Privacy Policy

This Privacy Policy describes how Pizzana ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at pizzanas.click, place orders, interact with our digital services, or otherwise engage with our food business. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and respect.

By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms described herein, please discontinue use of our website and services immediately. We encourage you to review this policy periodically, as we may update it from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

For any questions or concerns about this Privacy Policy or our data practices, you may contact us at any time using the contact details provided at the end of this document.

1. Who We Are

Pizzana is a food business operating in the United States, dedicated to providing high-quality food products and ordering services to our customers. Our digital presence is managed through our website, pizzanas.click, through which customers may browse our menu, place orders, create accounts, and interact with our team.

As the operator of this website and provider of these services, Pizzana acts as the data controller responsible for your personal information collected through the channels described in this policy.

2. Information We Collect

We collect several types of information in connection with the operation of our food business and website. The categories of information we may collect include personal information you provide directly to us, information we collect automatically when you use our website, and information we receive from third parties.

2.1 Personal Information You Provide Directly

When you interact with Pizzana — whether by creating an account, placing an order, contacting us, or signing up for promotional communications — you may provide us with the following personal information:

• Identity Information: Your full name, username, or display name.
• Contact Information: Your email address, phone number, and delivery or billing address.
• Account Credentials: Your password or other authentication credentials used to access your account (stored in encrypted form).
• Order and Transaction Information: Details about the food items you order, order history, special dietary requests, delivery preferences, and order notes.
• Payment Information: Credit or debit card details, billing address, and related financial data necessary to process transactions. Note that full payment card data is handled by our secure third-party payment processors and is not stored directly by Pizzana.
• Communications: Messages, feedback, reviews, complaints, or other communications you send to us via email, contact forms, or other channels.
• Marketing Preferences: Your preferences regarding receiving promotional emails, newsletters, or other marketing materials.

2.2 Information We Collect Automatically

When you visit our website at pizzanas.click, we automatically collect certain technical and usage information through cookies, web beacons, log files, and similar tracking technologies. This may include:

• Device Information: The type of device you use to access our website, operating system, device identifiers, browser type and version, screen resolution, and hardware model.
• Log Data: Your IP address, access times and dates, pages viewed, referring URLs, links clicked, error logs, and the duration of your visit.
• Location Data: General geographic location inferred from your IP address (e.g., city or state level). We do not collect precise GPS-level location without your explicit consent.
• Usage Data: Information about how you navigate and interact with our website, including which pages you visit, what items you add to your cart, how often you place orders, and how long you spend on specific pages.
• Cookie and Tracking Data: Information collected through cookies, pixel tags, web beacons, and similar technologies. For detailed information, see our Cookie Usage section below.

2.3 Information from Third Parties

We may also receive certain information about you from third-party sources, including:

• Payment processors who confirm transaction completion or flag issues.
• Delivery service partners who share delivery status updates and logistics data.
• Analytics providers who aggregate and share website performance data.
• Social media platforms, if you choose to log in or connect your account via a social media integration.
• Marketing partners who may provide aggregated demographic or behavioral data used for advertising purposes.

3. How We Use Your Information

We use the personal information we collect for specific, legitimate, and lawful purposes. Below is a detailed explanation of how and why we use your data:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including coordinating pickup or delivery.
• Creating and managing your account on our website.
• Sending you order confirmations, receipts, updates, and delivery notifications.
• Processing payments and preventing fraudulent transactions.
• Responding to your customer service inquiries, complaints, or requests.
• Managing your preferences, saved addresses, and account settings.

3.2 Improving Our Website and Services

• Analyzing usage patterns to understand how customers interact with our website and menu.
• Identifying and resolving technical issues, bugs, or errors on our website.
• Conducting internal research and analytics to improve the quality of our food offerings and digital experience.
• Testing new features, menu items, or promotional campaigns.

3.3 Marketing and Communications

• Sending you promotional emails, newsletters, special offers, and discounts — only where you have opted in to receive such communications, or where permitted by applicable law.
• Personalizing your experience on our website by displaying relevant menu items, promotions, or recommendations based on your order history and preferences.
• Conducting surveys or requesting feedback to improve our services.
• Running targeted advertising campaigns through third-party platforms such as Google Ads or social media channels.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email, or by contacting us directly at [email protected].

3.4 Legal Compliance and Protection

• Complying with applicable federal and state laws, regulations, and legal obligations.
• Responding to lawful requests from law enforcement, regulatory authorities, or courts.
• Enforcing our Terms of Service and other applicable policies.
• Protecting the rights, property, or safety of Pizzana, our customers, employees, or the public.
• Preventing, detecting, and investigating fraud, abuse, or other harmful activity.

4. Legal Basis for Processing

As a business operating in the United States, we process personal information in accordance with applicable federal and state privacy laws, including the Federal Trade Commission Act (FTC Act), which governs unfair or deceptive data practices, and, where applicable, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) for California residents.

Our legal basis for collecting and using personal information includes:

• Contractual Necessity: Processing your order and providing the services you request.
• Consent: Where you have expressly opted in, such as for marketing communications or certain cookies.
• Legitimate Business Interests: Improving our services, fraud prevention, and website analytics.
• Legal Obligation: Compliance with applicable laws and regulatory requirements.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we do share your information in the following limited circumstances:

5.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our website and delivering our services. These providers are contractually obligated to protect your information and may only use it for the specific purposes for which it was shared. These include:

• Payment Processors: Companies that securely process credit card and other payment transactions on our behalf.
• Delivery Partners: Third-party delivery services that fulfill food delivery orders on our behalf.
• Hosting and Technology Providers: Web hosting, cloud infrastructure, and IT services that support our website and systems.
• Analytics Providers: Companies such as Google Analytics that help us understand website usage and performance.
• Email and Marketing Platforms: Services used to send transactional and promotional email communications.
• Customer Support Tools: Platforms used to manage and respond to customer inquiries.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law, or in good faith belief that such action is necessary to:

• Comply with a legal obligation, court order, or government request.
• Protect and defend the rights or property of Pizzana.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of users of our services or the public.
• Protect against legal liability.

5.3 Business Transfers

In the event that Pizzana undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal information may be transferred to the acquiring or successor entity as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and your information becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with other parties when you provide explicit consent to do so, such as when you participate in a co-branded promotion or third-party loyalty program.

6. Cookie Usage

Our website, pizzanas.click, uses cookies and similar tracking technologies to enhance your experience, understand how our website is used, and deliver relevant content and advertising. Cookies are small text files placed on your device by a website when you visit it.

6.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly, including maintaining your session, keeping items in your cart, and enabling secure login.
• Performance and Analytics Cookies: Used to collect anonymous data about how visitors use our website, helping us improve functionality and user experience.
• Functional Cookies: Allow us to remember your preferences and settings, such as your preferred delivery address or language settings.
• Marketing and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns across the web.

6.2 Managing Cookies

You have the right to accept or reject non-essential cookies. You can manage your cookie preferences through your browser settings or through our cookie consent tool when you first visit our website. Please note that disabling certain cookies may affect the functionality of our website.

For more detailed information about the specific cookies we use and how to manage them, please refer to our Cookie Policy, which is available on our website.

7. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

7.1 Security Measures

• Encryption: We use Secure Socket Layer (SSL) and Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions, and such access is governed by strict internal policies.
• Password Security: Account passwords are stored using strong, industry-standard cryptographic hashing techniques.
• Payment Security: Payment card data is processed through PCI-DSS compliant third-party payment processors. We do not store full card numbers on our systems.
• Regular Audits: We regularly review our security practices and update them to address emerging threats and vulnerabilities.
• Incident Response: We maintain a data breach response plan and will notify affected individuals and relevant authorities in the event of a significant security breach, as required by applicable law.

Despite our best efforts, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your information and encourage you to take steps to protect your own data, including using a strong, unique password for your account and avoiding sharing your login credentials.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The specific retention periods vary depending on the type of data and the reason it was collected:

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention procedures. Where deletion is not immediately possible due to backup systems, we will ensure the data is isolated and protected until it can be deleted.

9. Your Rights and Choices

Depending on your state of residence and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with the laws of the United States, including the California Consumer Privacy Act (CCPA/CPRA) for California residents and other applicable state privacy laws.

9.1 Rights Available to All Users

• Right to Access: You have the right to request access to the personal information we hold about you, including the categories of data collected, the purposes for which it is used, and the third parties with whom it is shared.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (e.g., where we are required to retain it for legal compliance).
• Right to Opt Out of Marketing: You may opt out of receiving promotional communications from us at any time by using the unsubscribe link in our emails or by contacting us directly.
• Right to Data Portability: Where technically feasible, you may request a copy of your personal information in a structured, machine-readable format.

9.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including:

• Right to Know: The right to know what categories of personal information we collect, use, disclose, and sell or share.
• Right to Delete: The right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: The right to correct inaccurate personal information we hold about you.
• Right to Opt Out of Sale or Sharing: The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. Pizzana does not sell your personal information for monetary consideration. However, if we engage in targeted advertising activities that may constitute "sharing" under CPRA, you may opt out by contacting us.
• Right to Limit Use of Sensitive Personal Information: The right to limit the use and disclosure of sensitive personal information to specific permitted purposes.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights. We will not deny you services, charge different prices, or provide a lower quality of service because you exercised your rights under the CCPA/CPRA.

9.3 How to Exercise Your Rights

To exercise any of the rights described above, please contact us using the following methods:

• Email: [email protected]
• Website: pizzanas.click (via the Contact Us page)

We will acknowledge receipt of your request within 10 business days and respond to your request within 45 days. If we need additional time (up to 90 days total), we will notify you of the extension and the reason for the delay.

To protect your privacy and security, we may need to verify your identity before processing your request. We will use reasonable measures to do so, which may include asking you to confirm information already associated with your account.

You may also designate an authorized agent to submit a request on your behalf. The authorized agent must provide written permission signed by you, and we may require you to verify your identity directly with us.

10. Children's Privacy

Pizzana's website, online ordering platform, and related services are designed for adult users. We do not knowingly collect, use, or disclose personal information from individuals under the age of 13. If you are under 13 years of age, you must not use or access our website or services or register an account with us.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete that information from our systems.

If you are a parent or guardian and believe that your child under 13 has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

Users between the ages of 13 and 17 should only use our services with the direct supervision and consent of a parent or legal guardian. We encourage parents and guardians to monitor their children's online activities and to help us enforce this policy by instructing their children never to provide personal information through our website without parental permission.

11. International Data Transfers

Pizzana is a business based in the United States, and our primary data processing activities take place within the United States. If you are accessing our website from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our website and services and providing us with your personal information, you acknowledge and consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy.

When we transfer personal information internationally (for example, to third-party service providers located in other countries), we take steps to ensure that appropriate safeguards are in place to protect your data, including through the use of contractual protections, data processing agreements, and other mechanisms consistent with applicable law.

If you have questions about the safeguards we apply to international data transfers, please contact us at [email protected].

12. Third-Party Websites and Links

Our website may contain links to third-party websites, services, or applications that are not operated or controlled by Pizzana. This Privacy Policy applies only to our own website and services at pizzanas.click. We are not responsible for the privacy practices of third-party websites and encourage you to review the privacy policies of any websites you visit through links on our site.

Third-party services we integrate with, such as payment processors, social media platforms, or delivery partners, operate under their own privacy policies. We recommend reviewing those policies to understand how they collect and use your information.

13. Do Not Track Signals

Some web browsers and devices allow users to send a "Do Not Track" (DNT) signal to indicate that they do not want their online activities tracked. Currently, there is no universally accepted standard for how companies should respond to DNT signals. Our website does not currently respond to Do Not Track signals in a standardized way.

However, you may manage your cookie and tracking preferences through your browser settings or through our cookie consent tool. California residents may also have additional rights regarding the use of automated tracking technology under the CCPA/CPRA.

14. California Shine the Light Law

California Civil Code Section 1798.83, known as the "Shine the Light" law, permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. If you are a California resident and would like to make such a request, please contact us at [email protected] with the subject line "Shine the Light Request."

15. How to File a Complaint

If you believe that we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to contact us first so that we can attempt to resolve the matter directly. You may do so by reaching out to us at [email protected].

If you are not satisfied with our response, or if you believe we are processing your personal data in violation of applicable law, you have the right to file a complaint with the relevant authorities:

15.1 Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) enforces federal consumer protection laws, including those related to unfair or deceptive practices in data handling. You may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-382-4357

15.2 California Attorney General (for California Residents)

California residents who believe their privacy rights under the CCPA/CPRA have been violated may contact the California Attorney General's Office:

• Website: oag.ca.gov/privacy/ccpa
• Phone: 1-916-210-6276

15.3 State Attorney General Offices

Residents of other states may contact their respective State Attorney General's Office if they believe their state privacy rights have been violated. State-level privacy protections continue to expand across the United States, and we are committed to compliance with all applicable state laws.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, business operations, legal requirements, or other factors. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post a notice on our website at pizzanas.click notifying users of the changes.
• Where required by law or where the changes are significant, send an email notification to registered users.

We encourage you to review this Privacy Policy regularly to stay informed about how we collect, use, and protect your information. Your continued use of our website and services following the posting of any changes to this policy constitutes your acceptance of those changes.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries in a timely and transparent manner.

When contacting us about a privacy matter, please provide sufficient information to allow us to identify your account and understand your request, including your full name, email address, and a description of your inquiry. We will respond to all legitimate requests within the timeframes required by applicable law.

Thank you for trusting Pizzana with your personal information. We are dedicated to protecting your privacy and providing you with a safe, enjoyable, and transparent experience every time you visit our website or order from us.