Privacy Policy

1. Introduction

At Punch pizza, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, mobile application, or visit our restaurant locations.

This policy applies to all interactions with Punch pizza, including online orders, dine-in experiences, delivery services, catering requests, loyalty program participation, and any communication with our customer service team.

By using our services, creating an account, placing orders, or providing us with your personal information, you agree to the terms outlined in this Privacy Policy. We want to assure you that we never sell your personal data to third parties for their marketing purposes.

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the information provided in Section 13.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when interacting with our services:

• Personal Identification Information: Name, email address, phone number, delivery address, and billing address
• Account Information: Username, password, order history, and account preferences
• Payment Information: Credit card details, payment method preferences (securely encrypted and stored)
• Order Information: Food preferences, special dietary requirements (vegan, vegetarian, gluten-free, halal, kosher), allergen information, and custom requests
• Loyalty Program Data: Rewards points, favorite orders, birthday information, and promotional preferences
• Reservation Information: Table booking details, party size, special occasion notes, and seating preferences
• Catering Details: Event information, guest count, menu selections, delivery locations, and special instructions
• Communication Data: Customer service inquiries, reviews, feedback, survey responses, and marketing preferences
• Social Media Information: If you connect your social media accounts or interact with our social media pages

2.2 Information We Collect Automatically

When you use our website or mobile application, we automatically collect certain information:

• Device Information: IP address, browser type and version, operating system, device type, and unique device identifiers
• Usage Data: Pages visited, time spent on site, click patterns, search queries, and navigation paths
• Location Data: Approximate location based on IP address, GPS data for delivery purposes (with your consent)
• Cookie Data: Session IDs, user preferences, shopping cart contents, and analytics information
• Performance Data: Page load times, error reports, and technical diagnostics

2.3 Information from Third Parties

We may receive information about you from third-party sources:

• Payment Processors: Transaction verification and fraud prevention data
• Delivery Partners: Delivery confirmation, location updates, and service quality metrics
• Social Media Platforms: Public profile information if you choose to connect your accounts
• Marketing Partners: Demographic information and marketing campaign effectiveness data
• Review Platforms: Customer reviews and ratings from third-party review sites

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Preparing, cooking, and fulfilling your food orders accurately and efficiently
• Delivery Services: Coordinating delivery logistics, tracking orders, and ensuring timely delivery
• Payment Processing: Securely processing payments and maintaining transaction records
• Account Management: Creating and maintaining your user account, login authentication, and profile updates
• Customer Support: Responding to inquiries, resolving issues, and providing assistance
• Dietary Accommodations: Ensuring proper handling of allergen information and special dietary requirements
• Quality Improvement: Analyzing feedback to enhance food quality, service efficiency, and customer experience

3.2 Communication

• Order Confirmations: Sending order receipts, preparation updates, and delivery notifications
• Account Notifications: Login alerts, password reset confirmations, and security notifications
• Customer Service: Responding to support requests, complaints, and feedback
• Important Updates: Policy changes, service disruptions, and safety notices
• Marketing Communications: Promotional offers, new menu items, and special events (only with your explicit consent)
• Loyalty Program: Points balance updates, reward notifications, and exclusive member offers

3.3 Marketing and Analytics

• Personalization: Customizing menu recommendations based on your order history and preferences
• Targeted Advertising: Displaying relevant ads on our website and partner platforms
• Campaign Analysis: Measuring the effectiveness of marketing campaigns and promotions
• Market Research: Understanding customer preferences to develop new menu items and services
• Website Analytics: Analyzing traffic patterns to improve website functionality and user experience
• Customer Segmentation: Grouping customers for targeted marketing and service improvements

3.4 Legal Compliance and Security

• Legal Obligations: Complying with applicable laws, regulations, and legal processes
• Fraud Prevention: Detecting and preventing fraudulent transactions and activities
• Security Monitoring: Protecting against unauthorized access and security threats
• Dispute Resolution: Resolving customer complaints, chargebacks, and legal disputes
• Safety Compliance: Maintaining food safety records and health department requirements

4. Information Sharing and Disclosure

4.1 Service Providers

We share your information with trusted third-party service providers who help us operate our business:

• Payment Processors: Stripe, PayPal, and other payment services for secure transaction processing
• Delivery Partners: Third-party delivery companies for order fulfillment and logistics
• Cloud Storage Providers: AWS, Google Cloud for secure data storage and backup services
• Email Service Providers: Mailchimp, SendGrid for marketing communications and transactional emails
• Analytics Tools: Google Analytics, Mixpanel for website performance and user behavior analysis
• Customer Support: Zendesk, Intercom for customer service and support ticket management
• Marketing Services: Facebook Ads, Google Ads for advertising campaign management

4.2 Legal Requirements

We may disclose your information when required by law or to protect our rights:

• Legal Process: Court orders, subpoenas, search warrants, and other legal demands
• Government Agencies: Health departments, tax authorities, and regulatory bodies
• Law Enforcement: Police investigations, fraud prevention, and public safety matters
• Emergency Situations: Protecting the safety of customers, employees, or the public
• Rights Protection: Defending against legal claims, intellectual property violations, or terms of service breaches

4.3 Business Transfers

If Punch pizza is involved in a merger, acquisition, or sale of assets, your information may be transferred:

• Due Diligence: Sharing information with potential buyers during business evaluations
• Asset Transfer: Including customer databases in business sale transactions
• Continuation of Service: Ensuring uninterrupted service under new ownership
• Customer Notification: We will notify customers before any transfer and explain their options
• Privacy Protection: Requiring new owners to honor existing privacy commitments

4.4 With Your Consent

We will share your information for other purposes only with your explicit consent, such as:

• Participating in customer testimonials or case studies
• Sharing reviews with marketing partners
• Including you in promotional materials or advertisements
• Connecting with social media influencer programs

5. Data Security

5.1 Technical Security Measures

We implement comprehensive technical safeguards to protect your personal information:

• Encryption: All data transmission uses SSL/TLS encryption (256-bit) to protect information in transit
• Data Encryption: Sensitive data stored in our databases is encrypted using AES-256 encryption
• Firewall Protection: Advanced firewall systems monitor and block unauthorized access attempts
• Access Controls: Multi-factor authentication and role-based access for all employee accounts
• Network Security: Intrusion detection systems and network monitoring for real-time threat identification
• Secure Hosting: Data stored in secure, certified cloud facilities with redundant backup systems
• Regular Updates: All systems and software are regularly updated with the latest security patches

5.2 Organizational Security Measures

Our organizational policies ensure comprehensive data protection:

• Employee Training: Regular privacy and security training for all staff members
• Access Limitation: Only authorized personnel have access to personal data on a need-to-know basis
• Confidentiality Agreements: All employees and contractors sign strict confidentiality agreements
• Background Checks: Comprehensive background verification for employees handling sensitive data
• Incident Response Plan: Detailed procedures for responding to security breaches or data incidents
• Regular Audits: Annual security audits and penetration testing by independent security firms
• Data Minimization: We collect and retain only the minimum data necessary for business operations

5.3 Your Security Responsibilities

Help us protect your account by following these best practices:

• Strong Passwords: Use unique, complex passwords with a combination of letters, numbers, and symbols
• Password Protection: Never share your login credentials with others
• Secure Logout: Always log out of your account when using public or shared computers
• Suspicious Activity: Report any unauthorized account access immediately
• Email Vigilance: Be cautious of phishing emails claiming to be from Punch pizza
• Software Updates: Keep your devices and browsers updated with the latest security patches
• Secure Networks: Avoid placing orders on unsecured public Wi-Fi networks

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website and mobile application. Here's how we use different types of cookies:

Cookie Type	Purpose	Duration
Essential Cookies	Basic site functionality, user authentication, shopping cart, security features	Session (deleted when browser closes)
Functional Cookies	User preferences, language settings, location data, personalized content	Up to 1 year
Analytics Cookies	Website usage analysis, performance monitoring, user behavior tracking	Up to 2 years
Marketing Cookies	Personalized advertising, campaign measurement, retargeting	Up to 1 year

Tracking Technologies We Use

• Google Analytics: Website traffic analysis and user behavior insights
• Facebook Pixel: Social media advertising effectiveness and custom audience creation
• Google Ads: Search and display advertising campaign measurement
• Email Tracking: Open rates, click-through rates, and email engagement metrics
• Heatmap Tools: User interaction patterns and website usability analysis
• Session Recording: Anonymized user session recordings for UX improvement

Cookie Management

You have control over cookie settings:

• Browser Settings: Configure your browser to accept, reject, or delete cookies
• Cookie Preferences: Use our cookie consent banner to customize your preferences
• Opt-Out Tools: Use industry opt-out tools for advertising cookies
• Mobile Settings: Control app tracking through your device's privacy settings

7. Your Rights (GDPR/CCPA Compliance)

Depending on your location, you may have various rights regarding your personal information under data protection laws such as GDPR and CCPA:

7.1 Right of Access

You have the right to request confirmation of whether we process your personal data and obtain a copy of your information, including:

• Account information and order history
• Personal preferences and dietary requirements
• Communication records and support tickets
• Marketing preferences and consent records

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information:

• Update contact information and addresses
• Correct dietary restrictions and allergen information
• Modify payment method preferences
• Update account settings and preferences

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data when:

• The data is no longer necessary for the original purpose
• You withdraw consent for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

7.4 Right to Restrict Processing

You can request limitation of how we use your data in certain circumstances:

• While we verify the accuracy of disputed information
• When processing is unlawful but you prefer restriction over deletion
• When you need the data for legal claims
• While we verify legitimate grounds for processing

7.5 Right to Data Portability

You can request a copy of your data in a machine-readable format, including:

• Account profile information
• Order history and preferences
• Loyalty program data
• Communication history

7.6 Right to Object

You can object to certain types of processing:

• Direct marketing communications
• Profiling for marketing purposes
• Processing based on legitimate interests
• Automated decision-making

7.7 Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affects you.

8. Children's Privacy

Punch pizza is committed to protecting the privacy of children. Our services are designed for and directed to adults aged 16 and older.

• Age Restriction: We do not knowingly collect personal information from children under 16 years of age
• Parental Consent: If we discover we have collected information from a child under 16, we will immediately delete it
• Account Creation: Users must confirm they are at least 16 years old when creating an account
• Parental Rights: Parents who believe we have collected their child's information should contact us immediately
• Educational Programs: Any school or youth group catering requires adult supervision and consent

9. International Data Transfers

As a global food service company, we may transfer your personal information across international borders to provide our services effectively.

9.1 Protection Measures

When transferring data internationally, we ensure adequate protection through:

• Adequacy Decisions: Transfers to countries with adequate data protection laws as recognized by regulatory authorities
• Standard Contractual Clauses (SCCs): EU-approved contractual terms for secure data transfers
• Data Processing Agreements: Comprehensive contracts with all international service providers
• Certification Programs: Partners must maintain relevant security certifications (ISO 27001, SOC 2)
• Regular Compliance Audits: Annual assessments of international data handling practices
• Binding Corporate Rules: Internal policies ensuring consistent global data protection standards

9.2 Transfer Destinations

We may transfer your data to the following regions for specific purposes:

• United States: Cloud storage, customer support, and analytics services
• European Union: Data processing, marketing automation, and compliance services
• Canada: Payment processing and financial services
• Australia: Customer service and technical support
• Other Countries: Only with appropriate safeguards and your consent where required

10. Data Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal requirements.

Information Type	Retention Period	Reason for Retention
Account Information	6 months after account deletion	Legal obligations, fraud prevention, dispute resolution
Order History	7 years	Tax and accounting requirements, warranty claims, food safety traceability
Payment Information	As long as legally required	Compliance with financial regulations, chargeback protection
Marketing Consent	3 months after withdrawal	Consent record keeping, compliance verification
Website Usage Logs	Up to 2 years	Security monitoring, analytics, performance improvement
Customer Support Records	3 years	Service quality improvement, training purposes, dispute resolution
Loyalty Program Data	2 years after last activity	Program administration, reward fulfillment, member benefits
Allergen Information	7 years	Food safety compliance, health department requirements, liability protection

Safe Data Disposal

When data retention periods expire, we ensure secure deletion through:

• Complete Electronic Deletion: Data is permanently deleted using industry-standard methods that make recovery impossible
• Physical Record Destruction: Paper records are securely shredded by certified disposal companies
• Backup Data Removal: All backup copies and archived data are also permanently deleted
• Certificate of Destruction: We maintain records of data disposal for audit purposes
• Third-Party Verification: Independent verification of secure data destruction when required

11. Third-Party Links and Services

Our website and mobile application may contain links to third-party websites, social media platforms, or integrated services that are not operated by Punch pizza.

11.1 Third-Party Privacy Practices

• Independent Policies: Third-party sites have their own privacy policies and practices that may differ from ours
• No Control: We do not control and are not responsible for third-party privacy practices
• Data Collection: Third parties may collect information about you independently
• Cookies and Tracking: Third-party sites may use their own cookies and tracking technologies

11.2 Common Third-Party Services

• Social Media Platforms: Facebook, Instagram, Twitter integration and social login
• Payment Processors: Credit card processing, digital wallets, and payment gateways
• Review Sites: Google Reviews, Yelp, TripAdvisor, and other rating platforms
• Maps and Directions: Google Maps for location services and delivery tracking
• Customer Support: Live chat widgets and support ticket systems

11.3 Your Responsibility

12. Policy Changes and Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations.

12.1 How We Notify You of Changes

• Website Notice: Prominent notice on our homepage and privacy policy page
• Email Notification: Direct email to registered users for significant changes
• App Notifications: In-app notifications for mobile application users
• Account Dashboard: Notifications in your account settings and order history
• Social Media: Announcements on our official social media channels

12.2 Types of Changes

• Minor Updates: Clarifications, contact information changes, or administrative updates
• Significant Changes: Changes to data collection, use purposes, or sharing practices
• Legal Updates: Changes required by new laws or regulations
• Business Changes: Updates due to new services, features, or business partnerships

12.3 Your Options

If you disagree with any changes to our Privacy Policy, you may:

• Stop using our services
• Delete your account
• Withdraw consent for certain data processing activities
• Contact us to discuss your concerns

13. Contact Information

13.1 Privacy-Related Inquiries

For questions specific to this Privacy Policy or data protection matters, please contact us using any of the methods above. We are committed to responding to all privacy inquiries within 3 business days.

13.2 Data Protection Officer

For complex privacy matters or formal complaints, you may request to speak with our Data Protection Officer who oversees compliance with privacy regulations and handles escalated privacy concerns.

13.3 Complaint Resolution

If you have concerns about how we handle your personal information:

1. Contact Us First: We encourage you to contact us directly so we can address your concerns promptly
2. Supervisory Authority: If you are not satisfied with our response, you may file a complaint with your local data protection authority
3. Regulatory Contact: For residents of the European Union, you can contact your national data protection authority
4. Legal Rights: You have the right to lodge a complaint without affecting any other legal remedies available to you

14. Withdrawal of Consent

You have the right to withdraw your consent for certain data processing activities at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before withdrawal.

14.1 Marketing Communications Withdrawal

To stop receiving marketing communications:

• Email Unsubscribe: Click the unsubscribe link at the bottom of any marketing email
• Account Settings: Log into your account and update your communication preferences
• Customer Support: Contact our customer service team to update your preferences
• Phone Opt-Out: Call us to remove your number from marketing lists
• SMS Stop: Reply "STOP" to any promotional text message

14.2 Account Deletion Process

To permanently delete your account and associated data:

1. Login to Your Account: Access your account dashboard
2. Account Settings: Navigate to account settings or privacy controls
3. Delete Account: Select the account deletion option
4. Confirmation: Confirm your decision and provide feedback (optional)
5. Processing Time: Account deletion typically takes 24-48 hours to process
6. Data Retention: Some data may be retained for legal compliance as outlined in Section 10

14.3 Partial Consent Withdrawal

You can withdraw consent for specific activities while maintaining your account:

• Analytics Tracking: Opt out of website analytics and usage tracking
• Personalization: Disable personalized recommendations and content
• Location Services: Turn off location-based features and services
• Social Media Integration: Disconnect social media accounts and sharing
• Third-Party Data Sharing: Opt out of data sharing with marketing partners

15. Conclusion

At Punch pizza, protecting your privacy is fundamental to our commitment to providing exceptional food service and customer experience. We understand that trust is earned through transparency, accountability, and consistent protection of your personal information.

Our Privacy Commitment

• Transparency: We are committed to clear, honest communication about our data practices
• Security: Your personal information is protected by industry-leading security measures
• Control: We provide you with meaningful choices about how your information is used
• Respect: We respect your privacy rights and will never sell your personal data
• Compliance: We maintain strict adherence to all applicable privacy laws and regulations

Building Trust Through Service

Your trust enables us to:

• Provide personalized dining experiences tailored to your preferences
• Ensure safe handling of food allergies and dietary requirements
• Deliver exceptional customer service and support
• Continuously improve our menu, service, and overall experience
• Maintain the highest standards of food safety and quality

Your Privacy Matters

We recognize that privacy is a personal right, and we are committed to:

• Collecting only the information necessary to serve you better
• Using your information responsibly and ethically
• Providing you with control over your personal data
• Responding promptly to your privacy concerns and requests
• Continuously improving our privacy practices

Thank you for choosing Punch pizza and for trusting us with your personal information. We look forward to serving you with the same dedication to excellence that guides our approach to privacy protection.

This Privacy Policy was last updated on January 15, 2026
Please check this page periodically for updates and changes.