Privacy Policy

This Privacy Policy describes how Imos Pizza ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at pizzs-imos.rest, place orders, or otherwise interact with our services. We are committed to protecting your privacy and handling your personal data in a transparent, fair, and lawful manner consistent with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act.

Please read this Privacy Policy carefully before using our website or services. By accessing or using pizzs-imos.rest, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any part of this policy, please discontinue use of our website and services immediately.

For any questions, concerns, or requests related to this Privacy Policy, please contact us at:

1. Scope and Applicability

This Privacy Policy applies to all individuals who:

• Visit or browse our website at pizzs-imos.rest
• Create an account or user profile on our platform
• Place food orders through our online ordering system
• Subscribe to our email newsletters, promotions, or marketing communications
• Participate in surveys, contests, sweepstakes, or loyalty programs
• Contact our customer service team via email, phone, or online forms
• Interact with us through third-party platforms, social media, or partner delivery services

This policy does not apply to third-party websites, applications, or services that may be linked from our website. Those third parties maintain their own privacy policies, and we encourage you to review them before providing any personal information.

2. Information We Collect

We collect several categories of personal information depending on how you interact with our website and services. The information we collect falls into the following categories:

2.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name — used to personalize your account and process orders
• Email address — used for order confirmations, account management, and marketing communications
• Phone number — used for delivery coordination and customer support
• Billing and delivery address — used to fulfill and deliver your food orders
• Date of birth — used for age verification and birthday promotions (where applicable)
• Username and password — used to secure and manage your account

2.2 Financial and Payment Information

When you make a purchase through our platform, we collect:

• Credit or debit card information (processed securely through third-party payment processors)
• Billing address associated with your payment method
• Transaction history, including order amounts, dates, and items purchased

Please note that we do not store full credit card numbers on our servers. Payment card data is encrypted and processed by PCI-DSS compliant third-party payment processors such as Stripe or similar services.

2.3 Order and Transaction Data

We collect information about the orders you place through our platform, including:

• Menu items selected, quantities, and customizations
• Order dates, times, and fulfillment method (delivery or pickup)
• Special instructions or dietary preferences you provide
• Order history and frequency of purchases
• Loyalty points, rewards, and redemption history

2.4 Usage and Technical Data

When you visit our website, we automatically collect certain technical information, including:

• Internet Protocol (IP) address
• Browser type, version, and language settings
• Operating system and device type (desktop, mobile, tablet)
• Pages visited, time spent on each page, and navigation paths
• Referring URLs (the website that directed you to ours)
• Search queries entered on our website
• Clickstream data and interaction logs
• Time zone settings and geographic location (at city or region level)

2.5 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. This includes session cookies, persistent cookies, and third-party analytics cookies. Please refer to Section 8 of this Privacy Policy for detailed information about our cookie practices.

2.6 Communications Data

When you communicate with us, we may collect and retain:

• Content of emails, chat messages, or contact form submissions
• Customer service inquiry details and resolution records
• Feedback, reviews, and survey responses you provide
• Records of phone calls where legally permitted

2.7 Information from Third Parties

We may also receive personal information about you from third-party sources, including:

• Social media platforms if you choose to log in or connect your account
• Third-party delivery platforms (such as DoorDash, Uber Eats, Grubhub, or similar services)
• Advertising and analytics partners
• Publicly available sources and data aggregators

3. How We Use Your Information

We use the personal information we collect for the following purposes, each supported by a legitimate legal basis under applicable privacy law:

3.1 Service Provision and Order Fulfillment

• Processing, preparing, and delivering your food orders
• Creating and managing your customer account
• Coordinating delivery logistics and communicating estimated delivery times
• Processing payments and issuing receipts
• Managing loyalty programs, rewards, and promotional credits
• Responding to your inquiries, complaints, and customer service requests

3.2 Website and Service Improvement

• Analyzing usage patterns to improve website functionality and user experience
• Identifying and resolving technical issues, errors, and bugs
• Conducting A/B testing and feature development
• Optimizing our menu, pricing, and promotional offerings based on aggregate customer behavior
• Developing new features, services, and product offerings

3.3 Marketing and Promotional Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required)
• Personalizing marketing communications based on your order history and preferences
• Displaying targeted advertisements on our website and third-party platforms
• Retargeting campaigns to re-engage visitors who have previously interacted with our website
• Notifying you about new menu items, limited-time offers, and seasonal promotions

You have the right to opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send, or by contacting us directly at [email protected].

3.4 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Detecting, investigating, and preventing fraud, unauthorized access, and other illegal activities
• Enforcing our Terms of Service and other agreements
• Responding to lawful requests from law enforcement or government authorities
• Protecting the rights, safety, and property of Imos Pizza, our customers, and the public

3.5 Analytics and Research

• Performing internal research and data analytics to understand customer preferences
• Generating aggregate, anonymized statistical reports about website traffic and order trends
• Evaluating the effectiveness of our marketing campaigns and promotional activities

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their independent marketing or commercial purposes. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering services to you. These providers are contractually obligated to protect your information and may only use it as directed by us. Service providers include:

• Payment processors — to securely process credit and debit card transactions
• Delivery platforms and logistics partners — to coordinate and fulfill food deliveries
• Email marketing platforms — to send promotional communications and order confirmations
• Analytics providers — such as Google Analytics, to analyze website usage patterns
• Cloud hosting and IT infrastructure providers — to store and manage our data securely
• Customer relationship management (CRM) systems — to manage customer accounts and communications
• Fraud prevention services — to detect and prevent unauthorized transactions

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Enforce our Terms of Service or other contractual agreements
• Protect the rights, property, or safety of Imos Pizza, our users, or the public
• Prevent or investigate potential wrongdoing, fraud, or security incidents

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, reorganization, or bankruptcy, your personal information may be transferred to the acquiring entity as part of the transaction. We will provide notice before your personal information is subject to a different privacy policy as a result of such a transfer.

4.4 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes. This type of information is not subject to the protections of this Privacy Policy.

4.5 With Your Consent

We may share your personal information with other parties when we have your explicit consent to do so. You may withdraw your consent at any time by contacting us at [email protected].

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards to protect your data from unauthorized access, use, alteration, or disclosure. Our security measures include:

5.1 Technical Safeguards

• SSL/TLS encryption — all data transmitted between your browser and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols
• Data encryption at rest — sensitive personal and financial data stored on our servers is encrypted
• Firewalls and intrusion detection systems — protecting our network infrastructure from unauthorized access
• Multi-factor authentication — required for administrative access to our systems
• Regular security audits and vulnerability assessments — to identify and address potential security weaknesses
• PCI-DSS compliance — for all payment card data processing

5.2 Administrative Safeguards

• Access controls limiting employee access to personal information on a need-to-know basis
• Employee training on data protection, privacy best practices, and information security
• Contractual data protection obligations imposed on all third-party service providers
• Internal privacy and security policies and procedures

5.3 Data Breach Response

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with applicable law, including state data breach notification laws. Notifications will be issued without undue delay and will include information about the nature of the breach, the categories of data affected, and steps we are taking to address the incident.

Despite our best efforts, no security system is completely impenetrable. We cannot guarantee the absolute security of your information and encourage you to use strong passwords, keep your login credentials confidential, and notify us immediately if you suspect any unauthorized access to your account.

6. Your Privacy Rights

Depending on your state of residence within the United States, you may have various rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

6.1 Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

6.2 Rights Under Other State Privacy Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with comprehensive privacy legislation may also have similar rights, including the right to access, correct, delete, and port their personal data, as well as the right to opt out of targeted advertising and the sale of personal data. We will honor these rights to the extent required by applicable state law.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable consumer request by:

• Email: [email protected]

We will acknowledge receipt of your request within 10 business days and respond to your request within 45 days. If we require additional time, we will notify you of the extension and the reasons for it. We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide written proof of authorization, and we may require direct verification from you to confirm the agent's authority.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our standard retention periods are as follows:

When personal data is no longer required, we securely delete, anonymize, or destroy it in accordance with our data retention and disposal policies.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising. This section provides a summary of our cookie practices.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly. These include session management, security, and load-balancing cookies. These cannot be disabled.
• Performance and Analytics Cookies: Collect information about how visitors use our website, including pages visited and errors encountered. We use tools such as Google Analytics for this purpose.
• Functional Cookies: Remember your preferences and settings, such as your saved cart contents, language preferences, and login status.
• Marketing and Targeting Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns. These may be set by us or by third-party advertising partners.

8.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is set. Please note that disabling certain cookies may affect the functionality of our website and limit your ability to use certain features, such as online ordering.

For more detailed information about the specific cookies we use and how to manage them, please refer to our full Cookie Policy available on our website.

You may also opt out of interest-based advertising by visiting the Network Advertising Initiative's opt-out page at www.networkadvertising.org/choices or the Digital Advertising Alliance's opt-out tool at www.aboutads.info/choices.

9. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect personal information from children under the age of 18. If you are under 18, please do not use our website, create an account, or submit any personal information to us.

If we become aware that we have inadvertently collected personal information from a child under 18 without appropriate parental consent, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Our practices are consistent with the Children's Online Privacy Protection Act (COPPA) and other applicable laws protecting children's online privacy.

10. International Data Transfers

Imos Pizza is based in the United States, and all data collected through our website is primarily processed and stored within the United States. If you are accessing our website from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our website and services, you consent to the transfer of your personal information to the United States for the purposes described in this Privacy Policy. We take appropriate steps to ensure that any international data transfers are conducted securely and in compliance with applicable privacy laws, including the implementation of appropriate contractual safeguards where required.

If you have questions about international data transfers or the safeguards we have in place, please contact us at [email protected].

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services, including social media platforms, delivery partner apps, and promotional websites. These third-party services operate independently and are not subject to this Privacy Policy. We do not control the privacy practices of third-party websites and are not responsible for how they collect, use, or share your personal information.

We encourage you to review the privacy policies of any third-party services you access through links on our website. Your interactions with third-party platforms, including any information you provide directly to them, are governed by their respective privacy policies.

12. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our website does not currently respond to DNT signals from browsers. However, you can manage your tracking preferences through our cookie consent settings and the opt-out options described in Section 8 of this Privacy Policy.

If you are a California resident, please note that California law requires us to disclose whether we honor "Do Not Track" signals. As stated above, we do not currently honor DNT signals but provide alternative privacy controls for your use.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website alerting visitors to the changes
• Send an email notification to registered users (where required by law)

Your continued use of our website or services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the changes, please discontinue use of our website and contact us to request deletion of your personal information.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.

14. How to File a Privacy Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the appropriate data protection or consumer protection authority. Below are the relevant regulatory bodies based on your jurisdiction:

14.1 Federal Regulatory Authority

For general consumer protection and privacy complaints, you may contact the Federal Trade Commission (FTC):

14.2 California Residents

California residents may also file complaints with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

14.3 Other State Residents

Residents of other states may contact their respective state Attorney General's offices to file privacy-related complaints. We encourage you to reach out to us first so that we have the opportunity to resolve your concerns directly.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact our privacy team. We are committed to addressing your inquiries promptly and thoroughly.

We will respond to all privacy inquiries within 10 business days. For requests related to your personal data rights (such as access, deletion, or correction), please allow up to 45 days for a full response, as required by applicable law.