Privacy Policy

Welcome to Punch Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website pizzasspunchs.digital, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy applies to all personal information collected through our website, mobile-optimized pages, online ordering platform, loyalty programs, promotional activities, and any related services, sales, marketing, or events (collectively referred to as the "Services").

1. About Us

Punch Pizza operates this website and associated food ordering services. We take your privacy seriously and are fully committed to transparency regarding how your data is handled.

For any privacy-related questions, requests, or concerns, please contact us using the information provided above or refer to Section 14 (Contact Us) at the end of this policy.

2. Applicable Laws and Legal Framework

As a food business operating in the United States, Punch Pizza complies with all applicable federal and state privacy laws, including but not limited to:

• The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), for residents of California.
• The Federal Trade Commission Act (FTC Act), which governs unfair or deceptive practices in commerce, including privacy and data security.
• The CAN-SPAM Act, governing commercial email communications.
• The Children's Online Privacy Protection Act (COPPA), protecting the privacy of children under the age of 13.
• Other applicable state privacy laws, including but not limited to those in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Utah (UCPA), where applicable.

Where state-specific rights apply, we honor those rights to all qualifying residents, and additional disclosures are provided in Section 12 of this policy.

3. Information We Collect

We collect information you provide directly to us, information collected automatically when you use our Services, and information obtained from third-party sources. The categories of personal information we collect include the following:

3.1 Personal Information You Provide Directly

When you register an account, place an order, contact us, or participate in any promotions, we may collect:

• Identification Information: First and last name, username, and account credentials.
• Contact Information: Email address, mailing address, billing address, delivery address, and telephone number.
• Payment Information: Credit card numbers, debit card numbers, billing details, and other financial information necessary to process your payment. Note that full payment card data is processed by our secure third-party payment processors and is not stored on our servers.
• Order Information: Details of the food items you order, special dietary instructions, delivery preferences, and order history.
• Communications: Content of messages, emails, feedback, reviews, or any other correspondence you send us.
• Loyalty and Promotions Data: Information related to loyalty rewards, coupon usage, contest entries, and promotional interactions.
• Dietary Preferences: Any food allergies or dietary restrictions you voluntarily share with us to enhance your ordering experience.

3.2 Information Collected Automatically

When you visit our website or use our Services, we automatically collect certain technical and usage information, including:

• Device Information: IP address, browser type and version, operating system, device identifiers, screen resolution, language settings, and hardware configuration.
• Usage Data: Pages visited, time spent on each page, links clicked, referring URLs, search queries, and navigation paths through our website.
• Location Data: General geolocation data inferred from your IP address, and, with your permission, more precise location data to facilitate delivery services or locate nearby Punch Pizza locations.
• Log Data: Server logs that record requests made to our servers, timestamps, error logs, and related technical information.
• Cookie and Tracking Data: Information collected via cookies, web beacons, pixel tags, local storage, and similar tracking technologies. For more information, see Section 8 (Cookies and Tracking Technologies).

3.3 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media accounts to our Services or interact with our social media pages, we may receive basic profile information.
• Delivery and Logistics Partners: Information about order delivery status and fulfillment from our delivery service partners.
• Analytics Providers: Aggregated or demographic data from analytics services we use to better understand our customer base.
• Marketing Partners: Information that helps us better target and personalize our marketing communications.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including arranging delivery or pickup.
• Managing your account, loyalty points, and order history.
• Processing payments and preventing fraudulent transactions.
• Communicating with you about order confirmations, delivery updates, and service changes.
• Responding to your inquiries, complaints, and customer support requests.
• Accommodating dietary preferences and food allergy information you provide.

4.2 Analytics and Service Improvement

• Analyzing usage trends and customer behavior to improve our website, menu, and ordering experience.
• Conducting internal research, testing, and data analysis to enhance our Services.
• Monitoring the performance and security of our website and technology infrastructure.
• Developing new features, products, and offerings based on customer feedback and usage data.

4.3 Marketing and Promotions

• Sending promotional emails, newsletters, special offers, and discount codes, where you have consented or where otherwise permitted by law.
• Personalizing the content and recommendations you see on our website based on your preferences and order history.
• Administering contests, sweepstakes, loyalty programs, and other promotional activities.
• Delivering targeted advertising through our website and third-party platforms, subject to your preferences.
• You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us at [email protected].

4.4 Legal Compliance and Security

• Complying with applicable federal and state laws, regulations, and legal obligations.
• Enforcing our Terms of Service and other agreements.
• Detecting, investigating, and preventing fraud, abuse, security incidents, and other prohibited activities.
• Protecting the rights, property, and safety of Punch Pizza, our customers, and the public.

5. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing required to fulfill your orders and deliver the Services you have requested.
• Legitimate Interests: Processing for fraud prevention, website security, analytics, and business improvement, where such interests are not overridden by your privacy rights.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements.
• Consent: Processing for marketing communications and certain uses of cookies and tracking technologies, where your consent has been obtained. You may withdraw consent at any time.

6. Sharing Your Information with Third Parties

We do not sell your personal information for monetary compensation. However, we may share your information with the following categories of recipients under specific circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party companies to assist us in providing and improving our Services. These include:

• Payment Processors: Secure payment gateways that handle credit card and payment processing on our behalf.
• Delivery Partners: Third-party delivery drivers and logistics companies who fulfill delivery orders.
• Technology Providers: Cloud hosting, website infrastructure, email delivery, and customer relationship management (CRM) platforms.
• Analytics Providers: Services such as Google Analytics that help us understand how our website is used.
• Marketing and Advertising Partners: Platforms that assist us with email marketing, targeted advertising, and promotional campaigns.
• Customer Support Tools: Platforms used to manage and respond to customer inquiries and complaints.

All service providers are contractually required to use your information solely for the purposes of providing services to us and to maintain appropriate security standards.

6.2 Legal Requirements

We may disclose your information when required to do so by law, including in response to:

• Subpoenas, court orders, or other legal processes.
• Requests from law enforcement agencies or government authorities.
• Legal proceedings to protect the rights, property, or safety of Punch Pizza, our users, or others.
• Investigations of suspected illegal activity or violations of our Terms of Service.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or similar corporate transaction, your personal information may be transferred to the successor entity. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

6.4 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you, for purposes such as industry research, analytics, marketing, or other business purposes.

7. Data Security

Punch Pizza takes the security of your personal information seriously. We implement a combination of technical, organizational, and administrative safeguards designed to protect your information against unauthorized access, loss, misuse, alteration, or destruction.

7.1 Security Measures We Employ

• Encryption: All data transmitted between your browser and our website is protected using Transport Layer Security (TLS/SSL) encryption.
• Secure Payment Processing: Payment information is processed through PCI-DSS compliant payment gateways. We do not store full credit card numbers on our servers.
• Access Controls: Access to personal information is restricted to authorized personnel on a need-to-know basis, with role-based access controls in place.
• Regular Security Audits: We conduct regular assessments of our systems and practices to identify and address potential vulnerabilities.
• Data Minimization: We only collect the personal information that is necessary for the purposes described in this policy.
• Incident Response: We maintain a data breach response plan and will notify affected individuals and relevant authorities as required by applicable law in the event of a data breach.

Despite these measures, no security system is completely impenetrable. We cannot guarantee the absolute security of your information. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you promptly in accordance with applicable law.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and assist in our marketing efforts.

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device, remember your preferences, and provide you with a more personalized experience.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly, including enabling you to add items to your cart and complete orders.
• Performance and Analytics Cookies: Collect information about how visitors use our website to help us improve functionality and user experience.
• Functional Cookies: Remember your preferences such as language, location, and saved addresses to personalize your experience.
• Marketing and Advertising Cookies: Track your online activity to help deliver relevant advertising and measure the effectiveness of our campaigns.

8.3 Managing Cookies

You can manage your cookie preferences through your browser settings or our cookie consent tool. Please note that disabling certain cookies may affect the functionality of our website. For more detailed information about our cookie practices, please refer to our Cookie Policy.

California residents have the right to opt out of the sale or sharing of personal information, including through cookie-based advertising. Please see Section 12 for California-specific rights.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

After the applicable retention period, your data will be securely deleted, anonymized, or archived in accordance with our data management procedures.

10. Children's Privacy

Punch Pizza does not direct its Services to children under the age of 13, and we do not knowingly collect personal information from individuals under 13. If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take immediate steps to delete that information from our records.

If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We comply with the Children's Online Privacy Protection Act (COPPA).

Individuals between the ages of 13 and 17 may use our Services only with the consent and supervision of a parent or legal guardian. We strongly encourage parents and guardians to monitor their children's online activity.

11. International Data Transfers

Punch Pizza is based in the United States, and the information we collect is primarily stored and processed in the United States. However, some of our service providers and third-party partners may be located in other countries and may process your data outside of the United States.

When we transfer personal information internationally, we ensure that appropriate safeguards are in place to protect your information, including:

• Entering into standard contractual clauses or data processing agreements with third-party service providers.
• Working only with service providers who maintain data protection standards equivalent to or exceeding those required under applicable U.S. law.
• Implementing additional technical and organizational measures where appropriate.

By using our Services, you acknowledge that your information may be transferred to and processed in countries other than your own, and you consent to such transfer where required.

12. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

12.1 Rights Available to All U.S. Residents

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions (such as where we need the data to complete a transaction or comply with a legal obligation).
• Right to Opt Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time.

12.2 Additional Rights for California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know About Sale or Sharing: You have the right to know whether we sell or share your personal information and to whom.
• Right to Opt Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. You may exercise this right by clicking the "Do Not Sell or Share My Personal Information" link on our website or by contacting us.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit how we use and disclose sensitive personal information, such as financial data or health-related information.
• Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, or provide a different level of service because you exercised your privacy rights.
• Authorized Agent: California residents may designate an authorized agent to submit privacy requests on their behalf, provided the agent can verify their authority to act on your behalf.

12.3 Rights Under Other State Laws

Residents of Virginia, Colorado, Connecticut, Utah, and other states with applicable privacy legislation may have similar rights to those described above. We honor these rights to qualifying residents upon verified request.

12.4 How to Submit a Privacy Rights Request

To exercise any of your privacy rights, please submit your request by:

• Emailing us at [email protected] with the subject line "Privacy Rights Request."
• Including your full name, email address on file with us, state of residence, and a description of your request.

We will verify your identity before processing your request to prevent unauthorized access or disclosure. We will respond to your request within 45 days, with the possibility of an extension of an additional 45 days where reasonably necessary, in accordance with applicable law.

13. How to File a Complaint with a Data Protection Authority

If you believe that we have not handled your personal information in accordance with applicable law and you are not satisfied with our response to your privacy inquiry, you have the right to file a complaint with the appropriate regulatory authority.

13.1 Federal Trade Commission (FTC)

The FTC enforces consumer protection laws in the United States, including those related to privacy and data security. You may file a complaint at:

13.2 California Residents – California Privacy Protection Agency (CPPA)

California residents may file a complaint with the California Privacy Protection Agency (CPPA), the agency responsible for enforcing the CCPA/CPRA:

13.3 State Attorneys General

Residents of other states may file complaints with their respective State Attorney General's office regarding privacy violations under applicable state law.

14. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Punch Pizza. This Privacy Policy does not apply to any third-party websites or services. We have no control over and assume no responsibility for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party sites you visit.

This includes but is not limited to social media platforms, delivery tracking services, payment gateways, and any external review platforms.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes to this policy have been posted constitutes your acceptance of the updated Privacy Policy.

If we make material changes to how we use your personal information, we will provide you with advance notice before those changes take effect.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us using the information below. We are committed to addressing your privacy concerns promptly and transparently.

This Privacy Policy was last updated on April 26, 2026. All prior versions of this policy are superseded by this document. Punch Pizza reserves all rights not expressly granted herein.