Privacy Policy

Welcome to Dion's Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website dionspizza-fresh.rest, place orders, or otherwise interact with our services. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services.

This Privacy Policy applies to all personal information collected through our website, online ordering platform, mobile applications, in-store interactions, loyalty programs, and any related services, sales, marketing, or events (collectively referred to as our "Services").

1. Who We Are

Dion's Pizza is a food service business operating in the United States. We operate the website dionspizza-fresh.rest and provide pizza and related food products and services to our customers. For the purposes of this Privacy Policy, Dion's Pizza acts as the data controller responsible for your personal information.

For any questions or concerns regarding this Privacy Policy or our data practices, please contact us at [email protected].

2. Information We Collect

We collect various types of information in connection with your use of our Services. The categories of information we collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, join our loyalty program, or otherwise interact with our Services, we may collect personally identifiable information, including but not limited to:

• Full name
• Email address
• Phone number
• Mailing and delivery address
• Date of birth (for age verification and loyalty program purposes)
• Username and password (for account registration)
• Profile picture (if voluntarily provided)

2.2 Payment and Transaction Information

When you make a purchase through our website or in-store, we collect payment-related information necessary to process your transaction. This may include:

• Credit or debit card details (processed through secure third-party payment processors)
• Billing address
• Order history, including items ordered, quantities, prices, and dates
• Transaction identifiers

Please note that we do not store full payment card numbers on our systems. All payment processing is handled by PCI-DSS compliant third-party processors.

2.3 Usage and Activity Data

When you access and use our website or application, we automatically collect certain information about your activity, including:

• Pages visited and content viewed
• Search queries entered on our website
• Time and date of your visit
• Referring URLs and exit pages
• Clickstream data and navigation patterns
• Items added to cart or wishlist
• Session duration

2.4 Device and Technical Information

We automatically collect technical information about the device you use to access our Services, including:

• IP address
• Browser type and version
• Operating system and version
• Device identifiers and hardware model
• Screen resolution
• Language settings
• Time zone settings
• Mobile network information (if applicable)

2.5 Location Data

With your consent, we may collect precise geolocation information from your mobile device for the purpose of identifying nearby store locations, enabling delivery services, and providing location-relevant promotions. You may disable location services through your device settings at any time.

2.6 Communications and Customer Support Data

When you contact us for customer support, submit feedback, or communicate with us via email, phone, or online forms, we collect and retain the content of those communications, including your name, contact information, and the details of your inquiry or complaint.

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. For detailed information about our use of cookies, please refer to Section 8 of this Privacy Policy.

2.8 Information From Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (e.g., if you log in or connect your account through Facebook, Google, or Apple)
• Marketing and advertising partners
• Analytics providers
• Delivery and logistics partners
• Fraud prevention and identity verification services

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, both online and in-store
• To manage your account and provide account-related services
• To facilitate delivery services and communicate estimated delivery times
• To send order confirmations, receipts, and updates regarding your purchases
• To administer loyalty programs and rewards
• To process payments and prevent fraudulent transactions

3.2 Customer Communication

• To respond to your inquiries, complaints, and customer support requests
• To send important administrative notices, such as changes to our terms or policies
• To notify you of service disruptions, system maintenance, or issues affecting your order

3.3 Marketing and Promotional Activities

• To send you promotional emails, newsletters, special offers, and updates about our menu and services — only where you have provided your consent or where we have a legitimate interest to do so
• To personalize your experience and display relevant content and advertisements based on your preferences and order history
• To conduct sweepstakes, contests, and promotional campaigns
• To send you push notifications (where you have opted in)

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us directly at [email protected].

3.4 Analytics and Service Improvement

• To analyze usage patterns and understand how customers interact with our website and Services
• To improve the functionality, performance, and user experience of our website and application
• To develop new features, menu items, and services based on customer preferences
• To conduct internal research and generate statistical reports

3.5 Legal Compliance and Safety

• To comply with applicable laws, regulations, and legal obligations
• To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities
• To enforce our Terms of Service and other agreements
• To protect the rights, safety, and property of Dion's Pizza, our customers, and the public
• To respond to legal process, including subpoenas, court orders, and lawful requests from governmental authorities

4. Sharing Your Information With Third Parties

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our business and delivering our Services. These providers may have access to your personal information only to the extent necessary to perform their services and are contractually obligated to maintain the confidentiality and security of your information. Categories of service providers include:

• Payment processors and fraud detection services
• Delivery and logistics partners
• Email marketing and communication platforms
• Cloud hosting and data storage providers
• Analytics and reporting services (e.g., Google Analytics)
• Customer relationship management (CRM) software providers
• Advertising platforms and retargeting services
• IT support and cybersecurity services

4.2 Legal Requirements

We may disclose your personal information when required by law or in good-faith belief that such action is necessary to:

• Comply with applicable federal, state, or local laws and regulations
• Respond to a valid legal process, including subpoenas, court orders, or government investigations
• Cooperate with law enforcement or regulatory authorities
• Protect the rights and safety of Dion's Pizza, our employees, customers, or the public
• Defend against legal claims or enforce our legal rights

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and if any material changes to data practices would result from the transaction.

4.4 Aggregate and Anonymized Data

We may share aggregated, anonymized, or de-identified information with third parties for research, analytics, marketing, and other business purposes. Such data does not identify any individual and is not subject to this Privacy Policy.

4.5 With Your Consent

We may share your personal information with other third parties when you have given us your explicit consent to do so.

5. Your Privacy Rights

Depending on your state of residence in the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

5.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively "CCPA/CPRA"):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the purposes for which we use it, and the third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected about you, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to that which is necessary to perform the services you request.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality because you exercised your rights.
• Right to Data Portability: You have the right to receive a portable copy of your personal information in a readily usable format.

To submit a CCPA/CPRA request, please contact us at [email protected]. We will verify your identity before processing your request and will respond within 45 days, with the possibility of a 45-day extension when necessary.

5.2 General Privacy Rights (All U.S. Customers)

Regardless of your state of residence, you may have the following rights subject to applicable laws:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete information we hold about you.
• Right to Deletion: You may request that we delete your personal information from our systems, subject to legal retention requirements.
• Right to Withdraw Consent: Where we process your data based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Opt Out of Marketing: You may opt out of receiving promotional communications from us at any time.

5.3 How to Exercise Your Rights

To exercise any of the rights described above, please contact us through one of the following methods:

• Email: [email protected]
• Website: dionspizza-fresh.rest (via our contact form)

When submitting a request, please provide sufficient information to verify your identity, such as your name, email address associated with your account, and order history details. We will not process requests that we cannot verify.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The following general guidelines apply:

When personal information is no longer required for its intended purpose, we will securely delete or anonymize it in accordance with our data retention and disposal procedures.

7. Data Security

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical security measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

7.1 Technical Safeguards

• Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption for all data transmitted between your browser and our website
• Encryption of sensitive data at rest using industry-standard encryption protocols
• Firewalls and intrusion detection systems
• Regular vulnerability scanning and penetration testing
• Secure, tokenized payment processing systems compliant with PCI-DSS standards
• Multi-factor authentication for administrative system access

7.2 Administrative Safeguards

• Access to personal information is restricted to authorized personnel on a need-to-know basis
• Regular employee training on data privacy and security best practices
• Data privacy impact assessments for new projects and technologies
• Contractual data protection obligations for all third-party service providers

7.3 Physical Safeguards

• Secured physical access to servers and data centers
• Secure disposal of physical records containing personal information

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and serve relevant advertisements.

8.1 Types of Cookies We Use

• Essential Cookies: These cookies are strictly necessary for the website to function and cannot be switched off. They include cookies that enable you to log in, add items to your cart, and complete purchases.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often, helping us improve site performance.
• Functionality Cookies: These cookies allow our website to remember your preferences, such as your saved delivery address or preferred location.
• Targeting and Advertising Cookies: These cookies are set by advertising partners to build a profile of your interests and show you relevant advertisements on other websites.

8.2 Third-Party Cookies

We may allow third-party service providers, including Google Analytics, Meta Pixel, and advertising networks, to place cookies on your device when you visit our website. These third parties have their own privacy policies, which we encourage you to review.

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or set preferences for specific websites. Please note that disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising by visiting the Network Advertising Initiative opt-out page or the Digital Advertising Alliance opt-out page.

For further details about the specific cookies we use and your options, please contact us at [email protected].

9. Children's Privacy

Dion's Pizza does not knowingly collect, solicit, or maintain personal information from anyone under the age of 18. Our Services are intended for use only by adults aged 18 years and older. If you are under the age of 18, please do not use our Services or provide any personal information through our website.

If we become aware that we have inadvertently collected personal information from a child under the age of 18, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] and we will promptly investigate and take appropriate action.

This policy is consistent with the Children's Online Privacy Protection Act (COPPA), which places additional requirements on websites and online services that knowingly collect personal information from children under 13. As noted, we do not target or knowingly collect information from anyone under 18.

10. International Data Transfers

Dion's Pizza is a United States-based business. Your personal information is collected, processed, and stored primarily in the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country.

By using our Services and providing us with your personal information, you acknowledge and consent to the transfer of your information to the United States. We take appropriate steps to ensure that any international transfers of personal information are conducted in compliance with applicable laws and that your data receives adequate protection regardless of where it is processed.

For customers residing in jurisdictions with specific requirements regarding international data transfers (such as the European Economic Area, United Kingdom, or other regions), we will rely on appropriate legal mechanisms as required by applicable law to legitimize such transfers.

11. Applicable Laws and Consumer Protection

Our privacy practices are designed to comply with applicable United States federal and state privacy and data protection laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act), 15 U.S.C. § 41 et seq.: We adhere to the FTC's guidelines on unfair or deceptive acts or practices and the FTC's guidance on privacy and data security.
• The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA): We honor the rights of California residents as described in Section 5 of this policy.
• The Children's Online Privacy Protection Act (COPPA): We do not knowingly collect personal information from children under 13.
• The CAN-SPAM Act: We comply with applicable requirements for commercial email communications.
• The Telephone Consumer Protection Act (TCPA): We comply with applicable requirements for SMS and telephone marketing communications.
• Applicable state breach notification laws: In the event of a security breach affecting your personal information, we will provide notification as required by the laws of your state of residence.

As privacy laws continue to evolve across the United States, including new comprehensive privacy laws enacted in states such as Virginia, Colorado, Connecticut, Utah, and others, we are committed to reviewing and updating our privacy practices to ensure ongoing compliance.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Dion's Pizza. This Privacy Policy applies only to our Services and does not extend to any third-party websites. We are not responsible for the privacy practices of third-party websites and encourage you to review the privacy policies of any website you visit through links on our platform.

Third-party services that may be integrated with our website include payment gateways, social media platforms, and delivery service applications. When you interact with these services, your data is subject to the respective third party's privacy policy.

13. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not wish to have your online activity tracked. As of the effective date of this Privacy Policy, there is no established industry-wide standard for responding to DNT signals, and our website does not currently respond to DNT browser signals in a standardized way. We continue to monitor developments in this area and will update this policy as appropriate.

California residents may also exercise their rights under the "Shine the Light" law (California Civil Code Section 1798.83), which allows California residents to request information regarding the disclosure of their personal information to third parties for direct marketing purposes during the preceding calendar year. To make such a request, please contact us at [email protected].

14. How to File a Privacy Complaint

If you have concerns about how we handle your personal information or believe that we have failed to comply with our privacy obligations, we encourage you to contact us first so that we can try to resolve the issue directly.

14.1 Contact Dion's Pizza

Please submit privacy-related complaints or inquiries to:

• Email: [email protected]
• Website: dionspizza-fresh.rest

We will acknowledge receipt of your complaint within 5 business days and aim to provide a substantive response within 30 days.

14.2 Regulatory Complaints

If you are not satisfied with our response or believe that we are processing your personal information in a manner that violates applicable law, you have the right to file a complaint with the appropriate regulatory authority:

• Federal Trade Commission (FTC):
  The FTC is the primary federal consumer protection authority in the United States. You may file a complaint with the FTC at:
  Website: www.ftc.gov/complaint
  Phone: 1-877-382-4357
• California Attorney General (California Residents):
  California residents may file privacy complaints with the California Attorney General's Office or the California Privacy Protection Agency (CPPA):
  Website: www.oag.ca.gov/privacy/ccpa
  CPPA Website: cppa.ca.gov
• State Attorneys General:
  Residents of other states may also have the right to file complaints with their state's Attorney General office. We encourage you to consult your state's official resources for guidance.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time and for any reason. When we make material changes to this policy, we will notify you by:

• Posting the updated policy on our website at dionspizza-fresh.rest with a revised "Last Updated" date
• Sending an email notification to registered account holders (for material changes)
• Displaying a prominent notice on our website homepage

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes to this Privacy Policy have been posted constitutes your acceptance of the updated policy. If you do not agree with any changes, please discontinue your use of our Services and contact us to request deletion of your personal information.

16. Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your privacy inquiries in a timely and professional manner.

When contacting us about a privacy matter, please include your full name, contact information, and a clear description of your request or concern to help us respond as efficiently as possible. We will respond to all verifiable privacy requests within the timeframes required by applicable law.