Privacy Policy

Welcome to Punch Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website newpunchpizza.rest, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our website and services.

This Privacy Policy applies to all information collected through our website (newpunchpizza.rest), as well as any related services, sales, marketing, or events (collectively referred to as the "Services").

1. Who We Are

Punch Pizza is a food service business operating in the United States. We are responsible for the collection and processing of your personal data in connection with our Services.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us using the information above.

2. Information We Collect

We collect information about you in a variety of ways depending on how you interact with our website and Services. The categories of information we collect include the following:

2.1 Personal Information You Provide to Us

When you use our Services — including placing an order, creating an account, subscribing to our newsletter, contacting customer support, or participating in promotions — you may voluntarily provide us with personal information such as:

• Identity Data: First name, last name, username, or similar identifiers
• Contact Data: Billing address, delivery address, email address, and telephone numbers
• Financial Data: Payment card details, bank account information (processed through secure third-party payment processors — we do not store full card numbers)
• Transaction Data: Details about purchases, orders, delivery preferences, and payment history
• Account Data: Login credentials such as username and password (stored in encrypted form)
• Communication Data: Messages, feedback, reviews, and survey responses you send to us
• Marketing and Preference Data: Your preferences in receiving marketing communications and your communication preferences

2.2 Information Collected Automatically

When you visit or use our website, certain information is automatically collected about your device and browsing activity. This includes:

• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, and navigation paths through our website
• Device Information: IP address, browser type and version, operating system, device identifiers, screen resolution, and language settings
• Location Data: General geographic location derived from your IP address; precise location only if you grant explicit permission through your device settings
• Log Data: Server logs including access times, error logs, and crash reports
• Cookie and Tracking Data: Information collected via cookies, web beacons, pixels, and similar technologies (see Section 7 for more details)

2.3 Information from Third Parties

We may receive information about you from third-party sources and combine it with the information we collect directly. These sources include:

• Analytics Providers: Such as Google Analytics, which provide aggregated data about website usage and visitor behavior
• Advertising Partners: Who share data about your interactions with advertisements we place on third-party platforms
• Social Media Platforms: If you interact with our pages on platforms such as Facebook, Instagram, or Twitter/X, we may receive publicly available profile information
• Food Delivery Platforms: Third-party delivery services through which you may place orders may share order and contact details with us for fulfillment purposes
• Payment Processors: Who confirm transaction success or failure and share limited financial data necessary for order processing

3. How We Use Your Information

We use the personal information we collect for the following purposes, based on the applicable legal basis where required by law:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including delivery and pick-up arrangements
• Managing your customer account and preferences
• Processing payments and preventing fraudulent transactions
• Sending order confirmations, receipts, and delivery notifications
• Providing customer support and responding to your inquiries and complaints
• Administering loyalty programs, promotions, contests, or special offers

3.2 Improving Our Services

• Analyzing website traffic and user behavior to improve the functionality and design of our website
• Conducting internal research, data analysis, and testing
• Identifying usage trends and understanding how customers interact with our menu, website, and promotions
• Improving food quality and service delivery based on customer feedback

3.3 Marketing and Communications

• Sending you promotional emails, newsletters, special offers, and updates about Punch Pizza — only where you have given consent or where permitted by applicable law
• Personalizing the content and advertisements you see based on your preferences and past interactions
• Displaying targeted advertising on third-party platforms (such as social media) based on your interests
• Conducting surveys and collecting feedback to gauge customer satisfaction

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us at [email protected]. Opting out of marketing will not affect your receipt of transactional or service-related communications.

3.4 Legal Compliance and Safety

• Complying with applicable laws, regulations, and legal obligations under United States federal and state law
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Punch Pizza, our customers, and the public
• Detecting, preventing, and addressing fraud, abuse, security breaches, and other harmful activities
• Responding to lawful requests from government authorities, including law enforcement

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with trusted third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage third-party companies and individuals to perform services on our behalf. These service providers are granted access to your personal information only as necessary to perform their functions and are contractually obligated to maintain confidentiality and security. Categories of service providers include:

• Payment Processors: To securely handle payment card transactions (e.g., Stripe, Square)
• Delivery and Logistics Partners: To fulfill food delivery orders to your specified address
• Cloud Hosting Providers: To store and manage our website data and customer databases
• Email and Communication Services: To send transactional and marketing communications
• Analytics Providers: To help us understand how our website is used (e.g., Google Analytics)
• Customer Support Platforms: To manage and respond to customer inquiries
• Marketing and Advertising Platforms: To run targeted advertising campaigns

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal processes, including:

• Court orders, subpoenas, or other judicial or administrative proceedings
• Requests from law enforcement agencies or government authorities
• Compliance with applicable federal or state regulations
• Situations where disclosure is necessary to protect the rights, property, or safety of Punch Pizza, our customers, or the public

4.3 Business Transfers

In the event that Punch Pizza is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and this Privacy Policy changes as a result.

4.4 With Your Consent

We may share your information with additional third parties when you have given explicit consent for us to do so.

5. Data Security

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical security measures designed to protect your data from unauthorized access, use, alteration, disclosure, or destruction. These measures include:

• Encryption: All data transmitted between your browser and our servers is protected using Transport Layer Security (TLS/SSL) encryption
• Secure Payment Processing: Payment card information is processed through PCI-DSS compliant payment processors; we do not store full card numbers on our servers
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, with role-based access controls enforced
• Password Protection: Customer account passwords are stored using industry-standard hashing algorithms
• Regular Security Audits: We conduct periodic assessments of our security practices and infrastructure
• Data Minimization: We collect only the information necessary for the stated purposes
• Incident Response: We maintain procedures for detecting and responding to data security incidents

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law, including applicable state data breach notification laws.

6. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights regarding your personal information. We respect and honor these rights as described below.

6.1 Rights Under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)

If you are a California resident, you have the following rights under the CCPA/CPRA:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which we use it, and the third parties with whom we share it
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you
• Right to Opt-Out of Sale or Sharing: We do not sell personal information for monetary consideration. However, to the extent our use of advertising cookies constitutes "sharing" under the CPRA, you have the right to opt out
• Right to Limit Use of Sensitive Personal Information: You may request that we limit our use of sensitive personal information to purposes specifically authorized by the CPRA
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny goods or services, charge different prices, or provide a different level of quality to consumers who exercise their privacy rights

6.2 General Privacy Rights (All U.S. Residents)

Regardless of your state of residence, we offer the following privacy controls to all users:

• Right to Access: You may request a copy of the personal information we hold about you
• Right to Correction: You may request that we update or correct inaccurate information associated with your account
• Right to Deletion: You may request that we delete your personal information, subject to legal retention requirements
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications at any time

6.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a verifiable request to us using the following contact methods:

• Email: [email protected]
• Website: newpunchpizza.rest

When submitting a request, please include sufficient information for us to verify your identity, including your full name, email address, and any relevant account information. We will respond to your request within 45 days as required by the CCPA/CPRA, with the possibility of a 45-day extension if necessary.

You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide written proof of authorization, and we may require you to verify your identity directly with us.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising. This section provides a brief overview of our cookie practices.

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website server. They allow the website to recognize your device and remember information about your visit, such as your preferences and actions.

7.2 Types of Cookies We Use

7.3 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling certain cookies may affect the functionality of our website. You may also opt out of certain advertising cookies through industry opt-out tools such as the Network Advertising Initiative (NAI) Opt-Out and the Digital Advertising Alliance (DAA) Opt-Out.

For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy available on our website.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention periods we apply are based on the nature of the data and the purposes for which it is processed:

When your personal information is no longer required, we will securely delete or anonymize it in accordance with applicable data protection standards. If deletion is not immediately possible due to technical constraints (such as backup storage), we will isolate the data from further processing until deletion is feasible.

9. Children's Privacy

Punch Pizza does not direct its website or Services to minors. We do not knowingly solicit data from or market to children under the age of 18. If you are under 18 years of age, please do not use our Services or provide any personal information through our website.

If we become aware that we have inadvertently collected personal information from a child under the age of 18 without verified parental consent, we will take immediate steps to delete that information from our records. If you believe that a child under 18 has provided us with personal information, please contact us immediately at [email protected].

Our practices are consistent with the requirements of the Children's Online Privacy Protection Act (COPPA), enforced by the Federal Trade Commission (FTC), which restricts the collection of personal information from children under 13. We apply a higher age threshold of 18 in connection with our food ordering and account registration services.

10. International Data Transfers

Punch Pizza is based in the United States and primarily operates within the United States. The information we collect is stored and processed on servers located in the United States.

If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers and central databases are operated. Data protection laws in the United States may differ from those in your country of residence.

By using our Services and providing us with your personal information, you acknowledge that your information may be transferred to and processed in the United States. We take appropriate safeguards to ensure that your personal information is treated securely and in accordance with this Privacy Policy and applicable data protection laws regardless of where it is processed.

If you have questions about data transfers or wish to know what safeguards we have in place, please contact us at [email protected].

11. Third-Party Links and Services

Our website may contain links to third-party websites, plug-ins, and applications (for example, social media sharing buttons or links to delivery partner platforms). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices.

We encourage you to read the privacy policy of every website you visit, particularly before providing any personal information. This Privacy Policy applies only to information collected by Punch Pizza through our own website and Services.

12. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature or setting that signals to websites that you do not want your online activity tracked. Currently, there is no uniform technology standard for recognizing and implementing DNT signals. As such, our website does not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

However, you may opt out of interest-based advertising by adjusting your cookie preferences through your browser settings or using industry opt-out tools as described in Section 7 of this policy.

13. California-Specific Disclosures

In addition to the rights described in Section 6, California residents have additional rights and disclosures under California law, including the CCPA/CPRA and the California Shine the Light Law (Cal. Civ. Code § 1798.83).

13.1 Shine the Light

California residents may request information about whether we have disclosed personal information to third parties for their direct marketing purposes during the preceding calendar year. We do not disclose personal information to third parties for their own direct marketing purposes without your prior consent. If you have questions about this practice, please contact us at [email protected].

13.2 Categories of Personal Information Collected (CCPA/CPRA)

In the preceding 12 months, we have collected the following categories of personal information as defined under the CCPA/CPRA:

• Identifiers (name, email address, IP address, account name)
• Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) — name, telephone number, address, payment information
• Commercial information (purchase history, transaction records)
• Internet or other electronic network activity information (browsing history on our website, cookie data)
• Geolocation data (general location derived from IP address)
• Inferences drawn from personal information to create a profile about your preferences

13.3 Business Purposes for Collection

We collect the categories of personal information listed above for the business purposes described in Section 3 of this Privacy Policy, including service provision, analytics, security, legal compliance, and marketing.

14. How to File a Complaint

We are committed to resolving privacy concerns fairly and promptly. If you have a concern about how we handle your personal data, we encourage you to contact us first so that we can attempt to resolve the issue directly.

14.1 Contact Us Directly

Please send your privacy complaint or inquiry to:

• Email: [email protected]
• Website: newpunchpizza.rest

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If a matter requires more time to investigate, we will keep you informed of our progress.

14.2 Regulatory Complaints — United States

If you are not satisfied with our response to your privacy complaint, you may report your concerns to the following regulatory authorities:

• Federal Trade Commission (FTC) — The FTC enforces consumer protection laws, including those relating to privacy and data security under the FTC Act (15 U.S.C. § 45).
  Website: www.ftc.gov
  Complaint portal: reportfraud.ftc.gov
• California Attorney General (for California Residents) — If you are a California resident and believe your CCPA/CPRA rights have been violated, you may submit a complaint to the California Privacy Protection Agency (CPPA) or the California Attorney General's Office.
  Website: oag.ca.gov/privacy/ccpa
  California Privacy Protection Agency: cppa.ca.gov
• State Attorney General (Other States) — Residents of other states with applicable privacy laws (such as Virginia's VCDPA, Colorado's CPA, Connecticut's CTDPA, Texas's TDPSA, or others) may also file complaints with their respective state attorneys general or data protection authorities.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised Privacy Policy on our website at newpunchpizza.rest
• Where required by applicable law or where we deem appropriate, notify you via email or through a prominent notice on our website prior to the change becoming effective

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and Services after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

16. Contact Us

If you have any questions, comments, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to reach out to us. We are dedicated to addressing your concerns promptly and transparently.

When contacting us about a privacy matter, please include your full name, contact information, the nature of your request or concern, and any relevant account details to help us respond efficiently. We will handle all privacy-related inquiries in accordance with applicable law and our internal privacy procedures.