Privacy Policy

At Punch Pizza, we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website eat-punchpizza.digital, place orders, or otherwise interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

We take your privacy seriously. This document is designed to help you understand what information we collect, why we collect it, and what rights you have in relation to it. Because we operate in the United States and serve customers across multiple states, we comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act governing unfair or deceptive practices.

1. About Us

Punch Pizza is a food service business operating in the United States. We operate the website located at eat-punchpizza.digital. Throughout this Privacy Policy, when we use the terms "we," "us," "our," or "Punch Pizza," we are referring to our company and its operations.

Our contact details for all privacy-related matters are as follows:

2. Information We Collect

We collect several types of information from and about users of our website and services. The categories of information we may collect include personal information you provide directly to us, information collected automatically when you use our services, and information we receive from third parties.

2.1 Personal Information You Provide to Us

When you interact with Punch Pizza — whether by creating an account, placing an online order, contacting customer support, signing up for our newsletter, or participating in promotions — you may voluntarily provide us with certain personally identifiable information. This includes, but is not limited to:

• Identity Information: Your first and last name, username or screen name, date of birth (where required for age verification).
• Contact Information: Your email address, telephone number, mailing address, and delivery address.
• Payment Information: Credit or debit card numbers, billing address, and other financial information necessary to complete your transaction. Note that full payment card details are processed securely by our payment processors and are not stored on our servers.
• Order Information: Details about the food items you ordered, special instructions, dietary preferences, and order history.
• Account Credentials: Username and password if you create an account with us.
• Communications: Any messages, feedback, reviews, or other content you send to us through our website, email, or other channels.
• Marketing Preferences: Your preferences regarding receiving marketing communications from us and your selected communication channels.

2.2 Information Collected Automatically

When you access or use our website at eat-punchpizza.digital, we and our service providers may automatically collect certain information about your device and browsing behavior. This includes:

• Device Information: Information about your device, including the hardware model, operating system and version, unique device identifiers, mobile network information, and browser type and version.
• Log Data: Server logs that record information such as your IP address, browser type, referring/exit pages, the date and time of your visit, the pages you view, and the time spent on each page.
• Usage Data: Information about how you use our website, including the features you access, the searches you conduct, the items you view or add to your cart, and the links you click.
• Location Data: General geographic location inferred from your IP address, or more precise location data if you grant permission through your device settings (for example, to find the nearest Punch Pizza location).
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies. For more information, please see Section 7 (Cookie Usage) of this policy.

2.3 Information from Third Parties

We may also receive information about you from third-party sources, which we may combine with information we already hold about you. These sources include:

• Third-Party Delivery Platforms: If you place an order through a third-party food delivery service or app that partners with Punch Pizza, we may receive information about your order and, in some cases, your contact details.
• Social Media Platforms: If you interact with our social media pages or use social login features, we may receive information from those platforms in accordance with your privacy settings on those services.
• Analytics Providers: Third-party analytics companies that help us understand how users interact with our website.
• Advertising Partners: Information from advertising networks and marketing partners to help us deliver relevant advertisements and measure their effectiveness.
• Payment Processors: Confirmation and transaction data related to your payments.

3. How We Use Your Information

Punch Pizza uses the information we collect for a variety of legitimate business purposes. Specifically, we may use your personal information to:

3.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders, including sending you order confirmations and updates.
• Manage and maintain your account on our website.
• Facilitate delivery of your orders to your specified location.
• Process payments and prevent fraudulent transactions.
• Communicate with you about your orders, including addressing order issues or changes.
• Provide customer support and respond to your inquiries and complaints.

3.2 Analytics and Service Improvement

• Analyze how our website and services are used in order to improve user experience and functionality.
• Conduct research and analysis to better understand our customers' preferences and needs.
• Monitor and analyze trends, usage patterns, and activity on our website.
• Troubleshoot technical issues and maintain the security and integrity of our systems.
• Test new features and improvements to our website and ordering platform.

3.3 Marketing and Communications

• Send you promotional communications, special offers, new menu announcements, and other marketing materials, where you have consented or where we have a legitimate interest in doing so.
• Personalize your experience on our website by showing you content and offers relevant to your interests and order history.
• Administer contests, promotions, surveys, and loyalty programs.
• Deliver targeted advertising on third-party websites and social media platforms based on your interests.

You may opt out of receiving marketing emails at any time by clicking the "unsubscribe" link in any email we send you, or by contacting us at [email protected]. Please note that even if you opt out of marketing communications, we may still send you transactional messages related to your orders or account.

3.4 Legal and Compliance Purposes

• Comply with applicable laws, regulations, and legal processes.
• Enforce our Terms of Service and other applicable agreements and policies.
• Protect the rights, property, and safety of Punch Pizza, our customers, and others.
• Detect, prevent, and respond to fraud, security breaches, and other potentially prohibited or illegal activities.

4. How We Share Your Information

We respect your privacy and will not sell your personal information to third parties for their own marketing purposes without your explicit consent. However, we do share your information with certain trusted parties as described below.

4.1 Service Providers

We engage third-party companies and individuals to perform services on our behalf, such as payment processing, order fulfillment and delivery logistics, website hosting and infrastructure, email distribution, analytics, customer service tools, and fraud prevention. These service providers are given access to your personal information only as necessary to perform their functions and are contractually obligated to keep your information confidential and use it only for the purposes we specify.

4.2 Delivery Partners

To fulfill your delivery orders, we may share your name, delivery address, phone number, and order details with our delivery partners and drivers. These parties are required to use this information solely for the purpose of delivering your order.

4.3 Business Transfers

If Punch Pizza is involved in a merger, acquisition, sale of assets, financing, or any other transaction in which another company acquires control of our business or assets, your personal information may be transferred as part of that transaction. We will notify you by email and/or prominent notice on our website if such a transfer occurs and your information becomes subject to a different privacy policy.

4.4 Legal Requirements and Protection of Rights

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or other governmental request.
• Enforce our Terms of Service or other applicable policies.
• Protect against harm to the rights, property, or safety of Punch Pizza, our users, or the public.
• Detect, prevent, or address fraud, security, or technical issues.

4.5 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other lawful purposes.

4.6 Advertising and Analytics Partners

We may share certain data with our advertising and analytics partners to help us deliver targeted ads and measure their performance. This may include cookie identifiers, hashed email addresses, and other non-sensitive information. Under the CCPA/CPRA, sharing data for cross-context behavioral advertising may be considered a "sale" or "sharing" of personal information, and California residents have the right to opt out. Please see Section 9 for information on exercising your rights.

5. Data Security

Protecting your personal information is a top priority at Punch Pizza. We implement a variety of technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction.

5.1 Security Measures We Employ

• Encryption: We use Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers. Our website operates over HTTPS.
• Payment Security: All payment card transactions are processed through PCI-DSS compliant payment processors. We do not store full payment card numbers on our own servers.
• Access Controls: Access to personal information is restricted to employees and contractors who need it to perform their job duties. All such personnel are subject to confidentiality obligations.
• Firewalls and Monitoring: We employ firewalls and security monitoring tools to protect our systems against intrusion and unauthorized access.
• Regular Security Assessments: We conduct periodic reviews of our security practices and update our measures as necessary to address emerging threats.
• Data Minimization: We endeavor to collect only the personal data that is necessary for the purposes described in this policy.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods we apply include:

When personal information is no longer required, we securely delete or anonymize it in accordance with our data disposal procedures. Where deletion is not immediately possible (for example, because data is stored in backup archives), we will isolate your data from further processing until deletion is possible.

7. Cookie Usage

Punch Pizza uses cookies and similar tracking technologies on our website to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising.

7.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently and to provide reporting information to website owners.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website, enabling core functionality such as page navigation, shopping cart management, and secure account access.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously (e.g., Google Analytics).
• Functionality Cookies: Allow our website to remember your preferences and settings (such as your preferred language or location) to provide an enhanced, personalized experience.
• Targeting and Advertising Cookies: Used to deliver advertisements relevant to you and your interests, and to measure the effectiveness of advertising campaigns.

7.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most web browsers allow you to refuse cookies, delete existing cookies, and set preferences for certain websites. Please note that disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance's opt-out page or the Network Advertising Initiative opt-out page.

For full details about the cookies we use and how to manage them, please refer to our Cookie Policy, which is available on our website.

8. Children's Privacy

Punch Pizza's website and online ordering services are intended for use by individuals who are at least 18 years of age. We do not knowingly collect, solicit, or use personal information from children under the age of 18. Our website is not directed at, and we do not intend to market our services to, individuals under 18 years of age.

If you are a parent or guardian and you believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly investigate and delete any such information from our records.

We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect personal information from children under the age of 13. If we discover that we have inadvertently collected personal information from a child under 13, we will delete it from our systems as quickly as possible.

9. Your Privacy Rights

Depending on where you live in the United States, you may have specific legal rights regarding your personal information. We are committed to honoring these rights. Below we outline the rights available to all users as well as specific rights available to California residents.

9.1 Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions (such as our need to retain records for legal or accounting purposes).
• Right to Opt Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time.
• Right to Lodge a Complaint: You have the right to file a complaint with the relevant data protection or consumer protection authority if you believe your privacy rights have been violated.

9.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to know what personal information we have collected about you, including the categories of personal information, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information, including for purposes of cross-context behavioral advertising. To exercise this right, please contact us at [email protected] or use the "Do Not Sell or Share My Personal Information" link on our website.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to purposes strictly necessary for providing our services.
• Right to Data Portability: You have the right to receive a copy of your personal information in a structured, commonly used, machine-readable format.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different quality of service because you exercised your privacy rights.

9.3 How to Exercise Your Rights

To exercise any of the rights described in this section, you may submit a request by:

• Emailing us at: [email protected]
• Visiting our website: eat-punchpizza.digital

We will verify your identity before processing your request. We may ask you to provide information that reasonably allows us to verify that you are the person about whom we collected personal information. We will respond to your request within 45 days of receipt. If we need additional time (up to an additional 45 days), we will notify you of the extension and the reason for the delay. We do not charge a fee for processing your request unless it is excessive or repetitive.

You may designate an authorized agent to submit requests on your behalf. Your authorized agent must provide written proof of their authorization, and we may require you to verify your identity directly with us.

10. International Data Transfers

Punch Pizza is a United States-based business and our primary operations, data processing, and data storage occur within the United States. Our servers are located in the United States, and the personal information we collect is processed and stored in the United States.

If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States. The data protection and privacy laws in the United States may differ from those in your country of residence. By using our website and services, you consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable law regardless of where it is processed. If you have concerns about international data transfers, please contact us at [email protected].

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, and services, including our delivery partners, social media platforms, and payment processors. These third-party services are governed by their own privacy policies, which we encourage you to review. We are not responsible for the privacy practices or content of any third-party websites or services.

When you use our social media pages (such as on Instagram, Facebook, or Twitter/X), the social media platform's own privacy policies apply to any information you provide or that is collected on those platforms. Similarly, when you are redirected to a third-party payment processor to complete your transaction, that processor's privacy policy governs the handling of your payment information.

12. FTC Act Compliance and Consumer Protection

Punch Pizza is committed to complying with the Federal Trade Commission (FTC) Act, which prohibits unfair or deceptive acts and practices in commerce. This includes our privacy practices. We will not engage in deceptive data collection or use practices, and we will maintain reasonable security measures to protect the personal information we hold.

In the event of a data breach that poses a significant risk of harm to our users, we will notify affected individuals and relevant authorities as required by applicable federal and state breach notification laws, including applicable state breach notification statutes.

If you believe that Punch Pizza has engaged in unfair or deceptive privacy practices, you may file a complaint with the FTC at reportfraud.ftc.gov or by calling 1-877-FTC-HELP (1-877-382-4357).

13. How to File a Complaint with a Data Protection Authority

If you are a California resident and believe that your rights under the CCPA/CPRA have been violated, you may file a complaint with the California Privacy Protection Agency (CPPA):

If you are a resident of another state that has enacted a consumer privacy law, you may have the right to file a complaint with your state's Attorney General office. Below are some key contacts:

• Virginia (VCDPA): Virginia Attorney General — oag.state.va.us
• Colorado (CPA): Colorado Attorney General — coag.gov
• Texas: Texas Attorney General — texasattorneygeneral.gov
• All U.S. Consumers: Federal Trade Commission — reportfraud.ftc.gov

We encourage you to first contact us directly to resolve any concerns about our privacy practices before filing a complaint with a regulatory authority. We are committed to addressing your concerns promptly and fairly.

14. California "Shine the Light" Law

California Civil Code Section 1798.83, known as the "Shine the Light" law, permits California residents who have an established business relationship with us to request information about whether we have shared their personal information with any third parties for the third parties' direct marketing purposes. If you are a California resident and would like to make such a request, please contact us at [email protected] with "Shine the Light Request" in the subject line.

15. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that sends a signal to websites you visit indicating that you do not want your online browsing activities tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, we do not currently respond to browser DNT signals. However, you can manage your cookie preferences as described in Section 7 of this policy.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will notify you by:

• Posting the updated Privacy Policy on our website at eat-punchpizza.digital with a new "Last Updated" date at the top of the policy.
• Sending you an email notification to the email address associated with your account (if you have one).
• Displaying a prominent notice on our website.

Your continued use of our website and services after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. Our privacy team is available to assist you.

We will make every effort to respond to your inquiry within 30 days of receipt. For requests related to your legal privacy rights under CCPA/CPRA, we will respond within 45 days as required by law.

This Privacy Policy was last updated on May 27, 2026. © 2026 Punch Pizza. All rights reserved.