Privacy Policy

This Privacy Policy describes how Pizza Factory ("we," "us," "our," or the "Company") collects, uses, discloses, and safeguards your personal information when you visit our website pizzafactory.rest, place orders, use our services, or otherwise interact with us. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services.

We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy complies with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable federal and state consumer protection regulations.

1. About Us

Pizza Factory is a food service business operating in the United States. We provide pizza and related food products through our physical locations and our online ordering platform.

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at the email address listed above.

2. Information We Collect

We collect several types of information from and about users of our website and services. The categories of personal information we may collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, participate in a promotion, or contact us directly, we may collect:

• Full name
• Email address
• Phone number
• Delivery address and billing address
• Username and password (stored in encrypted form)
• Date of birth (where required for age verification)
• Payment information (credit/debit card details, processed securely through third-party payment processors)
• Order history and food preferences
• Special dietary requirements or allergy information you voluntarily provide

2.2 Usage and Behavioral Data

When you browse or interact with our website, we automatically collect certain information about your browsing behavior and usage patterns, including:

• Pages visited and time spent on each page
• Links clicked and menu items viewed
• Search queries entered on our website
• Items added to or removed from your cart
• Referring URL (the website that directed you to ours)
• Time and date of your visit
• Session duration and navigation path

2.3 Device and Technical Information

We automatically collect technical information about the devices and systems you use to access our website, including:

• IP address
• Browser type and version
• Operating system and platform
• Device type (desktop, mobile, tablet)
• Screen resolution and device identifiers
• Internet service provider (ISP)
• Geographic location data derived from your IP address (city/region level)
• Language preferences

2.4 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about how you interact with our website. For detailed information about our use of cookies, please refer to Section 9 of this Privacy Policy.

2.5 Communications Data

If you contact us via email, phone, or any web form, we may retain records of that correspondence, including:

• The content of your messages
• Your contact details as provided
• Customer support tickets and resolution records
• Feedback, reviews, and survey responses

2.6 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms, if you choose to connect your account or interact with our social media pages
• Third-party food delivery aggregator platforms that process orders on your behalf
• Marketing partners and analytics providers
• Fraud prevention and identity verification services

3. How We Use Your Information

We use the personal information we collect for the following purposes. We will only use your personal information when we have a lawful basis to do so, which may include fulfilling a contract, complying with a legal obligation, pursuing our legitimate business interests, or obtaining your consent.

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders and delivery requests
• Managing your account and providing account-related services
• Sending order confirmations, receipts, and delivery status updates
• Processing payments and preventing fraudulent transactions
• Responding to your inquiries, complaints, and customer service requests
• Accommodating dietary restrictions or allergy information you have disclosed

3.2 Analytics and Website Improvement

• Analyzing website usage patterns to improve user experience
• Understanding which menu items, promotions, and features are most popular
• Conducting internal research to improve our food products and services
• Diagnosing technical issues and maintaining website security and integrity
• Measuring the effectiveness of our website's design and functionality

3.3 Marketing and Promotional Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required by law)
• Personalizing your experience by recommending menu items based on your order history
• Running loyalty programs, contests, and promotional campaigns
• Displaying relevant advertisements on third-party platforms
• Conducting customer satisfaction surveys

You have the right to opt out of marketing communications at any time. Please see Section 7 for more details on your rights.

3.4 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from law enforcement or government authorities
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of our business, employees, and customers
• Detecting, preventing, and addressing fraud, abuse, and security incidents

4. Sharing of Your Personal Information

We respect the confidentiality of your personal information. We do not sell, rent, or trade your personal data to unrelated third parties for their own marketing purposes. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf, including but not limited to:

• Payment processors — to securely handle credit card and online payment transactions
• Delivery and logistics partners — to fulfill food delivery orders to your address
• Cloud hosting providers — to host our website and store data securely
• Email marketing platforms — to send newsletters and promotional communications
• Analytics providers (e.g., Google Analytics) — to analyze website traffic and user behavior
• Customer support software providers — to manage customer service interactions
• Fraud detection services — to protect against unauthorized transactions

These service providers are contractually obligated to use your information only for the purposes of providing their services to us and are prohibited from using it for any other purpose. They are required to implement appropriate data security measures.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we are required to do so by law or in good faith belief that such action is necessary to:

• Comply with a legal obligation, court order, or government request
• Enforce or investigate potential violations of our policies
• Protect against legal liability, fraud, or security threats
• Protect the personal safety of users of our services or the public

4.3 Business Transfers

In the event that Pizza Factory is involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your personal information with other third parties when you have given us your explicit consent to do so, such as when you participate in co-branded promotions or programs with our partners.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, and destruction.

5.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols.
• Password Hashing: User passwords are never stored in plain text; they are hashed using strong cryptographic algorithms.
• Payment Security: Payment card data is processed through PCI DSS-compliant payment processors. We do not store your full card details on our servers.
• Firewalls and Intrusion Detection: We use firewalls and intrusion detection systems to monitor and protect our network infrastructure.
• Access Controls: Access to personal data is restricted to authorized employees and contractors who need it to perform their job functions.

5.2 Organizational Safeguards

• Regular employee training on data privacy and security best practices
• Internal data protection policies and procedures
• Regular review and auditing of data access logs
• Vendor assessments to ensure third-party service providers maintain adequate security standards

5.3 Limitations

While we strive to use commercially acceptable means to protect your personal information, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify affected individuals as required by applicable law.

6. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy, or as required by applicable law.

After the applicable retention period expires, your personal data will be securely deleted or anonymized so that it can no longer be associated with you.

7. Your Rights and Choices

Depending on your state of residence and applicable law, you may have certain rights regarding your personal information. We respect these rights and provide mechanisms for you to exercise them.

7.1 Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions (e.g., records we are required to retain for legal or tax purposes).
• Right to Opt Out of Marketing: You may opt out of receiving promotional communications from us at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us directly at [email protected].
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: The right to know what categories of personal information we have collected, the sources, the business purposes, and the categories of third parties we share it with.
• Right to Opt Out of Sale or Sharing: The right to direct us not to "sell" or "share" your personal information as those terms are defined under the CPRA.
• Right to Limit Use of Sensitive Personal Information: The right to limit our use of sensitive personal information to only what is necessary to provide requested services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level or quality of service because you exercised your privacy rights.
• Shine the Light Law: California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for direct marketing purposes.

7.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us using the following contact methods:

• Email: [email protected]
• Website: pizzafactory.rest

We will respond to your request within 45 days. If we require more time (up to 90 days), we will inform you in writing of the reason and extension period. We may need to verify your identity before processing your request to protect your security. We will not charge a fee for processing your request unless it is clearly unfounded, repetitive, or excessive.

7.4 Authorized Agents

California residents may designate an authorized agent to submit requests on their behalf. The authorized agent must provide written proof of their authorization, and we may require you to verify your identity directly with us before processing the request.

8. Children's Privacy

Our website and services are intended for individuals who are 18 years of age or older. We do not knowingly collect, solicit, or use personal information from children under the age of 13, or from any minors under the age of 18 without parental consent.

If you are under 18 years of age, please do not use our website or provide any personal information through our services. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected], and we will take prompt steps to delete such information from our records.

We comply with the Children's Online Privacy Protection Act (COPPA) and do not direct our services toward children. If we discover that we have inadvertently collected personal information from a child under 13, we will delete that information as quickly as possible.

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content and advertisements.

9.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They help us recognize your device and remember your preferences and actions over time.

9.2 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly. These include session cookies that keep you logged in and allow you to add items to your cart.
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). These cookies collect aggregated, anonymized data.
• Functional Cookies: Remember your preferences, such as your language settings and saved addresses, to personalize your experience.
• Marketing and Advertising Cookies: Used to deliver relevant advertisements on our website and across third-party platforms, and to measure the effectiveness of our advertising campaigns.

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or to alert you when cookies are being sent. Please note that if you disable certain cookies, some features of our website may not function correctly. You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance's opt-out page at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

For more detailed information about our use of cookies, the specific cookies we deploy, and how to manage your preferences, please refer to our full Cookie Policy available on our website.

10. International Data Transfers

Pizza Factory operates within the United States, and our primary servers and data storage systems are located in the United States. However, some of our third-party service providers may be located in or may transfer data to countries outside the United States. In such cases, we take steps to ensure that your personal data receives an adequate level of protection, including through:

• Entering into data processing agreements that include appropriate contractual clauses requiring service providers to protect your data
• Ensuring service providers are certified under recognized data protection frameworks where applicable
• Verifying that destination countries offer an adequate level of data protection

By using our website and services, you acknowledge and consent to the potential transfer of your information to the United States and other countries in accordance with this Privacy Policy.

11. Third-Party Links and Integrations

Our website may contain links to third-party websites, social media platforms, or services that are not operated or controlled by Pizza Factory. This Privacy Policy does not apply to those third-party websites. We have no responsibility for the content or privacy practices of any third-party site, and we encourage you to review the privacy policy of every website you visit.

Our website may include integrations with third-party services such as:

• Social media sharing buttons (Facebook, Instagram, etc.)
• Third-party payment gateways
• Online food ordering aggregator platforms
• Google Maps for location services

These integrations may collect information about you independently. We recommend reviewing the privacy policies of these third parties to understand how they process your data.

12. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. At this time, our website does not respond to DNT signals. However, you can manage your tracking preferences through our cookie management tools and the opt-out mechanisms described in Section 9 of this policy.

13. FTC Compliance and Consumer Protection

Pizza Factory is committed to complying with the Federal Trade Commission Act (FTC Act) and the FTC's standards for consumer protection in connection with online privacy practices. We do not engage in unfair or deceptive acts or practices in connection with the collection, use, or disclosure of personal information. Our privacy practices are consistent with the FTC's guidelines on privacy and data security for commercial websites.

We also comply with the CAN-SPAM Act for all commercial email communications. All marketing emails we send include a functioning unsubscribe mechanism, our physical mailing address, and a clear identification of the email as a commercial message.

14. Filing a Complaint

If you have concerns about our privacy practices and are not satisfied with our response to your inquiry, you have the right to file a complaint with the relevant data protection or consumer protection authority.

14.1 Federal Trade Commission (FTC)

For complaints regarding unfair or deceptive trade practices related to privacy:

• Website: reportfraud.ftc.gov
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

14.2 California Attorney General (California Residents)

California residents who wish to file a complaint regarding violations of the CCPA/CPRA may contact:

• Website: oag.ca.gov/privacy
• California Privacy Protection Agency (CPPA): cppa.ca.gov

14.3 State Attorneys General

Residents of other US states may also contact their respective State Attorney General's office to report privacy concerns or complaints. Contact information for each State AG office is available through the National Association of Attorneys General at www.naag.org.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website
• Send an email notification to registered users where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your concerns promptly and transparently.

We aim to respond to all privacy-related inquiries within 10 business days. For formal rights requests under the CCPA/CPRA or other applicable statutes, we will respond within the legally mandated timeframe of 45 days, with a possible extension of an additional 45 days where necessary.