Privacy Policy

This Privacy Policy describes how Imos Pizza ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects the personal information of users ("you," "your," or "user") who visit or interact with our website located at imosxpizza.digital (the "Website"), place orders, subscribe to our communications, or otherwise engage with our food services. We are committed to protecting your privacy and ensuring transparency about how your data is handled.

Please read this Privacy Policy carefully before using our Website or services. By accessing or using our Website, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any part of this policy, you must discontinue use of our Website immediately.

This Privacy Policy is governed by the laws of the United States, including applicable federal laws such as the Federal Trade Commission Act (FTC Act), and applicable state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) for California residents, and other applicable state regulations.

1. Who We Are

Imos Pizza operates as a food service business in the United States, providing customers with online ordering, delivery, pickup, catering, and related food services. We take the responsibility of managing your personal data seriously and have implemented robust measures to safeguard the information entrusted to us.

2. Information We Collect

We collect various types of personal and non-personal information in connection with the operation of our Website and food services. The categories of information we collect are described below.

2.1 Personal Information You Provide Directly

When you interact with our Website, create an account, place an order, sign up for our newsletter, participate in promotions, or contact us for support, we may collect the following personal information:

• Identity Information: Full name, username, or similar identifiers.
• Contact Information: Email address, telephone number, mailing address, billing address, and delivery address.
• Account Credentials: Password and account login details (stored in encrypted form).
• Order Information: Details of food items ordered, special instructions, order history, and order preferences.
• Payment Information: Credit or debit card details, billing information, and transaction records. Note: Full payment card numbers are processed by our third-party payment processors and are not stored on our systems.
• Communications Data: Any messages, feedback, complaints, or inquiries you send to us via email, contact forms, or customer service channels.
• Marketing Preferences: Your preferences for receiving marketing and promotional communications from us.
• Loyalty Program Data: Points balance, redemption history, and related rewards information if you participate in any loyalty or rewards programs.

2.2 Information Collected Automatically

When you visit our Website, we automatically collect certain technical and usage data through cookies, web beacons, pixel tags, and similar tracking technologies, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Log Data: IP address, referring URLs, pages visited on our Website, time and date of visits, duration of page views, and clickstream data.
• Location Data: Approximate geographic location derived from your IP address. If you grant permission, we may also collect more precise location data to provide location-based services such as finding the nearest Imos Pizza location or estimating delivery times.
• Usage Data: Information about how you use our Website, including search queries, menu items browsed, items added to cart, and navigation patterns.
• Cookie and Tracking Data: Information collected through cookies and similar technologies (see Section 8 for more details).

2.3 Information from Third Parties

We may receive personal information about you from third parties, including:

• Social Media Platforms: If you log in to our Website using a social media account (such as Facebook or Google), we may receive certain profile information from those platforms, including your name, email address, and profile photo, subject to your privacy settings on those platforms.
• Payment Processors: Confirmation of payment status and transaction identifiers from our payment processing partners.
• Analytics Providers: Aggregated and anonymized data from analytics service providers to help us understand Website traffic and user behavior.
• Delivery Partners: Order status and delivery confirmation data from third-party delivery service providers.
• Marketing Partners: Contact details or interest-based data from marketing platforms where you have consented to share your data with food-related businesses.

2.4 Sensitive Personal Information

We do not intentionally collect sensitive personal information such as government-issued identification numbers, racial or ethnic origin, religious beliefs, health data, or biometric data. If any such information is inadvertently shared with us, we will delete it promptly. Regarding food allergies or dietary restrictions, if you voluntarily provide this information in order notes or special instructions, we will use it solely to fulfill your order.

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes. The legal basis for processing your data includes your consent, our contractual obligations to you, our legitimate business interests, and compliance with legal requirements.

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including coordinating delivery or pickup.
• Creating and managing your customer account.
• Processing payments and preventing fraudulent transactions.
• Sending order confirmations, receipts, and updates on your order status.
• Providing customer support and responding to your inquiries or complaints.
• Managing loyalty or rewards program participation and point redemption.

3.2 Improving Our Website and Services

• Analyzing usage patterns and trends to improve the functionality, design, and content of our Website.
• Conducting internal research and development to enhance our menu offerings and service quality.
• Testing new features and functionalities before broader deployment.
• Monitoring Website performance and resolving technical issues.

3.3 Marketing and Communications

• Sending you promotional emails, newsletters, special offers, and updates about Imos Pizza products and services, where you have opted in or where permitted by applicable law.
• Personalizing marketing content based on your order history, browsing preferences, and stated interests.
• Running sweepstakes, contests, loyalty campaigns, and other promotional activities.
• Displaying targeted advertisements on third-party platforms based on your interactions with our Website (subject to your privacy preferences).
• You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send or by contacting us at [email protected].

3.4 Legal Compliance and Protection

• Complying with applicable laws, regulations, and legal processes, including those under the FTC Act and applicable state privacy laws.
• Responding to lawful requests from government authorities, courts, or law enforcement agencies.
• Enforcing our Terms of Service and other agreements.
• Protecting the rights, safety, and property of Imos Pizza, our customers, employees, and the public.
• Detecting, preventing, and addressing fraud, security breaches, and other harmful or illegal activities.

3.5 Business Operations

• Maintaining accurate business records and accounting.
• Facilitating mergers, acquisitions, investments, or asset sales, where your information may be transferred as part of the business transaction (see Section 5).
• Conducting aggregate statistical analysis to evaluate business performance and plan future growth.

4. Legal Bases for Processing Personal Information

As a company operating in the United States, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill your orders, manage your account, and perform our obligations under our Terms of Service.
• Legitimate Interests: We process data for purposes such as fraud prevention, Website security, improving our services, and internal analytics, where these interests are not overridden by your rights and interests.
• Consent: Where required by law, we obtain your consent before processing your data for marketing purposes or placing non-essential cookies on your device.
• Legal Obligation: We process data as required to comply with applicable laws, regulations, and lawful government requests.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own marketing purposes. However, we do share your data in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to assist us in operating our Website and delivering our services. These providers are contractually obligated to use your data only for the purposes we specify and to protect it with appropriate security measures. Categories of service providers include:

• Payment Processors: To securely process credit and debit card transactions (e.g., Stripe, Square, or similar providers).
• Delivery Partners: Third-party delivery services that fulfill food delivery orders on our behalf.
• Cloud Hosting Providers: Companies that host our Website and databases on secure cloud infrastructure.
• Email Marketing Platforms: Providers that help us send transactional and promotional emails to our subscribers.
• Analytics Providers: Platforms such as Google Analytics that help us understand how users interact with our Website.
• Customer Support Tools: Software platforms used to manage customer service interactions and support tickets.
• Advertising Networks: Third-party advertising partners who help us deliver targeted advertisements, subject to your consent and privacy preferences.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request.
• Enforce our Terms of Service or other agreements.
• Protect the safety, rights, or property of Imos Pizza, our users, or the public.
• Detect, prevent, or address fraud, security vulnerabilities, or other unlawful activities.

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, reorganization, or similar corporate transaction, your personal information may be transferred to the successor entity. We will notify you via email or a prominent notice on our Website of any such change in ownership and any choices you may have regarding your data.

5.4 Aggregate and Anonymized Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or other business purposes without restriction.

6. Data Security

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, and destruction.

6.1 Security Measures

• Encryption: All data transmitted between your browser and our Website is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols. Sensitive data stored in our systems is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorized personnel who require it to perform their job functions. All employees with data access are trained on data protection best practices.
• Password Security: User account passwords are hashed using industry-standard cryptographic algorithms and are never stored in plain text.
• Firewalls and Monitoring: We employ firewalls, intrusion detection systems, and continuous monitoring tools to detect and respond to potential security threats.
• Vendor Vetting: We conduct due diligence on third-party service providers to ensure they maintain appropriate security standards.
• Regular Audits: We periodically review our security practices, conduct vulnerability assessments, and update our systems to address emerging threats.

6.2 Data Breach Response

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities in accordance with applicable state and federal laws, including applicable state data breach notification statutes. Notifications will be provided without undue delay and will include details about the nature of the breach, the data affected, and the steps you can take to protect yourself.

7. Your Privacy Rights

Depending on your state of residence, you may have various rights with respect to your personal information. We are committed to honoring these rights in accordance with applicable law.

7.1 Rights Available to All Users

• Right to Know / Access: You may request a copy of the personal information we hold about you and information about how we collect, use, and share it.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You may request that we delete your personal information, subject to certain exceptions (such as data we are required to retain for legal or contractual reasons).
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking "unsubscribe" in our emails or contacting us directly.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. We will not deny you services, charge you different prices, or provide a lower quality of service because you exercised any rights under this policy.

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights:

• Right to Know: You have the right to know the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. We do not sell personal information as defined under the CCPA/CPRA, but you may submit an opt-out request if you have concerns.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to purposes permitted under the CPRA.
• Right to Portability: You have the right to receive your personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity.
• Authorized Agents: California residents may designate an authorized agent to submit privacy requests on their behalf. We may require verification of the agent's authority.

7.3 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us using the following methods:

• Email: [email protected]
• Website: Submit a request through the contact form available at imosxpizza.digital

We will acknowledge your request within 10 business days and respond to verifiable requests within 45 days. If we require additional time, we will notify you of the reason and extension period. We may need to verify your identity before processing your request to protect the security of your information.

8. Cookie Policy

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze Website traffic, and deliver personalized content and advertising. This section provides a summary of our cookie practices.

8.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They help websites remember your preferences, keep you logged in, and gather analytical information about how the site is used.

8.2 Types of Cookies We Use

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive alerts when cookies are set. Please note that disabling certain cookies may affect the functionality of our Website. For more detailed information about our cookie practices, please refer to our full Cookie Policy available on our Website.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention guidelines apply:

When your data is no longer required, we will securely delete or anonymize it in accordance with our internal data disposal procedures.

10. Children's Privacy

Imos Pizza does not direct its Website or online services to children under 18. We do not knowingly solicit or collect personal information from minors. If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon confirmation, we will take steps to promptly delete such information from our systems.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under the age of 13 without verifiable parental consent. However, our policy extends this protection to all users under the age of 18. Users found to be under 18 will have their accounts terminated and their data deleted.

11. International Data Transfers

Imos Pizza is based in the United States, and the personal information we collect is primarily stored and processed within the United States. If you are accessing our Website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our Website and providing us with your personal information, you acknowledge and consent to the transfer of your data to the United States. We take steps to ensure that international transfers of personal information are conducted in compliance with applicable data protection laws and that appropriate safeguards are in place to protect your information.

If we engage service providers or partners located outside the United States, we require them to implement appropriate contractual protections, such as standard contractual clauses or equivalent safeguards, to ensure your data is handled securely and in accordance with applicable laws.

12. Third-Party Links and Services

Our Website may contain links to third-party websites, applications, or services that are not operated by Imos Pizza. We are not responsible for the privacy practices of these third parties, and this Privacy Policy does not apply to their websites or services. We encourage you to read the privacy policies of any third-party sites you visit. The inclusion of a link on our Website does not imply our endorsement of the linked site or its privacy practices.

13. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to websites. Because there is currently no universal standard for interpreting DNT signals, our Website does not currently respond to browser DNT signals. However, you can manage your privacy preferences through your browser settings and our cookie consent tools.

14. FTC Act Compliance

We are committed to complying with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce. Our privacy practices are designed to be transparent, honest, and fair. We do not engage in deceptive data collection practices, and we strive to ensure that our privacy disclosures are clear, accurate, and consistent with our actual data practices.

If you believe that we have engaged in unfair or deceptive privacy practices, you may file a complaint with the Federal Trade Commission (FTC) using the contact information provided in Section 16 below.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, applicable laws, or technological developments. When we make significant changes, we will notify you by:

• Posting the updated Privacy Policy on our Website with a revised "Last Updated" date at the top of the page.
• Sending an email notification to registered users where required by applicable law.
• Displaying a prominent notice on our Website for a reasonable period following material changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Website following the posting of changes constitutes your acceptance of the updated Privacy Policy.

16. How to File Complaints

If you have concerns about how we handle your personal information and are not satisfied with our response, you may have the right to lodge a complaint with a relevant regulatory authority.

16.1 Federal Trade Commission (FTC)

The FTC is the primary federal agency responsible for consumer protection and privacy enforcement in the United States. You may file a complaint with the FTC as follows:

• Online: reportfraud.ftc.gov
• Phone: 1-877-382-4357
• Mail: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, D.C. 20580

16.2 California Attorney General (for California Residents)

California residents who believe their CCPA/CPRA rights have been violated may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov

16.3 State Attorneys General

Residents of other states with applicable privacy laws may file complaints with their respective state attorneys general or designated data protection authorities. We recommend checking your state government's website for the appropriate regulatory body and contact information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to reach out to us. We are committed to addressing your privacy inquiries promptly and transparently.

We aim to respond to all privacy-related inquiries within 10 business days. For formal rights requests (such as access, deletion, or correction requests), we will respond within 45 days as required under applicable law, with the possibility of a single 45-day extension if necessary.