Privacy Policy

At Punch Pizza, we are deeply committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website punchpizza-food.rest, place an order, or otherwise interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site immediately.

This Privacy Policy applies to all information collected through our website, mobile experience, and any related services, sales, marketing, or events (collectively referred to as the "Services"). We are committed to transparency, and we encourage you to review this document in full so you understand your rights and our obligations under applicable United States law, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act).

1. Who We Are

Punch Pizza is a food service business operating in the United States. We provide online ordering, food delivery information, promotional content, and customer service through our digital platform.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us using the details above. We are the data controller responsible for the personal information collected through our Services.

2. Information We Collect

We collect various types of information in connection with your use of our Services. The categories of information we collect are described below.

2.1 Personal Information You Provide Directly

When you interact with our website, place an order, create an account, subscribe to our newsletter, or contact us for support, you may voluntarily provide us with personal information, including but not limited to:

• Identity Information: First name, last name, username, or similar identifiers.
• Contact Information: Email address, telephone number, billing address, delivery address, and postal code.
• Account Credentials: Passwords and other security information used for authentication and account access.
• Order and Transaction Data: Details about orders you place, including items selected, special instructions, order history, and purchase amounts.
• Payment Information: Credit card numbers, debit card numbers, and billing information. Please note that payment card details are processed by our third-party payment processors and are not stored directly on our servers.
• Communications: Any messages, reviews, feedback, or inquiries you send to us through contact forms, email, or other channels.
• Marketing Preferences: Your preferences regarding receiving marketing communications from us.

2.2 Information Collected Automatically

When you access or use our Services, certain information is collected automatically through cookies, log files, web beacons, pixels, and similar tracking technologies. This information includes:

• Device Information: Device type, operating system, browser type and version, screen resolution, hardware model, and unique device identifiers.
• Usage Data: Pages visited, links clicked, time spent on pages, referring URLs, navigation paths, and the date and time of your visits.
• IP Address: Your Internet Protocol (IP) address, which may be used to approximate your geographic location at the city or region level.
• Cookie and Tracking Data: Information collected through cookies, local storage, and similar tracking technologies, including session data, preferences, and behavioral data. See Section 7 for more details on our use of cookies.
• Location Data: Approximate geographic location based on IP address. We do not collect precise GPS-level location data unless you explicitly grant permission.

2.3 Information Collected from Third Parties

We may receive information about you from third-party sources and combine it with information we already hold about you. These sources include:

• Payment Processors: Confirmation of payment transactions and fraud prevention signals.
• Analytics Providers: Aggregated and de-identified information about site traffic and user behavior.
• Advertising Networks: Information about your interactions with our advertisements on third-party platforms.
• Social Media Platforms: If you connect a social media account or interact with our content on social platforms, we may receive publicly available profile information consistent with your privacy settings on those platforms.
• Delivery Partners: Delivery status updates and logistics data related to your food orders.

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes, including the following:

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, including coordinating delivery or pickup.
• To create and manage your account on our platform.
• To process payments and send you order confirmations, receipts, and updates.
• To provide customer support and respond to your inquiries, complaints, or requests.
• To communicate with delivery partners on your behalf to ensure timely delivery.

3.2 Business Operations and Service Improvement

• To monitor and analyze usage patterns and trends to improve the functionality and user experience of our website.
• To diagnose and fix technical issues, bugs, or errors on our platform.
• To develop new features, products, or services based on user feedback and behavior.
• To conduct internal audits and operational assessments.

3.3 Marketing and Promotions

• To send you promotional materials, special offers, newsletters, and updates about Punch Pizza — but only if you have opted in to receive such communications or where we are otherwise permitted by law.
• To display relevant advertising on third-party websites and platforms based on your interactions with our Services.
• To personalize your experience on our platform, including displaying content and offers tailored to your preferences and order history.
• To conduct surveys, contests, or promotional campaigns with your consent.

3.4 Legal and Compliance Purposes

• To comply with applicable laws, regulations, and legal obligations, including those under the FTC Act, CCPA/CPRA, and other applicable United States federal and state laws.
• To detect, investigate, and prevent fraudulent transactions, abuse, or other illegal activities.
• To enforce our Terms of Service and other legal agreements.
• To protect the rights, property, or safety of Punch Pizza, our customers, or others.
• To respond to lawful requests from government authorities, courts, or law enforcement agencies.

4. Legal Basis for Processing

We process your personal information on the following legal grounds, consistent with applicable United States law:

• Performance of a Contract: Processing is necessary to fulfill your orders and provide the Services you have requested.
• Legitimate Interests: Processing is in our legitimate business interests, including improving our Services, preventing fraud, and ensuring network security, provided those interests are not overridden by your rights.
• Consent: Where required, we will obtain your explicit consent before processing your information, such as for marketing emails or the placement of non-essential cookies.
• Legal Obligation: Processing is necessary to comply with a legal obligation to which we are subject under applicable United States federal or state law.

5. Sharing Your Information with Third Parties

We do not sell your personal information in the traditional sense. However, we may share your information with the following categories of third parties for the purposes described in this policy:

5.1 Service Providers and Business Partners

We engage third-party companies and individuals to perform services on our behalf, including:

• Payment Processors: To securely handle credit card and debit card transactions.
• Delivery and Logistics Partners: To fulfill food delivery orders.
• Cloud Hosting and IT Services: To store data and maintain our website infrastructure.
• Email and Communication Services: To send transactional and marketing emails.
• Analytics Providers: Such as Google Analytics, to help us understand user behavior and improve our Services.
• Advertising Networks: To serve targeted advertisements on our behalf.
• Customer Support Tools: Platforms that help us manage and respond to customer inquiries.

All service providers are contractually obligated to use your information only for the purposes for which it was shared and to maintain appropriate security measures.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request.
• Enforce our Terms of Service or other agreements.
• Protect the rights, property, or safety of Punch Pizza, our users, or the public.
• Detect, prevent, or address fraud, security issues, or technical problems.

5.3 Business Transfers

In the event that Punch Pizza is involved in a merger, acquisition, asset sale, reorganization, or other business transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so, such as when you choose to share reviews or interact with third-party features embedded in our website.

6. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect it from unauthorized access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Encryption: All data transmitted between your browser and our servers is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions and are bound by confidentiality obligations.
• Secure Payment Processing: We use PCI DSS-compliant third-party payment processors and do not store full credit card numbers on our servers.
• Regular Security Assessments: We conduct periodic reviews of our data collection, storage, and processing practices to identify and address potential vulnerabilities.
• Incident Response: We maintain a data breach response plan and will notify affected users and relevant authorities in the event of a qualifying security incident, as required by applicable law.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to enhance your browsing experience, analyze site traffic, and support our marketing efforts.

7.1 Types of Cookies We Use

• Essential Cookies: Necessary for the basic functioning of our website, including maintaining your shopping cart and processing orders. These cannot be disabled without affecting site functionality.
• Performance and Analytics Cookies: Used to collect information about how visitors use our site, such as which pages are visited most frequently. This data helps us improve site performance and user experience.
• Functional Cookies: Allow us to remember your preferences (such as language settings or saved addresses) to provide a more personalized experience.
• Marketing and Advertising Cookies: Used to track your visits across websites and display relevant advertisements. These may be placed by our advertising partners.

7.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or alert you when cookies are placed. Please note that disabling certain cookies may impact your ability to use some features of our website.

For more detailed information about the specific cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Our general data retention periods are as follows:

When your personal information is no longer required, we will securely delete or anonymize it in accordance with our data retention and disposal procedures.

9. Children's Privacy

Our Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 13, and we do not direct our Services to children.

If you are under 18 years of age, please do not use our Services or provide any personal information to us. If we become aware that we have inadvertently collected personal information from a child under the age of 13, we will take steps to delete that information as promptly as possible. If you believe we may have information about a child under 13, please contact us immediately at [email protected].

Our practices are consistent with the requirements of the Children's Online Privacy Protection Act (COPPA), which applies to online services directed to children under 13 in the United States.

10. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights.

10.1 General Rights for All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions (e.g., where we are required to retain data by law).
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal information in a structured, commonly used, and machine-readable format.

10.2 California Residents – CCPA/CPRA Rights

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: The right to know what personal information we collect, use, disclose, or sell about you.
• Right to Delete: The right to request deletion of personal information we have collected from you, subject to exceptions.
• Right to Correct: The right to request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: The right to opt out of the sale or sharing of your personal information with third parties for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: The right to limit our use or disclosure of sensitive personal information to only those uses necessary to provide the Services.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide you a lower quality of service.

To exercise any of these rights, please contact us at [email protected] with the subject line "California Privacy Rights Request." We will respond to verified requests within 45 calendar days, with a possible extension of an additional 45 days where necessary.

10.3 Authorized Agent

California residents may designate an authorized agent to submit a request on their behalf. To use an authorized agent, you must provide written permission to the agent, and we may require verification of your identity directly before processing the request.

10.4 How to Exercise Your Rights

To exercise any of the rights described above, you may:

• Email us at: [email protected]
• Visit our website: punchpizza-food.rest

We may need to verify your identity before processing your request to ensure that we do not disclose or delete personal information belonging to someone else. Verification may involve confirming your email address, account credentials, or other identifying information.

11. International Data Transfers

Punch Pizza is based in the United States and our Services are intended for users located in the United States. However, your personal information may be processed by our service providers or partners who operate in other countries. By using our Services, you acknowledge that your information may be transferred to, stored, and processed outside of your country of residence.

When we transfer personal information internationally, we take steps to ensure that appropriate safeguards are in place consistent with applicable law. These safeguards may include:

• Using service providers who are certified under applicable data transfer frameworks.
• Implementing contractual protections through standard data processing agreements.
• Ensuring that recipient countries provide an adequate level of data protection.

If you have questions about how we handle international data transfers, please contact us at [email protected].

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, payment processors, or other services that are not owned or controlled by Punch Pizza. This Privacy Policy applies only to our own Services. We are not responsible for the privacy practices of any third parties, and we encourage you to review the privacy policies of any third-party services you access through links on our website.

Common third-party services whose privacy policies may apply when you use our Services include:

• Google Analytics – for website analytics (Google Privacy Policy)
• Stripe / PayPal – for payment processing (subject to their respective privacy policies)
• Facebook / Instagram / Meta – for social media interactions and advertising

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. At this time, our website does not alter its data collection and use practices in response to DNT signals from your browser.

However, California residents who wish to opt out of the sale or sharing of their personal information may do so as described in Section 10.2 above.

14. Filing a Complaint with a Data Protection Authority

If you are a resident of California or another state with applicable privacy laws, and you believe that your privacy rights have been violated, you have the right to file a complaint with the appropriate regulatory authority.

14.1 California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy/ccpa

14.2 Federal Remedies

For general consumer protection concerns, you may contact the Federal Trade Commission (FTC):

• FTC Online Complaint Portal: reportfraud.ftc.gov
• FTC Website: www.ftc.gov

We encourage you to contact us directly before filing a complaint so that we have the opportunity to address your concerns: [email protected].

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will notify you by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date.
• Sending you an email notification (if we have your email address on file).
• Displaying a prominent notice on our website homepage or account dashboard.

Your continued use of our Services after any changes become effective constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please do not hesitate to contact our privacy team:

We will endeavor to respond to all legitimate privacy inquiries within 30 calendar days. If your inquiry is complex or if you have submitted multiple requests, we may require additional time and will inform you of any necessary extension.

This Privacy Policy was last updated on May 14, 2026. All previous versions of this policy are superseded by this document.