Privacy Policy

At Dewey's Pizza, we are deeply committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website deweyspizzas.digital, place an order with us, interact with our services, or otherwise engage with our brand. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services.

This Privacy Policy applies to all information collected through our website, any related services, sales, marketing, or events, and any other interactions you may have with Dewey's Pizza. We encourage you to review this document in its entirety so you fully understand our practices and your rights.

1. Who We Are

Dewey's Pizza operates the website deweyspizzas.digital and provides food ordering and delivery services to customers across the United States. For the purposes of this Privacy Policy, "Dewey's Pizza," "we," "us," and "our" refer to the company and its operators.

If you have any questions about this Privacy Policy or our privacy practices, please contact us using the details provided above or in the Contact Us section at the end of this document.

2. Applicable Laws and Regulatory Framework

As a business operating in the United States, Dewey's Pizza complies with all applicable federal and state privacy and data protection laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive practices in commerce, including misrepresentation of privacy practices.
• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), which grants California residents specific rights regarding their personal information.
• The Children's Online Privacy Protection Act (COPPA), which governs the collection of personal information from children under the age of 13.
• The CAN-SPAM Act, which sets requirements for commercial email communications.
• The Electronic Communications Privacy Act (ECPA) and applicable state laws governing electronic communications and data.
• Any other applicable state or federal regulations related to data privacy, consumer protection, and food service businesses.

Where applicable, we extend CCPA/CPRA rights to all users across the United States as a matter of good-faith privacy practice, not solely to California residents.

3. Information We Collect

We collect several types of information in connection with the operation of our website and the provision of our food services. The categories of information we collect are described below.

3.1 Personal Information You Provide to Us

We collect personal information that you voluntarily provide to us when you register an account, place an order, subscribe to our newsletter, contact us, or otherwise interact with our services. This may include:

• Identification Information: Your full name, username, and account credentials.
• Contact Information: Email address, phone number, and mailing or delivery address.
• Order and Transaction Information: Details about the food items you order, order history, special instructions, and dietary preferences you voluntarily share with us.
• Payment Information: Billing address, credit or debit card information, or other payment method details. Please note that full payment card numbers are processed through our secure third-party payment processors and are not stored on our servers.
• Communications: Messages, feedback, reviews, complaints, or any other information you send to us directly via email, contact forms, or other channels.
• Account Profile Information: Profile photos, saved addresses, saved payment methods, and preferences stored within your user account.

3.2 Information Collected Automatically

When you access or use our website, we automatically collect certain technical and usage information. This includes:

• Device Information: IP address, device type, operating system and version, browser type and version, device identifiers, and mobile network information.
• Usage Data: Pages visited on our website, time spent on each page, links clicked, search queries entered on our site, referring URLs, and navigation paths through our website.
• Log Data: Server log files that record your interactions with our website, including timestamps, errors, and system activity.
• Location Data: Approximate geographic location based on your IP address. With your explicit permission, we may also collect precise geolocation data from your mobile device to facilitate delivery services.
• Cookie and Tracking Data: Information collected via cookies, web beacons, pixel tags, and similar tracking technologies. See Section 8 for full details on our cookie practices.

3.3 Information from Third Parties

We may receive information about you from third parties in limited circumstances, including:

• Social Media Platforms: If you log into our website or interact with us through social media platforms such as Facebook, Google, or Instagram, we may receive certain profile information from those platforms in accordance with their privacy policies and your privacy settings.
• Delivery and Logistics Partners: Delivery providers may share information with us regarding the status and completion of your food delivery orders.
• Analytics Providers: Third-party analytics services may provide us with aggregated or anonymized insights about how users interact with our website.
• Payment Processors: Our payment processing partners may share transaction status information with us to confirm or flag payment activity.

4. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes. All uses of your personal data are grounded in one or more lawful bases, including your consent, the performance of a contract, our legitimate business interests, and compliance with legal obligations.

4.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including coordinating delivery or pickup.
• Creating and managing your customer account.
• Processing payments and sending transaction receipts and confirmations.
• Communicating with you about the status of your orders, changes to your account, and service updates.
• Responding to your inquiries, complaints, and customer service requests.
• Personalizing your experience on our website, such as remembering your saved addresses and previous orders.

4.2 Analytics and Service Improvement

• Analyzing usage trends and patterns to understand how customers interact with our website and services.
• Improving our menu, website functionality, user interface, and overall customer experience.
• Conducting internal research and development to develop new products and features.
• Monitoring and diagnosing technical issues, bugs, and security vulnerabilities on our platform.
• Generating aggregated, anonymized statistics about our user base and website traffic.

4.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, special offers, and information about new menu items or limited-time deals — but only where you have opted in to receive such communications or where we have a legitimate interest in contacting existing customers.
• Displaying targeted advertisements on our website or on third-party platforms based on your browsing behavior and preferences (subject to your cookie consent).
• Conducting customer satisfaction surveys and requesting reviews of your experience with Dewey's Pizza.
• Running loyalty programs, contests, sweepstakes, or promotional campaigns.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected]. Opting out of marketing communications will not affect your receipt of transactional or service-related messages.

4.4 Legal Compliance and Safety

• Complying with applicable federal and state laws, regulations, and legal obligations.
• Enforcing our Terms of Service and other applicable policies.
• Detecting, preventing, and investigating fraud, unauthorized access, and other illegal activities.
• Protecting the rights, property, and safety of Dewey's Pizza, our customers, employees, and the public.
• Cooperating with law enforcement, regulatory authorities, and other government bodies when required by law or in response to lawful requests.

5. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own independent marketing purposes. However, we do share certain information with trusted partners and service providers in the course of operating our business, as described below.

5.1 Service Providers and Business Partners

We share your information with third-party companies and individuals who assist us in operating our website, conducting our business, and providing services to you. These service providers are contractually obligated to protect your information and may only use it on our behalf and in accordance with our instructions. They include:

• Payment Processors: Companies that securely handle payment card transactions on our behalf (e.g., Stripe, Square, or similar processors).
• Delivery and Logistics Partners: Third-party delivery services that fulfill your food delivery orders.
• Cloud Hosting and Infrastructure Providers: Companies that host our website, databases, and IT infrastructure.
• Email and Communications Platforms: Services used to send transactional emails, newsletters, and SMS notifications.
• Analytics Providers: Tools such as Google Analytics that help us understand website traffic and user behavior.
• Customer Support Platforms: Software used to manage and respond to customer service inquiries.
• Marketing and Advertising Platforms: Services used to manage digital advertising campaigns, retargeting, and promotional content.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in good-faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request.
• Cooperate with law enforcement authorities during an active investigation.
• Enforce our Terms of Service or defend against legal claims.
• Protect the rights, safety, or property of Dewey's Pizza, our users, or others.
• Address fraud, security breaches, or other emergency situations.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, or bankruptcy proceeding involving Dewey's Pizza, your personal information may be transferred to the successor entity. We will notify you via email and/or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data — which cannot reasonably be used to identify you — with partners, advertisers, or the public for research, marketing, or business development purposes. This information does not constitute personal information and is not subject to the same protections as your identifiable data.

6. Data Security

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: Our website uses industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers. Sensitive data such as payment information is encrypted both in transit and at rest.
• Access Controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions. We use role-based access controls and enforce strong authentication measures, including multi-factor authentication for administrative systems.
• Secure Payment Processing: We do not store full payment card numbers on our servers. All payment transactions are processed through PCI DSS-compliant third-party payment processors.
• Regular Security Assessments: We conduct periodic vulnerability assessments, penetration testing, and security audits to identify and remediate potential weaknesses in our systems.
• Employee Training: Our staff receives regular training on data privacy, security best practices, and how to handle personal information responsibly.
• Incident Response: We maintain an incident response plan to swiftly address any data security breaches. In the event of a breach affecting your personal information, we will notify you as required by applicable law.

7. Your Privacy Rights

Depending on your state of residence and applicable law, you may have certain rights with respect to your personal information. We are committed to honoring these rights and will respond to all verified requests within the timeframes required by applicable law.

7.1 Rights Available to All Users

• Right to Know / Access: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the purposes for which it is used, and the categories of third parties with whom we have shared it.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (e.g., information we are required to retain by law or for legitimate business purposes such as completing transactions).
• Right to Opt Out of Marketing: You have the right to opt out of receiving promotional communications from us at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide you a lower quality of service because you exercised your rights.

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including:

• Right to Know About Data Sharing: You have the right to know whether we sell or share your personal information with third parties.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information with third parties. Dewey's Pizza does not sell personal information for monetary consideration. However, certain data sharing for targeted advertising may constitute "sharing" under CPRA, and you may opt out via our cookie preferences tool.
• Right to Limit Use of Sensitive Personal Information: You have the right to request that we limit the use and disclosure of sensitive personal information (such as precise geolocation data) to purposes necessary to provide our services.
• Right to Data Portability: You have the right to receive your personal information in a portable, readily usable format that allows you to transmit the information to another entity.

To exercise any of your rights, please submit a request to us at [email protected] with the subject line "Privacy Rights Request." We will verify your identity before processing your request and will respond within 45 days, with a possible extension of an additional 45 days where reasonably necessary.

7.3 Authorized Agents

You may designate an authorized agent to submit privacy rights requests on your behalf. We will require written proof of the agent's authorization and may still contact you directly to verify your identity before processing the request.

8. Cookie Policy Summary

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site performance, and deliver personalized content and advertisements. This section provides a brief summary of our cookie practices.

8.1 Types of Cookies We Use

You can manage your cookie preferences at any time through our Cookie Preference Center, accessible via the cookie banner on our website. You may also adjust your browser settings to refuse all or some cookies; however, please note that disabling certain cookies may affect the functionality of our website and services.

For full details about the specific cookies we use and how to manage them, please refer to our dedicated Cookie Policy page available on deweyspizzas.digital.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your data, and whether those purposes can be achieved through other means.

When your personal information is no longer required, we will securely delete or anonymize it in accordance with our internal data destruction procedures.

10. Children's Privacy

Dewey's Pizza does not direct its website or services toward minors. In compliance with the Children's Online Privacy Protection Act (COPPA) and our own policies, we do not knowingly collect, use, or disclose personal information from children under the age of 13 without verifiable parental consent. We also strongly recommend that our online services be used only by individuals aged 18 and over, consistent with our terms of use.

If you are a parent or legal guardian and believe that your child under 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving such a request, we will take prompt steps to investigate and, if confirmed, delete the relevant personal information from our records.

If we discover that we have collected personal information from a child under 13 without parental consent, we will delete such information from our databases as quickly as reasonably practicable.

11. International Data Transfers

Dewey's Pizza is based in the United States, and your personal information is primarily processed and stored on servers located within the United States. However, some of our third-party service providers and technology partners may be located in, or operate from, jurisdictions outside of the United States.

When we transfer personal information to service providers located in other countries, we ensure that appropriate safeguards are in place to protect your information. These safeguards may include:

• Data processing agreements incorporating standard contractual clauses or equivalent data protection protections.
• Ensuring that the receiving country provides an adequate level of data protection, as recognized by U.S. law and applicable international standards.
• Implementing technical and organizational measures to protect data during transfer and processing.

By using our website and services, you acknowledge and consent to the transfer of your personal information to the United States and potentially to other countries in accordance with this Privacy Policy.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not owned or operated by Dewey's Pizza. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices of any third-party websites, and we encourage you to review the privacy policies of any websites you visit via links on our platform.

The inclusion of links to third-party websites does not imply our endorsement of those websites or their content, products, services, or privacy practices.

13. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your browsing activity not be tracked. At this time, our website does not respond to DNT signals because there is no universally accepted standard for how companies should respond to such signals. However, you can control tracking-related cookies through our Cookie Preference Center and your individual browser settings.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When we make material changes to this policy, we will notify you by:

• Updating the "Last Updated" date at the top of this Privacy Policy.
• Sending an email notification to the address associated with your account (where applicable).
• Displaying a prominent notice on our website for a reasonable period following the change.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

15. Filing a Complaint with a Data Protection Authority

If you believe that we have violated your privacy rights or applicable data protection laws, we encourage you to first contact us directly at [email protected] so that we can address your concerns promptly and in good faith.

If you are not satisfied with our response, or if you believe we are processing your personal information in a manner inconsistent with applicable law, you have the right to file a complaint with the appropriate regulatory authority:

15.1 Federal Level — United States

The Federal Trade Commission (FTC) oversees consumer privacy and data protection matters at the federal level in the United States. You may file a complaint with the FTC through the following channels:

• Website: www.ftc.gov/complaint
• Phone: 1-877-382-4357 (1-877-FTC-HELP)
• Mailing Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

15.2 California Residents — California Privacy Protection Agency (CPPA)

California residents who believe their rights under the CCPA/CPRA have been violated may file a complaint with the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Email: [email protected]

You may also file a complaint with the California Attorney General's Office:

• Website: oag.ca.gov/privacy

15.3 Other States

Residents of other U.S. states with enacted data privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, and others) may also have the right to appeal to their state's Attorney General or designated privacy enforcement authority. We encourage you to review your state's specific data protection laws and contact your state's consumer protection office for guidance.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to resolving all privacy-related inquiries in a timely and professional manner.

When contacting us regarding a privacy rights request, please include your full name, email address associated with your account, and a clear description of your request or concern. This will allow us to verify your identity and respond to your inquiry as efficiently as possible.

We aim to respond to all privacy-related inquiries within 10 business days and to fulfill verified privacy rights requests within the timeframes required by applicable law (generally within 45 days, with a possible extension of up to an additional 45 days where necessary).