Privacy Policy

1. Introduction

At Mod Pizza ("we," "us," or "our"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you use our website at mods-pizzas.rest, mobile applications, and services (collectively, the "Services").

This policy covers all aspects of our food service operations, including online ordering, delivery services, loyalty programs, catering, table reservations, and in-store experiences. By using our Services, you agree to the collection and use of information in accordance with this policy.

This Privacy Policy applies to all users of our Services, including customers who place orders, create accounts, join our loyalty program, make reservations, or simply browse our website. If you do not agree with our practices, please do not use our Services.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when using our Services:

• Personal Identification: Name, email address, phone number, delivery address, billing address
• Account Information: Username, password, order history, delivery preferences
• Food Preferences: Favorite menu items, dietary restrictions, allergen information, special dietary requirements (vegan, halal, kosher, gluten-free)
• Payment Information: Credit card details, payment method preferences (securely encrypted and stored by our payment processors)
• Order Details: Menu selections, customization requests, special instructions, delivery times
• Loyalty Program Data: Points balance, rewards redemption history, membership tier status
• Reservation Information: Table booking details, party size, special occasions, accessibility requirements
• Catering Requests: Event details, group size, menu preferences, delivery locations
• Contact Communications: Customer service inquiries, feedback, reviews, survey responses
• Marketing Preferences: Email subscription status, SMS notifications, promotional interests

2.2 Automatically Collected Information

When you use our Services, we automatically collect certain technical information:

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages viewed, time spent on site, click patterns, search queries, menu browsing history
• Location Information: Approximate location based on IP address, precise location (with permission) for delivery services
• Cookie Data: Session identifiers, user preferences, shopping cart contents, login status
• Performance Metrics: Page load times, error reports, feature usage statistics
• Referral Information: How you found our website, referring websites, search terms used

2.3 Information from Third Parties

We may receive information about you from various third-party sources:

• Social Media Platforms: If you connect your social media accounts, we may receive profile information
• Payment Processors: Transaction verification, fraud prevention information
• Delivery Partners: Delivery status updates, driver location information
• Marketing Partners: Audience insights, advertising effectiveness data
• Data Verification Services: Address validation, identity verification
• Business Partners: Corporate account information for catering services

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Prepare, cook, and deliver your food orders accurately and efficiently
• Account Management: Create and maintain your customer account, authenticate your identity
• Payment Processing: Process transactions, handle refunds, manage billing inquiries
• Delivery Services: Coordinate delivery logistics, track order status, optimize delivery routes
• Customer Support: Respond to inquiries, resolve issues, provide assistance
• Quality Assurance: Monitor service quality, gather feedback, improve food preparation
• Loyalty Programs: Track points, manage rewards, provide personalized offers
• Reservation Management: Process table bookings, send confirmation and reminder notifications

3.2 Communication

• Order Notifications: Confirmation emails, preparation updates, delivery status, pickup reminders
• Customer Service: Response to inquiries, support ticket updates, satisfaction surveys
• Account Updates: Password reset instructions, profile change confirmations
• Important Notices: Service changes, policy updates, security alerts
• Marketing Communications: Promotional offers, new menu announcements, special events (with your consent)
• Loyalty Communications: Points updates, reward availability, tier status changes

3.3 Marketing and Analytics

• Personalized Experiences: Recommend menu items based on order history, customize website content
• Targeted Advertising: Display relevant promotions, optimize ad placement and effectiveness
• Usage Analysis: Understand customer behavior, improve website functionality, optimize menu offerings
• Market Research: Develop new products, identify customer trends, improve services
• Performance Measurement: Track campaign success, measure customer satisfaction
• Competitive Analysis: Benchmark our services, identify improvement opportunities

3.4 Legal Compliance and Security

• Legal Requirements: Comply with food safety regulations, tax obligations, health department requirements
• Fraud Prevention: Detect and prevent fraudulent orders, protect against unauthorized account access
• Safety Protection: Protect the rights, property, and safety of our customers, employees, and business
• Dispute Resolution: Resolve customer complaints, handle legal disputes, maintain transaction records
• Audit and Compliance: Meet regulatory requirements, support internal and external audits

4. Information Sharing and Disclosure

4.1 Service Providers and Business Partners

We share information with trusted third parties who help us operate our business:

• Payment Processors: Stripe, PayPal, and other payment services to process transactions securely
• Delivery Partners: DoorDash, Uber Eats, and our own delivery drivers for order fulfillment
• Cloud Storage Providers: Amazon Web Services, Google Cloud for secure data storage and backup
• Email Service Providers: Mailchimp, SendGrid for sending order confirmations and marketing emails
• Analytics Services: Google Analytics, Facebook Analytics to understand website usage
• Customer Support Tools: Zendesk, Intercom for managing customer inquiries
• Marketing Platforms: Facebook, Google, Instagram for advertising and promotional campaigns
• SMS Providers: Twilio for sending text notifications about orders and promotions

4.2 Legal Requirements and Protection

We may disclose your information when required by law or to protect our business:

• Legal Process: Court orders, subpoenas, search warrants, legal investigations
• Regulatory Compliance: Health department inspections, tax audits, food safety investigations
• Law Enforcement: Police investigations, fraud prevention, criminal activity reports
• Emergency Situations: Threats to public safety, medical emergencies, immediate harm prevention
• Dispute Resolution: Legal proceedings, arbitration, mediation processes

4.3 Business Transfers

In the event of business changes, customer information may be transferred:

• Mergers and Acquisitions: Sale of our business or assets to another company
• Corporate Restructuring: Changes in business structure or ownership
• Bankruptcy Proceedings: Asset liquidation or business reorganization
• Investment Transactions: Due diligence for potential investors or partners

We will notify customers before information is transferred and becomes subject to different privacy practices.

4.4 With Your Consent

We may share information for other purposes with your explicit consent, such as:

• Participating in joint marketing campaigns with partner brands
• Sharing testimonials or reviews (with your permission)
• Providing data for research studies or market analysis

5. Data Security

5.1 Technical Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: SSL/TLS encryption for all data transmission between your device and our servers
• Secure Storage: AES-256 encryption for sensitive data at rest, including payment information
• Firewall Protection: Advanced firewall systems to prevent unauthorized network access
• Access Controls: Multi-factor authentication for employee access, role-based permissions
• Regular Monitoring: 24/7 security monitoring, intrusion detection systems, automated threat response
• Data Backup: Regular encrypted backups stored in multiple secure locations
• Vulnerability Management: Regular security assessments, penetration testing, software updates

5.2 Organizational Security Measures

• Employee Training: Regular security awareness training for all staff handling customer data
• Data Handling Procedures: Strict protocols for accessing, processing, and storing personal information
• Confidentiality Agreements: All employees and contractors sign comprehensive confidentiality agreements
• Incident Response: Detailed procedures for responding to security breaches or data incidents
• Third-Party Agreements: Contractual security requirements for all service providers handling your data
• Regular Audits: Internal and external security audits to ensure compliance with security standards

5.3 Your Security Responsibilities

Help us protect your information by following these security practices:

• Strong Passwords: Use unique, complex passwords with a combination of letters, numbers, and symbols
• Account Protection: Never share your login credentials with others
• Secure Logout: Always log out of your account when using public or shared computers
• Phishing Awareness: Be cautious of suspicious emails or messages asking for personal information
• Report Suspicious Activity: Immediately notify us of any unauthorized account access
• Software Updates: Keep your devices and browsers updated with the latest security patches

6. Cookies and Tracking Technologies

We use various technologies to collect and store information when you visit our website. These technologies help us provide better services and understand how you interact with our platform.

Other Tracking Technologies We Use:

• Google Analytics: Tracks website traffic, user behavior, and conversion rates
• Facebook Pixel: Measures advertising effectiveness and enables retargeting
• Web Beacons: Small transparent images that track email open rates and user engagement
• Local Storage: Browser-based storage for user preferences and temporary data
• Session Storage: Temporary storage for maintaining state during your visit

Managing Your Cookie Preferences

You can control cookies through various methods:

• Browser Settings: Most browsers allow you to accept, reject, or delete cookies
• Cookie Banner: Use our cookie preference center to customize your choices
• Opt-Out Tools: Use industry opt-out tools for advertising cookies
• Mobile Settings: Adjust advertising preferences in your mobile device settings

Note: Disabling certain cookies may affect website functionality and your user experience.

7. Your Privacy Rights

We respect your privacy rights and provide various options to control your personal information. Depending on your location, you may have additional rights under laws such as GDPR, CCPA, and other privacy regulations.

7.1 Right of Access

You have the right to know what personal information we have about you, including:

• Categories of personal information collected
• Specific pieces of information we hold about you
• Sources from which we collected your information
• Business purposes for collecting and using your information
• Third parties with whom we share your information

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information, including:

• Updating your contact information and delivery addresses
• Correcting payment method details
• Modifying dietary preferences and allergen information
• Updating account settings and preferences

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information when:

• The information is no longer necessary for the original purpose
• You withdraw consent and we have no other legal basis for processing
• The information has been unlawfully processed
• Deletion is required for compliance with legal obligations

Note: We may retain certain information as required by law or for legitimate business purposes.

7.4 Right to Restrict Processing

You can request that we limit how we use your information when:

• You contest the accuracy of the information
• Processing is unlawful but you prefer restriction over deletion
• We no longer need the information but you need it for legal claims
• You have objected to processing pending verification of our legitimate interests

7.5 Right to Data Portability

You can request to receive your personal information in a machine-readable format, including:

• Account information and order history
• Loyalty program data and rewards information
• Preference settings and customization data
• Communication history and feedback

7.6 Right to Object

You can object to processing of your information, particularly for:

• Direct marketing and promotional communications
• Profiling for marketing purposes
• Processing based on legitimate interests
• Automated decision-making that affects you

7.7 Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or significantly affects you.

8. Children's Privacy

Protecting children's privacy is particularly important to us. Our Services are not intended for children under 16 years of age, and we do not knowingly collect personal information from children under 16 without parental consent.

Our Children's Privacy Practices:

• Age Verification: We implement age verification measures where appropriate
• No Intentional Collection: We do not deliberately target or collect information from children under 16
• Parental Rights: Parents have the right to review, delete, or refuse further collection of their child's information
• Educational Content: Any content accessible to minors is appropriate and educational

Age-Appropriate Services

For users between 16-18 years old, we:

• Provide additional privacy protections
• Limit the types of information we collect
• Restrict certain marketing communications
• Encourage parental involvement in account management

9. International Data Transfers

As a food service provider operating across multiple regions, we may transfer your personal information to countries outside your home country for processing and storage.

9.1 Protection Measures

When transferring data internationally, we ensure adequate protection through:

• Adequacy Decisions: Transfers to countries recognized by the EU as having adequate data protection
• Standard Contractual Clauses (SCCs): EU-approved contractual terms that provide legal protections
• Data Processing Agreements: Comprehensive agreements with all international service providers
• Certification Schemes: Participation in recognized privacy certification programs
• Corporate Rules: Binding internal privacy rules for data transfers within our organization

9.2 Transfer Destinations and Safeguards

9.3 Your Rights Regarding International Transfers

• Right to be informed about transfer destinations and safeguards
• Right to object to transfers in certain circumstances
• Right to request information about specific protection measures
• Right to lodge complaints with supervisory authorities

10. Data Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Factors Influencing Retention Periods

• Legal Requirements: Tax laws, food safety regulations, consumer protection laws
• Business Needs: Customer service, quality improvement, fraud prevention
• Data Sensitivity: More sensitive data is retained for shorter periods when possible
• Storage Costs: Balancing retention needs with storage efficiency
• Your Preferences: Earlier deletion upon request where legally permissible

11. Third-Party Links and Services

Our website and mobile applications may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to these external sites or services.

Common Third-Party Links Include:

• Social Media Platforms: Facebook, Instagram, Twitter, YouTube
• Review Sites: Yelp, Google Reviews, TripAdvisor
• Delivery Platforms: DoorDash, Uber Eats, Grubhub
• Payment Services: PayPal, Apple Pay, Google Pay
• Recipe Sites: Cooking blogs, food magazines, nutritional databases
• Partner Restaurants: Affiliated locations and franchise partners

Your Responsibility

When you click on third-party links or use external services:

• Review Privacy Policies: Each site has its own privacy practices
• Check Security: Verify the security of external websites before providing information
• Control Sharing: Be mindful of what information you share with third parties
• Account Linking: Understand the implications of connecting external accounts

Third-Party Integrations

Some third-party services are integrated into our platform:

• Social Login: Using Facebook or Google to sign in
• Maps Services: Google Maps for location and directions
• Analytics Tools: Google Analytics, Facebook Pixel
• Chat Services: Customer support chat widgets

12. Policy Changes and Updates

We may update this Privacy Policy periodically to reflect changes in our practices, services, legal requirements, or business operations. We are committed to keeping you informed about any changes that may affect your privacy rights.

12.1 Types of Changes

• Minor Updates: Clarifications, contact information changes, formatting improvements
• Material Changes: New data collection practices, changes to data sharing, altered retention periods
• Legal Updates: Changes required by new privacy laws or regulations
• Service Expansions: Privacy practices for new features or services

12.2 How We Notify You of Changes

When we update this Privacy Policy, we will:

• Website Notice: Display a prominent notice on our website homepage
• Email Notification: Send notification to registered users' email addresses
• Mobile App Alert: Push notifications through our mobile application
• Account Dashboard: Display notices in your account settings
• Social Media: Announce significant changes on our social media channels

12.3 Significant Changes

For material changes that significantly affect your privacy rights, we will:

• Provide at least 30 days' advance notice
• Obtain explicit consent where required by law
• Offer the option to delete your account if you disagree
• Provide clear explanations of the changes and their impact

12.4 Staying Informed

To stay updated on privacy policy changes:

• Check Regularly: Review this page periodically for updates
• Last Updated Date: Always displayed at the top of this policy
• Version History: Available upon request for significant changes
• Summary of Changes: We provide clear summaries of material updates

13. Contact Information and Support

When to Contact Us

• Questions about this Privacy Policy or our privacy practices
• Requests to exercise your privacy rights (access, deletion, correction)
• Concerns about how your information is being used
• Reports of suspected privacy violations or data breaches
• Requests for information about data sharing or transfers
• Complaints about privacy-related issues

Our Response Commitment

We are committed to addressing your privacy concerns promptly:

• Initial Response: Within 3 business days of receiving your inquiry
• Full Resolution: Within 30 days for most requests
• Complex Requests: May require up to 90 days with regular updates
• Urgent Issues: Same-day response for security concerns

13.1 Filing Complaints

If you have privacy concerns that we cannot resolve:

United States - Federal Trade Commission

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Consumer Sentinel Network, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

European Union - Data Protection Authorities

• Contact: Your local Data Protection Authority
• EU DPA List: Available at ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm

Canada - Office of the Privacy Commissioner

• Website: www.priv.gc.ca/en/report-a-privacy-breach-at-a-federal-institution/
• Phone: 1-800-282-1376

14. Withdrawal of Consent

You have the right to withdraw your consent for certain types of data processing at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.

14.1 Marketing Communication Consent

You can withdraw consent for marketing communications through several methods:

• Email Unsubscribe: Click the "Unsubscribe" link at the bottom of any marketing email
• Account Settings: Log into your account and update your communication preferences
• SMS Opt-Out: Reply "STOP" to any promotional text message
• Customer Support: Contact us directly to update your preferences
• Phone: Call +1 855-228-6325 to speak with a customer service representative

14.2 Cookie Consent Withdrawal

• Cookie Settings: Use our cookie preference center on the website
• Browser Controls: Adjust your browser settings to block or delete cookies
• Advertising Opt-Out: Use industry tools like AdChoices or NAI Opt-Out
• Mobile Advertising: Adjust your mobile device's advertising preferences

14.3 Account Deletion Process

To completely withdraw from our services and delete your account:

1. Login: Access your account dashboard
2. Settings: Navigate to account settings or privacy settings
3. Request Deletion: Select "Delete Account" or contact customer support
4. Verification: Confirm your identity and deletion request
5. Confirmation: Receive confirmation of account deletion
6. Data Removal: Your data will be deleted according to our retention schedule

14.4 Important Notes About Withdrawal

• Service Impact: Some withdrawals may limit your ability to use certain services
• Legal Retention: Some information may be retained as required by law
• Processing Time: Complete withdrawal may take up to 30 days
• Third Parties: You may need to separately contact third-party services

15. Conclusion

At Mod Pizza, we believe that trust is the foundation of every great relationship, including our relationship with you. This comprehensive Privacy Policy reflects our unwavering commitment to protecting your personal information while providing you with exceptional food service experiences.

Our Core Privacy Principles

• Transparency: We clearly explain what information we collect and how we use it
• Control: We provide you with meaningful choices about your personal information
• Security: We implement robust security measures to protect your data
• Respect: We honor your privacy rights and respond promptly to your requests
• Accountability: We take responsibility for safeguarding your trust

Your Role in Privacy Protection

Privacy is a shared responsibility. We encourage you to:

• Review your privacy settings regularly
• Keep your contact information updated
• Use strong passwords and secure your accounts
• Contact us with any questions or concerns
• Stay informed about your privacy rights

Looking Forward

As technology and privacy laws continue to evolve, we remain committed to:

• Implementing privacy-by-design principles in new services
• Staying current with privacy regulations and best practices
• Listening to your feedback and improving our practices
• Maintaining the highest standards of data protection

Last Updated: December 15, 2024

This Privacy Policy is effective as of the date listed above and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.