Privacy Policy

1. Introduction

Welcome to Apache Pizza. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you use our website, mobile applications, or services.

This policy applies to all personal data we process about you, whether collected directly from you or obtained from other sources. By using our services, ordering food, creating an account, or interacting with us, you agree to the collection and use of information in accordance with this policy.

We never sell your personal data to third parties. Your trust is fundamental to our business, and we are committed to maintaining the highest standards of data protection and privacy.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you directly provide when using our services:

• Personal Identification: Name, email address, phone number, date of birth
• Address Information: Delivery addresses, billing addresses, location preferences
• Account Information: Username, password, profile information, order history
• Payment Information: Credit/debit card details, billing information (stored securely via encrypted payment processors)
• Order Details: Food preferences, dietary requirements, allergen information, special instructions
• Dietary Preferences: Vegan, vegetarian, halal, kosher, gluten-free, and other dietary restrictions
• Loyalty Program Data: Rewards points, membership level, purchase history, favorite orders
• Table Reservations: Reservation times, party size, special requests
• Catering Information: Event details, guest count, menu preferences, delivery requirements
• Communication Data: Contact form submissions, customer reviews, feedback, support requests
• Marketing Preferences: Subscription choices, communication preferences, promotional interests

2.2 Information Automatically Collected

When you use our website or mobile app, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on site, click patterns, search queries
• Location Data: Approximate location based on IP address, GPS location (with permission)
• Cookie Data: Session IDs, user preferences, analytics data, authentication tokens
• Performance Data: Page load times, error reports, feature usage statistics

2.3 Information from Third Parties

We may receive information about you from other sources:

• Social Media: Profile information if you connect social media accounts
• Payment Processors: Transaction confirmations, fraud detection data
• Delivery Partners: Delivery confirmation, tracking information
• Marketing Partners: Campaign performance data, audience insights
• Public Sources: Publicly available information to verify identity or prevent fraud

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Preparing, tracking, and delivering your food orders
• Account Management: Creating and maintaining your account, authentication, password resets
• Customer Support: Responding to inquiries, resolving issues, providing assistance
• Quality Improvement: Analyzing usage patterns to improve our services and user experience
• Personalization: Customizing content, recommendations based on your preferences and order history
• Loyalty Programs: Managing rewards, tracking points, providing member benefits

3.2 Communication

• Order Confirmations: Confirming orders, providing tracking updates, delivery notifications
• Customer Support: Responding to questions, concerns, and feedback
• Important Notices: Policy changes, security updates, service announcements
• Marketing Communications: Promotional emails, special offers, new menu items (only with your consent)

3.3 Marketing and Analytics

• Personalized Advertising: Showing relevant ads based on your interests and behavior
• Traffic Analysis: Understanding website usage, popular content, user journey optimization
• Campaign Effectiveness: Measuring marketing performance, return on investment
• Market Research: Developing new products, improving existing offerings

3.4 Legal Compliance

• Legal Requests: Responding to court orders, subpoenas, legal investigations
• Fraud Prevention: Detecting and preventing fraudulent transactions, protecting against abuse
• Safety Protection: Protecting the rights, property, and safety of our company, users, and the public
• Dispute Resolution: Resolving conflicts, enforcing agreements, investigating violations

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Payment Processors: Secure transaction processing, fraud detection, payment verification
• Delivery Partners: Order fulfillment, delivery tracking, logistics coordination
• Cloud Storage Providers: Secure data storage, backup services, infrastructure hosting
• Marketing Services: Email campaigns, advertising platforms, analytics tools
• Customer Support: Help desk software, communication platforms, support ticket management

4.2 Legal Requirements

We may disclose your information when required by law or to protect our rights:

• Legal Compliance: Court orders, subpoenas, regulatory requirements
• Law Enforcement: Cooperation with police investigations, criminal proceedings
• Rights Protection: Defending our legal rights, protecting intellectual property
• Public Safety: Emergency situations, threats to public safety

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets:

• Customer information may be transferred to the new owner
• We will notify you before your information is transferred
• The new owner must comply with this privacy policy
• You will have the opportunity to opt-out if you disagree with the transfer

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as:

• Participation in surveys or research studies
• Integration with third-party services you request
• Promotional partnerships you choose to participate in

5. Data Security

5.1 Technical Measures

We implement robust technical safeguards to protect your information:

• Encryption: SSL/TLS encryption for all data transmission, AES-256 encryption for stored data
• Firewall Protection: Advanced firewall systems to prevent unauthorized access
• Access Controls: Strict access controls ensuring only authorized personnel can access personal data
• Monitoring: 24/7 security monitoring and intrusion detection systems
• Backups: Regular encrypted backups stored in secure, geographically distributed locations

5.2 Organizational Measures

Our security practices include comprehensive organizational safeguards:

• Employee Training: Regular security awareness training for all staff
• Data Handling Procedures: Strict protocols for personal data processing and storage
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements
• Incident Response: Comprehensive security incident response plan and procedures
• Regular Audits: Periodic security assessments and penetration testing

5.3 Your Responsibilities

You can help protect your information by:

• Strong Passwords: Using unique, complex passwords for your account
• Account Security: Never sharing your login credentials with others
• Public Computers: Logging out completely when using shared devices
• Phishing Awareness: Being cautious of suspicious emails or links
• Reporting: Immediately reporting any unauthorized account access

Security Breach Notification: In the unlikely event of a data breach that affects your personal information, we will promptly notify you and relevant authorities as required by applicable laws, typically within 72 hours of discovering the breach.

6. Cookies and Tracking Technologies

We use various cookies and tracking technologies to enhance your experience and improve our services. Below is a detailed breakdown of the types of cookies we use:

Tracking Technologies Used:

• Google Analytics: Website traffic analysis and user behavior insights
• Facebook Pixel: Advertising effectiveness measurement and audience building
• Web Beacons: Email open rates and engagement tracking
• Local Storage: Browser-based data storage for improved performance
• Session Storage: Temporary data storage during your visit

Cookie Management:

You can control cookies through your browser settings. Most browsers allow you to:

• View and delete cookies
• Block cookies from specific websites
• Block third-party cookies
• Clear all cookies when closing the browser

Note: Disabling certain cookies may affect website functionality and your user experience.

7. Your Rights (GDPR/CCPA Compliance)

Under applicable data protection laws, you have several important rights regarding your personal information:

7.1 Right of Access

You have the right to know what personal data we hold about you and how it's being processed. You can request a copy of your personal information in a commonly used format.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to have it corrected or updated. You can update most information through your account settings.

7.3 Right to Erasure (Right to be Forgotten)

You can request the deletion of your personal data when it's no longer necessary for the purposes it was collected, or if you withdraw consent.

7.4 Right to Restrict Processing

You have the right to limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data.

7.5 Right to Data Portability

You can receive your personal data in a structured, machine-readable format and have it transmitted to another data controller.

7.6 Right to Object

You can object to the processing of your personal data, particularly for direct marketing purposes or when processing is based on legitimate interests.

7.7 Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affects you.

How to Exercise Your Rights:

To exercise any of these rights, please contact us using the information provided in the Contact section. We will respond to your request within 30 days and may require verification of your identity before processing your request.

8. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16 years of age.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to remove such information from our systems.

If we discover that we have collected personal information from a child under 16 without proper parental consent, we will delete that information as quickly as possible.

9. International Data Transfers

9.1 Protection Measures

When transferring personal data internationally, we ensure appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries with adequate data protection as determined by the EU
• Standard Contractual Clauses (SCC): Legally binding agreements ensuring data protection
• Data Processing Agreements: Contractual safeguards with all data processors
• Security Measures: Technical and organizational measures to protect data during transfer
• Compliance Audits: Regular reviews to ensure ongoing protection

9.2 Transfer Destinations

Your personal data may be transferred to and processed in:

• United States: Cloud storage and analytics services with appropriate safeguards
• European Union: Data processing and analytics within the EU
• Other Countries: As necessary for service provision, always with adequate protection measures

10. Data Retention Periods

We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law:

Safe Data Disposal:

When data retention periods expire, we securely dispose of personal information using industry-standard methods:

• Electronic Data: Complete deletion using secure wiping techniques that make data unrecoverable
• Physical Records: Secure shredding and destruction of paper documents
• Backup Systems: Removal from all backup systems and archives
• Documentation: Maintaining disposal records for compliance purposes

11. Third-Party Links

Our website may contain links to external websites, social media platforms, or other online services that are not operated by us. This Privacy Policy does not apply to third-party websites.

We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any external sites you visit before providing personal information.

When you click on third-party links or interact with third-party content, you are subject to their terms and privacy policies. Your use of third-party services is at your own risk and responsibility.

12. Policy Changes

12.1 Change Notification

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make changes, we will:

• Website Notice: Post a prominent notice on our website homepage
• Email Notification: Send an email to registered users about significant changes
• Login Notification: Display a pop-up notification when you next log in
• Consent Requirements: Obtain explicit consent for material changes that affect your rights

12.2 Checking for Changes

We recommend that you:

• Regularly review this Privacy Policy for any updates
• Check the "Last Updated" date at the top of this page
• Understand that continued use of our services after changes constitutes acceptance
• Contact us if you have questions about any changes
• Stop using our services if you disagree with any changes

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal

You can withdraw your consent for marketing communications at any time:

• Unsubscribe Links: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your account
• Customer Support: Contact our support team to opt-out
• Phone: Call us to remove your number from marketing lists

14.2 Account Deletion

To permanently delete your account and associated data:

1. Log into your account and go to Account Settings
2. Select "Delete Account" and follow the prompts
3. Confirm your identity and deletion request
4. Receive confirmation email within 24 hours
5. Note: Some data may be retained for legal compliance as outlined in our retention policy

15. Conclusion

At Apache Pizza, we are committed to protecting your privacy and maintaining the trust you place in us. We understand that your personal information is valuable, and we take our responsibility to protect it seriously.

This Privacy Policy reflects our dedication to transparency and our commitment to giving you control over your personal data. We believe that clear communication about our privacy practices helps build a stronger, more trusting relationship with our customers.

If you have any questions about this Privacy Policy or how we handle your personal information, please don't hesitate to contact us. We're here to help and ensure you feel comfortable with how your data is being used.

Thank you for choosing Apache Pizza and for trusting us with your personal information. We appreciate your business and look forward to serving you.

Please remember to check this page periodically for updates. The "Last Updated" date at the top of this policy indicates when it was most recently revised.