Privacy Policy

This Privacy Policy describes how Punch Pizza ("we," "us," or "our") collects, uses, shares, and protects your personal information when you visit our website at punch-delivery.click, place food orders, or otherwise interact with our services. We are committed to protecting your privacy and handling your personal data in a transparent, responsible manner consistent with applicable United States federal and state privacy laws.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please discontinue use of our website and services immediately.

1. About Us

Punch Pizza operates as a food delivery and ordering platform available at punch-delivery.click. We provide customers with the ability to browse our menu, place food orders, schedule deliveries, and manage their accounts online.

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us using the contact details provided in Section 15 of this document.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All visitors to our website at punch-delivery.click
• Registered account holders who place food orders through our platform
• Individuals who sign up for our email newsletters, promotions, or loyalty programs
• Users who communicate with us via email, phone, or social media channels
• Any individual whose personal information we collect as part of providing our food delivery services

This policy does not apply to third-party websites, applications, or services that may be linked to from our website. We encourage you to review the privacy policies of any third-party services you access through links on our platform.

3. Information We Collect

We collect various categories of personal information to provide, improve, and personalize our food delivery services. The categories of information we collect are described below.

3.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Delivery address (street address, city, state, ZIP code)
• Billing address
• Date of birth (for age verification purposes)
• Account username and password (stored in encrypted form)

3.2 Payment and Transaction Information

To process your food orders and payments, we collect:

• Credit card or debit card details (processed securely through our third-party payment processor)
• Payment method type (e.g., Visa, Mastercard, Apple Pay)
• Order history, including items ordered, quantities, special instructions, and order value
• Transaction confirmation numbers and receipts
• Promotional codes or gift card information used during checkout

3.3 Usage Data and Analytics Information

When you visit our website, we automatically collect technical and behavioral data, including:

• IP address and approximate geographic location derived from IP
• Browser type, version, and language settings
• Operating system and device type (desktop, mobile, tablet)
• Pages visited, time spent on each page, and navigation paths
• Referring URLs (the website that directed you to ours)
• Date and time of visits
• Links clicked within our website
• Search queries entered on our website
• Error logs and performance metrics

3.4 Device Information

We may collect information about the devices you use to access our website, including:

• Device identifiers (such as mobile advertising IDs)
• Hardware model and configuration
• Screen resolution and display settings
• Network connection type (Wi-Fi, cellular)
• Mobile carrier information (where applicable)

3.5 Cookie and Tracking Data

We use cookies and similar tracking technologies to collect information about your browsing behavior on our website. Please refer to Section 9 of this Privacy Policy for detailed information about our cookie practices.

3.6 Communications and Customer Support Data

When you contact us for support or feedback, we may collect:

• The content of emails, messages, or comments you send to us
• Records of telephone conversations (where permitted by law)
• Customer service ticket information and correspondence history
• Survey responses, ratings, and reviews you provide

3.7 Marketing and Preference Data

If you opt into our marketing communications, we collect:

• Email marketing subscription status and preferences
• Notification preferences (push notifications, SMS alerts)
• Loyalty program membership data and reward point balances
• Dietary preferences or food preferences you voluntarily provide

3.8 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms if you log in using a social media account (e.g., Google, Facebook)
• Third-party delivery partners who fulfill your orders
• Analytics providers and advertising networks
• Fraud prevention and identity verification services

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including coordinating delivery logistics
• Creating and managing your customer account
• Sending order confirmations, receipts, and delivery status updates
• Processing payments and refunds
• Verifying your identity and preventing fraudulent transactions
• Communicating with you about your orders, account, or inquiries

4.2 Website Operation and Improvement

• Maintaining the technical functionality and security of our website
• Analyzing how users navigate and use our website to improve user experience
• Troubleshooting technical issues and fixing bugs
• Conducting A/B testing and other product experiments
• Developing new features, menu items, or service offerings

4.3 Analytics and Business Intelligence

• Generating aggregate, anonymized reports on customer behavior and preferences
• Understanding peak ordering times and popular menu items
• Measuring the effectiveness of promotional campaigns
• Forecasting demand and optimizing delivery operations

4.4 Marketing and Personalization

• Sending you promotional emails, special offers, and newsletters (with your consent or as permitted by law)
• Personalizing your website experience and displaying relevant menu recommendations
• Serving targeted advertisements on our website and on third-party platforms
• Managing loyalty programs and reward redemptions
• Informing you about new menu items, limited-time offers, or changes to our services

4.5 Legal Compliance and Safety

• Complying with applicable laws, regulations, and legal processes
• Responding to lawful requests from government authorities and law enforcement agencies
• Protecting the rights, property, and safety of Punch Pizza, our customers, and the public
• Enforcing our Terms of Service and other applicable agreements
• Detecting, preventing, and investigating fraud, abuse, or security incidents

5. Legal Basis for Processing (U.S. Privacy Law Context)

As a business operating in the United States, we process your personal information based on the following legal grounds, consistent with applicable federal and state privacy laws including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant state privacy statutes:

• Contract Performance: Processing necessary to fulfill your food orders and provide the services you requested.
• Legitimate Business Interests: Analytics, fraud prevention, website security, and improving our services, where such interests are not overridden by your privacy rights.
• Consent: Where you have expressly opted in to receive marketing communications or to permit non-essential cookies.
• Legal Obligation: Where we are required to process data to comply with applicable laws, regulations, or legal processes.

6. Sharing Your Information with Third Parties

We do not sell your personal information for monetary compensation. However, we may share your information with trusted third parties in the following circumstances:

6.1 Service Providers and Business Partners

We share personal data with third-party vendors who assist us in operating our business, including:

• Payment processors: To securely handle payment card transactions
• Delivery and logistics partners: To coordinate and fulfill your food delivery orders
• Cloud hosting providers: To store and manage our website and data infrastructure
• Email and SMS marketing platforms: To send promotional communications
• Customer support platforms: To manage support tickets and inquiries
• Analytics providers: Such as Google Analytics, to analyze website usage
• Advertising networks: To serve relevant advertisements on our behalf
• Fraud prevention services: To detect and prevent unauthorized transactions

All service providers are contractually required to handle your personal data in accordance with applicable privacy laws and our instructions, and are prohibited from using your data for their own independent purposes.

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law, or in the good-faith belief that such disclosure is reasonably necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Protect and defend the rights or property of Punch Pizza
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users or the public
• Protect against legal liability

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, sale of assets, or similar corporate transaction, your personal information may be transferred to the successor entity. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

6.4 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for marketing, advertising, research, or other purposes.

6.5 With Your Consent

We may share your information with other third parties when you give us explicit consent to do so, such as when you participate in a joint promotion or co-branded program.

7. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

7.1 Security Measures We Employ

• Encryption: All data transmitted between your browser and our website is protected using industry-standard Transport Layer Security (TLS/SSL) encryption
• Password hashing: Account passwords are stored using strong cryptographic hashing algorithms (such as bcrypt)
• Access controls: We limit access to personal data to authorized employees and contractors who need it to perform their job functions
• Payment security: We comply with the Payment Card Industry Data Security Standard (PCI DSS) for all payment processing activities
• Regular security assessments: We periodically review and test our security systems and processes
• Incident response: We maintain a data breach response plan and will notify affected users as required by applicable law
• Secure data centers: Our hosting providers operate in secured, access-controlled data facilities

8. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

8.1 Rights Available to All U.S. Users

• Right to Know/Access: You may request that we disclose what personal information we have collected about you, the sources of that information, the business purposes for collection, and the categories of third parties with whom we have shared it.
• Right to Correction: You may request that we correct any inaccurate personal information we hold about you.
• Right to Deletion: You may request that we delete personal information we have collected from you, subject to certain legal exceptions (e.g., where retention is required to complete a transaction, comply with legal obligations, or for other legitimate purposes).
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email or contacting us directly.

8.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Data Portability: You may request a copy of your personal information in a portable, machine-readable format.
• Right to Opt-Out of Sale or Sharing: Although we do not sell personal information for money, to the extent our sharing of data with advertising partners constitutes a "sale" or "sharing" under the CPRA, you have the right to opt out. You may exercise this right via the "Do Not Sell or Share My Personal Information" link on our website.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information (such as precise geolocation or financial data) to only what is necessary to provide you with our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge different prices, or provide a lesser quality of service because you exercised your privacy rights.

8.3 Rights for Virginia, Colorado, and Other State Residents

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas, and other states with comprehensive privacy laws may also have rights to access, correct, delete, and port their personal data, as well as rights to opt out of targeted advertising and profiling. We will honor these rights to the extent required by applicable state law.

8.4 How to Exercise Your Rights

To submit a privacy rights request, you may:

• Email us at: [email protected] with the subject line "Privacy Rights Request"
• Submit a request through the account settings section of our website

We will verify your identity before processing your request to protect your personal information from unauthorized disclosure. We will respond to verifiable requests within 45 days as required under most U.S. state privacy laws. If we require additional time, we will notify you within the initial 45-day period.

9. Cookies and Tracking Technologies

Our website uses cookies, web beacons, pixel tags, local storage objects, and similar technologies to collect information about your browsing activities. This section provides a brief overview of our cookie practices.

9.1 Types of Cookies We Use

9.2 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website. You can also opt out of interest-based advertising by visiting the Network Advertising Initiative (NAI) opt-out page at optout.networkadvertising.org or the Digital Advertising Alliance (DAA) at optout.aboutads.info.

For more detailed information about our cookie practices, please refer to our full Cookie Policy available on our website.

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods generally apply:

When your personal data is no longer needed, we will securely delete or anonymize it in accordance with our data retention procedures.

11. Children's Privacy

Our services involve online food ordering and payment transactions, which are appropriate only for adults. We do not knowingly market to, or solicit information from, minors under the age of 18.

If you are a parent or legal guardian and believe that your child under the age of 18 has provided personal information to us without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly delete such information from our records.

Our practices are consistent with the requirements of the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verifiable parental consent. We take additional steps to ensure no such data is collected through our platform.

12. International Data Transfers

Punch Pizza is based in the United States, and your personal information is primarily collected, stored, and processed within the United States. If you access our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

Data protection laws in the United States and other countries may differ from those in your home country. By using our services, you acknowledge and consent to the transfer of your personal information to the United States and other jurisdictions as described in this Privacy Policy.

When we transfer personal data internationally for processing by our service providers, we take appropriate contractual and technical measures to ensure that such data receives an adequate level of protection, including through the use of standard data processing agreements with our vendors.

13. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. At this time, our website does not respond to DNT signals from browsers, as there is no universally accepted standard for what such signals mean or how websites should respond to them.

However, you can manage your tracking preferences through our cookie consent tool, browser settings, or by opting out of targeted advertising as described in Section 9 of this Privacy Policy.

14. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, payment portals, or other external services. This Privacy Policy does not apply to those third-party services. We are not responsible for the privacy practices or content of any external websites. We encourage you to review the privacy policies of every website you visit.

If you choose to log in to our website using a third-party account (such as Google or Facebook), that third party may share certain profile information with us. The information we receive is governed by the privacy settings you have established with that third party and their own privacy policy.

15. How to File a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the relevant data protection authority.

15.1 Federal Trade Commission (FTC)

In the United States, the Federal Trade Commission (FTC) is the primary federal consumer protection authority. You may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)

15.2 California Attorney General (California Residents)

If you are a California resident, you may file a complaint regarding violations of the CCPA/CPRA with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

15.3 State Attorneys General (Other States)

Residents of other U.S. states may file complaints with their respective State Attorney General's office. Links and contact details are available on your state government's official website.

16. Contact Us for Privacy Inquiries

If you have any questions, comments, or concerns about this Privacy Policy, wish to exercise your privacy rights, or need to report a data security incident, please contact our privacy team using the following details:

We take all privacy-related inquiries seriously and will respond to verifiable requests within the timeframes required by applicable law — typically within 45 days of receipt.

17. Changes to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Post the revised policy prominently on our website at punch-delivery.click
• Send a notification email to registered users if the changes are significant

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services following the posting of changes constitutes your acceptance of the updated Privacy Policy.