Privacy Policy

Effective Date: June 3, 2026  |  Last Updated: June 3, 2026

1. Introduction and Who We Are

Welcome to Pizzana. We are a food service business operating in the United States, committed to protecting your privacy and handling your personal information with transparency, integrity, and care. This Privacy Policy applies to all personal information we collect through our website pizzana-cafe.digital, mobile interactions, in-store services, online ordering platforms, and any other touchpoints through which you interact with us.

At Pizzana, we understand that your personal information is valuable and that you trust us to handle it responsibly. We take that trust seriously. This Privacy Policy is designed to help you understand exactly what data we collect, why we collect it, how we use it, who we share it with, and what rights you have over your own information.

This policy complies with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), the CAN-SPAM Act, and other relevant federal and state regulations governing the collection and use of personal data.

1.1 Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, you may contact us at:

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we collect are described below.

2.1 Personal Identification Information

When you create an account, place an order, make a reservation, sign up for our newsletter, or contact us for any reason, we may collect the following personal identification information:

• Full name
• Email address
• Phone number
• Billing and shipping address (including street address, city, state, ZIP code)
• Date of birth (where provided, for promotional purposes or age verification)
• Username and password for account access
• Profile picture or avatar (if voluntarily uploaded)

2.2 Payment and Transaction Information

When you place an order or complete a purchase through our website or in-store systems, we collect transaction-related information, including:

• Payment card details (processed securely through PCI-DSS compliant third-party payment processors — we do not store full card numbers)
• Order history and purchase records
• Billing information and invoices
• Transaction identifiers and confirmation numbers
• Refund and dispute records

2.3 Usage Data and Online Activity

When you visit our website pizzana-cafe.digital, we automatically collect certain technical and usage information, including:

• IP address
• Browser type and version
• Operating system and device type
• Referring URLs and exit pages
• Pages visited, time spent on pages, and navigation paths
• Search queries entered on our website
• Date and time of visits
• Clickstream data and interaction logs

2.4 Device Information

We may collect information about the devices you use to access our website, including:

• Device identifiers (such as advertising IDs where applicable)
• Hardware model and specifications
• Mobile network information
• Time zone settings
• Language preferences
• Screen resolution and display settings

2.5 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. For a full description of how we use cookies, please refer to Section 8 of this policy and our separate Cookie Policy available on our website.

2.6 Communications and User-Generated Content

We collect information you provide when you communicate with us directly, including:

• Messages and inquiries submitted via contact forms or email
• Customer service communications (phone, email, chat)
• Reviews, ratings, and feedback you submit about our food or services
• Comments or posts on our social media pages
• Survey responses and contest entries

2.7 Location Information

With your permission, we may collect precise or approximate geolocation data to facilitate delivery services, show you nearby locations, or provide location-specific promotions. You can disable location sharing through your device settings at any time.

2.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (when you connect your account or interact with our social pages)
• Third-party delivery platforms or online ordering services we partner with
• Analytics providers and advertising partners
• Publicly available databases

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes, as described below. We only use your information in ways that are consistent with your reasonable expectations and applicable law.

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including delivery and pickup
• Creating and managing your user account
• Processing payments and issuing receipts and invoices
• Managing reservations and table bookings
• Providing customer support and responding to inquiries or complaints
• Facilitating refunds, exchanges, or dispute resolutions

3.2 Website Improvement and Analytics

• Analyzing how users interact with our website to improve functionality and user experience
• Conducting internal research and analytics to understand customer behavior and preferences
• Diagnosing and fixing technical issues, bugs, and security vulnerabilities
• Monitoring website performance and uptime
• Developing and testing new features and services

3.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, and special offers about our menu, deals, and events — with your consent where required by law
• Displaying personalized advertisements on our website and on third-party platforms
• Conducting loyalty programs, contests, surveys, and sweepstakes
• Retargeting campaigns based on your browsing or purchase history

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send, or by contacting us at [email protected].

3.4 Legal Compliance and Safety

• Complying with applicable laws, regulations, and legal obligations
• Responding to lawful requests from law enforcement or government agencies
• Enforcing our Terms of Service and other agreements
• Detecting, investigating, and preventing fraudulent transactions, abuse, or security threats
• Protecting the rights, property, and safety of Pizzana, our customers, and the public

3.5 Business Operations

• Managing internal business operations, including accounting and auditing
• Planning and managing staffing, inventory, and supply chain
• Evaluating and improving our menu offerings and service quality
• Facilitating corporate transactions such as mergers, acquisitions, or business restructuring

4. How We Share Your Information

We do not sell your personal information to third parties for their own marketing purposes. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our business and delivering services to you. These providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate data security measures. Categories of service providers include:

• Payment processors: To securely process your payment transactions
• Delivery and logistics partners: To fulfill delivery orders to your location
• Cloud hosting and IT infrastructure providers: To maintain our website and data systems
• Analytics providers: Such as Google Analytics, to help us understand website usage
• Email marketing platforms: To send you communications and promotional content
• Customer support tools: To manage and respond to your inquiries
• Advertising networks: To serve relevant advertisements on our behalf

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required by law or in good-faith belief that such disclosure is necessary to:

• Comply with a subpoena, court order, or other legal process
• Respond to requests from government authorities, including law enforcement agencies
• Enforce our policies and agreements
• Protect against legal liability or investigate potential legal violations

4.3 Business Transfers

In the event that Pizzana undergoes a merger, acquisition, sale of assets, bankruptcy, or other corporate transaction, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email or a prominent notice on our website before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with additional third parties when you have given us explicit consent to do so, such as when you participate in a joint promotion or partner offer.

4.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or other business purposes.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards to protect it from unauthorized access, disclosure, alteration, or destruction.

5.1 Security Measures We Implement

• Encryption: All data transmitted between your browser and our website is encrypted using SSL/TLS protocols (HTTPS). Sensitive data such as payment information is encrypted both in transit and at rest.
• Access Controls: We restrict access to personal information to authorized employees and service providers who need it to perform their job functions.
• Secure Payment Processing: We use PCI-DSS compliant payment processors and do not store complete credit or debit card numbers on our servers.
• Regular Security Audits: We conduct periodic security reviews and vulnerability assessments of our systems and infrastructure.
• Employee Training: Our staff receives regular training on data privacy best practices and security awareness.
• Incident Response Plan: We maintain a documented data breach response plan to promptly address and mitigate any security incidents.

5.2 Limitations of Security

While we use commercially reasonable security measures, no method of data transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your information. In the event of a data breach that affects your rights and freedoms, we will notify you and, where required, relevant authorities as mandated by applicable law.

6. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, our business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain legal exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. While we do not sell personal information in the traditional sense, you may opt out of certain data sharing for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to what is necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge different prices, or provide a lesser quality of service because you exercised your privacy rights.

6.2 General Privacy Rights (All US Residents)

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to our legal obligations to retain certain records.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal information in a structured, commonly used, machine-readable format.
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, you may contact us through any of the following methods:

• Email: [email protected]
• Website: pizzana-cafe.digital

We will respond to verified requests within 45 days of receipt, as required by California law. In complex cases, we may extend this period by an additional 45 days, in which case we will notify you of the extension. We may need to verify your identity before processing your request. We will not charge a fee for exercising your rights unless your requests are excessive or repetitive.

6.4 Authorized Agents

California residents may designate an authorized agent to submit privacy rights requests on their behalf. We may require the authorized agent to provide written proof of authorization and may require you to verify your identity directly with us before processing the request.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, resolve disputes, and enforce our agreements. Our general data retention practices are as follows:

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data destruction procedures.

8. Cookies and Tracking Technologies

Our website pizzana-cafe.digital uses cookies and similar tracking technologies to enhance your experience, analyze website traffic, and deliver targeted content and advertisements.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the website to function properly. They enable core features such as shopping cart functionality, user authentication, and security. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect anonymous information about how visitors use our website, such as which pages are visited most frequently. We use this data to improve website performance and user experience.
• Functional Cookies: These cookies remember your preferences and settings (such as language and location) to provide a more personalized experience.
• Marketing and Advertising Cookies: These cookies are used to track your browsing activity and display relevant advertisements both on our website and on third-party platforms. They may be set by us or by third-party advertising partners.

8.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings or through our cookie consent tool available on our website. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders or access certain features.

For more detailed information about the cookies we use, their purposes, and how to manage them, please review our full Cookie Policy available at pizzana-cafe.digital.

8.3 Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your browsing activity not be tracked. Currently, there is no uniform industry standard for responding to DNT signals. At this time, our website does not respond differently to DNT signals, though we respect global privacy controls (GPC) where required under California law (CPRA).

9. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, and we do not target our services to minors.

If you are a parent or guardian and you believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will take steps to promptly delete such information from our records.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verifiable parental consent. Individuals between the ages of 13 and 17 may use our website only with appropriate parental supervision and consent. We encourage parents to monitor their children's online activity and to review our privacy practices with them.

10. International Data Transfers

Pizzana is based in the United States, and your personal information is primarily collected, stored, and processed within the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to and processed in the United States, which may have different data protection laws than those in your country of residence.

When we transfer personal information internationally (for example, to cloud hosting providers or analytics services with servers in other countries), we take appropriate measures to ensure that your information receives an adequate level of protection, including entering into data processing agreements with applicable data protection clauses.

By using our website and services, you consent to the transfer of your information to the United States and to the processing of your information in accordance with this Privacy Policy.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated by Pizzana. This Privacy Policy does not apply to those third-party platforms. We are not responsible for the privacy practices of third parties, and we encourage you to review the privacy policies of any third-party websites you visit.

Third-party services that may be integrated with or linked from our website include, but are not limited to:

• Social media platforms (e.g., Facebook, Instagram, Twitter/X)
• Third-party delivery applications
• Online review platforms
• Payment gateway providers
• Mapping and navigation services

12. Marketing Communications and Your Choices

We may send you promotional communications about our menu, seasonal offerings, loyalty programs, events, and special discounts. We will only send you marketing communications where we have a legal basis to do so, such as your express consent or our legitimate business interests where permitted by law.

12.1 Email Marketing

We comply with the CAN-SPAM Act in all email marketing communications. Every marketing email we send includes:

• A clear identification that the message is a commercial communication
• A valid physical postal address
• A clear and easy-to-use unsubscribe mechanism

You can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any marketing email, or by emailing us at [email protected]. Please note that even after unsubscribing from marketing communications, you may still receive transactional emails related to your orders and account.

12.2 Text Message Marketing (SMS)

If you have opted in to receive text message promotions from us, you may opt out at any time by replying "STOP" to any text message we send you. Standard message and data rates may apply.

12.3 Interest-Based Advertising

We participate in interest-based advertising programs and may use cookies and other tracking technologies to deliver targeted advertisements. You may opt out of interest-based advertising through industry opt-out tools such as the Digital Advertising Alliance's (DAA) opt-out tool at www.aboutads.info or the Network Advertising Initiative (NAI) opt-out tool at www.networkadvertising.org.

13. Compliance with US Privacy Laws

Pizzana is committed to complying with all applicable federal and state privacy laws in the United States, including:

13.1 Federal Trade Commission Act (FTC Act)

Under the FTC Act, we are prohibited from engaging in unfair or deceptive acts or practices. Our privacy representations in this policy are accurate and reflect our actual data practices. We do not make false or misleading statements about our data collection, use, or sharing practices.

13.2 California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

For California residents, we honor all rights afforded under the CCPA and CPRA, as described in Section 6.1 of this policy. California residents may also submit privacy rights requests via our designated contact channels. We maintain a record of privacy rights requests and responses as required by law.

13.3 Other State Privacy Laws

We monitor and comply with other state privacy laws as they come into effect, including laws in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states that have enacted or may enact consumer privacy legislation. If you reside in a state with specific privacy rights, we will honor those rights in accordance with applicable law.

14. How to File a Privacy Complaint

If you believe that we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to contact us first so that we can address your concerns directly.

14.1 Contact Us Directly

Please submit your privacy complaint or concern to:

• Email: [email protected]
• Website: pizzana-cafe.digital

We will acknowledge your complaint within 5 business days and aim to provide a substantive response within 30 days.

14.2 File a Complaint with the Federal Trade Commission (FTC)

If you are not satisfied with our response, or if you believe that we have violated applicable US consumer protection or privacy laws, you may file a complaint with the Federal Trade Commission (FTC):

14.3 California Residents — California Attorney General

California residents may also submit complaints related to CCPA violations to the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

15. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website notifying users of the change
• Send an email notification to registered users where required or appropriate

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after we post changes constitutes your acceptance of the updated policy.

16. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the United States and the applicable laws of the state in which Pizzana operates, without regard to conflict of law principles. Any disputes arising from this Privacy Policy shall be resolved in accordance with our Terms of Service.

17. Contact Information for Privacy Inquiries

For all privacy-related questions, requests, complaints, or inquiries, please do not hesitate to reach out to us. We are dedicated to protecting your privacy and will respond to all communications promptly and professionally.

This Privacy Policy was last reviewed and updated on June 3, 2026. Version 1.0.