Privacy Policy

At Pizzana, we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website pizzana-eat.rest, place orders through our platform, or otherwise interact with our services. Please read this policy carefully. If you disagree with the terms of this Privacy Policy, please discontinue use of our website and services immediately.

This Privacy Policy applies to all information collected through our website, mobile interactions, online ordering system, loyalty programs, promotional activities, and any related services we offer (collectively, the "Services"). By using our Services, you acknowledge that you have read, understood, and agree to be bound by all terms of this Privacy Policy.

1. About Us

Pizzana is a food service business operating in the United States. We are dedicated to providing high-quality dining and food delivery experiences. For all matters relating to privacy and this Privacy Policy, you may contact us using the following details:

We act as the data controller with respect to the personal information collected through our Services. As a business operating in the United States, our data practices are governed by applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable U.S. state privacy statutes.

2. Information We Collect

We collect various types of information in connection with your use of our Services. This includes information you provide directly to us, information collected automatically when you use our Services, and information obtained from third parties.

2.1 Personal Information You Provide Directly

We collect personal information that you voluntarily provide to us when you:

  • Create an account or register on our website
  • Place an order for food delivery or pickup
  • Sign up for our newsletter or loyalty program
  • Contact our customer support team
  • Participate in promotions, contests, or surveys
  • Submit reviews or feedback about our products and services
  • Make a reservation through our platform

The personal information we collect may include:

Category Examples
Identity Information First name, last name, username or similar identifier
Contact Information Email address, telephone number, billing address, delivery address
Financial Information Payment card details (processed securely through third-party payment processors), billing information
Transaction Information Order history, purchase records, dietary preferences, special instructions
Account Credentials Username, password (encrypted), security questions
Communications Records of correspondence, customer service inquiries, feedback and reviews
Marketing Preferences Communication preferences, promotional opt-in/opt-out choices

2.2 Information Collected Automatically

When you visit our website or use our Services, certain information is collected automatically through cookies, web beacons, pixel tags, and similar tracking technologies. This automatically collected information includes:

  • Usage Data: Pages visited, links clicked, time spent on pages, search queries entered, features used, and navigation patterns within our website
  • Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, language settings, and referring URLs
  • Location Data: General geographic location derived from your IP address; more precise location information if you grant permission through your device settings for delivery purposes
  • Log Data: Server log files including access times, error logs, and performance metrics
  • Cookie Data: Information stored in cookies and similar tracking technologies placed on your device (see Section 7 for more details)

2.3 Information from Third Parties

We may receive information about you from third parties, including:

  • Social Media Platforms: If you connect your social media account to our Services or log in using social sign-on features (such as Facebook Login or Google Sign-In), we may receive basic profile information from those platforms
  • Payment Processors: Confirmation of payment transactions and fraud prevention signals from our payment service providers
  • Delivery Partners: Delivery status updates and contact information from third-party delivery services we may partner with
  • Analytics Providers: Aggregated data about user behavior on our website from analytics services such as Google Analytics
  • Marketing Partners: Information to help us tailor advertisements and promotional communications

3. How We Use Your Information

We use the information we collect for legitimate business purposes consistent with the context in which it was collected. Our uses of your personal information include:

3.1 Service Provision and Order Fulfillment

  • Processing and fulfilling your food orders, including preparation, packaging, and delivery or pickup coordination
  • Creating and managing your account
  • Processing payments and preventing fraudulent transactions
  • Sending order confirmations, receipts, delivery updates, and other transactional communications
  • Responding to your inquiries, complaints, and customer support requests
  • Managing your reservations and special requests

3.2 Business Operations and Improvement

  • Monitoring and analyzing usage patterns, trends, and preferences to improve our menu, website, and overall service quality
  • Conducting internal research, data analysis, and testing to develop new products and features
  • Troubleshooting technical issues and maintaining the security and functionality of our website
  • Managing our loyalty program and calculating reward points or benefits
  • Conducting surveys, polls, and customer satisfaction assessments

3.3 Marketing and Promotional Communications

  • Sending promotional emails, newsletters, special offers, and information about new menu items — only where you have consented or where we have a legitimate interest
  • Personalizing your experience on our website and tailoring recommendations based on your order history and preferences
  • Displaying targeted advertisements on third-party platforms and websites based on your browsing and purchase behavior
  • Running contests, sweepstakes, and promotional campaigns

3.4 Legal Compliance and Safety

  • Complying with applicable federal, state, and local laws and regulations
  • Enforcing our Terms of Service and other legal agreements
  • Protecting the rights, property, and safety of Pizzana, our customers, employees, and the public
  • Detecting, preventing, and responding to fraud, security incidents, and other harmful activities
  • Cooperating with law enforcement agencies when legally required

4. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information for monetary compensation to third parties for their own independent marketing purposes. However, we may share your information in the following circumstances:

4.1 Service Providers

We engage trusted third-party companies and individuals to perform functions and provide services on our behalf. These service providers are given access to personal information only as necessary to perform their services and are contractually obligated to maintain appropriate data security measures and confidentiality. Our service providers include:

  • Payment Processors: To securely process credit card and other payment transactions (e.g., Stripe, Square)
  • Delivery Services: To fulfill food orders through third-party delivery partners
  • Email and SMS Providers: To send transactional notifications and marketing communications
  • Cloud Hosting and IT Infrastructure: To host our website, databases, and applications securely
  • Analytics Providers: To help us understand how customers use our Services (e.g., Google Analytics)
  • Customer Support Platforms: To manage and track customer service interactions
  • Marketing and Advertising Platforms: To manage and deliver targeted advertising campaigns

4.2 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving Pizzana, your personal information may be transferred to the acquiring entity as part of the transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements and Protection

We may disclose your personal information when we believe in good faith that disclosure is necessary to:

  • Comply with applicable law, legal process, or governmental requests
  • Respond to lawful subpoenas, court orders, or regulatory investigations
  • Enforce our Terms of Service or other agreements
  • Protect the rights, safety, and property of Pizzana, our users, or the public
  • Detect and prevent fraud, security threats, or other illegal activities

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that does not identify any individual person with third parties for industry analysis, research, marketing, or other business purposes without restriction.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, organizational, and administrative safeguards designed to protect your data against unauthorized access, disclosure, alteration, or destruction.

5.1 Security Measures We Implement

  • Encryption: All data transmitted between your browser and our website is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data such as payment information is encrypted at rest
  • Access Controls: Access to personal information is restricted to authorized employees and contractors on a need-to-know basis. All personnel with access to personal data are subject to confidentiality obligations
  • Password Security: Account passwords are stored using one-way cryptographic hashing algorithms. We never store plain-text passwords
  • Payment Security: We comply with Payment Card Industry Data Security Standards (PCI DSS). We do not store full payment card numbers on our servers; payment processing is handled by certified third-party processors
  • Regular Security Assessments: We conduct periodic security audits, vulnerability assessments, and penetration testing to identify and remediate potential security risks
  • Incident Response: We maintain a documented data breach response plan and will notify affected individuals and relevant authorities in accordance with applicable law in the event of a data breach

6. Your Privacy Rights

Depending on your state of residence and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other applicable U.S. state privacy laws.

6.1 Rights Available to You

Right Description
Right to Know / Access You have the right to request that we disclose what personal information we have collected about you, the categories of sources from which it was collected, the purposes for which it is used, and the categories of third parties with whom it has been shared.
Right to Correction You have the right to request correction of inaccurate personal information we hold about you. You may also update much of your information directly through your account settings.
Right to Deletion You have the right to request deletion of personal information we have collected about you, subject to certain exceptions (e.g., where retention is necessary to complete transactions, comply with legal obligations, or for other permitted purposes).
Right to Data Portability You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to transmit that information to another entity where technically feasible.
Right to Opt Out of Sale/Sharing Under the CCPA/CPRA, you have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell personal information for monetary compensation. You may opt out of sharing for advertising purposes by contacting us.
Right to Limit Use of Sensitive Information Under the CPRA, you have the right to direct us to limit the use of sensitive personal information to what is necessary to provide requested services.
Right to Non-Discrimination We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge different prices, or provide a different quality of service based solely on your exercise of these rights.

6.2 How to Exercise Your Rights

To exercise any of the rights described above, you may submit a verifiable consumer request by:

We will respond to your verifiable consumer request within 45 days of receipt. If additional time is required, we will notify you of the extension and the reason within the initial 45-day period. We may request that you provide certain information to verify your identity before processing your request. You may also designate an authorized agent to submit requests on your behalf, in which case we may require written authorization or proof of the agent's authority.

7. Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies on our website to enhance your user experience, analyze website performance, and deliver relevant advertising. Cookies are small text files placed on your device when you visit a website.

7.1 Types of Cookies We Use

  • Strictly Necessary Cookies: Essential for the website to function properly. These enable core features such as user authentication, shopping cart functionality, and payment processing. These cookies cannot be disabled.
  • Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous, aggregated information about page views, traffic sources, and user behavior.
  • Functionality Cookies: Remember your preferences and choices (such as language, location, or saved items) to provide a personalized experience.
  • Targeting and Advertising Cookies: Used to deliver advertisements relevant to your interests, both on our website and on third-party platforms. These cookies may track your browsing activity across different websites.

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications when a new cookie is placed. Please note that disabling certain cookies may affect the functionality of our website and Services.

You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance (DAA) at optout.aboutads.info or the Network Advertising Initiative (NAI) at optout.networkadvertising.org.

For more detailed information about our use of cookies, please refer to our Cookie Policy.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Data Category Retention Period
Account and Profile Information Duration of account existence plus 3 years after account closure
Order and Transaction Records 7 years (for tax, accounting, and legal compliance purposes)
Payment Information As required by PCI DSS standards; card details are tokenized and not stored directly
Customer Support Communications 3 years from the date of the last interaction
Marketing Preferences and Consent Records Duration of consent plus 5 years for compliance documentation
Website Usage and Analytics Data Up to 26 months (as per Google Analytics default settings)
Cookie Data As specified in each cookie's expiry settings (see Cookie Policy)
Legal Compliance Records As required by applicable federal and state law (typically 7 years)

When your personal information is no longer required for the purposes for which it was collected, and there is no legal obligation requiring its continued retention, we will securely delete, destroy, or anonymize it using industry-standard data destruction methods.

9. Children's Privacy

Pizzana does not direct its Services to children or minors. Our website, online ordering platform, and related services are designed for adults aged 18 and over. We do not knowingly solicit, collect, process, or store personal information from children under the age of 18.

If we discover that we have inadvertently collected personal information from a child under 18 without verifiable parental or guardian consent, we will take immediate steps to delete that information from our records. If you believe that we may have collected information from a minor, please contact us immediately at [email protected].

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the online collection of personal information from children under 13 without verifiable parental consent, as well as applicable state laws addressing the privacy of minors.

10. International Data Transfers

Pizzana is a United States-based business and our primary operations, servers, and data storage are located within the United States. If you access our Services from outside the United States, please be aware that your personal information will be transferred to, stored in, and processed in the United States.

The United States may not have data protection laws equivalent to those in your country of residence. By using our Services from outside the United States, you acknowledge and consent to the transfer of your personal information to the United States and its processing in accordance with this Privacy Policy and applicable U.S. law.

Where we transfer personal information of individuals located in jurisdictions with specific data transfer requirements (such as the European Economic Area or United Kingdom), we will implement appropriate safeguards, such as Standard Contractual Clauses approved by relevant regulatory authorities, to ensure that your personal information receives an adequate level of protection.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, and services, including social media platforms, delivery partner portals, and payment gateways. This Privacy Policy applies only to our Services and does not extend to any third-party websites or services that may be linked to or referenced on our website.

We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party services before providing your personal information to them. The inclusion of a link to a third-party website does not constitute our endorsement of that website or its privacy practices.

12. California Privacy Rights (CCPA/CPRA)

If you are a resident of the State of California, you have specific rights under the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA). In addition to the rights described in Section 6 above, California residents have the following additional protections:

  • Right to Know Specific Pieces of Information: You may request that we disclose the specific pieces of personal information we have collected about you over the past 12 months.
  • Right to Opt Out of Sale: You have the right to opt out of the sale of your personal information. As stated above, we do not sell personal information for monetary consideration.
  • Right to Non-Discrimination: You will not face discrimination for exercising your CCPA/CPRA rights.
  • "Shine the Light" Law: California Civil Code Section 1798.83 permits California residents to request information about disclosures of personal information to third parties for direct marketing purposes in the preceding calendar year.

To submit a California privacy rights request, please contact us at [email protected] with the subject line "California Privacy Rights Request."

13. Filing Complaints with Regulatory Authorities

If you believe that we have violated your privacy rights or have not handled your personal information in accordance with applicable law, you have the right to file a complaint with the relevant data protection or consumer protection authority.

13.1 Federal Oversight

The Federal Trade Commission (FTC) is the primary federal agency responsible for enforcing consumer privacy protections under the FTC Act. If you have concerns about our privacy practices, you may file a complaint with the FTC:

13.2 California Residents

California residents may also file complaints with the California Privacy Protection Agency (CPPA), established under the CPRA:

Additionally, you may contact the California Attorney General's Office for consumer privacy complaints.

13.3 Other State Residents

Residents of states with specific consumer privacy laws (including Virginia, Colorado, Connecticut, Texas, and others) may have the right to appeal our decisions regarding their privacy requests and to file complaints with their respective state attorneys general. We encourage you to research the specific regulatory body applicable to your state of residence.

We encourage you to contact us directly before filing a regulatory complaint. We are committed to resolving privacy concerns promptly and will work with you to address any issues as quickly as possible.

14. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, business operations, or for other reasons. When we make material changes to this Privacy Policy, we will:

  • Update the "Last Updated" date at the top of this page
  • Post a prominent notice on our website homepage
  • Send an email notification to registered users where required by law or where the change is significant

Your continued use of our Services after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your inquiries promptly and transparently.

Privacy Inquiries — Pizzana

When contacting us about a privacy matter, please include the following information to help us respond efficiently:

  • Your full name and email address associated with your account (if applicable)
  • A clear description of your inquiry or request
  • The specific right you wish to exercise (if applicable)
  • Your state of residence (for state-specific rights requests)

We will acknowledge receipt of your inquiry within 5 business days and provide a substantive response within the timeframe required by applicable law (generally 45 days for CCPA/CPRA requests).