Privacy Policy

Effective Date: March 29, 2026  |  Last Updated: March 29, 2026

1. Introduction and Who We Are

Welcome to Punch Pizza. We are a food service business operating in the United States, dedicated to providing our customers with high-quality pizza and related food products. We take the privacy of our customers, website visitors, and all individuals who interact with our business very seriously.

This Privacy Policy has been prepared in accordance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant consumer protection statutes. Even if you are not a California resident, we extend many of these protections to all of our users as a matter of best practice.

By accessing or using our website at punchpizza.rest, placing a food order, signing up for a loyalty program, subscribing to our newsletter, or otherwise engaging with Punch Pizza, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

Contact Information:

2. Information We Collect

We collect various types of information in connection with our services. The categories of personal information we may collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, contact us, or engage with our services, we may collect personal identification information such as:

  • Full name
  • Email address
  • Phone number
  • Mailing or delivery address (including street address, city, state, and ZIP code)
  • Username and password (for account holders)
  • Profile photo (if voluntarily provided)
  • Date of birth (for age verification or birthday promotions)
  • Any other information you voluntarily provide when contacting us or completing forms on our website

2.2 Payment and Financial Information

When you make a purchase or complete a transaction through our website or ordering platform, we collect payment-related information necessary to process your order. This may include:

  • Credit or debit card details (card number, expiration date, security code)
  • Billing address
  • Digital wallet information (such as Apple Pay or Google Pay)
  • Transaction history and order records

2.3 Order and Transaction Information

We collect information related to your food orders and interactions with our business, including:

  • Items ordered, customizations, and special instructions
  • Order date and time
  • Delivery or pickup preferences
  • Order history and frequency
  • Loyalty points or reward balances
  • Promotional codes or coupons used

2.4 Usage and Technical Data

When you visit our website at punchpizza.rest, we automatically collect certain technical and usage information through cookies, web beacons, log files, and similar tracking technologies. This data includes:

  • IP address and approximate geolocation (city/state level)
  • Browser type and version
  • Operating system and device type (desktop, tablet, mobile)
  • Screen resolution and display settings
  • Referring URL (the page you visited before arriving at our website)
  • Pages visited on our website, time spent on each page, and click-through data
  • Search queries entered on our website
  • Session duration and timestamps
  • Error logs and crash reports

2.5 Device Information

We may collect information about the devices you use to access our website or services, including:

  • Device identifiers (such as mobile device ID or advertising ID)
  • Hardware model and firmware version
  • Network information (Wi-Fi or cellular connection type)
  • Mobile carrier information
  • Time zone settings and language preferences

2.6 Communication and Customer Service Data

When you contact us for customer service, submit feedback, or communicate with us through any channel, we may collect:

  • The content of your messages, emails, or phone calls
  • Records of customer support interactions
  • Survey responses and feedback submissions
  • Social media handles or messages if you contact us through social media platforms

2.7 Marketing and Preference Data

We collect information about your marketing preferences, including:

  • Whether you have opted in or opted out of marketing communications
  • Preferences regarding types of promotions or notifications
  • Engagement with our email campaigns (open rates, click rates)
  • Interests inferred from your ordering behavior and browsing activity

2.8 Information Collected From Third Parties

We may also receive information about you from third-party sources, including:

  • Third-party food delivery platforms (such as DoorDash, Uber Eats, or Grubhub) if you order through those services
  • Social media platforms if you log in using a social account or interact with our social media pages
  • Analytics and advertising partners who provide demographic or behavioral data
  • Publicly available sources for fraud prevention and verification purposes

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. Specifically, we use your information for the following reasons:

3.1 Service Provision and Order Fulfillment

  • To process, prepare, and fulfill your food orders (delivery or pickup)
  • To create and manage your customer account
  • To send order confirmations, receipts, and status updates
  • To coordinate delivery logistics and communicate estimated arrival times
  • To process payments and issue refunds or credits when applicable
  • To administer loyalty programs, reward points, and promotional offers

3.2 Customer Support and Communications

  • To respond to your inquiries, questions, and complaints
  • To provide technical support and resolve issues with your account or orders
  • To send important service-related notifications (such as changes to menu, pricing, or policies)
  • To notify you about recalls, food safety alerts, or other critical information

3.3 Analytics and Business Improvement

  • To analyze website traffic, user behavior, and ordering patterns
  • To improve the functionality, design, and content of our website
  • To evaluate the effectiveness of marketing campaigns and promotions
  • To develop new menu items, products, or services based on customer preferences
  • To conduct internal research and generate business intelligence reports
  • To measure customer satisfaction and identify areas for improvement

3.4 Marketing and Promotional Activities

  • To send you promotional emails, newsletters, and special offers (with your consent)
  • To deliver targeted advertisements on third-party platforms based on your interests
  • To inform you about new menu items, seasonal specials, and limited-time promotions
  • To conduct contests, sweepstakes, and other promotional events
  • To personalize your experience on our website and in our communications

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email, or by contacting us directly at [email protected].

3.5 Legal Compliance and Safety

  • To comply with applicable federal and state laws and regulations
  • To respond to lawful requests from courts, law enforcement agencies, or regulatory authorities
  • To detect, investigate, and prevent fraudulent transactions, abuse, or security incidents
  • To enforce our Terms of Service and other applicable agreements
  • To protect the rights, property, and safety of Punch Pizza, our customers, and the public

4. How We Share Your Information

We do not sell your personal information to unaffiliated third parties for their own direct marketing purposes. However, we do share your information in certain circumstances as described below:

4.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating our business and providing services to you. These providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security measures. Categories of service providers include:

  • Payment processors — to handle credit card and digital payment transactions securely
  • Delivery platforms and couriers — to fulfill delivery orders and communicate delivery status
  • Website hosting and cloud services — to store data and operate our website infrastructure
  • Email marketing platforms — to send newsletters and promotional communications
  • Analytics providers (such as Google Analytics) — to analyze website traffic and usage
  • Customer relationship management (CRM) systems — to manage customer accounts and interactions
  • IT and cybersecurity firms — to maintain the security and integrity of our systems
  • Legal, accounting, and professional services — to meet compliance and operational needs

4.2 Third-Party Delivery Platforms

If you place an order through a third-party food delivery platform (such as DoorDash, Uber Eats, Grubhub, or similar services), those platforms will collect and process your information in accordance with their own privacy policies. We encourage you to review the privacy policies of any third-party platforms you use to interact with us.

4.3 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in the good-faith belief that such action is necessary to:

  • Comply with a legal obligation, court order, subpoena, or government request
  • Protect and defend our legal rights or property
  • Prevent or investigate possible wrongdoing in connection with our services
  • Protect the personal safety of users or the public
  • Comply with applicable federal and state regulatory requirements

4.4 Business Transfers

In the event that Punch Pizza undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as part of that business transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and your information becomes subject to a different privacy policy.

4.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes. This type of information does not constitute personal information and is not subject to the restrictions in this Privacy Policy.

5. Cookies and Tracking Technologies

Our website at punchpizza.rest uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience, analyze website performance, and deliver relevant content and advertisements.

5.1 Types of Cookies We Use

Cookie Type Purpose Duration
Essential Cookies Required for the website to function properly (e.g., shopping cart, login session) Session / Short-term
Performance Cookies Collect anonymous data about how visitors use our website to improve performance Up to 2 years
Functional Cookies Remember your preferences (language, location, saved items) Up to 1 year
Marketing/Advertising Cookies Track browsing behavior to deliver targeted advertisements Up to 2 years
Analytics Cookies Provided by third parties (e.g., Google Analytics) to analyze usage patterns Up to 2 years

You can control and manage cookies through your browser settings. Most web browsers allow you to refuse cookies or delete existing cookies. Please note that disabling certain cookies may affect the functionality of our website. For more detailed information about the cookies we use, please refer to our Cookie Policy.

6. Data Security

We take the security of your personal information very seriously and implement a range of administrative, technical, and physical safeguards designed to protect your data against unauthorized access, loss, misuse, alteration, or destruction.

6.1 Security Measures We Employ

  • SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols.
  • Secure Payment Processing: Payment information is processed through PCI DSS-compliant third-party payment processors. We do not store sensitive card data on our own servers.
  • Access Controls: Access to personal data is restricted to authorized personnel who need the information to perform their job functions. All employees with access to personal data are required to maintain confidentiality.
  • Password Protection: Account passwords are stored using industry-standard hashing algorithms. We never store passwords in plain text.
  • Regular Security Audits: We conduct periodic reviews and assessments of our data security practices and systems to identify and address potential vulnerabilities.
  • Incident Response: We maintain a data breach response plan to address any security incidents promptly and notify affected individuals in accordance with applicable state breach notification laws.

7. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We are committed to honoring these rights in accordance with applicable United States law.

7.1 Rights for California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights:

  • Right to Know: You have the right to request that we disclose what personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
  • Right to Access: You have the right to receive a copy of the specific pieces of personal information we hold about you.
  • Right to Deletion: You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions (such as legal obligations or fraud prevention).
  • Right to Correction: You have the right to request that we correct inaccurate personal information we hold about you.
  • Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. To exercise this right, visit our website or contact us using the details below.
  • Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to what is necessary to provide our services.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge you different prices, or provide a different quality of service because you exercised your privacy rights.

7.2 General Privacy Rights (All U.S. Residents)

Regardless of your state of residence, we honor the following general privacy rights for all customers:

  • Access and Portability: You may request access to the personal information we hold about you and, where technically feasible, receive it in a portable, commonly used format.
  • Correction: You may request that we update or correct inaccurate personal information in your account or records.
  • Deletion: You may request that we delete your personal information, subject to our legal obligations and legitimate business needs.
  • Opt-Out of Marketing: You may opt out of receiving promotional communications from us at any time by using the unsubscribe link in emails or by contacting us directly.
  • Withdraw Consent: Where we process your information based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

7.3 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us through one of the following channels:

We will verify your identity before processing your request to ensure the security of your information. We aim to respond to all verified requests within 45 days of receipt. If we require additional time, we will notify you of the extension and the reason. In some cases, we may deny your request if we are unable to verify your identity or if the request is subject to a legal exception.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected and as required by applicable laws and regulations. The following table provides general guidance on our data retention periods:

Category of Data Retention Period Reason
Account and registration information Duration of account + 3 years after closure Customer service, legal compliance
Order and transaction records 7 years Tax, accounting, and legal requirements
Payment records (partial) 7 years Financial regulations and dispute resolution
Marketing preferences and opt-out records Until withdrawal or 5 years Proof of consent and compliance
Website usage and analytics data Up to 26 months Analytics and performance improvement
Customer service communications 3 years Quality assurance and dispute resolution
Cookies and tracking data Up to 2 years Functionality and personalization

When your personal information is no longer needed, we will securely delete, anonymize, or de-identify it in accordance with our data retention policies and applicable law.

9. Children's Privacy

Our website, services, and food ordering platforms are intended for use by individuals who are 18 years of age or older. We do not knowingly collect personal information from children under the age of 13, and we do not direct our services to minors.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the online collection of personal information from children under 13 without verifiable parental consent. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected], and we will take prompt steps to delete such information from our records.

We also encourage parents and guardians to monitor their children's online activities and to use parental control tools when appropriate. If we learn that we have inadvertently collected personal information from a child under 13, we will delete it as quickly as possible.

10. International Data Transfers

Punch Pizza is based in the United States, and our primary operations are conducted within the United States. However, due to the global nature of the internet and certain third-party service providers we use, your personal information may occasionally be transferred to, stored, or processed in countries outside of the United States.

When we transfer your personal information to service providers or partners located outside the United States, we take appropriate measures to ensure that your data is protected in accordance with this Privacy Policy and applicable U.S. law. These measures may include:

  • Entering into data processing agreements with service providers that incorporate appropriate contractual safeguards
  • Ensuring that international transfers are made only to countries or organizations that maintain adequate data protection standards
  • Implementing technical and organizational safeguards to protect data during international transfers

If you are located outside the United States and choose to use our services, please be aware that your information will be transferred to, processed, and stored in the United States, where privacy laws may differ from those in your country. By using our services, you consent to this transfer.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated by Punch Pizza. These may include food delivery partner platforms, social media platforms, payment gateways, and other external sites. When you click on a link to a third-party site, you leave our website and are subject to that third party's privacy policy and terms of use.

We have no control over, and assume no responsibility for, the content, privacy practices, or policies of any third-party sites or services. We strongly encourage you to review the privacy policies of every third-party website or service you visit or interact with. Our inclusion of a link to a third-party website does not imply any endorsement of that website or its practices.

12. Social Media and Online Advertising

Punch Pizza maintains a presence on various social media platforms, including but not limited to Facebook, Instagram, Twitter/X, and TikTok. When you interact with our social media pages or content, those platforms may collect information about you in accordance with their own privacy policies. We are not responsible for the data practices of social media platforms.

We may use social media advertising tools, including Meta Pixel and other tracking technologies, to deliver targeted advertisements to you based on your browsing behavior, interests, and demographics. These tools may set cookies or pixels on your device when you visit our website or engage with our social media content.

You may opt out of interest-based advertising by:

13. FTC Compliance and Consumer Protection

Punch Pizza is committed to fair and transparent data practices in accordance with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce. We ensure that:

  • Our privacy representations are accurate and not misleading
  • We honor the choices and preferences you express regarding your personal data
  • We implement reasonable security measures to protect consumer information
  • We do not engage in deceptive data collection or use practices
  • We provide you with meaningful choices about how your data is used

If you believe that we have engaged in an unfair or deceptive practice, you have the right to file a complaint with the Federal Trade Commission (FTC) or your state's consumer protection agency.

14. How to File a Complaint

If you have a concern about how we handle your personal information, we encourage you to contact us first so we can work to resolve the issue. However, you also have the right to file a complaint with the appropriate regulatory authority.

14.1 Contact Punch Pizza Directly

Please send your privacy-related complaint or inquiry to:

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

14.2 File a Complaint with a Regulatory Authority

If you are not satisfied with our response, or if you wish to escalate your concern, you may contact one of the following authorities:

Authority Jurisdiction Contact Information
Federal Trade Commission (FTC) United States (Federal) ftc.gov/complaint | 1-877-382-4357
California Attorney General (CCPA complaints) California Residents oag.ca.gov/privacy/ccpa
California Privacy Protection Agency (CPPA) California Residents cppa.ca.gov
State Attorney General (your state) All U.S. States Visit your state's official government website for contact details
Better Business Bureau (BBB) United States bbb.org

15. Changes to This Privacy Policy

We reserve the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, business operations, or applicable legal requirements. When we make material changes to this policy, we will:

  • Update the "Last Updated" date at the top of this page
  • Post a prominent notice on our website at punchpizza.rest
  • Send an email notification to registered account holders (where applicable and practicable)

Your continued use of our website or services after any changes to this Privacy Policy take effect constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your personal information.

16. Contact Us

If you have any questions, concerns, requests, or feedback about this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your inquiries promptly and transparently.

Privacy Contact Information — Punch Pizza

Business Name: Punch Pizza

Email: [email protected]

Website: punchpizza.rest

Effective Date: March 29, 2026