through our cookie settings and opt-out of certain marketing-related tracking as described in this Privacy Policy.

California residents may also make use of the Global Privacy Control (GPC), a browser-based signal that communicates an opt-out of the sale or sharing of personal information. Where technically feasible, we will honor GPC signals from California residents as required by the CPRA.

13. How to File a Complaint

If you believe that we have violated your privacy rights or are not handling your personal information in accordance with applicable law, we encourage you to contact us first so that we can attempt to resolve your concern directly.

13.1 Contacting Us

Please reach out to our privacy team via the contact details provided in Section 14 of this Privacy Policy. We take all privacy complaints seriously and will investigate and respond to your complaint in a timely manner.

13.2 Filing a Complaint with Regulatory Authorities

If you are not satisfied with our response, or if you believe that our processing of your personal information violates applicable law, you have the right to file a complaint with the relevant data protection or consumer protection authority:

• Federal Trade Commission (FTC):
  The FTC enforces consumer protection laws in the United States, including those related to privacy and data security.
  Website: www.ftc.gov
  Phone: 1-877-382-4357
  Address: 600 Pennsylvania Avenue, NW, Washington, DC 20580
• California Attorney General (for California Residents):
  California residents may submit privacy-related complaints to the California Attorney General's Office, which has enforcement authority under the CCPA/CPRA.
  Website: oag.ca.gov/privacy
  Address: 1300 I Street, Suite 1740, Sacramento, CA 95814
• California Privacy Protection Agency (CPPA):
  The CPPA is responsible for enforcement of the CPRA and related California privacy regulations.
  Website: cppa.ca.gov
• Your State Attorney General:
  Residents of other U.S. states may contact their respective State Attorney General's office for privacy-related complaints. Many states have enacted or are enacting their own consumer privacy laws.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this policy.

For material changes, we will provide more prominent notice, which may include:

• Sending you an email notification to the address associated with your account
• Displaying a banner or pop-up notification on our website
• Requiring you to affirmatively acknowledge the updated policy before continuing to use our services

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise any of your privacy rights, please do not hesitate to contact our privacy team using the information below:

We are committed to responding to all privacy inquiries promptly and in accordance with applicable legal requirements. When contacting us regarding a privacy rights request, please include your full name, the email address associated with your account (if applicable), and a clear description of your request or concern. This will help us process your inquiry as efficiently as possible.