Privacy Policy

Welcome to Dion's Pizza ("Dion's," "we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website dionspizza.top, place an order, or otherwise interact with our food services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy applies to all information collected through our website (dionspizza.top), our online ordering system, social media pages, email campaigns, loyalty programs, and any other sales or marketing channels that link to this policy (collectively, the "Services").

1. Who We Are

Dion's Pizza is a food service business operating in the United States. We are dedicated to providing our customers with high-quality pizza and food products while maintaining the highest standards of data privacy and security.

• Business Name: Dion's Pizza
• Website: dionspizza.top
• Email: [email protected]

For all privacy-related inquiries, please contact us at the email address listed above. We will respond to all privacy requests within a reasonable timeframe, and no later than required by applicable law.

2. Applicable Laws and Regulations

As a business operating in the United States, we comply with applicable federal and state privacy laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act), which governs unfair or deceptive practices in commerce, including privacy and data security.
• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), which grants California residents specific rights regarding their personal information.
• The CAN-SPAM Act, governing commercial email communications.
• The Children's Online Privacy Protection Act (COPPA), which governs the online collection of personal information from children under the age of 13.
• Other applicable state and federal privacy regulations.

If you are a resident of California, please see Section 13 for additional rights afforded to you under the CCPA/CPRA.

3. Information We Collect

We collect information that you provide directly to us, information collected automatically when you use our Services, and information obtained from third-party sources. The categories of personal information we collect include:

3.1 Information You Provide Directly

When you interact with us — whether by creating an account, placing an order, signing up for our newsletter, contacting customer service, or participating in promotions — you may provide us with:

• Identity Information: Full name, username, or similar identifiers.
• Contact Information: Email address, telephone number, billing address, delivery address, and postal code.
• Account Credentials: Password and security questions (stored in encrypted form).
• Payment Information: Credit card numbers, debit card numbers, billing details, and other payment data. Note: Full payment card details are processed by our PCI-DSS compliant third-party payment processors and are not stored on our servers.
• Order Information: Food items ordered, special instructions, dietary preferences, order history, and delivery instructions.
• Communications: Any messages, feedback, or inquiries you send us via email, contact forms, or customer support channels.
• Loyalty Program Data: Points balances, rewards history, and promotional redemptions if you participate in any loyalty or rewards program we offer.
• Survey and Promotion Data: Responses to surveys, sweepstakes entries, or promotional participation.

3.2 Information Collected Automatically

When you visit our website or use our digital services, we automatically collect certain technical and usage data, including:

• Device Information: IP address, device type, operating system, browser type and version, device identifiers, and mobile network information.
• Usage Data: Pages viewed, links clicked, time spent on pages, referring URLs, search queries within our site, and other interaction data.
• Location Data: Approximate geographic location derived from your IP address, or, with your consent, precise GPS location data if you use our mobile ordering features.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, local storage, and similar technologies. Please see Section 9 for more details on our cookie practices.
• Log Data: Server logs that record access times, error messages, and other diagnostic information.

3.3 Information from Third Parties

We may receive information about you from third-party sources, which we may combine with information we already hold about you:

• Payment Processors: Transaction confirmation and fraud detection signals from our payment service providers.
• Social Media Platforms: If you connect your social media account to our services or log in via a social login, we may receive profile information such as your name, email address, and profile photo, subject to your privacy settings on that platform.
• Delivery Partners: Delivery status updates and contact information shared by third-party delivery services we use to fulfill your orders.
• Analytics Providers: Aggregated and anonymized data about website traffic and user behavior from providers such as Google Analytics.
• Advertising Partners: Data about your interactions with our online advertisements.

4. How We Use Your Information

We use the personal information we collect for specific, legitimate business purposes. We do not use your data in ways that are incompatible with these stated purposes. The primary reasons we process your data include:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including coordinating delivery or pickup.
• Managing your account, including registration, authentication, and account security.
• Processing payments and preventing fraudulent transactions.
• Communicating with you about your orders, including confirmations, updates, and receipts.
• Providing customer support and resolving disputes or complaints.
• Administering loyalty programs, promotions, and reward redemptions.

4.2 Improving Our Services

• Analyzing how customers use our website and services to improve functionality, user experience, and menu offerings.
• Conducting internal research, testing, and quality assurance.
• Monitoring and analyzing usage patterns to optimize our website performance.
• Developing new features, products, or services based on customer feedback and behavior.

4.3 Marketing and Communications

• Sending you promotional emails, newsletters, special offers, and updates about Dion's Pizza — but only where you have consented or where we have a legitimate interest to do so.
• Personalizing your experience with targeted content and recommendations based on your order history and preferences.
• Running online advertising campaigns, including retargeted ads on social media and third-party websites.
• Notifying you about changes to our menu, pricing, hours, or policies.

4.4 Legal and Compliance Purposes

• Complying with applicable federal and state laws and regulations.
• Responding to legal requests, court orders, subpoenas, or government inquiries.
• Enforcing our Terms of Service and other agreements.
• Protecting the rights, safety, and property of Dion's Pizza, our customers, and the public.
• Detecting, investigating, and preventing fraud, security incidents, and other harmful activity.

5. How We Share Your Information

We do not sell your personal information to third parties for their own marketing purposes. However, we do share your information in the following limited circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party vendors and service providers who assist us in operating our business. These parties access your information only as necessary to perform their contracted services and are bound by confidentiality and data protection obligations. Categories of service providers include:

5.2 Legal Requirements and Protection of Rights

We may disclose your personal information when required by law or in good faith belief that such action is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request.
• Protect and defend the rights or property of Dion's Pizza.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of users of our services or the public.
• Protect against legal liability.

5.3 Business Transfers

In the event that Dion's Pizza undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity as part of the business assets. We will notify you via email and/or a prominent notice on our website before your personal information becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, industry reporting, or business purposes.

6. Data Security

Dion's Pizza takes the security of your personal information seriously and has implemented a range of technical, administrative, and physical security measures designed to protect your data against unauthorized access, disclosure, alteration, and destruction.

6.1 Technical Safeguards

• SSL/TLS Encryption: Our website uses Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Data Encryption at Rest: Sensitive data stored in our systems is encrypted using industry-standard encryption protocols.
• Password Hashing: User passwords are stored using strong cryptographic hashing algorithms and are never stored in plain text.
• Firewalls and Intrusion Detection: We deploy network firewalls, intrusion detection systems, and security monitoring to identify and respond to threats.
• Access Controls: Access to personal data is restricted on a need-to-know basis, with role-based access controls for our staff.

6.2 Administrative Safeguards

• Regular employee training on data privacy and security best practices.
• Confidentiality agreements with staff and third-party service providers.
• Regular security audits and vulnerability assessments.
• Documented incident response plans for data breaches.

6.3 Payment Security

All payment card transactions are processed through PCI-DSS (Payment Card Industry Data Security Standard) compliant payment processors. We do not store complete credit or debit card numbers on our servers.

7. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

7.1 Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a commonly used, machine-readable format where technically feasible.

7.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. You may also update your account information directly through your online account settings.

7.3 Right to Deletion

You have the right to request the deletion of your personal information, subject to certain exceptions (such as where we are required by law to retain certain records, or where the information is necessary for the establishment, exercise, or defense of legal claims).

7.4 Right to Data Portability

Where technically feasible, you have the right to receive your personal information in a structured, commonly used, machine-readable format, and to transmit that data to another controller.

7.5 Right to Opt-Out of Marketing

You have the right to opt out of receiving direct marketing communications from us at any time. To exercise this right, click the "unsubscribe" link in any marketing email or contact us at [email protected].

7.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, or provide a different level or quality of services because you exercised your privacy rights.

7.7 How to Submit a Privacy Request

To exercise any of the rights described above, please contact us using the information below. We will respond to your request within 45 days. In complex cases, we may require up to 90 days and will notify you of any extension.

• Email: [email protected]
• Website: dionspizza.top

We may need to verify your identity before processing your request. This may involve confirming your email address, account credentials, or other identifying information to ensure we are responding to the correct individual.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods we apply are as follows:

When personal information is no longer needed, we securely delete or anonymize it so that it can no longer be associated with you.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver relevant advertising. A cookie is a small text file placed on your device when you visit a website.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly, including session management, shopping cart functionality, and secure login. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymized information about page visits, error messages, and user behavior (e.g., Google Analytics).
• Functionality Cookies: Allow the website to remember your preferences (e.g., saved address, language, or previous order details) to provide a more personalized experience.
• Targeting and Advertising Cookies: Used to deliver advertisements relevant to your interests on our website and third-party sites. These cookies track your browsing across websites.

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or set notifications when cookies are placed. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders.

You may also opt out of interest-based advertising through the Digital Advertising Alliance's opt-out portal or the Network Advertising Initiative's opt-out tool.

For a more detailed description of the cookies we use and your choices, please review our full Cookie Policy available on our website at dionspizza.top.

10. Children's Privacy

Our Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, in compliance with the Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt steps to delete such information from our records.

We do not intentionally market our online ordering services to minors. By creating an account or placing an order, you represent and warrant that you are at least 18 years of age.

11. International Data Transfers

Dion's Pizza is based in the United States, and your personal information is primarily collected, stored, and processed within the United States. Our servers and service providers may be located in the United States or other countries.

If you are accessing our Services from outside the United States, please be aware that your personal information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your home country. By using our Services, you consent to the transfer of your personal information to the United States.

We take steps to ensure that any international transfers of personal data are conducted in compliance with applicable law, and that appropriate safeguards are in place to protect your information during transfer.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or embedded content (such as maps, payment widgets, or social sharing buttons). These third-party services operate under their own privacy policies, and we are not responsible for their content or privacy practices.

We encourage you to review the privacy policies of any third-party sites or services before providing them with your personal information. Our Privacy Policy does not apply to third-party websites or services.

13. California Residents — CCPA/CPRA Rights

If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023. These rights are in addition to the general rights described in Section 7.

13.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

13.2 Your CCPA/CPRA Rights

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing: We do not sell personal information. However, certain sharing of data with advertising partners may constitute "sharing" under the CPRA. You may opt out of this by contacting us.
• Right to Limit Use of Sensitive Personal Information: You may request that we limit the use and disclosure of your sensitive personal information to what is necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

13.3 Submitting a CCPA Request

To submit a verifiable consumer request under CCPA/CPRA, please contact us at:

• Email: [email protected]

You may designate an authorized agent to submit requests on your behalf. We may require proof of authorization and identity verification before processing such requests. We will respond to verifiable consumer requests within 45 days.

14. How to File a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the appropriate data protection or consumer protection authority.

14.1 United States — Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) is the primary federal agency responsible for protecting consumers against deceptive or unfair business practices, including privacy violations. You may file a complaint with the FTC at:

• Website: reportfraud.ftc.gov
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

14.2 California Residents — California Privacy Protection Agency (CPPA)

California residents may file complaints regarding violations of the CCPA/CPRA with the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Email: [email protected]

14.3 State Attorney General Offices

You may also contact your state's Attorney General office if you believe your privacy rights have been violated. Most state Attorney General offices have consumer protection divisions that handle privacy complaints.

14.4 Contact Us First

Before filing a complaint with a regulatory authority, we encourage you to contact us directly at [email protected] so that we have the opportunity to address your concerns. We are committed to resolving privacy issues promptly and fairly.

15. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals to websites. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, we do not currently alter our data collection and use practices in response to DNT signals. We will continue to monitor developments in this area and update our practices if industry standards emerge.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on our website or send you an email notification (for significant changes).
• Where required by law, seek your consent before implementing material changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Services after any changes to this policy constitutes your acceptance of the updated terms.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your privacy concerns promptly and transparently.

When contacting us about a privacy matter, please include your name, email address associated with your account (if applicable), a description of your inquiry, and the specific right or concern you wish to address. This will help us respond to your request as efficiently as possible.

We aim to respond to all privacy-related inquiries within 30 business days. For formal rights requests (such as access, deletion, or correction), we will respond within the timeframes required by applicable law.