Privacy Policy

This Privacy Policy describes how Imos Pizza ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects your personal information when you visit our website at imosspizz.digital, place orders, use our services, or otherwise interact with us. Please read this policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described herein.

We are committed to protecting your privacy and handling your personal information with transparency, integrity, and respect. This Privacy Policy complies with applicable United States federal and state privacy laws, including the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant consumer protection regulations.

1. About Us

Imos Pizza operates the website located at imosspizz.digital and provides food ordering, delivery, and related services to customers across the United States. For all privacy-related inquiries, you may reach us using the contact information provided at the end of this document.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information we collect through:

• Our website at imosspizz.digital
• Online food ordering and delivery services
• Customer service interactions via phone, email, or live chat
• Marketing communications, newsletters, and promotional offers
• Loyalty programs, contests, sweepstakes, and surveys
• Mobile applications associated with our brand
• Third-party platforms or social media where we have an official presence

This policy does not apply to third-party websites, applications, or services that may be linked from our website. We encourage you to review the privacy policies of any third-party sites you visit.

3. Information We Collect

We collect various types of information in connection with your use of our services. The categories of personal information we may collect include, but are not limited to, the following:

3.1 Information You Provide Directly

When you interact with us, you may provide us with the following information:

• Identification Information: Your full name, date of birth (where required for age verification), and username or display name.
• Contact Information: Your email address, phone number, home address, and delivery address(es).
• Account Credentials: Passwords and security questions used to secure your account.
• Payment Information: Credit card numbers, debit card numbers, billing addresses, and other financial information necessary to process your orders. Please note that payment card data is processed through secure, PCI-DSS-compliant third-party payment processors and is not stored on our servers.
• Order Information: Details about the food items you order, special instructions, dietary preferences, and order history.
• Communications: Information you share when you contact our customer service team, respond to surveys, submit reviews, or participate in promotional activities.
• User-Generated Content: Reviews, ratings, comments, photos, and other content you voluntarily submit.

3.2 Information Collected Automatically

When you visit our website or use our digital services, we automatically collect certain technical and usage information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Log Data: IP address, access times and dates, pages viewed, time spent on pages, links clicked, and referring URLs.
• Location Data: General geographic location derived from your IP address, and, with your consent, more precise location data from your device's GPS or location services.
• Usage Data: Information about how you interact with our website, including navigation paths, search queries, menu items viewed, cart activity, and checkout behavior.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, local storage, and similar tracking technologies (see Section 8 for more details).

3.3 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media account to our services or log in via a social media single sign-on feature, we may receive profile information such as your name, email address, and profile photo.
• Payment Processors: Transaction confirmation and fraud prevention signals from our payment processing partners.
• Delivery Partners: Order fulfillment and delivery status information from third-party delivery service providers.
• Analytics Providers: Aggregated and de-identified insights about how users interact with our website from analytics service providers.
• Marketing Partners: Information that helps us serve you relevant advertising, subject to applicable consent requirements.

3.4 Sensitive Personal Information

In limited circumstances, we may collect sensitive personal information such as payment card data and, where applicable, dietary or allergy information that you voluntarily provide with your orders. We collect sensitive personal information only to the extent necessary to fulfill the purpose for which it was provided and handle it with the highest level of care and security.

4. How We Use Your Information

We use the personal information we collect for a variety of business and operational purposes. These purposes include:

4.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including coordinating delivery or pickup arrangements.
• Creating, maintaining, and managing your account on our platform.
• Processing payments and preventing fraudulent transactions.
• Communicating with you about your orders, account status, and service updates.
• Providing customer support and resolving disputes or complaints.

4.2 Improving Our Services

• Analyzing usage patterns to understand how customers interact with our website and services.
• Conducting research and development to improve our menu offerings, website functionality, and overall user experience.
• Testing new features, products, and services before a full rollout.
• Monitoring and analyzing trends, usage, and activities to enhance performance and fix technical issues.

4.3 Marketing and Promotions

• Sending you promotional emails, newsletters, offers, and discounts, where you have opted in or where permitted by applicable law.
• Personalizing your experience on our website by showing you content, menu recommendations, and promotions that may be relevant to your interests and order history.
• Administering contests, sweepstakes, loyalty programs, and other promotional activities.
• Serving you targeted advertisements on our website and third-party platforms, based on your browsing history and preferences, subject to your consent where required.

4.4 Legal and Compliance Purposes

• Complying with applicable federal and state laws, regulations, and legal obligations.
• Enforcing our Terms of Service and other policies.
• Protecting the rights, property, and safety of our company, customers, and the public.
• Responding to lawful requests from government authorities, regulatory bodies, and law enforcement agencies.
• Maintaining records for tax, accounting, and audit purposes.

4.5 Business Operations

• Evaluating or conducting a merger, acquisition, restructuring, dissolution, or sale of all or part of our business assets.
• Aggregating and anonymizing data for industry research, benchmarking, and business reporting.

5. Legal Basis for Processing

As a business operating in the United States, we process your personal information based on the following legal grounds, consistent with the FTC Act, CCPA/CPRA, and other applicable laws:

• Contractual Necessity: Processing necessary to fulfill your orders and deliver our services to you.
• Legitimate Business Interests: Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring security, provided these interests are not overridden by your rights.
• Legal Obligation: Processing required to comply with applicable laws and regulations.
• Consent: Processing based on your express consent, such as for marketing communications and certain uses of cookies and tracking technologies. You may withdraw your consent at any time.

6. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own commercial purposes, except as described in this Privacy Policy. We may share your information in the following circumstances:

6.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf. These providers are contractually obligated to use your information only to provide services to us and in accordance with our instructions. Categories of service providers include:

• Payment processing companies (e.g., credit card processors and fraud detection services)
• Food delivery logistics and courier services
• Cloud hosting and data storage providers
• Email marketing and communication platforms
• Analytics and website performance providers
• Customer relationship management (CRM) software providers
• IT security and cybersecurity services

6.2 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any such change in ownership or control, as well as your choices regarding your information.

6.3 Legal Requirements and Safety

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, or valid legal process (such as a subpoena or government request).
• Enforce our Terms of Service or other agreements.
• Protect the rights, property, or safety of Imos Pizza, our customers, employees, or the public.
• Detect, prevent, or address fraud, security breaches, or technical issues.

6.4 With Your Consent

We may share your information with third parties for other purposes with your explicit consent.

6.5 Aggregated and De-identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

7. Data Security

Protecting your personal information is a top priority for Imos Pizza. We implement a comprehensive set of administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers. Sensitive data stored in our systems is encrypted at rest.
• Access Controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions. Employees are required to maintain strict confidentiality.
• Payment Security: All payment transactions are processed through PCI-DSS-compliant payment gateways. We do not store complete payment card numbers on our systems.
• Firewalls and Intrusion Detection: We employ firewalls, intrusion detection and prevention systems, and regular security monitoring to safeguard our network infrastructure.
• Regular Security Audits: We conduct periodic security assessments, penetration testing, and vulnerability scans to identify and address potential risks.
• Employee Training: Our team members receive regular training on data privacy best practices and information security protocols.
• Incident Response: We maintain a data breach response plan and will notify affected individuals and relevant authorities in the event of a data breach, as required by applicable law.

While we take significant steps to secure your information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

8. Cookies and Tracking Technologies

Our website uses cookies, web beacons, pixel tags, local storage objects, and similar tracking technologies to enhance your browsing experience, analyze website performance, and deliver relevant content and advertising. Cookies are small text files placed on your device when you visit a website.

8.1 Types of Cookies We Use

8.2 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders or access certain features. You may also opt out of interest-based advertising through the Digital Advertising Alliance at www.aboutads.info or the Network Advertising Initiative at www.networkadvertising.org.

For more detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy, available on our website at imosspizz.digital.

9. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. We are committed to honoring these rights in accordance with applicable United States privacy laws.

9.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purposes for which we collected it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions permitted by law (e.g., information needed to complete your transactions or comply with legal obligations).
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell personal information as traditionally defined, but we may share data with advertising partners. You may opt out by visiting our "Do Not Sell or Share My Personal Information" link on our website.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to purposes necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level of service because you exercised your privacy rights.

9.2 General Privacy Rights for All U.S. Residents

Regardless of your state of residence, we provide all users with the following options:

• Right of Access: You may request access to the personal information we hold about you by contacting us at [email protected].
• Right to Correction: You may update or correct your personal information by logging into your account or contacting our customer service team.
• Right to Deletion: You may request that we delete your account and associated personal information, subject to legal and operational limitations.
• Right to Data Portability: Where technically feasible, you may request a copy of your personal information in a structured, machine-readable format.
• Right to Opt-Out of Marketing: You may unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly.

9.3 How to Submit a Privacy Rights Request

To exercise any of the rights described above, please contact us using one of the following methods:

We will acknowledge receipt of your request within 10 business days and respond to your request within 45 calendar days. If we require additional time, we will notify you of the reason and extension period. We may need to verify your identity before processing your request to protect your information from unauthorized access. We may ask you to provide information sufficient to verify that you are the person whose information we hold.

You may also designate an authorized agent to submit requests on your behalf. If you use an authorized agent, we may require proof of your written authorization and may verify your identity directly.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The following retention guidelines generally apply:

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention and destruction policies.

11. Children's Privacy

Our website and services are intended for individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, or from minors under the age of 18 without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA) and applicable state laws.

If you are under 18 years of age, please do not use our website or submit any personal information through our services. If we learn that we have inadvertently collected personal information from a child under 13 without appropriate parental consent, we will take immediate steps to delete that information from our records.

If you are a parent or legal guardian and believe that your child has provided us with personal information without your consent, please contact us at [email protected] and we will take appropriate steps to remove the information and terminate the child's account, if applicable.

12. International Data Transfers

Imos Pizza is based in the United States, and your personal information is primarily processed and stored on servers located within the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our services and providing us with your personal information, you acknowledge and consent to the transfer of your information to the United States. We take appropriate measures to ensure that any international transfers of personal data comply with applicable law and that your information remains protected according to the standards described in this Privacy Policy.

Where we engage service providers or partners located outside the United States, we implement contractual protections and data transfer mechanisms consistent with applicable privacy regulations to safeguard your information.

13. Third-Party Links and Services

Our website may contain links to third-party websites, applications, and services, including social media platforms, delivery partner portals, and external payment processors. These third-party services operate independently and are governed by their own privacy policies. We are not responsible for the privacy practices of these third parties and encourage you to review their privacy policies before providing any personal information.

The inclusion of a link on our website does not imply our endorsement of the linked website or its privacy practices.

14. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your browsing not be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our website does not currently respond to Do Not Track signals. However, you may opt out of certain tracking activities as described in Section 8 (Cookies and Tracking Technologies) and Section 9 (Your Privacy Rights) of this Privacy Policy.

California residents may also exercise their rights under the California "Shine the Light" law (California Civil Code Section 1798.83), which allows consumers to request information about the disclosure of personal information to third parties for direct marketing purposes. To submit such a request, please contact us at [email protected].

15. Marketing Communications and Opt-Out

With your consent, or where permitted by applicable law, we may send you promotional emails, text messages (SMS), push notifications, and other marketing communications about our products, services, special offers, and events.

Email Marketing: You may opt out of receiving marketing emails at any time by clicking the "unsubscribe" link found at the bottom of any marketing email we send, or by contacting us at [email protected]. Please note that even if you opt out of marketing emails, we may still send you transactional or service-related communications (such as order confirmations, receipts, and account notifications).

SMS/Text Messages: If you have subscribed to SMS marketing, you may opt out by replying "STOP" to any text message you receive from us. Standard messaging rates from your mobile carrier may apply.

Push Notifications: You may disable push notifications at any time through your device settings.

We process opt-out requests promptly and will honor your preferences within 10 business days of receiving your request, consistent with applicable law.

16. How to File a Complaint

If you believe that your privacy rights have been violated or that we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to contact us first so that we can address your concerns.

We will acknowledge your complaint within 10 business days and will work diligently to resolve the issue within 45 calendar days. If we require additional time, we will notify you accordingly.

If you are not satisfied with our response, you have the right to file a complaint with the appropriate data protection or consumer protection authority. In the United States, complaints related to unfair or deceptive privacy practices may be submitted to:

• Federal Trade Commission (FTC): The FTC is the primary U.S. federal agency responsible for protecting consumers from unfair or deceptive business practices, including privacy violations. You may file a complaint at reportfraud.ftc.gov or by contacting the FTC at:
  Federal Trade Commission
  600 Pennsylvania Avenue, NW
  Washington, D.C. 20580
  Phone: 1-877-FTC-HELP (1-877-382-4357)
• California Residents — California Privacy Protection Agency (CPPA): If you are a California resident, you may file a complaint regarding violations of the CCPA/CPRA with the California Privacy Protection Agency at cppa.ca.gov.
• State Attorneys General: Most U.S. states have an Attorney General's office that handles consumer protection and privacy complaints. You may contact your state's Attorney General office for guidance and to file a complaint.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, applicable laws, or technological developments. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on our website at imosspizz.digital with a new "Last Updated" date at the top of the page.
• Notify you via email (if you have an account with us) or through a prominent notice on our website.
• Where required by law, seek your consent before implementing material changes that affect how we process your personal information.

Your continued use of our website and services after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

When contacting us regarding a privacy matter, please include sufficient detail about your inquiry so that we can respond effectively and direct your request to the appropriate team. For privacy rights requests, please include your name, contact information, and a clear description of the right you wish to exercise.

We are dedicated to providing a transparent, respectful, and secure experience for every customer. Thank you for trusting Imos Pizza with your personal information.