Privacy Policy

Welcome to Punch Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website punchpizza-cafe.click, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy applies to all users of our website, mobile interfaces, and any related services offered by Punch Pizza. By accessing or using our platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. About Us

Punch Pizza operates as a food service business based in the United States. We are dedicated to delivering quality food experiences to our customers while maintaining the highest standards of privacy and data protection.

For any privacy-related inquiries, you may contact us directly at [email protected]. We take all privacy concerns seriously and will respond to inquiries in a timely and professional manner.

2. Information We Collect

We collect various types of information to provide, improve, and personalize our services. The categories of data we collect include personal identification information, usage data, device information, and data gathered through cookies and similar tracking technologies.

2.1 Personal Identification Information

When you interact with our website or services, we may collect personal information that can identify you directly or indirectly. This includes, but is not limited to:

• Full name — provided when creating an account, placing an order, or contacting us.
• Email address — used for order confirmations, account management, and communications.
• Phone number — used for order updates and delivery coordination.
• Delivery and billing address — collected when placing orders or setting up accounts.
• Payment information — such as credit or debit card numbers, processed securely through third-party payment processors. We do not store complete card numbers on our servers.
• Account credentials — including usernames and encrypted passwords if you create an account on our platform.
• Date of birth — collected in limited contexts to verify age eligibility.

2.2 Usage Data

We automatically collect certain information about how you interact with our website. This usage data may include:

• Pages visited, time spent on each page, and navigation paths.
• Search queries entered on our website.
• Items browsed or added to cart, even if a purchase was not completed.
• Order history, including items ordered, frequency, and total amounts spent.
• Clickstream data and interaction events such as button clicks and form submissions.
• Referring URLs — the page from which you arrived at our website.
• Error logs and performance metrics collected to troubleshoot issues.

2.3 Device and Technical Information

When you visit our website, we may collect technical information about the device you use, including:

• IP address and approximate geographic location derived from it.
• Browser type, version, and language settings.
• Operating system and device type (desktop, mobile, tablet).
• Screen resolution and display settings.
• Time zone and locale settings.
• Hardware identifiers and mobile device identifiers where applicable.

2.4 Information Collected Through Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar technologies to collect information about your behavior on our website. This enables us to improve site functionality, remember your preferences, and deliver relevant content. For full details, please refer to our Cookie Policy section below and our dedicated Cookie Policy page.

2.5 Information You Provide Voluntarily

You may choose to provide us with additional information through surveys, reviews, feedback forms, customer support interactions, or social media communications. Any information you voluntarily provide will be used in accordance with this Privacy Policy.

3. How We Use Your Information

Punch Pizza uses the data we collect for a range of purposes centered around providing you with exceptional food service and a seamless digital experience. Specifically, we use your information for the following purposes:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including coordinating with delivery partners.
• Managing your account and providing access to your order history and preferences.
• Sending transactional communications such as order confirmations, receipts, and delivery updates.
• Responding to customer service inquiries and resolving disputes.
• Verifying your identity and preventing fraudulent transactions.

3.2 Analytics and Service Improvement

• Analyzing user behavior on our website to understand how our services are used.
• Conducting research and data analysis to improve our menu offerings and user experience.
• Monitoring technical performance and identifying bugs or errors on our platform.
• Testing new features, layouts, and service improvements through A/B testing.
• Generating aggregated, anonymized reports on service usage trends.

3.3 Marketing and Promotional Communications

• Sending promotional emails, newsletters, and special offers to users who have opted in to marketing communications.
• Displaying targeted advertisements based on your browsing and ordering behavior, where permitted by law.
• Personalizing the content and promotions you see on our website based on your preferences and history.
• Notifying you of loyalty program rewards, discounts, and exclusive deals.

3.4 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) where applicable.
• Responding to lawful requests from law enforcement or regulatory authorities.
• Enforcing our Terms of Service and protecting the rights, property, and safety of Punch Pizza, our customers, and the public.
• Detecting, investigating, and preventing fraudulent activities, security breaches, or other illegal conduct.

4. Sharing Your Information with Third Parties

Punch Pizza does not sell your personal information to third parties. However, we may share your data with trusted third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage third-party companies and individuals to perform functions on our behalf. These service providers have access to your personal information only to perform their specific tasks and are contractually obligated not to disclose or use it for any other purpose. Categories of service providers include:

• Payment processors — to handle secure payment transactions (e.g., Stripe, Square, or similar platforms).
• Delivery and logistics partners — to coordinate the fulfillment and delivery of your orders.
• Cloud hosting and infrastructure providers — to store and process data securely.
• Email and communication service providers — to send transactional and marketing messages.
• Analytics providers — such as Google Analytics, to help us understand website performance and user behavior.
• Customer support tools — to manage and respond to customer inquiries efficiently.
• Marketing and advertising platforms — to deliver personalized advertisements on our behalf.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in good-faith belief that such action is necessary to:

• Comply with a legal obligation, subpoena, court order, or governmental regulation.
• Protect and defend the rights or property of Punch Pizza.
• Prevent or investigate potential wrongdoing in connection with our services.
• Protect the personal safety of users of our services or the public.
• Protect against legal liability.

4.3 Business Transfers

In the event that Punch Pizza is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any such change in ownership or control of your personal information, and outline your options in that event.

4.4 Aggregated and Anonymized Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other business purposes. This data does not constitute personal information under applicable privacy laws.

5. Data Security Measures

Punch Pizza takes the security of your personal information seriously. We implement a variety of technical, administrative, and physical security measures designed to protect your data from unauthorized access, alteration, disclosure, or destruction.

5.1 Technical Safeguards

• All data transmitted between your browser and our servers is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology.
• Payment information is processed through PCI DSS-compliant payment gateways, and we do not store complete payment card numbers on our systems.
• Access to personal data is restricted using role-based access controls and multi-factor authentication for internal systems.
• We conduct regular vulnerability assessments and penetration testing to identify and address security risks.
• Our servers are protected by firewalls, intrusion detection systems, and regular security patches.

5.2 Administrative Safeguards

• Employees and contractors who handle personal data are trained on data privacy and security best practices.
• Access to sensitive personal information is granted on a need-to-know basis only.
• We maintain data processing agreements with all third-party service providers who handle personal data.
• We review and update our security practices regularly in response to new threats and legal requirements.

5.3 Limitations

6. Your Privacy Rights

Depending on your location, particularly if you are a resident of California or another state with comprehensive privacy laws, you may have specific rights regarding your personal information. Punch Pizza respects and honors these rights in accordance with applicable law, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), as well as broader U.S. consumer protection frameworks enforced by the Federal Trade Commission (FTC) under the FTC Act.

6.1 Right to Know and Access

You have the right to request information about the personal data we have collected about you, including the categories of information collected, the purposes for which it is used, and the third parties with whom it has been shared. Upon a verified request, we will provide you with a copy of the personal information we hold about you.

6.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. We will take reasonable steps to verify and update the information promptly upon receiving a valid correction request.

6.3 Right to Deletion

You may request the deletion of personal information we have collected from you, subject to certain exceptions. We may retain data where we are legally required to do so, where it is necessary to complete a transaction you requested, or where its retention is permitted under applicable law.

6.4 Right to Data Portability

Where technically feasible, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider without hindrance from us.

6.5 Right to Opt Out of Sale or Sharing of Personal Information

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. Punch Pizza does not sell personal information. If this practice changes, we will update this policy and provide a clear opt-out mechanism.

6.6 Right to Limit Use of Sensitive Personal Information

California residents have the right to limit the use of sensitive personal information to what is necessary to provide the services they have requested. We limit our use of sensitive personal information to purposes permitted by law.

6.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you goods or services, charge you different prices, or provide you with a different level of service quality because you exercised a right under applicable privacy law.

6.8 How to Submit a Privacy Rights Request

To exercise any of your privacy rights, please contact us through one of the following methods:

• Email: [email protected]
• Website: punchpizza-cafe.click (via contact form)

We will acknowledge your request within 10 business days and fulfill it within 45 calendar days from receipt, as required under the CCPA/CPRA. If additional time is needed, we will notify you and may extend the response period by an additional 45 days.

We may need to verify your identity before processing your request. Verification may involve confirming information you have previously provided to us or through other reasonable methods.

7. Cookie Usage

Punch Pizza uses cookies and similar tracking technologies to enhance your experience on our website, understand how users interact with our services, and deliver relevant content and advertising.

7.1 Types of Cookies We Use

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling cookies may affect the functionality of certain features on our website. You may also opt out of targeted advertising through tools provided by the Digital Advertising Alliance (DAA) at optout.aboutads.info or the Network Advertising Initiative (NAI) at optout.networkadvertising.org.

For full details on our use of cookies, please refer to our dedicated Cookie Policy, available on our website at punchpizza-cafe.click.

8. Data Retention Periods

Punch Pizza retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

When your personal data is no longer required, we will securely delete or anonymize it in accordance with our data disposal procedures. If deletion is not immediately possible (for example, due to backup systems), we will securely store the data and isolate it from further processing until deletion is feasible.

9. Children's Privacy

Punch Pizza does not direct its website, marketing, or services to children under the age of 18. We do not knowingly solicit or collect personal information from individuals under 18 years old. If we become aware that we have inadvertently collected personal information from a minor under the age of 18 without appropriate parental consent, we will take immediate steps to delete such information from our records.

If you are a parent or legal guardian and believe your child has provided us with personal information without your knowledge or consent, please contact us immediately at [email protected]. We will cooperate fully with your request to remove the child's information from our systems.

Our practices are designed to comply with the Children's Online Privacy Protection Act (COPPA) and other applicable federal and state laws governing the protection of children's privacy online.

10. International Data Transfers

Punch Pizza is based in the United States, and our primary data processing activities take place within the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country or jurisdiction.

By using our services, you consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy and applicable U.S. laws.

When we transfer data internationally or engage service providers operating in other countries, we take reasonable measures to ensure that appropriate safeguards are in place to protect your personal information, consistent with the requirements of applicable law. These safeguards may include contractual data protection clauses, encryption, and other technical and organizational measures.

We comply with applicable U.S. federal and state privacy laws governing the transfer and processing of personal data. For users in states with specific privacy legislation, including California under the CCPA/CPRA, we honor all applicable rights regardless of where data processing occurs.

11. Third-Party Links and Services

Our website may contain links to third-party websites, services, social media platforms, or applications that are not owned or controlled by Punch Pizza. This Privacy Policy does not apply to those third-party services. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We strongly encourage you to review the privacy policies of every website or service you visit. The inclusion of a link on our website does not imply our endorsement of that third party's privacy practices.

Social media plugins and sharing buttons on our website (such as Facebook, Instagram, or Twitter/X) may allow those platforms to collect data about your visit to our site. Your use of these features is governed by the privacy policies of the respective social media companies.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you are entitled to specific rights under the California Consumer Privacy Act (CCPA) of 2018 and the California Privacy Rights Act (CPRA) of 2020. These rights are detailed in Section 6 above and include the right to know, access, correct, delete, and opt out of the sale or sharing of personal information.

California residents may also designate an authorized agent to make privacy rights requests on their behalf. The authorized agent must submit written proof of authorization, and we may still require you to verify your identity directly before processing the request.

For California residents, the categories of personal information we have collected in the preceding 12 months include identifiers, commercial information, internet or network activity, and inferences drawn from this information to create a profile. We do not sell or share personal information for monetary consideration.

To exercise your California privacy rights, please contact us at [email protected]. We will not discriminate against you for exercising your rights under the CCPA/CPRA.

13. How to File a Complaint with a Data Protection Authority

If you believe that Punch Pizza has failed to handle your personal information in accordance with applicable privacy laws, you have the right to file a complaint with the appropriate regulatory authority.

13.1 Federal Level (United States)

The Federal Trade Commission (FTC) enforces consumer protection and privacy laws at the federal level. You may file a complaint with the FTC at:

• FTC Website: www.ftc.gov
• FTC Consumer Helpline: 1-877-FTC-HELP (1-877-382-4357)
• FTC Online Complaint Portal: reportfraud.ftc.gov

13.2 California Residents

California residents may also submit privacy complaints to the California Privacy Protection Agency (CPPA), which enforces the CCPA and CPRA:

• CPPA Website: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

13.3 Other States

Residents of other U.S. states with applicable privacy laws (such as Virginia, Colorado, Connecticut, Texas, or others) may contact their respective state attorneys general or relevant regulatory bodies for assistance with privacy complaints.

Before filing a complaint with a regulatory authority, we encourage you to contact us directly at [email protected] so that we may have the opportunity to address your concern promptly and satisfactorily.

14. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to websites. At this time, there is no universally accepted standard for how websites should respond to DNT signals, and our website does not currently alter its data collection practices in response to DNT signals. We will continue to monitor developments in this area and update our practices if a standard is adopted.

California residents may also exercise their right to opt out of certain tracking activities under the CCPA/CPRA, as described in the California Privacy Rights section above and Section 6 of this policy.

15. Changes to This Privacy Policy

Punch Pizza reserves the right to update or modify this Privacy Policy at any time. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Notify users via email (where we have your email address on file) or through a prominent notice on our website.
• Seek your consent where required by applicable law before implementing material changes that affect how we process your personal information.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any modifications to this Privacy Policy constitutes your acknowledgment of the changes and your agreement to be bound by the updated terms.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how Punch Pizza handles your personal information, please do not hesitate to reach out to us. We are committed to addressing your privacy concerns promptly and thoroughly.

We aim to respond to all privacy-related inquiries within 10 business days of receipt. For formal data subject access requests, correction, or deletion requests, we will provide a full response within 45 calendar days as required by applicable law.

Thank you for trusting Punch Pizza with your personal information. We are dedicated to safeguarding your privacy and providing you with full transparency about how your data is used. Your trust is the foundation of everything we do.

This Privacy Policy was last reviewed and updated on June 5, 2026. It is effective as of the same date. All prior versions of this Privacy Policy are superseded by this document.