Privacy Policy

1. Introduction

At Mod Pizza, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our website, mobile app, or visit our restaurants.

This policy applies to all information collected through our digital platforms at modspizzas.digital, our mobile applications, in-store interactions, and related services. By using our services, you agree to the terms outlined in this privacy policy.

We want to assure you that we never sell your personal data to third parties. Your trust is paramount to us, and we are committed to maintaining the highest standards of data protection and transparency in all our operations.

2. Information We Collect

2.1 Information You Provide

• Personal Identification: Name, email address, phone number, delivery address, billing address
• Account Information: Username, password, order history, favorite items, dietary preferences
• Payment Information: Credit/debit card details, payment method preferences (stored securely through encrypted systems)
• Food-Specific Information: Allergen information, special dietary requirements (vegan, vegetarian, gluten-free, halal, kosher), spice preferences, portion preferences
• Order Details: Food items ordered, customizations, delivery instructions, special requests
• Contact Communications: Customer service inquiries, feedback, reviews, survey responses
• Marketing Preferences: Newsletter subscriptions, promotional communications preferences, marketing consent
• Loyalty Program Data: Reward points, membership tier, redemption history, bonus preferences
• Reservation Information: Table booking details, party size, special occasion notes, seating preferences
• Catering Details: Event information, guest count, dietary restrictions for groups, delivery timing

2.2 Automatically Collected Information

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on site, click patterns, search queries, feature usage
• Location Data: Approximate location derived from IP address, GPS location (with permission) for delivery services
• Cookie Data: Session identifiers, user preferences, shopping cart contents, authentication tokens
• Performance Data: Page load times, error reports, app crash data, system performance metrics

2.3 Information from Third Parties

• Social Media Platforms: Profile information when you connect social media accounts or use social login features
• Payment Processors: Transaction verification data, fraud detection information
• Delivery Partners: Delivery status updates, driver location, delivery completion confirmations
• Marketing Partners: Campaign performance data, audience insights, advertising effectiveness metrics
• Review Platforms: Customer reviews and ratings from third-party review websites

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Preparing, cooking, packaging, and delivering your food orders accurately and efficiently
• Account Management: Creating and maintaining your user account, password resets, profile updates
• Customer Support: Responding to inquiries, resolving issues, providing assistance with orders and services
• Quality Improvement: Analyzing usage patterns to enhance our menu, services, and customer experience
• Personalization: Customizing your experience based on preferences, order history, and dietary requirements

3.2 Communication

• Order Confirmations: Sending confirmation emails, SMS updates about order status, delivery tracking
• Customer Support: Responding to questions, feedback, and service requests promptly
• Important Notices: Informing you about policy changes, service updates, security alerts
• Marketing Communications: Sending promotional emails, special offers, new menu items (with your explicit consent only)
• Loyalty Program Updates: Notifying you about reward points, special member benefits, tier changes

3.3 Marketing and Analytics

• Personalized Advertising: Showing relevant ads based on your preferences and order history
• Usage Analysis: Understanding how customers interact with our services to improve functionality
• Campaign Effectiveness: Measuring the success of marketing campaigns and promotional offers
• Market Research: Developing new menu items, services, and features based on customer preferences
• Trend Analysis: Identifying popular items, peak ordering times, seasonal preferences

3.4 Legal Compliance

• Legal Requests: Responding to court orders, subpoenas, and other legal processes
• Fraud Prevention: Detecting and preventing fraudulent transactions and activities
• Safety Protection: Protecting the rights, property, and safety of our customers, employees, and business
• Dispute Resolution: Investigating and resolving disputes, complaints, and legal matters
• Regulatory Compliance: Meeting food safety regulations, health department requirements, tax obligations

4. Information Sharing and Disclosure

4.1 Service Providers

• Payment Processors: Secure processing of credit card transactions and payment verification
• Delivery Companies: Third-party delivery services for order fulfillment and tracking
• Cloud Storage Providers: Secure data storage and backup services with industry-standard encryption
• Marketing Services: Email marketing platforms, analytics tools, advertising networks
• Customer Support Tools: Help desk software, chat platforms, ticketing systems
• IT Infrastructure: Hosting providers, security services, maintenance and support vendors

4.2 Legal Requirements

• Court Orders: Compliance with judicial orders, search warrants, and subpoenas
• Legal Compliance: Meeting regulatory requirements, food safety inspections, health department requests
• Rights Protection: Protecting our intellectual property, business interests, and legal rights
• Public Safety: Responding to emergencies, threats, and situations requiring immediate action
• Law Enforcement: Cooperating with legitimate law enforcement investigations

4.3 Business Transfers

• Mergers and Acquisitions: Transfer of data in connection with business transactions
• Asset Sales: Data may be transferred as part of business asset sales
• Customer Notification: We will notify customers before any significant data transfer
• Policy Compliance: New owners must comply with this privacy policy or provide notice of changes

4.4 With Your Consent

• Any other sharing requires your explicit consent
• You can withdraw consent at any time
• We will clearly explain the purpose of any additional data sharing

5. Data Security

5.1 Technical Measures

• Encryption: SSL/TLS encryption for all data transmission, AES-256 encryption for stored data
• Firewall Protection: Advanced firewall systems and intrusion detection systems
• Access Control: Multi-factor authentication, role-based access, minimum necessary access principles
• Monitoring: 24/7 security monitoring, automated threat detection, real-time alert systems
• Backup Systems: Regular automated backups, secure offsite storage, disaster recovery procedures
• Network Security: Virtual private networks, secure data centers, regular vulnerability assessments

5.2 Organizational Measures

• Employee Training: Regular security awareness training for all staff members
• Data Handling Procedures: Documented procedures for personal data processing and protection
• Third-Party Agreements: Confidentiality and security agreements with all service providers
• Incident Response: Comprehensive security incident response plan and procedures
• Security Audits: Regular internal and external security audits and assessments
• Compliance Monitoring: Ongoing monitoring of security policies and regulatory compliance

5.3 Your Responsibilities

• Strong Passwords: Use unique, strong passwords for your account
• Account Security: Never share your login credentials with others
• Public Computers: Always log out when using shared or public devices
• Phishing Awareness: Be cautious of suspicious emails or links claiming to be from us
• Report Issues: Immediately report any unauthorized access or suspicious activity

Security Breach Notification: In the unlikely event of a security breach that affects your personal data, we will promptly notify you and relevant authorities in accordance with applicable laws, typically within 72 hours of discovery.

6. Cookies and Tracking Technologies

We use various cookies and tracking technologies to enhance your experience on our website and mobile app. Below is a detailed breakdown of the types of cookies we use:

Tracking Technologies Used

• Google Analytics: Website traffic analysis, user behavior insights, conversion tracking
• Facebook Pixel: Advertisement effectiveness measurement, custom audience creation
• Web Beacons: Email open rates, content engagement tracking
• Local Storage: Browser-based storage for user preferences and app data
• Session Storage: Temporary storage for current browsing session data

Cookie Management

You can control cookies through your browser settings. Most browsers allow you to accept, reject, or delete cookies. Please note that disabling certain cookies may affect the functionality of our website and your user experience. You can manage cookie preferences through our cookie consent banner or contact us for assistance.

7. Your Rights (GDPR/CCPA Compliance)

We respect your privacy rights and provide the following options to control your personal information:

7.1 Right of Access

You have the right to request and receive a copy of the personal data we hold about you, including information about how it's processed.

7.2 Right to Rectification

You can request correction of any inaccurate or incomplete personal data we have about you.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data, subject to certain legal exceptions and business requirements.

7.4 Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances.

7.5 Right to Data Portability

You have the right to receive your personal data in a machine-readable format and transfer it to another service provider.

7.6 Right to Object

You can object to the processing of your personal data, especially for marketing purposes or legitimate business interests.

7.7 Right Against Automated Decision-Making

You have the right to not be subject to decisions based solely on automated processing that significantly affects you.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided in Section 13. We will respond to your request within 30 days and may require identity verification to protect your privacy.

8. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect, use, or share personal information from children under 16 without verifiable parental consent.

If we become aware that we have collected personal information from a child under 16 without proper consent, we will take immediate steps to delete such information from our systems.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected] so we can take appropriate action.

9. International Data Transfers

9.1 Protection Measures

• Adequacy Decisions: We comply with EU-Japan adequacy decisions and other recognized data protection frameworks
• Standard Contractual Clauses (SCC): We use EU-approved contractual clauses for international transfers
• Data Processing Agreements: Comprehensive agreements with all international service providers
• Security Measures: Equivalent security standards maintained across all jurisdictions
• Compliance Audits: Regular audits to ensure ongoing protection standards

9.2 Transfer Destinations

• United States: Cloud storage and data processing services
• European Union: Analytics and customer support services
• Other Countries: As needed for service provision, with appropriate safeguards in place

10. Data Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes.

Safe Data Disposal

• Electronic Data: Complete deletion using industry-standard methods ensuring data is unrecoverable
• Physical Records: Secure shredding of any paper-based records
• Backup Systems: Deletion from all backup and archived systems
• Documentation: Maintaining records of disposal procedures and dates

11. Third-Party Links

Our website and mobile app may contain links to external websites, social media platforms, or third-party services. We are not responsible for the privacy practices or content of these external sites.

We encourage you to review the privacy policies of any third-party websites before providing your personal information. These external sites may have different privacy practices and terms of use.

When you click on third-party links or use external services, you do so at your own risk and responsibility. We cannot control how these services collect, use, or protect your information.

12. Policy Changes

12.1 Change Notification

• Website Notice: Prominent notification on our website homepage and privacy policy page
• Email Notification: Direct email to registered users about significant changes
• App Notification: In-app notifications for mobile users
• Explicit Consent: For material changes that expand data use, we will seek your explicit consent

12.2 Checking for Changes

• The latest version of this policy is always available on our website
• Check the "Last Updated" date at the top of this page
• Continued use of our services after changes constitutes acceptance
• If you disagree with changes, you may discontinue use of our services

13. Contact Information

13.1 Complaints and Disputes

If you have concerns about our privacy practices, please contact us first so we can work together to resolve the issue. If you remain unsatisfied, you may contact your local privacy regulator or supervisory authority:

• United States: Federal Trade Commission (FTC) - consumer.ftc.gov
• European Union: Your local Data Protection Authority
• Other Regions: Contact your local privacy regulator

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal

• Email Unsubscribe: Use the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your account dashboard
• Customer Support: Contact us directly to opt out of all marketing communications
• Phone: Call us at +1 303-455-9463 to update preferences

14.2 Account Deletion Process

1. Log into your account and navigate to account settings
2. Select "Delete Account" option
3. Confirm your identity through email verification
4. Review what data will be deleted and what may be retained for legal compliance
5. Complete the deletion request
6. Receive confirmation email within 48 hours

Note: Some information may be retained for legal compliance, fraud prevention, or legitimate business purposes as outlined in our data retention policy.

15. Conclusion

At Mod Pizza, we are committed to maintaining the highest standards of privacy protection and data security. We understand that your personal information is valuable and sensitive, and we take our responsibility to protect it seriously.

This privacy policy represents our promise to be transparent about our data practices and to give you control over your personal information. We believe that building trust through clear communication and robust security measures is essential to our relationship with you.

We encourage you to contact us with any questions or concerns about our privacy practices. Your feedback helps us improve our services and maintain your trust.

Thank you for choosing Mod Pizza and for trusting us with your personal information. We are committed to earning and maintaining that trust every day.

Remember: This privacy policy was last updated on December 13, 2024. Please check this page periodically for updates and changes.