Privacy Policy

This Privacy Policy describes how Punch Pizza ("we," "us," "our," or "the Company") collects, uses, discloses, and safeguards your personal information when you visit our website at punchpizzas.digital, place orders, interact with our digital services, or otherwise engage with us. Please read this policy carefully. By using our website and services, you acknowledge that you have read, understood, and agree to the practices described herein.

We are committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy has been drafted in compliance with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations.

1. Company Information and Contact Details

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us using the information below:

We will endeavor to respond to all privacy-related inquiries within 45 days of receipt. In complex cases, we may extend this period by an additional 45 days, and we will notify you of any such extension within the initial 45-day window.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All visitors and users of punchpizzas.digital
• Customers who place food orders online, by phone, or through any digital interface operated by Punch Pizza
• Individuals who subscribe to our newsletters, promotional emails, or loyalty programs
• Anyone who contacts us through our website forms, email, or other communication channels
• Individuals who participate in surveys, contests, sweepstakes, or promotional campaigns run by us

This policy does not apply to third-party websites, services, or applications that may be linked to from our website. We encourage you to review the privacy policies of any third-party services before interacting with them.

3. Information We Collect

We collect various types of information in connection with the services we provide. The categories of personal information we may collect include:

3.1 Personal Identification Information

When you create an account, place an order, sign up for a loyalty program, or contact us directly, we may collect:

• Full name
• Email address
• Phone number
• Mailing address and delivery address
• Date of birth (where relevant for age verification or birthday promotions)
• Username and password for account access

3.2 Payment and Transaction Information

To process your food orders and payments securely, we collect:

• Credit card or debit card details (processed through secure, PCI-DSS compliant payment processors)
• Billing address
• Order history and transaction records
• Refund and dispute records

Important Notice: Punch Pizza does not store full payment card numbers on its own servers. All payment processing is handled by trusted, encrypted third-party payment processors.

3.3 Usage and Behavioral Data

When you interact with our website and digital services, we automatically collect certain usage data, including:

• Pages visited, links clicked, and features used on our website
• Time and date of your visit and the duration of your session
• Items viewed, added to cart, or ordered
• Search queries entered on our website
• Referring URLs (the website you came from before visiting ours)
• Exit pages and abandonment data

3.4 Device and Technical Information

We automatically collect technical information about the device and network you use to access our services:

• IP address
• Browser type and version
• Operating system and device type (desktop, tablet, mobile)
• Screen resolution and display settings
• Language preferences
• Time zone settings
• Unique device identifiers

3.5 Location Data

With your permission, we may collect approximate or precise location data to:

• Facilitate food delivery to your location
• Display relevant restaurant locations near you
• Show geographically relevant promotions and menus

You can disable location sharing through your browser or device settings at any time.

3.6 Communications and Correspondence

We collect and retain communications you send us, including:

• Customer service inquiries and support requests
• Feedback, reviews, and ratings you submit
• Comments submitted through contact forms
• Survey responses
• Email and chat correspondence with our team

3.7 Cookie and Tracking Technology Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. Please refer to Section 9 (Cookie Usage) of this policy for a detailed explanation of our cookie practices.

3.8 Information Collected from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you interact with our social media pages or use social login features)
• Third-party food delivery platforms that partner with Punch Pizza
• Marketing partners and advertising networks
• Analytics providers
• Fraud prevention and identity verification services

4. How We Use Your Information

We process your personal information for the following legitimate business purposes:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Coordinating delivery and pickup arrangements
• Sending order confirmations, receipts, and delivery notifications
• Managing your account and loyalty program membership
• Processing payments and issuing refunds when applicable
• Providing customer support and resolving disputes

4.2 Website and Service Improvement

• Analyzing how users interact with our website to improve usability
• Identifying and fixing technical errors or bugs
• Testing new features, menus, or website layouts
• Conducting internal research and development activities
• Generating aggregated, anonymized statistical reports

4.3 Marketing and Promotional Communications

• Sending you promotional emails, special offers, and discount codes (with your consent where required)
• Providing personalized recommendations based on your order history and preferences
• Delivering targeted advertisements on our website and on third-party platforms
• Notifying you about new menu items, seasonal promotions, and limited-time offers
• Conducting loyalty program communications and reward notifications

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected]. Please note that opting out of marketing emails will not affect transactional communications related to your orders.

4.4 Legal and Compliance Purposes

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from law enforcement and regulatory authorities
• Enforcing our Terms of Service and other agreements
• Protecting against fraud, unauthorized access, and security threats
• Establishing, exercising, or defending legal claims

4.5 Business Operations

• Managing our internal records and financial accounts
• Conducting due diligence for potential business transactions (mergers, acquisitions)
• Ensuring food safety and quality control compliance
• Training staff and improving service quality standards

5. Legal Bases for Processing

Under applicable U.S. privacy laws, we rely on the following legal bases to process your personal information:

6. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information in the following limited circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering our services. These providers are only permitted to use your data to perform services on our behalf and are contractually obligated to maintain appropriate security measures. Categories of service providers include:

• Payment Processors: To securely process credit/debit card transactions
• Delivery Partners: To coordinate food delivery logistics and driver dispatch
• Email and SMS Marketing Platforms: To send promotional communications and order notifications
• Web Analytics Providers: Such as Google Analytics, to measure website performance
• Cloud Hosting and Infrastructure Providers: To host our website and store data securely
• Customer Support Tools: To manage customer service interactions and ticketing
• Fraud Detection Services: To identify and prevent unauthorized transactions

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal processes, including:

• Court orders, subpoenas, or other judicial processes
• Requests from federal, state, or local law enforcement agencies
• Regulatory investigations by government bodies
• Legal proceedings to which Punch Pizza is a party

Where legally permissible, we will notify you before disclosing your information in response to such requests.

6.3 Business Transfers

In the event that Punch Pizza undergoes a merger, acquisition, sale of assets, reorganization, or other corporate transaction, your personal information may be transferred as part of that transaction. We will notify you via email or prominent website notice before your information is transferred and becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your information with additional third parties where you have given us your explicit consent to do so. You may withdraw such consent at any time by contacting us at [email protected].

6.5 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized data that cannot reasonably be used to identify you with third parties for business, research, or marketing purposes. This data does not constitute personal information under applicable privacy laws.

7. Data Security Measures

Punch Pizza takes the security of your personal information seriously and implements a range of technical, administrative, and physical safeguards to protect it from unauthorized access, disclosure, alteration, or destruction.

7.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard SSL/TLS protocols.
• Secure Payment Processing: Payment data is handled through PCI-DSS compliant processors, ensuring card information is never stored on our servers in plain text.
• Firewalls and Intrusion Detection: Our infrastructure is protected by firewalls and actively monitored for suspicious activity.
• Access Controls: Only authorized personnel have access to personal information, and access is granted on a need-to-know basis.
• Data Encryption at Rest: Sensitive personal data stored in our databases is encrypted.

7.2 Administrative Safeguards

• Regular privacy and security training for all employees with access to personal data
• Internal data handling policies and procedures aligned with applicable privacy laws
• Vendor due diligence and contractual data protection obligations
• Regular security audits and vulnerability assessments

7.3 Incident Response

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with applicable U.S. state data breach notification laws. We maintain an incident response plan to minimize the impact of any security event.

8. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

8.1 Rights Available to All U.S. Residents

• Right to Know/Access: You have the right to request information about the categories and specific pieces of personal information we have collected about you, as well as how it has been used and shared.
• Right to Correction: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Deletion: You have the right to request deletion of your personal information, subject to certain legal exceptions (e.g., where we are required to retain data by law or to complete a transaction).
• Right to Opt Out of Marketing: You can opt out of receiving promotional communications from us at any time.

8.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know (Categories and Specific Pieces): Request disclosure of the categories of personal information collected, the purposes for collection, the categories of third parties with whom it is shared, and specific pieces of personal information.
• Right to Delete: Request deletion of personal information we have collected, subject to exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: Opt out of the "sale" or "sharing" of your personal information as defined under CPRA. We do not sell your personal information for monetary compensation, but we may engage in sharing for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: Limit our use of sensitive personal information to purposes necessary for providing services.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights by denying services, charging different prices, or providing a different quality of service.
• Right to Data Portability: Receive your personal information in a structured, commonly used, and machine-readable format.

8.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us by:

• Email: [email protected]

We will need to verify your identity before processing your request. Verification may require you to provide identifying information consistent with what we already have on file. We will respond to verifiable requests within 45 days. If we need more time, we will inform you of the reason and extension period (up to an additional 45 days).

You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide written authorization from you and may be required to verify their own identity.

9. Cookie Usage

Punch Pizza uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver relevant content and advertisements. A cookie is a small text file stored on your device when you visit a website.

9.1 Types of Cookies We Use

You can manage your cookie preferences through our cookie consent tool available on our website, or by adjusting your browser settings to refuse some or all cookies. Please note that disabling certain cookies may affect the functionality of our website. For a full explanation of our cookie practices, please refer to our dedicated Cookie Policy.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

10.1 Retention Periods by Data Category

When personal data is no longer needed for its original purpose and no legal obligation requires its retention, we will securely delete or anonymize it.

11. Children's Privacy

Punch Pizza's website and online ordering services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13 in a manner that violates the Children's Online Privacy Protection Act (COPPA).

We do not knowingly market our online services directly to minors. If you are under 18, please do not submit any personal information through our website without the supervision and consent of a parent or legal guardian.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take prompt steps to delete that information from our records. If you believe we have collected information from a child under 13, please contact us immediately at [email protected].

12. International Data Transfers

Punch Pizza is headquartered in the United States, and our primary data processing activities take place within the United States. Your personal information is collected, stored, and processed in the United States.

If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your country of residence. By using our website and services, you consent to the transfer of your information to the United States.

When we engage third-party service providers located outside the United States, we take steps to ensure that appropriate data protection safeguards are in place, such as contractual data processing agreements and standard data protection clauses. We require all international service providers to maintain data protection standards consistent with applicable U.S. privacy requirements.

13. Do Not Track Signals

Some web browsers and devices offer a "Do Not Track" (DNT) setting that sends a signal to websites requesting that your browsing activity not be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals, and our website does not currently alter its data collection practices in response to DNT signals.

However, you can manage your privacy preferences through our cookie consent tool, your browser settings, and by adjusting your account preferences as described in this policy.

14. Third-Party Links and Services

Our website may contain links to third-party websites, social media pages, delivery platforms, and other external services. These third-party sites have their own privacy policies, which we do not control and are not responsible for. When you click on a link to a third-party site, you are leaving our website and entering a site governed by that third party's own privacy policy.

We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link on our website does not imply endorsement of the linked site or its privacy practices.

15. Social Media and User-Generated Content

Punch Pizza maintains social media accounts on platforms such as Instagram, Facebook, and other networks. If you interact with our social media pages, comment on our posts, or tag us in content, those interactions are governed by the privacy policies of the respective social media platform.

If you submit reviews, photographs, or other user-generated content to our website, please be aware that this information may be visible to other users and the public. Do not include personal or sensitive information in publicly visible content.

16. California Residents — Shine the Light Law

California Civil Code Section 1798.83, known as the "Shine the Light" law, permits California residents to request information about the disclosure of personal information to third parties for direct marketing purposes. If you are a California resident and would like to make such a request, please contact us at [email protected] with the subject line "California Shine the Light Request."

17. How to File a Complaint with a Data Protection Authority

If you believe that we have violated your privacy rights, we encourage you to contact us first so that we can attempt to resolve the matter directly. Please reach out to us at:

• Email: [email protected]

If you are not satisfied with our response, you may file a complaint with the relevant U.S. regulatory authority:

17.1 Federal Trade Commission (FTC)

The Federal Trade Commission enforces federal consumer protection laws, including privacy-related violations under Section 5 of the FTC Act. You may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, D.C. 20580

17.2 California Privacy Protection Agency (CPPA)

If you are a California resident and believe your CCPA/CPRA rights have been violated, you may file a complaint with the California Privacy Protection Agency:

• Website: cppa.ca.gov
• Email: [email protected]

17.3 State Attorneys General

Most U.S. states have an Attorney General's office that handles consumer privacy complaints. You may contact your state's Attorney General for guidance on filing a privacy-related complaint.

18. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, applicable laws, or technological developments. When we make material changes to this policy, we will:

• Post the updated policy on our website at punchpizzas.digital with a revised "Last Updated" date
• Send an email notification to registered users where required by law or where changes are material
• Display a prominent notice on our website for a reasonable period following significant updates

Your continued use of our website and services following the posting of changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

19. Contact Us

If you have any questions, comments, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team:

This Privacy Policy was last updated on March 18, 2026. This document constitutes the entire privacy policy of Punch Pizza with respect to the website punchpizzas.digital and supersedes all prior versions.