Privacy Policy

This Privacy Policy describes how Punch Pizza ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at punch-cafe.click, place orders, use our services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data with transparency and respect.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please discontinue use of our website and services immediately.

This Privacy Policy applies to all users of our website and services located in the United States and is designed to comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission (FTC) Act, and other applicable U.S. privacy regulations.

1. About Us

Punch Pizza is a food service business operating in the United States. We operate through our website and may also offer in-store, telephone, and third-party delivery platform ordering services.

For any questions, concerns, or requests related to your privacy, please contact us using the contact details provided above or as specified in the "Contact Us" section at the end of this Privacy Policy.

2. Information We Collect

We collect various types of information in connection with your use of our website, ordering services, and other interactions with Punch Pizza. The categories of personal information we collect are described below.

2.1 Personal Information You Provide to Us

When you interact with us, such as by creating an account, placing an order, subscribing to our newsletter, completing a contact form, or participating in a promotion, you may voluntarily provide us with personal information, including but not limited to:

• Identity Information: First name, last name, username, or similar identifiers.
• Contact Information: Email address, telephone number, billing address, delivery address, and other contact details.
• Account Credentials: Username and password if you create an account on our website.
• Payment Information: Credit card numbers, debit card numbers, billing information, and other payment details. Please note that payment card information is processed securely by our third-party payment processors and is not stored directly on our servers.
• Order Information: Details about the food items you have ordered, your order history, preferences, and special requests or dietary requirements you choose to share with us.
• Communications: Any messages, feedback, reviews, or correspondence you send to us through contact forms, email, or other channels.
• Marketing Preferences: Your preferences for receiving marketing communications from us.

2.2 Information Collected Automatically

When you visit our website, we and our third-party service providers automatically collect certain information about your device and your visit, including:

• Usage Data: Pages you view on our website, links you click, the date and time of your visit, how long you spend on each page, and the page you visited before navigating to our website.
• Device Information: Your IP address, browser type and version, operating system and version, device type (desktop, mobile, tablet), screen resolution, language settings, and unique device identifiers.
• Location Information: General geographic location data derived from your IP address (such as city and state). If you grant permission, we may also collect more precise location data to provide you with location-based services such as finding the nearest Punch Pizza location.
• Referral Source: The URL of the website that referred you to our website.
• Search Terms: Search queries entered on our website.

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect information about your interactions with our website. These technologies help us recognize you as a returning visitor, remember your preferences, analyze website traffic and usage patterns, and deliver personalized content and advertisements.

For detailed information about the cookies we use, how we use them, and how you can control or opt out of cookies, please refer to our Cookie Policy. You may also manage your cookie preferences through your browser settings, though disabling certain cookies may affect the functionality of our website.

2.4 Information from Third Parties

We may also receive information about you from third-party sources, such as:

• Social Media Platforms: If you connect your social media account (such as Facebook or Google) to our services or log in using social media credentials, we may receive information from those platforms in accordance with their privacy policies and your account settings.
• Delivery and Ordering Platforms: If you place an order through a third-party food delivery platform that partners with us, we may receive order and contact information from that platform.
• Analytics Providers: We may receive aggregated or anonymized analytics data from third-party analytics providers.
• Marketing Partners: We may receive information about your interests or marketing preferences from our advertising and marketing partners.

3. How We Use Your Information

We use the information we collect for a variety of purposes related to operating our food service business and providing you with a positive experience. Specifically, we use your personal information for the following purposes:

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, including preparing your order, arranging delivery or pickup, and sending you order confirmations and updates.
• To create, manage, and maintain your account with us.
• To process payments and manage billing.
• To respond to your inquiries, questions, feedback, or complaints.
• To provide customer support and resolve disputes.
• To send you transactional communications, such as order confirmations, receipts, and delivery notifications.

3.2 Business Operations and Improvement

• To operate, maintain, and improve our website, mobile applications, and services.
• To understand how our customers use our services and to analyze usage trends and patterns.
• To develop new products, services, features, and menu items.
• To conduct internal research, data analysis, and testing.
• To monitor the security and integrity of our website and systems and to detect, prevent, and address technical issues or fraudulent activity.

3.3 Marketing and Communications

• To send you promotional communications, newsletters, special offers, and information about new menu items or events, where you have provided your consent or where we have a legitimate interest to do so in accordance with applicable law.
• To personalize your experience on our website by displaying content and offers that are most relevant to your interests and preferences.
• To serve you targeted advertisements on our website and on third-party platforms, including social media networks.
• To measure the effectiveness of our marketing campaigns and promotional activities.

3.4 Legal and Compliance Purposes

• To comply with applicable laws, regulations, legal processes, and governmental requests.
• To enforce our Terms of Service and other agreements.
• To protect our rights, property, and safety, as well as the rights, property, and safety of our customers and third parties.
• To prevent fraud, abuse, and other harmful activities.

4. Legal Basis for Processing

Under applicable U.S. privacy laws, including the CCPA/CPRA, we process your personal information based on one or more of the following legal grounds:

• Performance of a Contract: Processing is necessary to fulfill your orders and provide you with our food services.
• Legitimate Interests: Processing is in our legitimate business interests, such as improving our services, marketing our products, and ensuring website security, provided those interests are not overridden by your rights and interests.
• Consent: Where required by law, we will process your personal information based on your explicit consent, such as for direct marketing communications or the use of non-essential cookies.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your personal information with third parties in the following circumstances:

5.1 Service Providers

We engage trusted third-party service providers who perform functions on our behalf and need access to your personal information to provide their services. These service providers are contractually obligated to protect your personal information and may only use it for the purposes for which it was disclosed. Our service providers include:

• Payment Processors: Companies that process credit card and debit card payments on our behalf (e.g., Stripe, Square, or similar providers).
• Delivery Partners: Third-party delivery services or courier companies that help fulfill your delivery orders.
• Website Hosting and Technology Providers: Companies that host our website, manage our databases, and provide other technology infrastructure.
• Analytics Providers: Services such as Google Analytics that help us analyze website traffic and user behavior.
• Email Marketing Platforms: Services that help us send promotional and transactional emails.
• Customer Support Tools: Platforms that help us manage customer inquiries and support tickets.
• Advertising Networks: Companies that help us deliver targeted advertisements on third-party platforms.

5.2 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, sale of all or a portion of our business assets, or a similar corporate transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any such change in ownership or use of your personal information.

5.3 Legal Requirements and Protection of Rights

We may disclose your personal information to government authorities, law enforcement agencies, courts, or other third parties when we believe disclosure is necessary or required to:

• Comply with applicable laws, regulations, subpoenas, court orders, or other legal processes.
• Respond to lawful requests from public and government authorities.
• Enforce our Terms of Service and other agreements.
• Protect the rights, privacy, safety, or property of Punch Pizza, our customers, or the public.
• Detect, prevent, or address fraud, security, or technical issues.

5.4 With Your Consent

We may share your personal information with third parties for other purposes when you have provided your explicit consent to do so.

6. Data Security

We take the security of your personal information seriously and have implemented a variety of technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website.
• Access Controls: We restrict access to personal information to authorized employees, contractors, and service providers who have a legitimate need to access it in connection with their job functions.
• Payment Security: Payment card information is processed using PCI-DSS compliant payment processors, and we do not store full payment card numbers on our servers.
• Regular Security Assessments: We conduct regular reviews of our security practices and procedures to identify and address potential vulnerabilities.
• Data Minimization: We collect only the personal information that is necessary for the purposes described in this Privacy Policy.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information under applicable U.S. privacy laws. We are committed to honoring these rights and responding to your requests in a timely manner.

7.1 Rights for California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights regarding your personal information:

• Right to Know: You have the right to request that we disclose what personal information we have collected about you, including the categories of personal information, the categories of sources from which it was collected, the business or commercial purposes for collecting it, the categories of third parties with whom we share it, and the specific pieces of personal information we have collected about you.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions provided by law.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising purposes. We do not sell your personal information in exchange for monetary compensation; however, if we engage in activities that constitute "sharing" under the CPRA, you may opt out using the contact information provided below.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of your sensitive personal information to purposes specified by law.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your CCPA/CPRA privacy rights. We will not deny you goods or services, charge you different prices, or provide a different level of service because you have exercised your privacy rights.

7.2 Rights for All U.S. Users

Regardless of your state of residence, we aim to provide the following rights to all our users:

• Right to Access: You may request access to the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information we hold about you. You may also update your information by logging into your account on our website.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Data Portability: You may request a copy of your personal information in a structured, commonly used, and machine-readable format.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email we send you or by contacting us directly.

7.3 How to Exercise Your Rights

To exercise any of the rights described above, please contact us using the following methods:

• Email: [email protected]
• Website: punch-cafe.click

We will respond to your request within 45 days of receipt. If we require additional time (up to 90 days total), we will notify you of the extension and the reason for it. We may need to verify your identity before processing your request to ensure the security of your personal information. We will not charge a fee for processing your request unless your request is manifestly unfounded, excessive, or repetitive.

You may designate an authorized agent to submit requests on your behalf. If you use an authorized agent, we may require you to verify your identity directly with us and to confirm that you have authorized the agent to act on your behalf.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website performance, and deliver personalized content. Cookies are small text files that are stored on your device when you visit our website.

We use the following types of cookies:

• Strictly Necessary Cookies: These cookies are essential for the basic functioning of our website, such as enabling you to log in to your account, add items to your cart, and complete your order. You cannot opt out of these cookies.
• Performance and Analytics Cookies: These cookies collect information about how you use our website, such as which pages you visit most often and any error messages you receive. This information helps us improve our website's performance and user experience.
• Functionality Cookies: These cookies allow our website to remember your preferences and settings, such as your location, language preferences, and login details.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements that are more relevant to you and your interests. They may also be used to limit the number of times you see an advertisement and to help measure the effectiveness of advertising campaigns.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a warning when a website attempts to place a cookie on your device. Please note that if you disable certain cookies, some features of our website may not function properly.

For more detailed information about the specific cookies we use and how to manage them, please review our full Cookie Policy.

9. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

• Account Information: We retain your account information for as long as your account is active or as needed to provide you with our services. If you close your account, we will delete or anonymize your personal information within a reasonable period, unless we are required to retain it longer for legal or regulatory reasons.
• Order Information: We retain order and transaction records for a period of up to seven (7) years from the date of the transaction to comply with tax, accounting, and legal requirements.
• Marketing Preferences: We retain your marketing preferences and related communications until you opt out of receiving marketing communications from us.
• Customer Support Records: We retain records of customer support interactions for up to three (3) years to help us address recurring issues and improve our customer service.
• Usage Data and Analytics: Anonymized or aggregated usage data and analytics information may be retained indefinitely for statistical and business improvement purposes.
• Legal and Compliance Records: We may retain certain personal information for longer periods when required by applicable law, regulation, legal process, or to protect our legal rights and interests.

When personal information is no longer needed for the purposes for which it was collected, we will securely delete, destroy, or anonymize it in accordance with our internal data retention and disposal procedures.

10. Children's Privacy

Punch Pizza does not direct its services to children under the age of 18, and we do not knowingly collect, use, or disclose personal information from children under 18 years of age. Our website is not designed or intended for use by minors.

If we become aware that we have inadvertently collected personal information from a child under the age of 18, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly engage in any activities that would require parental consent under COPPA without first obtaining that consent.

11. International Data Transfers

Punch Pizza is based in the United States, and all personal information we collect is primarily processed and stored in the United States. If you are accessing our website from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States.

The data protection laws of the United States may differ from those of your country of residence. By using our website and services from outside the United States, you consent to the transfer of your personal information to the United States as described in this Privacy Policy.

Where we transfer personal information internationally, we implement appropriate safeguards to protect your personal information in accordance with applicable law. These safeguards may include standard contractual clauses, data processing agreements, or other legally recognized mechanisms for cross-border data transfer.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, and services that are not operated by Punch Pizza. These may include social media platforms, delivery partner websites, payment processor portals, and other external services. We include these links for your convenience, but we do not endorse or control these third-party websites and are not responsible for their privacy practices or content.

When you click on a link to a third-party website, you will leave our website and be subject to the privacy policy and terms of service of that third party. We encourage you to review the privacy policies of any third-party websites you visit before providing any personal information. This Privacy Policy applies only to information collected through our website and services.

13. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals websites that you do not want to have your online activities tracked. As of the effective date of this Privacy Policy, there is no universally agreed-upon standard for how websites should respond to DNT signals, and we do not currently respond to DNT signals. We will update this Privacy Policy if and when a standard is established and we implement a mechanism to honor DNT signals.

California residents may also have rights related to the opt-out of the sale or sharing of personal information as described in the "Your Privacy Rights" section above, regardless of DNT signals.

14. Sensitive Personal Information

In some circumstances, we may collect or process sensitive personal information, such as information about your dietary restrictions, allergies, or health-related preferences when you voluntarily provide such information in connection with your food orders. We use this information solely to fulfill your order and provide you with appropriate food options, and we do not use it for any other purpose without your explicit consent.

We implement heightened security measures to protect sensitive personal information and limit access to it to employees and service providers who need it to perform their functions.

15. Marketing and Promotional Communications

With your consent, or where permitted by applicable law, we may send you promotional emails, newsletters, text messages, or other marketing communications about our products, services, special offers, and events. You can opt out of receiving these marketing communications at any time by:

• Clicking the "unsubscribe" link at the bottom of any marketing email we send you.
• Replying "STOP" to any marketing text message we send you.
• Updating your communication preferences in your account settings.
• Contacting us at [email protected] with your opt-out request.

Please note that even if you opt out of receiving marketing communications, we may still send you transactional communications related to your orders, account, or our business relationship, such as order confirmations, receipts, and customer service responses.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or business operations. When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date.
• Sending you an email notification if we have your email address on file.
• Displaying a prominent notice on our website for a reasonable period following the update.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our website and services after any changes to this Privacy Policy will constitute your acceptance of the updated terms.

17. Filing a Complaint with a Data Protection Authority

If you have concerns about how we handle your personal information and you are not satisfied with our response to your inquiry or complaint, you may have the right to file a complaint with a relevant data protection or consumer protection authority.

17.1 For California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA), which oversees enforcement of the CCPA/CPRA:

• California Privacy Protection Agency (CPPA)
• Website: cppa.ca.gov
• Address: 2101 Arena Blvd., Sacramento, CA 95834

17.2 For All U.S. Residents

U.S. residents may file a complaint with the Federal Trade Commission (FTC) regarding unfair or deceptive business practices:

• Federal Trade Commission (FTC)
• Website: ftc.gov
• Phone: 1-877-382-4357
• Address: 600 Pennsylvania Ave., NW, Washington, DC 20580

We encourage you to contact us first before filing a complaint with a regulatory authority so that we have the opportunity to address your concerns directly and promptly.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or your personal information, please do not hesitate to contact us. We are committed to addressing your privacy concerns in a timely and transparent manner.

When contacting us regarding a privacy request or inquiry, please include the following information to help us process your request efficiently:

• Your full name and contact information.
• A description of your request or concern.
• If requesting access to or deletion of personal information, any relevant account details (such as your registered email address) to help us locate your information.

We will acknowledge receipt of your request within five (5) business days and will respond to your request within forty-five (45) days, or within the timeframe required by applicable law.