Privacy Policy

Effective Date: May 27, 2026  |  Last Updated: May 27, 2026

1. Introduction and Who We Are

Welcome to Punch Pizza. We are a food service business operating in the United States, committed to serving our customers with the highest standards of quality and transparency — not just in our food, but also in how we handle your personal information.

This Privacy Policy applies to all personal information collected through our website (eat-punchpizza.rest), our online ordering platforms, email communications, phone interactions, and any other services or channels we operate. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

We take your privacy seriously. This policy has been developed in compliance with applicable United States privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission (FTC) Act, and other relevant federal and state regulations governing the collection and use of personal data.

1.1 Contact Details

For any privacy-related questions, concerns, or requests, please reach out to us using the contact details provided above. We are dedicated to addressing all inquiries in a timely and transparent manner.

2. Information We Collect

We collect various types of information in connection with our services. The categories below describe the personal information we may collect from or about you:

2.1 Personal Identification Information

When you create an account, place an order, or contact us directly, we may collect personal identification information, including but not limited to:

• Full name
• Email address
• Phone number
• Delivery address and billing address
• Date of birth (where applicable, for age verification purposes)
• Account username and password (stored in encrypted form)
• Payment card details (processed securely through compliant third-party payment processors)
• Order history and preferences
• Special dietary needs or preferences that you voluntarily provide

2.2 Usage Data and Website Interaction Information

As you navigate through and interact with our website, we may automatically collect certain information about your browsing behavior and usage patterns. This includes:

• IP address and approximate geographic location
• Pages visited and time spent on each page
• Links clicked and buttons pressed
• Search queries entered on our website
• Referring URLs (the page you visited before arriving at our website)
• Exit pages and bounce rates
• Time and date of each visit
• Frequency of visits and returning visitor status

2.3 Device and Technical Information

We automatically receive and record information from your device and browser, including:

• Device type (desktop, tablet, mobile phone)
• Operating system and version
• Browser type and version
• Screen resolution and display settings
• Device identifiers and unique hardware identifiers
• Network connection type and Internet service provider
• Language settings

2.4 Cookie and Tracking Technology Data

Our website uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience and gather analytical data. For more details on our use of cookies, please refer to Section 7 of this policy.

2.5 Communications and Customer Support Data

If you contact us by email, phone, or through our website forms, we may collect:

• The content of your message or inquiry
• Records of communications and correspondence
• Feedback, reviews, or survey responses you provide
• Social media messages or comments directed to our official accounts

2.6 Information from Third Parties

We may also receive information about you from third-party sources, such as:

• Food delivery platforms and aggregators
• Social media platforms (if you interact with our social media pages)
• Analytics providers and advertising networks
• Payment processors confirming transaction status

3. How We Use Your Information

We use the personal information we collect for a variety of lawful business purposes. The following describes the primary ways we use your data:

3.1 Service Provision and Order Fulfillment

The most fundamental use of your personal information is to provide you with our food services. This includes:

• Processing and fulfilling your food orders
• Coordinating delivery or pickup arrangements
• Managing your account and order history
• Processing payments and issuing receipts or invoices
• Communicating order status updates, confirmations, and delivery notifications
• Handling returns, refunds, or complaints related to your orders

3.2 Customer Communication

We use your contact information to communicate with you about matters relevant to your relationship with Punch Pizza, including:

• Responding to your inquiries, questions, or complaints
• Sending transactional emails such as order confirmations and receipts
• Notifying you of changes to our menu, policies, or terms of service
• Providing customer support and after-sales service

3.3 Marketing and Promotional Communications

With your consent (where required by law), or in accordance with applicable laws where we have a legitimate interest, we may use your contact information to:

• Send promotional emails, newsletters, and special offers
• Inform you about new menu items, seasonal promotions, and events
• Share loyalty program updates and rewards information
• Deliver targeted advertisements through digital platforms

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly at [email protected]. Opting out of marketing communications will not affect your receipt of transactional messages related to active orders or your account.

3.4 Analytics and Service Improvement

We analyze usage data to understand how customers interact with our website and services, and to improve our offerings. This includes:

• Identifying popular menu items and ordering trends
• Analyzing website traffic and navigation patterns
• Testing and optimizing website features, layout, and functionality
• Conducting internal research and business planning
• Measuring the effectiveness of our marketing campaigns

3.5 Legal Compliance and Security

We may process your personal information to meet our legal obligations and protect our business interests, including:

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from law enforcement or regulatory authorities
• Preventing, detecting, and investigating fraud, unauthorized activity, or security breaches
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Punch Pizza, our customers, and the public

4. Sharing Your Information with Third Parties

Punch Pizza does not sell your personal information to third parties for their own marketing purposes. However, we may share your information with carefully selected third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf. These service providers are authorized to use your personal information only as necessary to provide services to us, and are contractually obligated to maintain the confidentiality and security of your information. Such service providers may include:

• Payment processors: To securely handle payment card transactions
• Delivery and logistics providers: To fulfill food delivery orders
• Cloud hosting and IT services: To maintain and operate our website and systems
• Email and marketing platforms: To send promotional and transactional communications
• Analytics providers: To analyze website traffic and user behavior (e.g., Google Analytics)
• Customer support tools: To manage and respond to customer inquiries

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, or governmental request
• Enforce our Terms of Service or protect our legal rights
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of our users or members of the public
• Protect against legal liability

4.3 Business Transfers

In the event that Punch Pizza is involved in a merger, acquisition, asset sale, reorganization, or similar corporate transaction, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy, to the extent practicable.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, analytics, marketing, and business development purposes. This type of data sharing does not constitute disclosure of personal information.

5. Data Security

The security of your personal information is a top priority at Punch Pizza. We have implemented a comprehensive range of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, and destruction.

5.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols.
• Secure Payment Processing: We do not store full payment card numbers on our servers. All payment transactions are processed through PCI-DSS compliant third-party payment processors.
• Password Hashing: User account passwords are stored using strong cryptographic hashing algorithms and are never stored in plain text.
• Access Controls: We restrict access to personal information to only those employees, contractors, and service providers who have a legitimate business need to access it.
• Firewalls and Intrusion Detection: Our network infrastructure is protected by firewalls and security monitoring systems.

5.2 Organizational Security Measures

• Regular employee training on data privacy and security best practices
• Internal data handling policies and procedures
• Confidentiality agreements with employees and contractors who handle personal data
• Regular security audits and vulnerability assessments

5.3 Data Breach Response

In the event of a data breach that may compromise your personal information, we will take immediate steps to contain and address the breach. Where required by applicable law, we will notify affected individuals and relevant regulatory authorities within the legally mandated timeframe. Notification will be provided through email and/or prominent notice on our website.

6. Your Privacy Rights

Depending on your state of residence, you may have various rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

6.2 General Privacy Rights for All Users

Regardless of your location, we honor the following general rights for all our customers and website visitors:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct or update inaccurate personal information.
• Right to Erasure: You may request that we delete your personal information, subject to legal retention requirements.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
• Right to Opt Out of Marketing: You may unsubscribe from marketing communications at any time.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us using the following contact information:

• Email: [email protected]
• Website: eat-punchpizza.rest

We will respond to your request within 45 days of receipt. If we require additional time, we will notify you of the reason and extension period. We may need to verify your identity before processing your request to protect your privacy and ensure the security of your data. We will not charge a fee for processing verifiable consumer requests unless the request is excessive, repetitive, or manifestly unfounded.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website performance, and deliver relevant content and advertisements. This section provides an overview of our cookie practices.

7.1 What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They allow the website to remember your actions and preferences over a period of time, so you do not have to re-enter them each time you visit the site or navigate between pages.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the website to function properly. They enable core functionality such as security, session management, and accessibility. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often. This data is used to improve our website and user experience.
• Functionality Cookies: These cookies allow the website to remember choices you make (such as your username, language, or region) and provide enhanced, more personalized features.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements that are relevant to you and your interests. They also help limit the number of times you see an advertisement and measure the effectiveness of advertising campaigns.

7.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse all cookies, accept only certain types of cookies, or delete cookies that have already been set. Please note that disabling certain cookies may affect the functionality of our website and your ability to use certain features, including the online ordering system.

For more detailed information about cookies and how to manage them, please visit www.allaboutcookies.org.

To opt out of Google Analytics tracking, you can use the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8.1 Retention Periods

When personal information is no longer required for its original purpose and no legal retention obligation exists, we will securely delete or anonymize the data.

9. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, and we do not direct our services toward minors.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at [email protected].

Our practices are consistent with the requirements of the Children's Online Privacy Protection Act (COPPA), which governs the online collection of personal information from children under 13 in the United States.

10. International Data Transfers

Punch Pizza is a United States-based business, and your personal information is primarily collected, processed, and stored within the United States. However, some of our third-party service providers may operate in other countries, which means your personal information may be transferred to, stored, and processed in countries outside of your state of residence or outside the United States.

10.1 Data Transfer Safeguards

When we transfer your personal data internationally, we ensure that appropriate safeguards are in place to protect your information in a manner consistent with this Privacy Policy and applicable law. These safeguards may include:

• Data processing agreements with third-party service providers that include appropriate data protection clauses
• Ensuring that recipient countries provide an adequate level of data protection
• Implementing appropriate contractual and technical measures to protect your data during transfers

By using our services, you acknowledge and consent to the potential transfer of your personal information to the United States and other countries as described in this section.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or operated by Punch Pizza. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party websites you visit, as we have no control over their content or privacy practices and cannot be held responsible for their policies or actions.

Third-party services that may be linked from our website include, but are not limited to, social media platforms, food delivery aggregators, payment gateways, and review platforms. These services may collect information about you independently of our website.

12. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on our website with a revised "Last Updated" date
• Send a notification email to registered users where appropriate
• Display a prominent notice on our website homepage for a reasonable period following the update

Your continued use of our website or services after the effective date of any changes to this Privacy Policy constitutes your acceptance of those changes. We encourage you to periodically review this page to stay informed about how we protect your information.

13. California-Specific Disclosures

For California residents, the following additional disclosures are provided in accordance with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

13.1 Categories of Personal Information Collected in the Past 12 Months

• Identifiers (name, email address, IP address, phone number)
• Commercial information (purchase history, products ordered)
• Internet or other electronic network activity (browsing history, website interactions)
• Geolocation data (approximate location derived from IP address or delivery address)
• Inferences drawn from personal information to create a profile about preferences

13.2 Business Purpose for Collection

All categories of personal information listed above were collected for the following business purposes: order processing and fulfillment, customer service, internal analytics, marketing (with consent), fraud prevention, and legal compliance.

13.3 "Shine the Light" Law

California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for direct marketing purposes. If you are a California resident and wish to make such a request, please contact us at [email protected].

14. Filing a Complaint with a Regulatory Authority

If you believe that our processing of your personal information violates applicable privacy laws, you have the right to file a complaint with the relevant regulatory authority. In the United States, the following authorities are available to you:

14.1 Federal Trade Commission (FTC)

The FTC is the primary federal agency responsible for consumer protection and the enforcement of privacy-related matters under the FTC Act. You may submit a complaint to the FTC at:

• Website: reportfraud.ftc.gov
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

14.2 California Privacy Protection Agency (CPPA)

California residents may file complaints with the California Privacy Protection Agency, which enforces the CCPA/CPRA:

• Website: cppa.ca.gov
• Email: [email protected]

14.3 State Attorney General Offices

Depending on your state of residence, you may also have the right to file a complaint with your state's Attorney General office, many of which have consumer protection divisions that handle privacy-related complaints.

We encourage you to contact us first at [email protected] before filing a regulatory complaint, as we are committed to resolving privacy concerns directly and amicably.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact our privacy team using the information below:

We are committed to working with you to resolve any privacy concerns you may have. Upon receipt of your inquiry, we will acknowledge your request and aim to provide a substantive response within 45 days. For complex requests, this period may be extended by a further 45 days, and we will notify you accordingly.